Changing password always logs me out

Is UpdateUserPassword your own class? If so please post it

UpdateUserPassword is a Jetstream / Fortify class (https://jetstream.laravel.com/1.x/features/authentication.html)

namespace App\Actions\Fortify;

use Illuminate\Support\Facades\Hash; use Illuminate\Support\Facades\Validator; use Laravel\Fortify\Contracts\UpdatesUserPasswords;

class UpdateUserPassword implements UpdatesUserPasswords { use PasswordValidationRules;

/**
 * Validate and update the user's password.
 *
 * @param  mixed  $user
 * @param  array  $input
 * @return void
 */
public function update($user, array $input)
{
    Validator::make($input, [
        'current_password' => ['required', 'string'],
        'password' => $this->passwordRules(),
    ])->after(function ($validator) use ($user, $input) {
        if (! Hash::check($input['current_password'], $user->password)) {
            $validator->errors()->add('current_password', __('The provided password does not match your current password.'));
        }
    })->validateWithBag('updatePassword');

    $user->forceFill([
        'password' => Hash::make($input['password']),
    ])->save();
}

}

Please format your code by putting 3 backticks ``` on a line before and after each code block

Thank you, will do in future, but any idea on the problem itself?

Any chance that you have some middlware on the route changePassword ? Show the route definition

Bingo! Thank you so much, I did have middleware on changePassword:

Route::middleware(['auth:sanctum', 'verified'])->post('change-password', 'Account@changePassword');

Removing this solved the issue, just devising an alternative to this now.

I setup as per you and had the same error.

Resolved it by changing the function to

        $changePassword = new UpdateUserPassword;
        $changePassword->update(Auth::user(), $request->All());

So using the already validated user instance rather than reloading the user model. My guess is that this is the sanctum middleware that is not associated with the new user model

Hmm, tried this but still seemed to get the logout issue. In the end I changed the middleware to:

Route::middleware(['auth'])->post('change-password', 'Account@changePassword');

You still shouldn't load the user again. It already is loaded in memory so just use that. Otherwise you get the user from the database twice

$user = Auth::user();

Update session when password updates

session()->put([
	'password_hash_' . auth()->getDefaultDriver() => $this->user->password
]);