@mmki – I just tried creating a user in Auth0 with that password (plus a few other characters to pass validation) and it worked, tried signing in and that worked as well. I also changed the WP password to this:
(!@#$%^&*()_+=-;’|”:[]{}/.,<>?`~). He uses password
… including the words and tried the migration route, everything went through OK.
Is this user already in Auth0? Or they are in WordPress but not in Auth0 yet? Maybe try changing the password in WordPress and trying the migration login again?
Thread Starter
mmki
(@mmki)
@auth0josh the user is in wp but not in auth0. He tried to log in but he was getting the error message that login or passwd is not correct.
Our mailing system is blacklisted by his server and he cannot do anything about it right now. The only other possible option if I am correct is changing this password in wp and provide it to the user.
Thread Starter
mmki
(@mmki)
I’ve changed my password too and couldn’t login. The problem was with” character.
Can you walk me through the steps here? You have a user account and changed to a password with a quotation like:
my"password
… and you’re not able to log in with Auth0 with the same password? Are you able to log into WordPress with that password? Just want to narrow down where the issue is coming from.
-
This reply was modified 7 years, 5 months ago by
Josh C. Reason: Formatting
Thread Starter
mmki
(@mmki)
Hi Josh,
sorry for long response time.
I use Universal Login Page. If I set that password using password reset form I can login with my email but I can’t login with my username.
Suprisingly I can even set a password with backslash from there, but I can’t login with it.
Thread Starter
mmki
(@mmki)
Just a small update:
I can login with email and password with backslash character using ULP.
I can’t login to wordpress using password with ” sign set by ULP reset password form.
I can set ” character in password using wp profile page. Then I can login to wp with that password but I’m immediately thrown out. I can’t login with that password using ULP no matter that it is with email or username. Lastly I can’t change that password using ULP password reset form.
@mmki – Taking this one piece at a time:
I can’t login to wordpress using password with ” sign set by ULP reset password form.
The ULP password reset will not change the password in WordPress, same with changing the password directly on the user account in Auth0. The idea with the user migration setting in the custom database is that the users are moved to and managed in Auth0 going forward.
I can set ” character in password using wp profile page. Then I can login to wp with that password but I’m immediately thrown out
It sounds like you might have SLO turned on (along with SSO), which will log you out of WordPress but you don’t have an active Auth0 session. You can turn that off (it will be removed in the next major release) and this won’t happen.
I can’t login with that password using ULP no matter that it is with email or username.
I just tested this out and it looks like WordPress is escaping special characters directly in the global $_POST object so we’re sending an escaped version to Auth0 in some cases. I’m working on a fix for that now which will appear in the next release (out this month). Thanks for the report here!
Thread Starter
mmki
(@mmki)
Thank you Josh!
It sounds like you might have SLO turned on
Yes, SLO was causing that logout.
Fix was just released in 3.9.0!
