Can't reset password on meta

Bug
1

This seems improbable to to be my fault somehow, but I’ve tried several times in a logged in session and in a Linux Chrome incognito window and can’t set a password. I get to the set password screen and then it says invalid code. :person_shrugging:

The image shows a form for setting a new password, indicating that the entered authentication code is invalid as each code can only be used once. (Captioned by AI)
The image shows a form for setting a new password, indicating that the entered authentication code is invalid as each code can only be used once. (Captioned by AI)445×253 11.9 KB

I’ve been fussing with passkeys for a while, so maybe I hit some kind of rate limit and the error is misleading?

3 Likes
3

@pfaffman Is this still happening? Can you walk through the exact repro steps? When I tried the following in an incognito Chrome window, I didn’t get any error:

  1. On meta.discourse.org/login, click the forgot password link.
  2. In the pop-up, enter my email address.
  3. Follow link in the email.
  4. Enter my 2FA code.
  5. Create a new password.

Are you doing anything different?

1 Like
4

Jay sent me a PM with the /password-reset/ code that’s been throwing errors, and it also caused an error for me. That could be expected though if it’s already been followed to reset a password.

@pfaffman have you followed these steps again today to try to generate a new password reset code? Wondering if the issue will persist with a new reset code.

5

Of course, but I didn’t use it.

It’s possible that the browser or something pinged that URL before it got used, but I also think that it’s designed to account for that and doesn’t use it until you actually attempt to update the password.

Yes. Except I got the link by clicking the “send me a password update link” on my profile page. When I got the link I copied and pasted it into the PM that I sent you.

And then in an incognito window I clicked login, did the forgot password thing, got a link, opened it in incognito entered password that “looks good” and when I click Set Password IU get the “Invalid authentication code” message.

Maybe because there was no password because I usually use Google auth? Maybe because my account is really old and has another email address connected to it? Maybe something to do with my 2fa, which I can’t see because I don’t have a password–oh, but I must not have 2fa because if I did Google Auth wouldn’t work.

I don’t know what else I can do to help debug.

1 Like