Skip to content

Conversation

@miguelpeixe
Copy link
Member

All Submissions:

Changes proposed in this Pull Request:

NPPM-2463

If Emails::get_password_reset_url() gets called without Woo active, it'll fallback to core's wp_lostpassword_url(). This will redirect to a page that resends the email that the user just received.

This PR resolves the issue by adding the required parameters, allowing the password to be reset in the next step.

How to test the changes in this Pull Request:

  1. With RAS active, deactivate Woo (wp plugin deactivate woocommerce-subscriptions woocommerce)
  2. While on trunk, visit wp-login.php and go through the password recovery flow for a reader account
  3. Confirm you get an email with the link, and the link redirects to the same page
  4. Checkout this branch and request another password recovery
  5. Confirm the link redirects you to set the new password
  6. Confirm the password is updated

Other information:

  • Have you added an explanation of what your changes do and why you'd like us to include them?
  • Have you written new tests for your changes, as applicable?
  • Have you successfully ran tests with your changes locally?

@miguelpeixe miguelpeixe self-assigned this Jan 7, 2026
@miguelpeixe miguelpeixe requested a review from a team as a code owner January 7, 2026 14:24
@miguelpeixe miguelpeixe added the [Status] Needs Review The issue or pull request needs to be reviewed label Jan 7, 2026
Copy link
Member

@rbcorrales rbcorrales left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested the reset flow with Woo deactivated and received the correct link in the email after your changes.

@github-actions github-actions bot added [Status] Approved The pull request has been reviewed and is ready to merge and removed [Status] Needs Review The issue or pull request needs to be reviewed labels Jan 7, 2026
@miguelpeixe miguelpeixe merged commit 06d1503 into trunk Jan 8, 2026
9 checks passed
@miguelpeixe miguelpeixe deleted the fix/password-reset-url-fallback branch January 8, 2026 12:47
@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Hey @miguelpeixe, good job getting this PR merged! 🎉

Now, the needs-changelog label has been added to it.

Please check if this PR needs to be included in the "Upcoming Changes" and "Release Notes" doc. If it doesn't, simply remove the label.

If it does, please add an entry to our shared document, with screenshots and testing instructions if applicable, then remove the label.

Thank you! ❤️

matticbot pushed a commit that referenced this pull request Jan 9, 2026
# [6.29.0-alpha.1](v6.28.0...v6.29.0-alpha.1) (2026-01-09)

### Bug Fixes

* add default reader meta ([#4360](#4360)) ([01564ad](01564ad))
* **ads:** placement control value reset ([#4375](#4375)) ([72d7b68](72d7b68))
* **autocomplete:** improve value parsing in AutocompleteTokenField and ListsControl components ([#4376](#4376)) ([84e388d](84e388d))
* clarify the media credit placeholder image's labelling ([#4352](#4352)) ([4420b65](4420b65))
* **content-gating:** stop running `restrict_post` after gate is rendered ([#4368](#4368)) ([8489a6c](8489a6c))
* fallback password reset URL ([#4382](#4382)) ([06d1503](06d1503))
* hide 'trashed' subscriptions from My Account ([#4351](#4351)) ([e759378](e759378))
* **my-account:** top position on desktop ([#4355](#4355)) ([1b3255a](1b3255a))
* prevent doubled URL in reader registration block magic link ([#4379](#4379)) ([ba4d855](ba4d855))
* remove newspack-ui CSS class from my account when not logged in ([#4384](#4384)) ([2bb8630](2bb8630))
* remove space if no time ([#4380](#4380)) ([05c57e9](05c57e9))
* select specific product for content gifting and countdown banners ([#4366](#4366)) ([809c230](809c230))
* **sso:** change Jetpack configuration notice from error to warning ([#4383](#4383)) ([e5e0643](e5e0643))
* **subscriptions:** remove actions from gifted subscription ([#4362](#4362)) ([8fbc243](8fbc243))
* **update-payment-notice:** don't render on checkout ([#4356](#4356)) ([dd80c06](dd80c06))

### Features

* Add Managed Nextdoor Auth ([#4359](#4359)) ([fee2480](fee2480))
* add media credits to RSS feeds ([#4357](#4357)) ([e638447](e638447))
* **content-gating:** add Content Gate settings page ([#4363](#4363)) ([822c363](822c363))
* **content-gating:** enable content rule exclusions ([#4346](#4346)) ([1e5718b](1e5718b))
* **content-gating:** update content gates UI ([#4345](#4345)) ([4e22075](4e22075))
* rename newsletter tracking ([#4358](#4358)) ([3da6434](3da6434))
* **web-preview:** add ESC key support and dynamic titles for segments and prompts ([#4294](#4294)) ([7238d2f](7238d2f))
@matticbot
Copy link
Contributor

🎉 This PR is included in version 6.29.0-alpha.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

released on @alpha [Status] Approved The pull request has been reviewed and is ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants