search

team-alembic / ash_authentication

The Ash Authentication framework
MIT License
96 stars 52 forks source link

fix(RequestPasswordReset): fails when action called directly. #833

Closed jimsynz closed 1 week ago

jimsynz commented 1 week ago

In the case where the request password reset action was called directly without the wrapping Strategy.action/4 the inner get_by... action is denied by the default policy.

sevenseacat commented 1 week ago

Not even denied by the default policy, it raised an access error didn't it? Either way if this solves it I am a happy panda