To reproduce:

  1. Ensure an address field is attached to users, and editable by themselves when editing their profile.
  2. Use the one-time login link mailed to you when creating a new account or using the "Request new Password form"
  3. Clicking the "Login" button, you will be redirected to your user profile.
  4. Fill out a new password or change the email address. There will be no "Current password" field to fill out, as expected.
  5. Change the country from the drop-down in the address block.
  6. When submitting the form, the following error appears: "Your current password is missing or incorrect; it's required to change the Password."

Workaround: Naturally, do not change the country field when changing the password or email.

At http://drupal.stackexchange.com/questions/20947/user-cannot-change-passw... a user reports a similar problem and speculates it's due to the AJAX request, which may be invalidating the token that dismisses the current password requirement, or may be rebuilding the form and changing the token.

CommentFileSizeAuthor
#2 ajax-password-reset-form-1612540-2.patch722 bytesimiksu

Comments

acubed’s picture

Project: Address Field » Drupal core
Issue summary: View changes

Format parser ate lt/gt characters

imiksu’s picture

Version: 7.x-1.0-beta2 » 7.x-dev
Component: User interface » user system

I can reproduce this problem and I think this bug should be fixed by Drupal core since it doesn't take AJAX functionality into account.

imiksu’s picture

Status: Active » Needs review
StatusFileSize
new722 bytes

The pass-reset-token argument could be transferred to AJAX requests so the form generation gets corrected when this argument is present.

Attached a patch for this case. Needs testing?

Status: Needs review » Needs work

The last submitted patch, ajax-password-reset-form-1612540-2.patch, failed testing.

imiksu’s picture

Title: Changing country invalidates one-time password reset » Using AJAX callbacks in user edit form invalidates one-time password reset
Component: user system » ajax system
imiksu’s picture

Issue summary: View changes

Formatter just doesn't like angle brackets altogether. And preview this time.

weri’s picture

Issue summary: View changes
Status: Needs work » Closed (duplicate)
Related issues: +#1858486: Ajax call breaks Password Reset