RocketChat / RocketChat/Rocket.Chat

Functions involving sending emails for verification/password reset not working

Open
#39,764 5 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

type: bug
Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Description:

The email confirmation and password recovery emails aren't being sent. The error is "Error: Message failed: 550 Message was not accepted -- it contains invalid headers. More specifically, the 'From:' header must match the user you are sending mail from." Test emails and emails for new user registrations are being sent and received successfully.
SMTP settings are configured; I've attached a screenshot.

Steps to reproduce:

For example, go to the RocketChat page and click "Forgot your password?" Enter the email address of the user registered in RocketChat and click "Send instructions" The logs show error 550: Message was not accepted -- it contains invalid headers. More specifically, the 'From:' header must match the user you are sending email from.

Expected behavior:

An email with a link to reset the password should be sent to the user.

Actual behavior:

Error

Image
Server Setup Information:
  • Version of Rocket.Chat Server: 8.2.1
  • License Type: Community
  • Number of Users: 280
  • Operating System: Oracle Linux 7
  • Deployment Method: docker
  • Number of Running Instances: 1
  • DB Replicaset Oplog: no
  • NodeJS Version: v22.16.0
  • MongoDB Version: 8.2.3 / wiredTiger (oplog off)
Client Setup Information
  • Desktop App or Browser Version: desktop and web
  • Operating System: MacOS Sonoma 14.4
Additional context

Settings smtp

Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the password-reset and email-confirmation mail paths and comparing them with the working test and new-user-registration emails. Check how the SMTP From header is selected and reproduce the failure from the Forgot your password flow; done means both verification and password-recovery messages are accepted and delivered.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.