Magento Password Reset Link

magento

We run a multi-store/view magento site. Let's say our site is called www.domain.com (running the "retail" store) and another url trade.domain.com running the "trade" store

When a customer requests a password reset from trade.domain.com, they get a password reset link like this: http://trade.domain.com/customer/account/resetpassword/?id=12&token=84fb6f65548995191e526b815982bf23

Clicking this link re-directs to login page with the error Your password reset link has expired..

However, if you replace the "trade" from the domain with "www" like this: http://www.domain.com/customer/account/resetpassword/?id=12&token=84fb6f65548995191e526b815982bf23

The password reset appears to be working correctly.

Any idea why this is happening? Have I configured the magento incorrectly? Is this a known bug?

Best Answer

Customers are shared either per website, either across all websites, so at least, a customer account is usable on all of the store views that a website contains. Consequently, it is normal that the password reset link works for your store views.

In fact, if you would like to separate the customer accounts between your store views, you would have to create separate websites that would not share customers.

Related Topic