$session→refreshUserAuthHash()

Preserve this session after a validated, successfully saved self-service password change.

Regenerates the session ID and updates this session's credential binding, leaving other sessions invalidated. Does not authenticate a user or save the password itself. Call only from the authorized password-change workflow after validating the form and saving the current user's password, never from a general user-save hook.

Available since version 3.0.275.

Usage

$bool = $session->refreshUserAuthHash(User $user);

Arguments

NameType(s)Description
$userUser

Return value

bool

True on success, false if account/session identity does not match or ID regeneration fails

$session methods and properties

API reference based on ProcessWire core version 3.0.275