It should be great to have the password token working in the password request message. I don't know if its possible, maybe it's not for security reasons.

thx

Comments

stefansan’s picture

thats would i also love. send the password instead of the onetimelink and the sending to the loginsite.
but also lot of thanks for the work until here!

kristofferwiklund’s picture

Status: Active » Closed (won't fix)

It is not possible as the password is not saved in clear text in database and there is no way to get it. (So if the database is hacked you can not see the password). So the only time when it is possible to send the password in email is just after the user has enter it in that page load becuase it is not taken from database.

If you want to have it in the password request to need to set a new password for the user or save it in clear text in database.

gurvan’s picture

thx for the answer, that's what is was thinking. I totally review my user's process to do it on the Drupal way ;-)

best regards