400 Bad request after successful password reset #235

New Issue

2026-06-13T17:00:54Z

colby commented

2026-06-13 17:00:54 +00:00

This just happened. I'm not sure how reproducible it is, but here are the steps (I just don't want to go through them again to confirm):

Visit kosmos.org
Click "Log in" link
Submit username and password guess
Repeat step 3 with another password
Click the forgot password link
Submit email address
Open the "Reset password instructions" email from accounts@kosmos.org
Click the "Change my password" link
Enter new password 2x and submit the form

Expected results:

Successful password reset with success feedback

Actual results:

An HTTP 400 "Bad request" page following successful password reset with a toast (not visible in the screenshot because it was auto-dismissed after timeout) containing the success message.

This just happened. I'm not sure how reproducible it is, but here are the steps (I just don't want to go through them again to confirm): 1. Visit kosmos.org 2. Click "Log in" link 3. Submit username and password guess 4. Repeat step 3 with another password 5. Click the forgot password link 6. Submit email address 7. Open the "Reset password instructions" email from accounts@kosmos.org 8. Click the "Change my password" link 9. Enter new password 2x and submit the form Expected results: Successful password reset with success feedback Actual results: An HTTP 400 "Bad request" page following successful password reset with a toast (not visible in the screenshot because it was auto-dismissed after timeout) containing the success message.

Screenshot 2026-06-13 at 11-57-47 Kosmos Accounts.png

1.1 MiB

raucao added the bug label 2026-06-15 09:52:35 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/akkounts#235