All password change APIs failing

[hnikolov]

Hi,

I am looking to give users the ability to change their password. However, all password change requests yield a 500 Server Error, including attempts directly from the admin panel. I am running FusionAuth on a Docker container. All other endpoints work fine so far.

I have tried

• changing password via JWT
• changing password via API key
• changing password via admin panel

Attached below is a stack trace from the logs. Any help would be greatly appreciated!

Stack trace:

[dan]

What version of fusionauth are you running?

Can you share an example of how you tried to use the API key? That looks like an exception flow we should handle and I'd love to file a bug report.

Have you tried to use this API: https://fusionauth.io/docs/v1/tech/apis/users#change-a-users-password ?

[hnikolov]

I was using the ":latest" version in my docker-compose file.

Since making this post, I downgraded to 1.16.1 and it's working!

Yes, that API is the one I was attempting to use, and I assume what the admin panel page was trying to use too

[hnikolov]

Regarding usage that led to this error -- it was failing any and all password change request including direct attempts from the admin panel. I'm sorry but I cannot accurately say when it started or what caused it, I only noticed it today.

[dan]

Hmmm. Weird. Will look at filing a bug. Thanks!

One workaround you can use is the PATCH method on the user object:

PATCH http://localhost:9011/api/user/<user-id>
{
  "user": {
    "skipVerification": true,
    "email": "admin@email",
    "passwordChangeRequired": false,
    "username": "admin",
    "password": "....."
  }
}

[dan]

Here's a bug that I believe is the same issue: https://github.com/FusionAuth/fusionauth-issues/issues/741

[hnikolov]

Hi Dan,

I was asked to politely let you know that there's a chance it may not be the same issue as the one you linked; and to point out that our specific issue had to do with the password-change endpoint in particular (it was returning a 500 Server Error, even in the official FusionAuth admin panel). We are also on a higher version than the other gentleman.

However the issue described in the other post also suggests that the change-password endpoint is failing to work as expected, which may indicate a bug in the code, and so you may be spot on in thinking that the issues are related.

[dan]

Hmmm. Thanks for letting me know. If you think the issue is distinct, please file a new issue and we can take a look. They may be related but different.

[srothery]

@dan Hi Dan - I've added https://github.com/FusionAuth/fusionauth-issues/issues/758 as this looks seperate to me