-
Notifications
You must be signed in to change notification settings - Fork 46
Description
Hello again! I found an issue with the WordPress "lost your password" feature when Authorizer is installed and could use your guidance on how I may fix it.
When a user bypasses our default login and visits our WordPress login page by appending the query string external=wordpress, they can then access the "lost your password" feature. After submitting the 'lost your password' form, the user is redirected to a success view on wp-login.php with the query string ?checkemail=confirm&external=cas. Because Authorizer attempted to send them to our default login page which is CAS by setting external=cas, it causes the success page to break:
If I change external=cas to external=wordpress the page renders correctly and this is where the user should have been sent after submitting the form since they had originally bypassed the default login:
Any ideas on how this may be remedied?
BTW, Thanks again for all your support on getting the proxy updates added, it's been working great for us.

