Can submit a reset password request even if an email is incorrect

[lukasSerelis]

Flow to reproduce:

Login page -> Click reset password -> Enter a non compliant email format that contains an @ (mail@mail for example) -> click Reset password -> You're taken to the next page even if there is an error on the entry field.
Also, even when the reset doesn't go through, example if you just entered "mail", it refreshes the page and gets rid of the validation error. That validation error should remain there and page shouldn't get refreshed.

Fix

Login page -> Click reset password -> Enter a non compliant email format that contains an @ (mail@mail for example) -> click Reset password -> nothing happens, as there is an error in the email field. There shouldn't be a refresh of the page, field error should remain active until fixed.

[syncronize-issues-to-jira]

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/IAM-1246.

This message was autogenerated

[edlerd]

Afaik mail@mail can be a valid email, and we should not enforce that an addition top level domain is in the email address.

[edlerd]

See the relevant rfc

[lukasSerelis]

The problem is that the field validation calls it out as an incorrect email address but I can still proceed as if there's no error. So what the system does VS what we tell the user is completely different.