Okay
  Public Ticket #3482267
Reset password loop
Closed

Comments

  •  40
    ep started the conversation

    Hi – to be honest, I don't *think* this is a theme issue. But I wanted to ask as maybe you have seen this problem before and could advise me.

    My website is WooCommerce with customer accounts. If user follows 'forgot password' workflow, they get a 'reset password' email clicking the link here takes them back to 'forgot password' screen (screenshot attached).

    I wanted to try 'troubleshoot mode' to disable all plugins etc but, of course, I cannot test lost password function as I am logged in...

    Any advice would be most helpful, if possible. Thanks so much.

    Attached files:  Screenshot 2023-09-20 at 17.28.31.png

  • [deleted] replied

    Hi Elliot,

    This area is not touched by Kalium theme.

    You can perform multiple tests on this, first you can activate a default WordPress theme (such as Twenty Twenty Three) and test if the behavior is the same. If yes, then you can disable all your third-party plugins (plugins that don't come with our theme) one by one, and check if this problem is solved.

    If not, then it means that this is a default WooCommerce behaviour and you can contact them if you need help on this.

  •  40
    ep replied

    Hi Ylli

    Yep understood. Appreciate your response.

    I will go investigate further!

  •  40
    ep replied

    Hi again

    I deactivated *all* of my plugins (except WooCommerce) and the reset password loop problem still continued.

    I then switched to default Twenty Twenty Three theme. The reset password worked! (Screenshot attached)

    So this means that Kalium theme is the cause of my problem?

    I activated Kalium and, indeed, the reset password problem returned. (Normally I use Kalium Child but even Kalium itself reproduced the problem.)

    What do I do now? Your help is much appreciated :)

    FYI my host WPEngine have created cache exclusion rules for this.

    Attached files:  IMG_1550.jpg

  • [deleted] replied

    Hi ep,

    I have tried to reset password on my account and it worked, I got the reset password link and then when opened it was shown the Reset Password page, after that I changed the password and was able to login with new password (in the video I try to login with incorrect email first, but later I use correct email):

    https://d.pr/v/D6wJpp

    If you want I can try it on your site and I need steps to reproduce the issue and also your site credentials.

  •   ep replied privately
  • [deleted] replied

    Hi Elliot,

    I tried to reset password by opening the link while I was logged in, inside WP admin and it is working:

    medium
    (view large image)

    If I am not signed in, the page is not updated:

    medium
    (view large image)

    I think you have to bypass caching on this page to allow it to display correct form.

    Can you please try this and see if it works properly.

  •  40
    ep replied

    Hi Arlind, thanks so much. Hope you had a good weekend.

    Oh that is a new observation when logged in/out... thank you.

    Please see screenshot for caching rules supplied by my host. This was last week we applied them. Is there something we might be missing?

    (FYI your user should have been administrator and still is.)

    Attached files:  Screenshot 2023-09-25 at 09.47.24.png

  • [deleted] replied

    Hi Elliot,

    Thank you very much, I hope you are doing great today.

    Based on your current rules it seems that forgot password is strictly set to /lost-password but if you open Lost Password page it has this URL structure: {domain}/account/lost-password so I think it should be something like this:

    medium
    (view large image)

    Can you please test it and see if it works for you.

  •  40
    ep replied

    Hi Arlind, really appreciate you helping me with this. Thanks so much for your reply.

    So you suggest I add:

    ^/account/lost-password/

    to my exclusions? Did I understand correctly?

  • [deleted] replied

    Hi Elliot, 

    Yes it should be added to exclusions list for page caching in order to work properly.

    Have you tried if its working when you exclude the page?