Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FIX]: Incomplete forgot-password flow #1349

Open
PreciousIfeaka opened this issue Mar 1, 2025 · 0 comments
Open

[FIX]: Incomplete forgot-password flow #1349

PreciousIfeaka opened this issue Mar 1, 2025 · 0 comments
Labels
bug Something isn't working

Comments

@PreciousIfeaka
Copy link
Contributor

Bug Description

When a user tries to update password via the reset-password endpoint using the otp sent to their email, they get a success response, whereas the password is not being updated.

Steps to Reproduce

  1. Make a request to send otp or magic link to the email via the /auth/forgot-password route
  2. Use the OTP obtained in your email to make a request to the password-reset route.
  3. A successful password reset response is obtained but the password is not actually updated.

Expected Behavior

The password is meant to be updated after the flow and the user can then use the new password for authentication.

Current Behavior

The user gets a successful password reset response but the password is not actually being reset.

Screenshots/Logs

{
   "message": "Successfully reset password",
}

Environment

  • OS: [Linux]
  • Browser/Device: [Chrome]
  • Version: [22]

Possible Solution

Completing the flow by encrypting the new password and saving it to the user's data

Additional Context

@PreciousIfeaka PreciousIfeaka added the bug Something isn't working label Mar 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant