Issue
The user profile/password-reset page is no different after enabling the module.

To reproduce:
I did a fresh install of D7.26, created one authenticated user named 'user', and enabled this module.
As that user I requested a new password to be sent to my email address.
I went to the link in the email and was logged in, but the user profile page was no different than before enabling the module.

I also used drush uli to see if it had the same problem, and it did.

Thoughts
Even though the one-time login link takes the form of:
user/reset/[uid]/[token]/login
By the time simple_pass_reset_form_user_profile_form_alter() gets called, the path is then
user/[uid]/edit?pass-reset-token=[token_2]

Since the form_alter() depends on the specific path, (conditional below) none of it runs.

if (arg(0) == 'user' && arg(1) == 'reset' && !user_is_logged_in()) simple_pass_reset.module:78

Comments

jfrederick’s picture

jfrederick commented
Priority: Critical » Normal
Status: Active » Closed (works as designed)

My apologies, never mind. In the original issue I was going to the URL user/reset/[uid]/[token]/login (initially provided by drush uli), whereas the emails send the link user/reset/[uid]/[token]/, which works as expected.