- Issue created by @elc
- First commit to issue fork.
- 🇦🇺Australia elc
Interop with Registration Password Token module ✨ Compatibility with Generate Password module Active .
This module adds the [user:password] token back into a site, allowing a password to be emailed to a user on creation. This support was removed from core because it is considered a security issue to send plaintext passwords in emails.
The functionality works in testing as the "password" attribute exists on a test user, but does not seem to work in practice as the password is hashed when the user is saved, which happens before the new user email is sent out.
Discussion on removing the password attribute completely:
🐛
Remove outdated code that sets password on $account during user registration
Needs work
It would be possible to work around this, but it is already considered bad practice, and there is already a module specifically written to provide this functionality already.
If a user continues to need this functionality, it is available in the Registration Password Token → module.
The Generate Password module no longer provides the [user:password] and [account:password] tokens. Those site admins still needing the functionality should use the Registration Password Token → module. These tokens never made it into Drupal 7 or 8 core, but were unofficially included by a number of modules.
It is considered BCP to never send a password by email, but instead to use the one time password reset links.
Active
2.1
Code
Interop with Registration Password Token module ✨ Compatibility with Generate Password module Active .