Repository navigation
Forgot password button does not seem to do anything #34
Description
Before submitting
- I've searched existing issues and this isn't a duplicate.
- This is a reproducible bug in Calnode — not a configuration/setup question or a feature request.
What's the bug?
In the login page, the 'forgot password' button does not seem to do anything. It merely refreshes the page. I don't know if it is a bug, or a feature that was forgotten, or if I am missing something, but I would expect an email with a 'reset password' button or something similar.
Steps to reproduce
- Go to the login page
- Click 'forgot password'
Calnode version / commit
v0.8.0
How are you running Calnode?
Railway / other PaaS
Logs, screenshots, or anything else
No response
Activity
pullfrog commentedon Sep 7, 2026
feat(auth): self-service password reset via emailed link (#34)
shockalotti commentedon Sep 17, 2026
Implemented and shipped. The login page link now leads somewhere real:
POST /v1/auth/password/forgot- always returns the same generic message (no account enumeration); archived and email-login-disabled accounts silently get no email.POST /v1/auth/password/reset- single-use hashed token, 1-hour expiry, revokes all sessions, signs straight in. Mirrors the magic-link flow including its rate limiter./admin/forgot-passwordand/admin/reset-password?token=...Verified end to end in production (reset email received, new password set, signed in, old password rejected). Covered by nine tests in
password_reset_test.go.Fix is on branch
fix/mcp-bearer-archived(commit659626d, migration00058).