password reset link not working

manspan

Hi,
in a new installation (v1.18.2), when I create new agents, a welcome message was sent, but the "password change link" is not working. It just redirects to the login screen asking for a username and a password.
Could someone help?

KevinTheJedi

manspan

You’ll need to provide more info. A screenshot of Admin Panel > Dashboard > Information as well as a screenshot of the link.

Cheers.

manspan

part of the mail:
Follow the link below to login to the help desk and change your password.
https://support.iep.edu.gr/scp/pwreset.php?token=tE894fWwCEEZrODYrRugNtjjks2JX0wyp7iLntV0=v=dUOUo

Information:

KevinTheJedi

manspan

That’s looks fine. Since NGINX is not fully supported out of the box the issue might be related. Go find a full working osTicket NGINX config (on here or guides online) and retest.

Cheers.

manspan

It seems that the URL is "broken" because of the special characters (eg =). Inside file "include/class.staff.php" there is the variable $token. I've change the value from Misc::randCode(48) to Misc::randCode(10). The URL now is only 10 characters long and when it is sent, there is a good chance not to be broken.

Unfortunately, after filling in my username and pressing the "Login" button, the pwreset.php page is loading again without the token, prompting for username again.

manspan

A better way to avoid broken links is to maintain $token = Misc::randCode(48), but edit include/class.misc.php and delete the = character from the available characters (line 20, variable $chars). The problem with the redirection, described in my previous post, is still there.

KevinTheJedi

manspan

No, that shouldn't have any affect at all. Otherwise you'd see endless posts about this on the forum and github. Everyone else's setups work just fine with the equal signs. It's either a mail client thing where it's cutting off the link (try fully copying the link from the email itself and manually pasting it in a new tab to see if it works) or it's something with NGINX like the URL encoding, etc.

Cheers.