Hi there

There was an issue when users reached password reset page.

  1. After click the one time log in link user redirected to drupal's page with a button proceed to reset pass
  2. Then the user is redirected to DuoSecurity page. passed oky.
  3. afterwards the user go to his user edit, which is wrong. it supposed to go to user password reset without asking the current pass

I hope you understand my very good english
Thank!

Comments

integrations@duosecurity.com’s picture

integrations@duosecurity.com commented
Status: Active » Fixed

Hey Bryan,

Good catch, however, it is supposed to redirect to the same page. The query string is supposed to read 'pass-reset-token=XXX', not 'password-reset-token=XXX'.

We've just fixed it and will be pushing a release shortly.

__bryan’s picture

__bryan commented

Hi

Thank you for the quick response..
Looking forward for patch to be uploaded.

cheers!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

robertoperuzzo’s picture

robertoperuzzo
Primary language Italian
Location 🇮🇹 Tezze sul Brenta, VI
commented
Issue summary: View changes

I'm using duo 7.x-1.11 and this is what happen to me:

  1. I click on "one-time login" button to reset my password
  2. passed correctly DuoSecurity page
  3. I land to /user page

It's wrong, because I expect to land on /user/X/edit page in order to change my password (the default Drupal workflow).