RocketChat / RocketChat/Rocket.Chat

Use of old authentication token leads to Registration page instead of existing content

Open
#38,467 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Description:

Using an old auth token
Trying to restore a mongodb dump then accessing the interface led to the Registration page instead of existing content.

Steps to reproduce:
  1. have an old token (not easily reproducible)
  2. restore a RC mongodb backup/dump
  3. access the UI
Expected behavior:

Show "normal" content of the instance

Actual behavior:
  • Show / stuck on the Registration page
  • Even if from filled, cannot go to step 2
Server Setup Information:
  • Version of Rocket.Chat Server: 7.13.2
  • License Type: CE
  • Number of Users: 50
  • Operating System: ubuntu lts
  • Deployment Method: docker
  • Number of Running Instances: 1
  • DB Replicaset Oplog: Enabled
  • NodeJS Version: 22.16.0 - x64
  • MongoDB Version: 6.0.27
Client Setup Information
  • Desktop App or Browser Version: Firefox 147.0.2 (64 bits) / Chromium 144.0.7559.109
  • Operating System: NixOS
Additional context

Instance is "public" : no need to login to see content

Authentication / account is still required for posting or admin roles

Relevant logs:

nothing relevant in logs, startup as usual

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the reported sequence: restore the MongoDB dump, access the UI with an old authentication token, and compare behavior for a public instance. Trace the authentication and registration flow when the token is stale. Done means existing content is shown instead of the Registration page, while authentication remains required for posting and administrative actions.

Written by the indexing model from the issue text.

Assessment

Tech stack
mongodb, typescript
Domain
authentication, databases, frontend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.