When a logged-in user confirms his account by clicking the verify link, a new session is started.
By restarting the session, all calls to drupal_get_token() generate another token, causing open forms by the user to be invalid.

CommentFileSizeAuthor
#1 0001-Issue-1914888-No-session-restart-for-logged-in-user.patch899 bytessandervd

Comments

sandervd’s picture

sandervd commented
StatusFileSize
new 0001-Issue-1914888-No-session-restart-for-logged-in-user.patch899 bytes