RocketChat / RocketChat/Rocket.Chat
Unable to change password
Open
Nobody has claimed this yet.
planned
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
Unable to change password. The “Please enter your password” window keeps popping up.
Steps to reproduce:
- Enable Settings -> Accounts -> Two Factor Authentication -> Enable Two Factor Authentication without mandatory 2FA requirement
- Try to change password
Expected behavior:
Password changed
Actual behavior:
The current password is requested; when the current password is entered, the window pops up again.
Server Setup Information:
- Version of Rocket.Chat Server: 7.10.0
- Deployment Method: docker
- Number of Running Instances: 1
Client Setup Information
- Any
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the password-change flow after enabling two-factor authentication without making 2FA mandatory, using the steps in this issue. Trace the client and server handling of the repeated “Please enter your password” prompt. Done means the password changes successfully after the current password is entered once, without the prompt recurring.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100