Network Security is expiring Password reset links

Question

Hello!  we are having an issue where our network security , while examining the password reset links, is expiring the links so that by the time the intended recipient receives it and clicks it, the security examination has meant that the link is expired/Atlassian thinks it has already been used.

Has anyone else had this issue and is there an easy fix?

Nic Brough -Adaptavist- · Answer

No, there's no way to do this, and there's good reasons not to - it's insecure to allow attacks.

Your security system needs to be told to stop conducting unauthorised testing on remote systems.   It's rightly been treated as an attack by Atlassian's systems, and you really should stop it.

Sarah Sheffield · Answer

Ok - it's not our networking doing "silly things" - it's our security system examining links to make sure that nothing malicious is being sent to our users.

The problem is that by examining the link Atlassian thinks the link is being used and so it is expired so that when the user tries it, it doesn't work.

Is there a setting we can change to allow a password reset link to be clicked more than once?  We have been able to update this setting in our other apps that send password resets, Atlassian is the only app that we have this problem with now.

Nic Brough -Adaptavist- · Answer

I am sorry, but the only fix is to get your network security to stop doing silly things with the links.  There's nothing that can be done on the Atlassian side when it's your networking breaking things.