Merge pull request #242 from bscheshirwork/admin-controller-post-method-for-action

Set verbs filter for force-password-change action as POST

CHANGELOG.md

@@ -16,7 +16,8 @@
  - Enh: Improvements to the admin responsive design (wautvda)
  - Enh: Add controller module class reference (TonisOrmisson)
  - Enh: Replace the deprecated InvalidParamException in ClassMapHelper (TonisOrmisson)
- 
+ - Fix #242: Add POST filter for `admin/force-password-change` action (bscheshirwork)
+
 ## 1.1.4 - February 19, 2018
 - Enh: Check enableEmailConfirmation on registration (faenir)
 - Fix #154: Fix DateTime constructor with Unix timestamps (tonydspaniard)

src/User/Controller/AdminController.php

@@ -86,7 +86,8 @@ class AdminController extends Controller
                     'confirm' => ['post'],
                     'block' => ['post'],
                     'switch-identity' => ['post'],
-                    'password-reset' => ['post']
+                    'password-reset' => ['post'],
+                    'force-password-change' => ['post'],
                 ],
             ],
             'access' => [