Problem:
When in a deployed environment, following the steps to reset a forgotten password works until redirected from the reset email to the "Change Password" page. After entering and confirming the new password, the password is not changed.
Encountered:
During manual FT.
Can it be Reproduced:
Yes it is reproducable.
Go to the "Forgot Password" page and enter your email address.
Click on the password reset link received in the email.
Enter and confirm a new password on the "Change Password" page.
Submit the form to change the password.
Impact:
End user cannot reset the password
Possible solution:
Investigate the password reset flow in auth_views and ensure the custom templates are correctly configured.
If the issue cannot be resolved promptly, the "Forgot Password" feature will be removed from the current project scope and added to future improvements.
State of the Codebase:
The codebase has been reverted to commit ba92bf6 with form_valid and form_invalid retained in core/views.py.
Problem: When in a deployed environment, following the steps to reset a forgotten password works until redirected from the reset email to the "Change Password" page. After entering and confirming the new password, the password is not changed.
Encountered: During manual FT.
Can it be Reproduced: Yes it is reproducable.
Impact: End user cannot reset the password
Possible solution: Investigate the password reset flow in auth_views and ensure the custom templates are correctly configured.
Tried various code attempts as seen in commits: