After attempting to authenticate the user using their provided username and password, the UserAuthenticationTempPassCode method "login" checks the temporary password for successful authentication. However, there is an issue with the if statement where the "has_equals" function compares the new password with the temporary password. As a result, the user cannot log in.
Furthermore, it seems that there is a missing logic in which if the temporary password matches the user's temp_pass, their account should be updated with the new password provided in the "pass" parameter of the request.
Proposed changes are attached in the patch provided.
Postponed: needs info
8.1
Code
thanks for this, however can you please have a look at this https://www.drupal.org/project/rest_password/issues/3036405 → (for has_equals)
So you are unable to login after you have set a new password ?
@isramv I am not able to reproduce this. Can you please test with the latest release 8.1.17 and see if you can still replicate?