400 Bad request after successful password reset #235

Open
opened 2026-06-13 17:00:54 +00:00 by colby · 0 comments

This just happened. I'm not sure how reproducible it is, but here are the steps (I just don't want to go through them again to confirm):

  1. Visit kosmos.org
  2. Click "Log in" link
  3. Submit username and password guess
  4. Repeat step 3 with another password
  5. Click the forgot password link
  6. Submit email address
  7. Open the "Reset password instructions" email from accounts@kosmos.org
  8. Click the "Change my password" link
  9. Enter new password 2x and submit the form

Expected results:

Successful password reset with success feedback

Actual results:

An HTTP 400 "Bad request" page following successful password reset with a toast (not visible in the screenshot because it was auto-dismissed after timeout) containing the success message.

This just happened. I'm not sure how reproducible it is, but here are the steps (I just don't want to go through them again to confirm): 1. Visit kosmos.org 2. Click "Log in" link 3. Submit username and password guess 4. Repeat step 3 with another password 5. Click the forgot password link 6. Submit email address 7. Open the "Reset password instructions" email from accounts@kosmos.org 8. Click the "Change my password" link 9. Enter new password 2x and submit the form Expected results: Successful password reset with success feedback Actual results: An HTTP 400 "Bad request" page following successful password reset with a toast (not visible in the screenshot because it was auto-dismissed after timeout) containing the success message.
raucao added the bug label 2026-06-15 09:52:35 +00:00
Sign in to join this conversation.