Password and confirm password should be mandatory fields while setting up password using one time link following by email

Problem/Motivation

Clicking on the forgot password link it generate one time use password reset link which is send via mail. After clicking on the link we can see that Password and confirm password are not mandatory fields. Which misguides user at UX and functionality level.

Actual Result - The one time password generator link which has Password and confirm password is not compulsory.

Expected Result - When user follows one time link to set the password, 'Password' and 'Confirm Password' fields should be mandatory fields.

Steps to reproduce

1. Install a new Drupal instance
2. Installed Development Environment module, which allowed me to test the mail
3. Created new user
4. Reviewed site log report for One time link
5. Click on one time login link
6. Now View that password and required password field is not compulsory.

Proposed resolution

When user follows one time link to set the password, 'Password' and 'Confirm Password' fields should be mandatory fields.

Remaining tasks

Convert to an MR
Review

User interface changes

Before

After