Problems with password reset key

  • danielcho

    (@danielcho)


    3 years, 9 months ago

    Hello,
    I was running into an issue with password reseting with some specific conditions that seem to cause them.
    If a user first opens the password reset page with a key that is either expired or has some other error with it, they’ll get the error page saying so like normal, but then if that same person uses a proper key in their url that should work properly, the page then gives the same error message as before despite the key being new. But then if they then refresh the page after that error, it’ll then work properly.
    I’ve tested this on both a production and local environment, and in incognito mode as well, and the same issue occurs. On the production environment specifically, the issue is cropping up because of people trying to reset their passwords again after a long period of time, so it doesn’t seem to be only recently used expired keys.

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author WP User Manager

    (@wpusermanager)

    3 years, 9 months ago

    Hi @danielcho – thanks for the report. The password reset flow is based on WordPress’ own flow, can you recreate the same problem with that?

    Thread Starter danielcho

    (@danielcho)

    3 years, 9 months ago

    @wpusermanager Hi, what’s the best way to test that? Is it to disable the plugin and run my tests again?

    Plugin Author WP User Manager

    (@wpusermanager)

    3 years, 9 months ago

    @danielcho yes, use the /wp-login.php page to click on forgotten password

    Thread Starter danielcho

    (@danielcho)

    3 years, 9 months ago

    @wpusermanager Hi sorry for the delay.
    I tried recreating the issue using the built in wordpress password reset like you asked, but I did not run into the same issue. I tried a few times but wasn’t able to get an error with a proper/valid key/url through the same methods I was getting them with the wpum password recovery.

    Plugin Support Mark Kevin

    (@mkesteban08)

    3 years, 9 months ago

    Hello @danielcho,

    I went ahead and checked this further from my end but it seems that I was not able to replicate this issue from my end with the latest version of WPUM. Could you please update your WPUM to the latest version and test it again from your end, see if the issue persists?

    • This reply was modified 3 years, 9 months ago by Mark Kevin.
    Thread Starter danielcho

    (@danielcho)

    3 years, 9 months ago

    @mkesteban08
    Hi, sorry for the delay again. I updated the WPUM plugin from 2.7 to 2.8.8 and tried it again, but I still got the same wonky behavior on my end.
    Just in case, but the methods I used to check were:
    1. Get a new password reset link/key and confirm it works in a new incognito mode window
    2. Close all windows and open a new incognito mode window and use an invalid link (in this case I just took my working link and changed the key to make it invalid). This gives me the error I expect since the is invalid.
    3. I use the correct link with the working key. This gives me the same error as the invalid key for some reason.
    4. I refresh the page which then gives me the working reset form.

    Plugin Support Mark Kevin

    (@mkesteban08)

    3 years, 9 months ago

    Hi @danielcho,

    Thank you very much for the detail that you provided!

    I went ahead and tested this further from my end by following the steps that you provided and it seems that I was able to replicate it on my test site.

    I proceeded in escalating this to our developers and rest assured that it would be actively investigated. Have a great day ahead!

    Thread Starter danielcho

    (@danielcho)

    3 years, 8 months ago

    Hi @mkesteban08,
    It’s been a few weeks since, and I was just wondering if there were any updates on this situation? As the school year is starting, we’re expecting a larger load of people needing this functionality working, and I was hoping to hear if it might be unblocked any time soon.
    Thank you very much.

    Plugin Support Mark Kevin

    (@mkesteban08)

    3 years, 8 months ago

    Hi @danielcho ,

    There’s currently no ETA for this yet, you can check out the progress of the issue from this link – https://github.com/WPUserManager/wp-user-manager/issues/304

    I hope for your kind understanding regarding this.

    Plugin Author WP User Manager

    (@wpusermanager)

    3 years, 5 months ago

    Hey folks – are you using page cache on your site? If so, can you exclude that page from being cached please

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Problems with password reset key’ is closed to new replies.