Received: by 10.204.10.88 with SMTP id o24mr1093418bko.0.1344803826070;
        Sun, 12 Aug 2012 13:37:06 -0700 (PDT)
X-BeenThere: mezzanine-users@googlegroups.com
Received: by 10.205.119.129 with SMTP id fu1ls4126049bkc.4.gmail; Sun, 12 Aug
 2012 13:37:05 -0700 (PDT)
Received: by 10.205.130.14 with SMTP id hk14mr1090993bkc.5.1344803824995;
        Sun, 12 Aug 2012 13:37:04 -0700 (PDT)
Received: by 10.205.130.14 with SMTP id hk14mr1090992bkc.5.1344803824977;
        Sun, 12 Aug 2012 13:37:04 -0700 (PDT)
Return-Path: <stephen...@gmail.com>
Received: from mail-lpp01m010-f45.google.com (mail-lpp01m010-f45.google.com [209.85.215.45])
        by gmr-mx.google.com with ESMTPS id j4si1275957bkj.3.2012.08.12.13.37.04
        (version=TLSv1/SSLv3 cipher=OTHER);
        Sun, 12 Aug 2012 13:37:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of stephen...@gmail.com designates 209.85.215.45 as permitted sender) client-ip=209.85.215.45;
Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of stephen...@gmail.com designates 209.85.215.45 as permitted sender) smtp.mail=stephen...@gmail.com; dkim=pass header...@gmail.com
Received: by lagz14 with SMTP id z14so1977463lag.18
        for <mezzanine-users@googlegroups.com>; Sun, 12 Aug 2012 13:37:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date
         :x-google-sender-auth:message-id:subject:to:content-type;
        bh=78winYYsovmWLTyFtHtyD8+Rs2xwG6eJpF1SgeYwg2Q=;
        b=EX0Gc0IsqDZt4ULdZb4ZWiqdFMEUsP8PZFKf0VKD82NIfYtqi/tLfg7Od+dDWLVzUu
         JOFcr5MRDo/QPwvlT7aiBG2Ep5KCjVCLeoWUCBeGI3YJVN4h2SIv6JWYgakNVG3brmuS
         0QTfUaKVz5lhQ5q9KSlFF+KMTrTDxyUDOE+WMfZw4gfi6nbTO96ynq/i5RPj1Kxce6z0
         dwj+iBoc5xQNLoVWJTfTVwaT8xMxG57a+HBfVLYPRiGdmVRPRs5lYodt4/6nB30Gko9I
         8EJrBWaHRJSap1+F3pY7446ryCrlUeb9f61avup+JA2fZUqB0Bs/57sNwmhkaS0n5hdT
         Y/ng==
Received: by 10.152.108.144 with SMTP id hk16mr9734809lab.2.1344803824406;
 Sun, 12 Aug 2012 13:37:04 -0700 (PDT)
MIME-Version: 1.0
Sender: stephen...@gmail.com
Received: by 10.112.88.226 with HTTP; Sun, 12 Aug 2012 13:36:44 -0700 (PDT)
In-Reply-To: <01437207-00be-4bbc-b0ef-48ecc9bae2c7@googlegroups.com>
References: <01437207-00be-4bbc-b0ef-48ecc9bae2c7@googlegroups.com>
From: Stephen McDonald <st...@jupo.org>
Date: Mon, 13 Aug 2012 06:36:44 +1000
Message-ID: <CAFDn9NafsD0EL+PTv_QKtdsJhkS+M8ZO05OLK8hWAweATkp...@mail.gmail.com>
Subject: Re: [mezzanine-users] Password Reset does not login the user and
 hence user cannot update their profile
To: mezzanine-users@googlegroups.com
Content-Type: multipart/alternative; boundary=bcaec54d4dd63f0ed404c7178a9a

--bcaec54d4dd63f0ed404c7178a9a
Content-Type: text/plain; charset=UTF-8

The token should log them in.

Check that you have Mezzanine's auth backend enabled in your settings
module:

AUTHENTICATION_BACKENDS = ("mezzanine.core.auth_backends.MezzanineBackend",)

On Sun, Aug 12, 2012 at 11:11 PM, Osi Emoekpere <hovai...@gmail.com> wrote:

> Hi There,
>
> When a user uses a token to reset their password, mezzanine doesn't login
> the user before redirecting to the profile update page and hence the user
> cannot update their profile since they are not logged in.
>
> Is this how it's supposed to work? (Was there some security reason it was
> done this way?)
>
> Regards
> Osi
>



-- 
Stephen McDonald
http://jupo.org

--bcaec54d4dd63f0ed404c7178a9a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

The token should log them in.<div><br></div><div>Check that you have Mezzan=
ine&#39;s auth backend enabled in your settings module:</div><div><br></div=
><div>AUTHENTICATION_BACKENDS =3D (&quot;mezzanine.core.auth_backends.Mezza=
nineBackend&quot;,)<br>

<br><div class=3D"gmail_quote">On Sun, Aug 12, 2012 at 11:11 PM, Osi Emoekp=
ere <span dir=3D"ltr">&lt;<a href=3D"mailto:hovai...@gmail.com" target=3D"_=
blank">hovai...@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex">

Hi There,<div><br></div><div>When a user uses a token to reset their passwo=
rd, mezzanine doesn&#39;t login the user before redirecting to the profile =
update page and hence the user cannot update their profile since they are n=
ot logged in.</div>

<div><br></div><div>Is this how it&#39;s supposed to work? (Was there some =
security reason it was done this way?)</div><div><br></div><div>Regards</di=
v><span class=3D"HOEnZb"><font color=3D"#888888"><div>Osi</div></font></spa=
n></blockquote>

</div><br><br clear=3D"all"><div><br></div>-- <br>Stephen McDonald<br><a hr=
ef=3D"http://jupo.org" target=3D"_blank">http://jupo.org</a><br>
</div>

--bcaec54d4dd63f0ed404c7178a9a--