Fixed a long standing bug in login_user which was using 'password' instead of settings.password_field

Fixes #636
2016-11-20 19:38:21 +00:00
parent 85c68e6876
commit bf5ec0d7cf
2 changed files with 18 additions and 8 deletions
@@ -3734,7 +3734,14 @@ class Auth(AuthAPI):
                        formname='profile',
                        onvalidation=onvalidation,
                        hideerror=self.settings.hideerror):
-            self.user.update(table_user._filter_fields(form.vars))
+            extra_fields = self.settings.extra_fields.get(self.settings.table_user_name, [])
+            if any(f.compute for f in extra_fields):
+                user = table_user[self.user.id]
+                self._update_session_user(user) 
+            else:
+                self.user.update(table_user._filter_fields(form.vars))
+
+            
            session.flash = self.messages.profile_updated
            self.log_event(log, self.user)
            callback(onaccept, form)