Application Passwords interferes in the Normal Edit User Page

  • Resolved Platoscave

    (@platoscave)


    5 years ago

    We use Application Passwords on our WordPress site to bypass the two-factor Authentication and to have a more secure way to work with the REST APIs.

    There is a forum (bbpress) section with users (WordPress users).
    When authenticated the user can update their profile information using the update profile page which does seem to use the WordPress user update form.

    The problem is that on this page, the Application Passwords section appears as well, and in fact it crashes the page with some server errors.
    We would like to not display it there but just use the normal bbpress page instead.

    It looks like with Application Passwords plugin enabled the Update profile form actually loads in the WordPress error page. See the screenshot : https://i.imgur.com/Z0Apwqd.png

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter Platoscave

    (@platoscave)

    Hi Application passwords, I’m still looking for a solution for this issue. Is this something that you can help with?

    Plugin Author Kaspars

    (@kasparsd)

    Looks like this is a compatibility issue with the bbPress plugin which tries to use the same profile page action names to display the user profile fields as WP core would on its profile.php page.

    Maybe you could remove the two Application Passwords action hooks from users with non-admin roles?

    add_action(
    'admin_init',
    function () {
        if ( true && class_exists( 'Application_Passwords' ) ) { // Update to match the actual admin-capability check.
            remove_action( 'show_user_profile', array( 'Application_Passwords', 'show_user_profile' ) );
		    remove_action( 'edit_user_profile', array( 'Application_Passwords', 'show_user_profile' ) );
        }
    }
);
    Thread Starter Platoscave

    (@platoscave)

    Thank you very much Kaspars, that worked for me. I really appreciate you taking the time to help!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Application Passwords interferes in the Normal Edit User Page’ is closed to new replies.