Actions
Feature proposal #8521
closedImprove password reset redirect to be plugin and ajax aware
Description
Ajax endpoints end up responding with the full frontend output due to the reset password redirect. Change this to force a 403 response and just exit the output. For plugins fire a trigger (onResetPassword) to allow plugins to authorize access even during password reset (similar to verify consent usage).
Updated by krileon over 3 years ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Implemented in MR !1670
Updated by beat over 3 years ago
Actions