I'm syncing my Wordpress authentication system with an secondary/external authentication system and my site has at least two ways of resetting the password, including:
- Password reset email
- User account screen password reset
There may be some third way I'm not recalling, as I've disallowed password resets thus far due to my inability to sync the systems.
The crux of my question: How can I hook into the password reset prior to hashing so that I can simultaneously set the new password on the secondary/external authentication system?
Non-essential additional info:
- User resets password when using password reset email, not auto-generated
- User account screen is not the Wordpress dashboard, but a plugin implementation
The two systems using different hashing mechanisms, so a post-hashing hook won't help. I know, it's inconvenient, but it's what I've got.
I can see ways to perhaps do it on a per form/method basis, but this would be really miserable to maintain as the platform grows.