Bugfix: users are unable to reset or set their password via email notification CONFSERVER-79041

[Mario Schaefer]

Hi Confluence Community,

for some time some of our customers experienced a bug where it wasn’t possible to reset the password using email notifications in Confluence Data Center after an update. Until today there are multiple Confluence Versions affected.

According to this ticket CONFSERVER-79041, It seems like many more have had the same problem for some time now.

To fix this minor, yet annoying problem we build a simple app that solves the issue.

Download the App here: Bug fix docs.xalt.de.

How the App works:

• The plugin provides a servlet filter that will intercept the POST request to the /doresetuserpassword.action

• Token is first verified

• Password is changed for the user using UserManager.alterPassword

• Token is cleared

• Redirects the user to the login page

Please be aware, that this also is just a temporary fix.