-
Notifications
You must be signed in to change notification settings - Fork 2.5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
## Bug Description We are facing a bug in case recaptcha is enabled. To reproduce: - Create your recaptcha: https://www.google.com/recaptcha/about/ - update your server .env with the following variables: ``` CAPTCHA_SECRET_KEY=REPLACE_ME CAPTCHA_SITE_KEY=REPLACE_ME CAPTCHA_DRIVER=google-recaptcha ``` - Go to the login page, enter an existing user email and hit 'Reset your password'. - Add a console.log in emailPasswordResetLink in auth.resolver.ts to get the token that would be sent by email if you don't have the mailer setup - Browse: /reset-password/{passwordToken} - Update the password: <img width="1446" alt="image" src="https://github.com/user-attachments/assets/dd5b077f-293e-451a-8630-22d24ac66c42"> - See that the token is invalid You should see two calls in your developer network tab. A successful one to update the password and another to log you in. This 2nd call (Challenge) does not have the captcha token provided. It should be ## Fix - Refreshing the token on page load - providing it to the Challenge graphql call
- Loading branch information
1 parent
01fe3b6
commit c69d665
Showing
4 changed files
with
13 additions
and
18 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
11 changes: 0 additions & 11 deletions
11
packages/twenty-server/src/engine/core-modules/auth/dto/password-reset-token.input.ts
This file was deleted.
Oops, something went wrong.