search

lynndylanhurley / ng-token-auth

Token based authentication module for angular.js.
Do What The F*ck You Want To Public License
1.8k stars 233 forks source link

Password reset and update password conflict #246

Open prasadpilla opened 8 years ago

prasadpilla commented 8 years ago

Hey, Rails Noob here I'm using devise_token_auth and ng_token_auth for my current project. The authentication working fine so far. But i'm very confused about the reset password and update password. My current implementation, reset password mail gets fired and when i click on the link it redirect to the reset password form, here i could pass new password and confirm password params and get things done. But to achieve this i had to disable password change protection, which i really want for password update. Please help me with this

To put it in the use case words:

I want users to enter current password while they are updating their password from "update password" option in profile page

I want users to enter new password only while they are creating a new password from password reset mail

Sorry for raising an issue for this, I researched a lot on web but no luck, so ended up here. Thanks

Chosko commented 8 years ago

Hey, @prasadpilla, you are not the first.

This is a problem with devise_token_auth and it's referenced here https://github.com/lynndylanhurley/devise_token_auth/issues/481