search

mozilla / login.webmaker.org

Login service for Webmaker.org
https://login.webmaker.org
Mozilla Public License 2.0
32 stars 62 forks source link

Password reset emails not received #374

Closed matteomenapace closed 8 years ago

matteomenapace commented 8 years ago

Hello,

I've been using Thimble with a group of 20 adult learners. A few of them couldn't log in, so they did the following:

  1. Go to https://id.webmaker.org/reset-password/
  2. Enter email used previously to sign up to Webmaker
  3. The email check returns positive (so we know they typed in an email address that is linked to an existing Webmaker account)
  4. Submit the form
  5. After submitting the form the page says We've emailed you instructions for creating a new password. however no emails were received (not even in the spam folder).

I tested these steps myself (repeatedly) and got the same result: a new password reset request seems to be successfully created, yet I am not receiving any emails to reset my password.

reset-password-response

Something to do with the email delivery system (SQS)? https://github.com/mozilla/login.webmaker.org/blob/a4021a7651bf5a1b41b45498843c60f4ba46dd85/app/db/models/index.js#L411

Could you please look into this? Currently I have 4 students who are effectively locked out of their Webmaker account and can't access the Thimble projects they've worked on for 3 weeks.

Thanks!

cc @jbuck @cadecairos

jbuck commented 8 years ago

Matteo: Could you email me and Chris with the email address for the users in question? jbuck@mozillafoundation.org & cade@mozillafoundation.org

On Mon, Feb 22, 2016 at 8:29 AM, Matteo Menapace notifications@github.com wrote:

Hello,

I've been using Thimble with a group of 20 adult learners. A few of them couldn't log in, so they did the following:

  1. Go to https://id.webmaker.org/reset-password/
  2. Enter email used previously to sign up to Webmaker
  3. The email check returns positive (so we know they typed in an email address that is linked to an existing Webmaker account)
  4. Submit the form
  5. After submitting the form the page says We've emailed you instructions for creating a new password. however no emails were received (not even in the spam folder).

I tested these steps myself (repeatedly) and got the same result: a new password reset request seems to be successfully created, yet I am not receiving any emails to reset my password.

[image: reset-password-response] https://cloud.githubusercontent.com/assets/116104/13219150/149a76e0-d966-11e5-8c13-f24e15da5c4f.png

Something to do with the email delivery system (SQS)?

https://github.com/mozilla/login.webmaker.org/blob/a4021a7651bf5a1b41b45498843c60f4ba46dd85/app/db/models/index.js#L411

Could you please look into this? Currently I have 4 students who are effectively locked out of their Webmaker account and can't access the Thimble projects they've worked on for 3 weeks.

Thanks!

cc @jbuck https://github.com/jbuck @cadecairos https://github.com/cadecairos

— Reply to this email directly or view it on GitHub https://github.com/mozilla/login.webmaker.org/issues/374.

cadecairos commented 8 years ago

@matteomenapace Last night some of the hardware that Heroku hosts our Redis instances on had a critical failure, and Heroku moved our instances onto new hosts. Unfortunately, the updates didn't get picked up by our queue processor, and messages started building up.

I've fixed up the issue, and messages have started getting processed. The processor should get through all the messages in the next couple minutes.

cadecairos commented 8 years ago

@matteomenapace Looks like the queue has cleared up, and now I'm recieving password reset emails for my own accounts.

Please let us know if your students continue to have issues accessing their accounts.

cadecairos commented 8 years ago

It may have processed the requests. However, the secret tokens contained in the emails would have expired by now. They should visit https://thimble.mozilla.org, hit login, and request a new password reset email.

matteomenapace commented 8 years ago

Thanks @jbuck and @cadecairos! I will ask my students to request a new password reset. You can consider this issue closed :)

cadecairos commented 8 years ago

Glad we could be of assistance! If you have any more troubles, please let us know.