From d41a521edc3a96cedb1e12a61863743c0840f9cf Mon Sep 17 00:00:00 2001
From: "Beau Beauchamp, WebTigers" <beau@webtigers.com>
Date: Wed, 21 Oct 2026 09:27:47 -0400
Subject: [PATCH] TIGER-361: show-password eye on the account Security
 (change-password) screen (v1.31.0)

Follow-up to TIGER-360: the account Security tab's new-password + confirm fields now carry the same
eyeball toggle as login/signup. Markup only (tiger.password-strength.js is already loaded on that
screen). The inputs are wrapped in .input-group.has-validation with the feedback kept inside the
group, so Bootstrap + the convenience-validation display still work. Reuses core.auth.show_password.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ASauLLscjqdsNqBNsx2Typ
---
 CHANGELOG.md                                       |  8 ++++++++
 library/Tiger/Version.php                          |  2 +-
 .../profile/views/scripts/index/_security.phtml    | 14 ++++++++++----
 3 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a54fece0..65151ed2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,14 @@ All notable changes to **Tiger Core** (`webtigers/tiger-core`). Format follows
 
 ## [Unreleased]
 
+## [1.31.0] — 2026-10-21
+
+### Added
+- **Show-password eye on the account Security (change-password) screen** (TIGER-361) — the new-password
+  and confirm fields now carry the same eyeball toggle as the login/signup screens. Markup only
+  (`tiger.password-strength.js` is already loaded there); the inputs use `.input-group.has-validation`
+  so convenience-validation feedback still renders. Reuses `core.auth.show_password`.
+
 ## [1.30.0] — 2026-10-21
 
 ### Added
diff --git a/library/Tiger/Version.php b/library/Tiger/Version.php
index 26d6a72a..db8fcd99 100644
--- a/library/Tiger/Version.php
+++ b/library/Tiger/Version.php
@@ -9,5 +9,5 @@
 class Tiger_Version
 {
     /** Current Tiger Core version. Keep in lockstep with the git tag cut for a release. */
-    const VERSION = '1.30.0';
+    const VERSION = '1.31.0';
 }
diff --git a/modules/profile/views/scripts/index/_security.phtml b/modules/profile/views/scripts/index/_security.phtml
index f5a36758..febdf324 100644
--- a/modules/profile/views/scripts/index/_security.phtml
+++ b/modules/profile/views/scripts/index/_security.phtml
@@ -23,13 +23,19 @@ $ta = isset($this->themeAssets) && $this->themeAssets ? $this->themeAssets : '/_
         <div class="row g-3">
             <div class="col-md-6">
                 <label class="form-label" for="profile-new-password"><?= $this->t('profile.security.new') ?></label>
-                <input type="password" class="form-control" id="profile-new-password" name="new_password" autocomplete="new-password" data-tiger-strength="1">
-                <div class="invalid-feedback"></div>
+                <div class="input-group has-validation">
+                    <input type="password" class="form-control" id="profile-new-password" name="new_password" autocomplete="new-password" data-tiger-strength="1">
+                    <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+                    <div class="invalid-feedback"></div>
+                </div>
             </div>
             <div class="col-md-6">
                 <label class="form-label" for="profile-confirm-password"><?= $this->t('profile.security.confirm') ?></label>
-                <input type="password" class="form-control" id="profile-confirm-password" name="confirm_password" autocomplete="new-password">
-                <div class="invalid-feedback"></div>
+                <div class="input-group has-validation">
+                    <input type="password" class="form-control" id="profile-confirm-password" name="confirm_password" autocomplete="new-password">
+                    <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+                    <div class="invalid-feedback"></div>
+                </div>
             </div>
         </div>
     </div>