diff --git a/Release-Testing-Instructions-WooCommerce-4.7.md b/Release-Testing-Instructions-WooCommerce-4.7.md index 65767f4..9da4324 100644 --- a/Release-Testing-Instructions-WooCommerce-4.7.md +++ b/Release-Testing-Instructions-WooCommerce-4.7.md @@ -3,6 +3,44 @@ WooCommerce 4.7 includes: - WooCommerce Product Blocks Updates: - TBD - TBD -- WooCommerce Core Bug Fixes: +- WooCommerce Core Updates: - TBD - - TBD \ No newline at end of file + - TBD + + +*** + +## WooCommerce Core Updates + +### Improvements to `My Account > Lost password` endpoint + +https://github.com/woocommerce/woocommerce/pull/27898 + +The `Lost Password` endpoint has two changes allowing it to be used in the create account flow in the new checkout block in WooCommerce Blocks. + +1. The page title can now be overridden, via an `action` url parameter. +2. The lost password reset form can now be used even if the user is logged in (previously required logged-out user). + +#### Test normal "forgot password" flow +1. In an incognito window, visit `my-account/` and click `Lost your password?`? +2. Enter a username or email for a user account and click `Reset password`. +3. Open the reset password email and click the `Click here to reset your password` link. +4. Enter a new password and log in to the account to confirm password change success. + +This flow should work the same with the changes. + +In addition, in step 3-4 you can now reset the password in a logged-in browser session. The password reset should not be possible if the logged-in user not the user that triggered the password reset. + +#### Test custom `Set password` title +This flow will be used for setting a password in new accounts. The [relevant changes in WooCommerce Blocks](https://github.com/woocommerce/woocommerce-gutenberg-products-block/pull/3236) haven't been released yet. + +You can simulate this part of the flow by setting an `action=` URL param in the above reset flow. + +1. In an incognito window, visit `my-account/` and click `Lost your password?`? +2. Enter a username or email for a user account and click `Reset password`. +3. Open the reset password email and click the `Click here to reset your password` link. +4. Edit the url and set the action param to `newaccount`, for example `http://teststore.com/my-account/lost-password/?show-reset-form=true&action=newaccount`. Reload the page. +5. Page title and navigation breadcrumb should now show `Set password`. +6. Enter a new password and log in to the account to confirm password change success. + +