docbrown/app/controllers/passwords_controller.rb
Michael Kohl 71ea85be6e
Verify current password on password change (#12174)
* Verify current password on password change

* Address PR comments

* Allow password reset for logged in users

* Make password change message more explicit

* Reformat message

* Fix specs
2021-01-21 12:40:54 +07:00

15 lines
350 B
Ruby

class PasswordsController < Devise::PasswordsController
# allow already signed in users to reset their password
skip_before_action :require_no_authentication
def new
super
session[:referrer] = request.referer
end
protected
def after_sending_reset_password_instructions_path_for(_resource_name)
session[:referrer]
end
end