Closed
Description
This issue is automatically created based on existing pull request: #25279: Extend password reset token validity on password change page load
Description (*)
This avoids a race condition where the password reset token is valid at page load time, but no longer valid at page submission time.
In a scenario where a user begins the password reset flow but is unable to immediately complete the same, clicking the link close to expiry time provides an opportunity for an error message after entering a new password due to the token expiring between page load & form submission.
Fixed Issues (if relevant)
Manual testing scenarios (*)
- Generate password reset email (admin & frontend)
- Follow link back to Magento
- Observe password validity in database has been extended/reset
Questions or comments
I am unsure if this change requires a unit test.
Contribution checklist (*)
- Pull request has a meaningful description of its purpose
- All commits are accompanied by meaningful commit messages
- All new or changed code is covered with unit/integration tests (if applicable)
- All automated tests passed successfully (all builds are green)
Metadata
Metadata
Assignees
Labels
Gate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 1 Failed. Automatic verification of issue format is failedMay be fixed according to the position in the backlog.The issue has been reproduced on latest 2.4-develop branchAffects non-critical data or functionality and does not force users to employ a workaround.