Problem/Motivation
#992540: Nothing clears the "5 failed login attempts" security message when a user resets their own password clears the user login flood lock when user try to reset password. However, it doesn't work for admin resets user password.
Steps to reproduce
- Register as a normal user
- Try to login with wrong password for 5 times
- Login as admin and change user's password
- Try to login as user with new password
Expected
Allow user to login with new password.
Expected
- Still getting "There have been more than 5 failed login attempts for this account. It is temporarily blocked. Try again later or request a new password."
Proposed resolution
Dispatch an event on password reset to clear flood lock.
Remaining tasks
- One scenario current patch doesn't work - When admin reset the password and new password == old password.