github-starred/vikunja
2
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-07-15 22:32:29 -05:00
Code Issues 690 Packages Projects Releases 11 Wiki Activity

[GH-ISSUE #682] Vikunja keeps redirecting me to /password-reset #6286

New Issue
Closed
opened 2026-04-20 16:51:59 -05:00 by GiteaMirror · 3 comments
GiteaMirror commented 2026-04-20 16:51:59 -05:00
Owner
Copy Link

Originally created by @NihalNavath on GitHub (Apr 18, 2025).
Original GitHub issue: https://github.com/go-vikunja/vikunja/issues/682

Description

I'm facing an issue where Vikunja keeps redirecting me to /password-reset, even when I try to access the base domain at http://todo.domain.com/, navigate directly to /login, or visit any other path.
(I did not ask for a password reset and hadn't logged into vikunja for weeks)

In a bid to fix it, I followed the flow and attempted to reset the password, but I receive the following message:
'Invalid token to reset a user's password.'

To troubleshoot, I even used the CLI to manually reset the password, but the issue still persists.

Interestingly, everything works fine in an incognito window, but not in a regular session or when using the Edge-installed Progressive Web App (PWA). I don't have any extensions installed.

I have attached a video of the issue

Vikunja Version

v0.24.6

Browser and version

Edge135.0.3179.73 (Official build) (64-bit)

Can you reproduce the bug on the Vikunja demo site?

No

Screenshots

Image

Originally created by @NihalNavath on GitHub (Apr 18, 2025). Original GitHub issue: https://github.com/go-vikunja/vikunja/issues/682 ### Description I'm facing an issue where Vikunja keeps redirecting me to /password-reset, even when I try to access the base domain at http://todo.domain.com/, navigate directly to /login, or visit any other path. (I did not ask for a password reset and hadn't logged into vikunja for weeks) In a bid to fix it, I followed the flow and attempted to reset the password, but I receive the following message: 'Invalid token to reset a user's password.' To troubleshoot, I even used the CLI to manually reset the password, but the issue still persists. Interestingly, everything works fine in an incognito window, but not in a regular session or when using the Edge-installed Progressive Web App (PWA). I don't have any extensions installed. I have attached a video of the issue ### Vikunja Version v0.24.6 ### Browser and version Edge135.0.3179.73 (Official build) (64-bit) ### Can you reproduce the bug on the Vikunja demo site? No ### Screenshots ![Image](https://github.com/user-attachments/assets/2d8f0716-287d-4990-bcb2-28d00b739353)
GiteaMirror commented 2026-04-20 16:52:00 -05:00
Author
Owner
Copy Link

@kolaente commented on GitHub (Apr 18, 2025):

This sounds like you somehow got to that page once and then it will redirect you every time to that, because that's what you visited before. If it works in a private tab (as you described), that would confirm that.

Can you check what you have saved in local storage using your browser's dev tools?

I think there are a few ways to solve this:

  1. Only redirect once, then remove the local storage item for the redirect
  2. Redirect using query parameter
  3. Only redirect when the user is logged in and ignore the local storage item when logged out

@dpschen IIRC we talked about using a query parameter, what do you think?

<!-- gh-comment-id:2816241331 --> @kolaente commented on GitHub (Apr 18, 2025): This sounds like you somehow got to that page once and then it will redirect you every time to that, because that's what you visited before. If it works in a private tab (as you described), that would confirm that. Can you check what you have saved in local storage using your browser's dev tools? I think there are a few ways to solve this: 1. Only redirect once, then remove the local storage item for the redirect 2. Redirect using query parameter 3. Only redirect when the user is logged in and ignore the local storage item when logged out @dpschen IIRC we talked about using a query parameter, what do you think?
GiteaMirror commented 2026-04-20 16:52:02 -05:00
Author
Owner
Copy Link

@NihalNavath commented on GitHub (Apr 19, 2025):

"This sounds like you somehow got to that page once and then it will redirect you every time to that, because that's what you visited before"

Yup, you seem to have hit the nail on the head with this one. Vikunja force-redirects to /password-reset if there's a "passwordResetToken" key in localStorage and if that token has expired, you're basically stuck in a loop with no way out. Using query parameters would definitely help avoid this issue.

I had that key in my localStorage too, and manually removing it via the console resolved the issue for me.

<!-- gh-comment-id:2816601211 --> @NihalNavath commented on GitHub (Apr 19, 2025): "This sounds like you somehow got to that page once and then it will redirect you every time to that, because that's what you visited before" Yup, you seem to have hit the nail on the head with this one. Vikunja force-redirects to `/password-reset` if there's a `"passwordResetToken"` key in localStorage and if that token has expired, you're basically stuck in a loop with no way out. Using query parameters would definitely help avoid this issue. I had that key in my localStorage too, and manually removing it via the console resolved the issue for me.
GiteaMirror commented 2026-04-20 16:52:03 -05:00
Author
Owner
Copy Link

@kolaente commented on GitHub (May 14, 2025):

Will be fixed by https://github.com/go-vikunja/vikunja/pull/770

<!-- gh-comment-id:2881514202 --> @kolaente commented on GitHub (May 14, 2025): Will be fixed by https://github.com/go-vikunja/vikunja/pull/770
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/api
area/attachments
area/auth
area/avatars
area/backup-restore
area/caldav
area/calendar-view
area/comments
area/config
area/database
area/desktop
area/docker
area/email
area/favorites
area/filters
area/frontend
area/gantt
area/i18n
area/import-export
area/internal-code
area/kanban
area/labels
area/list-view
area/mobile
area/notifications
area/permissions
area/projects
area/pwa
area/recurring-tasks
area/reminders
area/search
area/shortcuts
area/subtasks
area/sync
area/table-view
area/task-editor
area/task-metadata
area/task-relations
area/teams
area/theming
area/time-tracking
area/typesense
area/views
area/webhooks
bug
changes requested
concern/accessibility
concern/performance
concern/regression
concern/ux
confirmed
db/mysql
dependencies
enhancement
good first issue
help wanted
integration/inbound
integration/outbound
kind/bug
kind/feature
needs reproduction
pull-request
Mirrored from GitHub Pull Request
 question
security
support
upstream issue
waiting for reply
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vikunja#6286
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?