plane icon indicating copy to clipboard operation
plane copied to clipboard

[bug]: Password reset fails

Open HKowi opened this issue 1 year ago • 6 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Current behavior

When clicking the "forgot password" link and filling in the email, a recovery email should be send. Instead an error is shown,

Steps to reproduce

As superuser: Create a new account for member/admin Wait for the mail to arrive, click on the link. Confirm in the member panel that the email has been processed (pending -> No Account created) Select on the login page the "Forgot password" link. Once the email has entered, an error message appears.

This happens on FF and Chrome. In the logs the following lines are found:

proxy | 10.10.X.X - - [04/Dec/2023:13:29:41 +0000] "GET /favicon/favicon-16x16.png HTTP/1.1" 404 2092 "http://10.X.X.X/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" proxy | 10.10.X.X - - [04/Dec/2023:13:29:41 +0000] "GET /favicon/apple-touch-icon.png HTTP/1.1" 404 2092 "http://10.X.X.X/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" proxy | 10.10.X.X - - [04/Dec/2023:13:29:47 +0000] "POST /api/forgot-password/ HTTP/1.1" 401 183 "http://10.X.X.X/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0"

The issue is neither with postfix (as the invitation is send out) nor the transport section in between, as the website appears and is accessible.

Browser

Mozilla Firefox

Version

Self-hosted

HKowi avatar Dec 04 '23 14:12 HKowi

I encounter the same problem.

afbeelding

MrDiba avatar Dec 05 '23 14:12 MrDiba

Can you share logs for both backend and the bgworker this will help us to debug this issue quickly.

pablohashescobar avatar Dec 07 '23 07:12 pablohashescobar

I could not find the specific backend and bgworker but this is the docker compose logs with apiserver/.env: DEBUG=1.

Clicking the link in the email:

proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:53 +0000] "GET /workspace-member-invitation/?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&[email protected] HTTP/1.1" 308 113 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:53 +0000] "GET /workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com HTTP/1.1" 200 2149 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:53 +0000] "GET /_next/static/css/28ce16c25c0a6c4e.css HTTP/1.1" 200 17762 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/main-5f352b89910f7794.js HTTP/1.1" 200 32113 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/css/e123d22482a0c3ff.css HTTP/1.1" 200 3238 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/webpack-02dae505517d57d5.js HTTP/1.1" 200 2270 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/7181-18b4247176337063.js HTTP/1.1" 200 3436 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/8545-60dafb2993b71207.js HTTP/1.1" 200 4694 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/5157-333b83bc7aeb5b75.js HTTP/1.1" 200 1042 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/framework-8998d7c5d73369f3.js HTTP/1.1" 200 45686 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/pages/workspace-member-invitation-88a68c48f3cbe213.js HTTP/1.1" 200 2315 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/hPP67ka0zhLBiAZWYnHHQ/_buildManifest.js HTTP/1.1" 200 2285 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/pages/_app-a01c337d1f2f952d.js HTTP/1.1" 200 52998 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/hPP67ka0zhLBiAZWYnHHQ/_ssgManifest.js HTTP/1.1" 200 77 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/2886-c254ec918ba815d2.js HTTP/1.1" 200 48995 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/1938-edd99befbbf6f6d6.js HTTP/1.1" 200 262539 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /_next/static/chunks/2896.28fe13ebc16d06ef.js HTTP/1.1" 200 816 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | GET - /api/users/me/ of Queries: 0
api    | Unauthorized: /api/users/me/
api    | 172.31.0.10:46114 - "GET /api/users/me/ HTTP/1.0" 401
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /api/users/me/ HTTP/1.1" 401 58 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | GET - /api/users/me/ of Queries: 0
api    | GET - /api/users/me/ of Queries: 0
api    | Unauthorized: /api/users/me/
api    | 172.31.0.10:46122 - "GET /api/users/me/ HTTP/1.0" 401
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /api/users/me/ HTTP/1.1" 401 58 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | Unauthorized: /api/users/me/
api    | 172.31.0.10:46130 - "GET /api/users/me/ HTTP/1.0" 401
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /api/users/me/ HTTP/1.1" 401 58 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | GET - /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ of Queries: 2
api    | 172.31.0.10:46140 - "GET /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ HTTP/1.0" 200
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ HTTP/1.1" 200 2840 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /favicon/apple-touch-icon.png HTTP/1.1" 404 2091 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:46:54 +0000] "GET /favicon/favicon-16x16.png HTTP/1.1" 404 2091 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"

Pressing accept in the browser:

api    | GET - /api/users/me/ of Queries: 0
api    | Unauthorized: /api/users/me/
api    | 172.31.0.10:38038 - "GET /api/users/me/ HTTP/1.0" 401
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /api/users/me/ HTTP/1.1" 401 58 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | GET - /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ of Queries: 2
api    | 172.31.0.10:38048 - "GET /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ HTTP/1.0" 200
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /api/users/me/invitations/48109732-455b-40a6-91dd-f28f238b4ed0/ HTTP/1.1" 200 2803 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
api    | POST - /api/users/me/invitations/workspaces/test/48109732-455b-40a6-91dd-f28f238b4ed0/join/ of Queries: 3
api    | 172.31.0.10:38050 - "POST /api/users/me/invitations/workspaces/test/48109732-455b-40a6-91dd-f28f238b4ed0/join/ HTTP/1.0" 200
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "POST /api/users/me/invitations/workspaces/test/48109732-455b-40a6-91dd-f28f238b4ed0/join/ HTTP/1.1" 200 43 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /_next/static/chunks/8039-dfc454e58d254934.js HTTP/1.1" 200 9577 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /_next/static/chunks/pages/index-8cbe7dd6f06926c5.js HTTP/1.1" 200 2083 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /_next/static/chunks/7267-7111ee4fd4717003.js HTTP/1.1" 200 5079 "https://project.company.com/workspace-member-invitation?invitation_id=48109732-455b-40a6-91dd-f28f238b4ed0&email=user%40company.com" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"
proxy  | 192.168.173.5 - - [07/Dec/2023:08:47:00 +0000] "GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fblue-without-text.17aa0249.png&w=384&q=75 HTTP/1.1" 200 724 "https://project.company.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0"

It is worth noting that I'm using the regular docker-compose.yml instead of the docker-compose-hub.yml as the hub version would not send out any email's.

The application is also running behind an reverse proxy for SSL offloading, testing it without the reverse proxy gives the same result.

MrDiba avatar Dec 07 '23 12:12 MrDiba

Seems email configuration not working in worker image. Im trying to reset password. There is an error in logs

[2024-04-22 08:16:54,180: INFO/MainProcess] Task plane.bgtasks.forgot_password_task.forgot_password[3c1a92a8-c594-4549-a4e9-df67edd39884] received
ERROR 2024-04-22 08:16:55,745 exception_logger 10 548187926616 (504, b'5.5.2 <plane-worker-wl-8c856467f-2wp6h>: Helo command rejected: need fully-qualified hostname')

On my mail server

Apr 22 08:16:55 mail postfix/submission/smtpd[25327]: NOQUEUE: reject: HELO from 10-42-0-198.ingress-nginx-controller-admission.ingress-nginx.svc.cluster.local[10.42.0.198]: 504 5.5.2 <plane-worker-wl-8c856467f-2wp6h>: Helo command rejected: need fully-qualified hostname; proto=SMTP helo=<plane-worker-wl-8c856467f-2wp6h>

All configurations are set image

I've updated env variables with EMAIL_HOST, EMAIL_HOST_USER, etc, but no luck.

nejtr0n avatar Apr 22 '24 08:04 nejtr0n

Hey @nejtr0n , would you mind logging into the backend container and executing the following script to test your SMTP services and ensure they're functioning properly?

python manage.py test_email <receiver's email>

NarayanBavisetti avatar Apr 22 '24 12:04 NarayanBavisetti

@NarayanBavisetti the same error as I posted above

Trying to send test email...
Error: Email could not be delivered due to (504, b'5.5.2 <plane-worker-wl-8c856467f-2wp6h>: Helo command rejected: need fully-qualified hostname')

Plane sending hostname of wroker container as helo command to SMTP. But it have to be EMAIL_HOST or EMAIL_HOST_USER domain.

nejtr0n avatar Apr 22 '24 13:04 nejtr0n

@NarayanBavisetti it was my fault, misconfigured email server

nejtr0n avatar May 27 '24 08:05 nejtr0n

Closing this issue due to inactivity. We’ve also improved our flow for resetting passwords. Please upgrade to the latest version.

Related docs,

  1. Upgrading Plane to latest version
  2. Reset password

vihar avatar Jul 18 '24 10:07 vihar