NoamB/sorcery — Issue #114: Set activation_state to 'active' after password reset?
Author: ubermajestix
Created: 2011-10-27 00:30:02+00:00
State: open

I was going to work on a pull request for this but wanted some feedback first.

Currently my update method on my PasswordResets controller attempts to log in the user after they change their password.

If the user has not activated, they will not be authenticated and cannot login, even with their new password, until they click the activation link in their email.

Since the user has already gotten the password reset link out of their email, should they be considered active?

Should sorcery detect that the user activation submodule is active and mark the user as activated in `change_password!`?