Forgot password link and password reset email link not bypassing

  • Hi there, I see that a very similar topic was started recently but different to that, users on my site are not getting the message about Rest API, but instead are simply redirected to the login page by Force Login. They can not even access the reset page to enter their email or username.

    Strange: I tested the password reset function last year when I set up Force Login and it was working fine. But I also see that Force Login was not updated recently, so maybe this problem does appear now due to WordPress updates, I guess.

    Before, one simple line in the “Allowed” array for Force Login was enough:

    home_url( '/my-account/lost-password/*' )

    The reset page was accessible as well as the password reset links which look like this: ” https: //site.com/my-account/lost-password/?key=ZT4qvXYclSdFqK3FGK6N&id=74 “

    Now I added one line to the Allowed list, the same without asterisk, and at least the reset page is accessible again, but the reset links still do not function. What can I do to fix this?

    • This topic was modified 4 months, 1 week ago by w-sky. Reason: trying to remove the active link from example url
Viewing 1 replies (of 1 total)
  • Thread Starter w-sky

    (@w-sky)

    Okay I tried this and that, and it seems the solution are these two allowed lines:

    home_url( '/my-account/lost-password/' ),
    home_url( '/my-account/lost-password/?show-reset-form=true&action' )

    Strangely, this also works for the password reset link. I am not sure why.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.