I have a forum that’s been running for a few years (~200 users). Recently, it’s come to my attention that password reset is broken.
The reset email (triggered from the login window or account prefs → Security →
Send PW Reset Email) leads to a page that says “Oops! That page doesn’t exist or is private” and there’s no way to actually reset the password. I tested it with several accounts, and asked a few people try. All with the same result.
The link in the email is structured
[site]/users/password-reset/[hash]. Email confirmation links in the signup flow are working fine.
For background I’m running 2.8.0.beta6, hosting on Digital Ocean with Mailgun. Haven’t had any issues otherwise.
Any help with this would be greatly appreciated!