Skip to content

Update PasswordManagementTrait.php #1125

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: 15.next-cake5
Choose a base branch
from

Conversation

sharkooon
Copy link
Contributor

Fix password reset flow: redirect to login action if no user is found.

An issue in the password reset flow where the application would not properly handle cases when no user is found.

By redirecting to the login screen when no user is found, we enhance security and user experience. Previously, the application would remain on the reset password form, which could inadvertently reveal whether a user exists or not based on the action taken.

Fix password reset flow: redirect to login action if no user is found.
@ajibarra
Copy link
Member

ajibarra commented Apr 2, 2025

Hi @sharkooon, thanks for your contribution. Could you please take a look to the checks failing? Basically a missing line before return statement and also some tests failing because the response code (302 - redirect) does not match the previous one (200)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants