I'm a relative Lift newbie, but encountered something that seems like
an error or could just be a misunderstanding on my part.

In MetaMegaProtoUser's passwordReset(id: String) method, there is a
call to user.uniqueId.reset().save that occurs when the page loads and
a user is found.

Since the uniqueId is reset when the page is first visited (instead of
after validating the new password), any errors that occur (e.g.
password too short) are not shown because:

1. on error the page loads
2. the uniqueId (which is also the URL) no longer matches
3. the default case occurs, replacing the error with
"password.link.invalid"
4. the user to the homePage

It seems much more intuitive that the user should see the error and
stay on the password reset page.  Instead, I suggest moving the
user.uniqueId.reset().save call into the "user.validate match" on Nil,
replacing the simple user.save call.

dave

-- 
You received this message because you are subscribed to the Google Groups 
"Lift" group.
To post to this group, send email to lift...@googlegroups.com.
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en.

Reply via email to