You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The default devise password reset process using the devise plugin 'recoverable' seems to skip the GAuth process. After resetting a password with an email request the user is logged in and does not get redirected to the GAuth step.
The text was updated successfully, but these errors were encountered:
montulli
changed the title
Devise password reset bypasses google auth
Devise password reset via 'recoverable' bypasses google auth
Aug 8, 2017
Workaround: If you disable the option to login automatically after a password reset the problem can be solved.
In devise.rb add:
' # When set to false, does not sign a user in automatically after their password is'
' # reset. Defaults to true, so a user is signed in automatically after a reset.'
' config.sign_in_after_reset_password = false'
The default devise password reset process using the devise plugin 'recoverable' seems to skip the GAuth process. After resetting a password with an email request the user is logged in and does not get redirected to the GAuth step.
The text was updated successfully, but these errors were encountered: