- Issue created by @willempje2
The Password Policy module expects either a login via a one-time login link—setting the user_pass_reset form state variable—or that the user provides both the current and a new password. Currently, the Simple Password Reset flow does neither of these.
Reference:
https://git.drupalcode.org/project/password_policy/-/blob/4.0.x/password...
Set the user_pass_reset form state variable during the Simple Password Reset process. This allows Password Policy to recognize the reset context and update the expiration date accordingly during validation.
Reference for user_pass_reset:
https://git.drupalcode.org/project/drupal/-/blob/10.4.x/core/modules/use...
Active
1.4
Code