Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • pleroma pleroma
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 647
    • Issues 647
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 89
    • Merge requests 89
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • PleromaPleroma
  • pleromapleroma
  • Issues
  • #2740
Closed
Open
Issue created Aug 08, 2021 by mindofjoe@mindofjoe

Pleroma users (admin & ordinary) cannot change password via pleroma-fe (API 400/Bad Request)

Environment

  1. pleroma 2.4.0-516-gdc63aaf8 (OTP), pulled today via curl "https://git.pleroma.social/api/v4/projects/2/jobs/artifacts/stable/download?job=amd64" -o pleroma_amd64.zip
  2. OS: Ubuntu 20.04.2 LTS (64-bit)
  3. Browser: firefox 90.0.2 (64-bit) for Ubuntu canonical 1.0

Issue

  1. Install looks fine. Access with browser looks fine.
  2. Admin new user via CLI and login via browser, no problem.
  3. New user (non-admin) creation via pleroma-fe, no problem.
  4. Neither admin nor ordinary user can use pleroma-fe to change password.
  5. The issue is the same whether using AdminFE or not.

What I see

  1. POST is made to /api/pleroma/change_password with response 400 / Bad Request.
  2. UI indicates each of password, new_password, and new_password_confirmation are missing.
  3. Request does contain form-data; name="password" "new_password" and "new_password_confirmation" data is present as entered in the form.
  4. Response contains an error object indicating the missing data, as well as a list of three items, one for each field, indicating pointers /password, /new_password, and /new_password_confirmation have titles Invalid value.

What I expect

  1. Successful password change and confirmation.

I searched "password" on both pleroma & pleroma-fe gitlab for "password" without any luck. I posted the issue to #pleroma @ libera.chat today without response. Raising the issue here as a result.

I've successfully installed have been using a single-user pleroma instance for several months, so I haven't had cause to detect when this issue may have appeared. I spotted this running some tests for a new potentially multi-user install.

How can I help?

Assignee
Assign to
Time tracking