Password policies not apply to "Forgot password" form.

Created on 2 September 2019, about 5 years ago
Updated 15 April 2024, 7 months ago

Hello,

I know that "Password policies only apply to passwords set via user forms in the web interface".

But... I’ve installed Password policies. When a user (who forgets his password) wants to reset his password (following the link on the login page), he receives a link by email (password recovery link) . When he follows this link, he fills a form but the Password policies is not applied. It’s like it is not activated.

Is it normal behavior ? I thought that it was a form from web interface.

It works when I rest the password in the admin. I can see the plugin activated.

πŸ› Bug report
Status

Needs work

Version

4.0

Component

User interface

Created by

πŸ‡«πŸ‡·France sΓ©bastien-fr Nantes - France

Live updates comments and jobs are added and updated live.
  • Needs tests

    The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024