Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore cookie on password reset page if logged in using OTP #313

Open
richardolsson opened this issue Nov 30, 2024 · 0 comments
Open

Ignore cookie on password reset page if logged in using OTP #313

richardolsson opened this issue Nov 30, 2024 · 0 comments
Labels

Comments

@richardolsson
Copy link
Member

The password reset page does not work for authenticated users. This was by design, because why would you need to reset your password if you're already authenticated? But then we introduced SMS OTP login, so it's now possible to be signed in using OTP and still not know your password and wanting to reset it. But it's not allowed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant