[BUG] Unable to reset password from reset password link

[philipbrito]

I tried several times reseting my password after getting its link on my e-mail address (by sending my e-mail from the Reset Password screen on the Android App and from the web). Even successfully receiving the reset password link I always get this error message:

• Version of Rocket.Chat Server: https://open.rocket.chat
• Browser: Safari

[engelgabriel]

@sampaiodiego do we need a patch to fix this?

[sampaiodiego]

if we happen to have a fix, yes. I guess it's a frontend issue since it only happens on safari

[Adam212]

Hi,

It happens under any browser (tried FF and Chromium)
And because of bug #11884 it's now also impossible to change password by admin.

[engelgabriel]

@ggazzo can you please look at this. Looks like an extremely high priority bug.

[rodrigok]

As I tested here, if you try to reset the password if you are logged in then you receive that error, otherwise it works.

The code involved was not changed for a long time.

We may check for the non existence of FlowRouter.getParam('token') here

Rocket.Chat/packages/rocketchat-ui-login/client/reset-password/resetPassword.js

Line 32 in cecf105

if (Meteor.userId()) {

in addition of the user been logged, so if the token was passed it goes through the reset flow even when logged.

[tntho]

Sorry, I just test it in https://open.rocket.chat it still happens.
I got this error when I test in my local

Exception while invoking method 'resetPasswordWithTOTP' Error: Can't call setUserId in a method after calling unblock

[Hudell]

That seems to be a problem with the two factor authentication, do you mind opening a new issue?

[tntho]

New issue created: #12820