Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Too many password reset requests even when disabled in settings #11409

Closed
coleHafner opened this issue Oct 12, 2017 · 4 comments
Closed

Too many password reset requests even when disabled in settings #11409

coleHafner opened this issue Oct 12, 2017 · 4 comments
Labels
Issue: Confirmed Gate 3 Passed. Manual verification of the issue completed. Issue is confirmed Issue: Format is valid Gate 1 Passed. Automatic verification of issue format passed Issue: Ready for Work Gate 4. Acknowledged. Issue is added to backlog and ready for development Reproduced on 2.1.x The issue has been reproduced on latest 2.1 release Reproduced on 2.2.x The issue has been reproduced on latest 2.2 release Reproduced on 2.3.x The issue has been reproduced on latest 2.3 release

Comments

@coleHafner
Copy link

Summary

When attempting to reset a customer's password via the admin, the system tells me 'Too many password reset requests' even when I have disabled the 'max wait time between password resets' in the store configuration settings.

Preconditions

  • Magento Open Source version 2.1.7
  • Ubuntu version 14.04.5
  • Nginx version 1.10.2
  • PHP version 7.0.14
  • Mysql version 14.14

Steps to reproduce

  • Login to the admin
  • Go to Customers > All Customers
  • Click to edit a customer and click 'Reset Password' from the options in the top
  • This works the first time, but only then. Every subsequent request fails.

Expected result

I should get a success message and I should receive a password reset email in my inbox.

Actual result

I get an error 'Too many password reset requests. Please wait and try again or contact hello@example.com.'

The settings @ Stores > Configuration > Customers > Customer Configuration > Password Options are:
Max Number of Password Reset Requests: 0
Max Time Between Password Reset Requests: 0

@magento-engcom-team magento-engcom-team added the Issue: Format is valid Gate 1 Passed. Automatic verification of issue format passed label Oct 12, 2017
@magento-engcom-team
Copy link
Contributor

@coleHafner, thank you for your report.
We've created internal ticket(s) MAGETWO-81873 to track progress on the issue.

@magento-engcom-team magento-engcom-team added 2.1.x Issue: Ready for Work Gate 4. Acknowledged. Issue is added to backlog and ready for development Issue: Confirmed Gate 3 Passed. Manual verification of the issue completed. Issue is confirmed Reproduced on 2.1.x The issue has been reproduced on latest 2.1 release Reproduced on 2.2.x The issue has been reproduced on latest 2.2 release Reproduced on 2.3.x The issue has been reproduced on latest 2.3 release labels Oct 13, 2017
@adrian-martinez-interactiv4
Copy link
Contributor

Config path used when triggered password request from admin is admin/security/min_time_between_password_reset_requests instead of customer/password/min_time_between_password_reset_requests. I'll try to fix it.

adrian-martinez-interactiv4 added a commit to adrian-martinez-interactiv4/magento2 that referenced this issue Oct 26, 2017
magento-team pushed a commit that referenced this issue Nov 2, 2017
…abled in settings #11434

 - Merge Pull Request #11434 from adrian-martinez-interactiv4/magento2:FR#11409-TOO-MANY-PASSWORD-RESET-REQUESTS
 - Merged commits:
   1. 3963446
   2. 86fe123
magento-team pushed a commit that referenced this issue Nov 2, 2017
[EngCom] Public Pull Requests - develop
 - MAGETWO-83154: [2.3-develop] Order grid - Sort by Purchase Date Desc by default #11931
 - MAGETWO-83101: [Backport 2.3-develop] #8236 FIX CMS blocks #11805
 - MAGETWO-83092: Remove unneeded, also mistyped, saveHandler from CatalogSearch indexer declaration #11626
 - MAGETWO-83091: Remove "Undefined fields" from under lib folder #11662
 - MAGETWO-83083: 10195: Order relation child is not set during edit operation #11909
 - MAGETWO-82998: [2.3-develop] X-Magento-Tags header containing whitespaces causes exception #11849
 - MAGETWO-82633: #11409: Too many password reset requests even when disabled in settings #11434
@magento-team
Copy link
Contributor

Internal ticket to track issue progress: MAGETWO-82633

adrian-martinez-interactiv4 added a commit to adrian-martinez-interactiv4/magento2 that referenced this issue Dec 1, 2017
adrian-martinez-interactiv4 added a commit to adrian-martinez-interactiv4/magento2 that referenced this issue Dec 1, 2017
adrian-martinez-interactiv4 added a commit to adrian-martinez-interactiv4/magento2 that referenced this issue Dec 1, 2017
magento-team pushed a commit that referenced this issue Dec 7, 2017
… requests even when disabled in settings #11435

 - Merge Pull Request #11435 from adrian-martinez-interactiv4/magento2:FR22#11409-TOO-MANY-PASSWORD-RESET-REQUESTS
 - Merged commits:
   1. d06190d
magento-team pushed a commit that referenced this issue Dec 7, 2017
magento-team pushed a commit that referenced this issue Dec 7, 2017
[EngCom] Public Pull Requests - 2.2-develop
 - MAGETWO-84981: Trying to get data from non existent products #12539
 - MAGETWO-84979: [Backport 2.2-develop] Fix swagger-ui on instances of Magento running on a non-standard port #12541
 - MAGETWO-84903: Added namespace to product videos fotorama events #12469
 - MAGETWO-84862: [Backport 2.2-develop] #11409: Too many password reset requests even when disabled in settings #11435
 - MAGETWO-84856: Issue 12506: Fixup typo getDispretionPath -> getDispersionPath #12507
 - MAGETWO-84808: 12110: Missing cascade into attribute set deletion. #12167
 - MAGETWO-83503: [2.2] - Add command to view mview state and queue #12122
 - MAGETWO-80223: Fix syntax of expectException() calls #11099
magento-team pushed a commit that referenced this issue Dec 7, 2017
… requests even when disabled in settings #11436

 - Merge Pull Request #11436 from adrian-martinez-interactiv4/magento2:FR21#11409-TOO-MANY-PASSWORD-RESET-REQUESTS
 - Merged commits:
   1. fca05b2
magento-team pushed a commit that referenced this issue Dec 7, 2017
magento-team pushed a commit that referenced this issue Dec 7, 2017
[EngCom] Public Pull Requests - 2.1-develop
 - MAGETWO-85104: Fixes #8009 #12548
 - MAGETWO-84861: [Backport 2.1-develop] #11409: Too many password reset requests even when disabled in settings #11436
@ishakhsuvarov
Copy link
Contributor

@coleHafner We are closing this ticket now as fixes are already delivered with the linked Pull Requests.
Thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Issue: Confirmed Gate 3 Passed. Manual verification of the issue completed. Issue is confirmed Issue: Format is valid Gate 1 Passed. Automatic verification of issue format passed Issue: Ready for Work Gate 4. Acknowledged. Issue is added to backlog and ready for development Reproduced on 2.1.x The issue has been reproduced on latest 2.1 release Reproduced on 2.2.x The issue has been reproduced on latest 2.2 release Reproduced on 2.3.x The issue has been reproduced on latest 2.3 release
Projects
None yet
Development

No branches or pull requests

5 participants