ruby on rails - Devise Token Auth requiring current_password on password reset -
i have config.check_current_password_before_update = :password
enabled. when user updates his/her password, current_password
field required. becomes problem when implementing password reset
because user not know his/her current password. how bypass , still require current_password
when user not resetting his/her password?
everything works fine other that, email sends, /password/edit
returns correct token enabled 1 session, current_password
requirement doesn't make sense. if take away, resetting password works, if user tries update his/her password, application not let permit , gives activerecord::unknownattributeerror (unknown attribute 'current_password' user.):
because it's treating user attribute.
does know how overcome problem in workflow?
Comments
Post a Comment