RocketChat / RocketChat/Rocket.Chat
Problem with local users (both usermanagement variants are active - local / OIDC)
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
I have an instance which is configured to use OIDC and local user management.
I created a local user.
The activation mail works.
The moment the dummy/test user has clicked on the link in “Your temporary password ...”, it is possible to “log in”.
“Log in” means: The next step in the workflow is “Change password”.
But the workflow throws an error.
Password change is not allowed!
The moment you reload the browser tab, you are suddenly logged in.
Expected behavior:
Clear workflow states. No hacks.
Server Setup Information:
- Version of Rocket.Chat Server: 7.7.1
Additional context
You can find a detailed result in the Cloudron forum https://forum.cloudron.io/topic/13945/problem-with-local-users-both-usermanagement-variants-are-active-local-oidc/3
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the problem on Rocket.Chat 7.7.1 with both local user management and OIDC enabled, then trace the local-user activation and password-change workflow. Done means the temporary-password link reaches a clear password-change state without an error, and the user does not become logged in only after reloading the browser tab.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100