RocketChat / RocketChat/Rocket.Chat

Cannot change settings, password required, but no accounts have a password (oauth)

Open
#32,266 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

type: bug
Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Description:

We use Keycloak OAuth.

I cannot change any settings without a password, but my account does not have a password.

This has been reported as an issue in the Forums, it's been this way likely forever.

Steps to reproduce:
  1. Set up Rocket Chat with OAuth system
  2. Log into Rocket Chat as an admin
  3. Attempt to edit any admin settings, and press save changes
Expected behavior:

To be able to change administrator settings

Actual behavior:

Cannot change settings without entering a password that doesn't exist

image
Server Setup Information:
  • Version of Rocket.Chat Server: 6.6.6
  • Operating System: Linux
  • Deployment Method: docker
  • Number of Running Instances: 1
  • DB Replicaset Oplog: ?
  • NodeJS Version: ?
  • MongoDB Version: 4.4
Client Setup Information
  • Desktop App or Browser Version: 3.9.14 desktop app
  • Operating System: macOS
Additional context

N/A

Relevant logs:

N/A

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the administrator settings save flow with Keycloak OAuth, as described in the issue, and confirm which password check blocks the save. Trace the settings form and server-side authorization path from that reproduction. Done means an OAuth-only administrator can save settings without being asked for a nonexistent password, with coverage for this setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.