p2-inc / keycloak-orgs

Single realm, multi-tenancy for SaaS apps
https://phasetwo.io
Other
417 stars 72 forks source link

Forgot password screen not coming #266

Closed ankur-tj closed 2 months ago

ankur-tj commented 3 months ago

I have configured 'forgot password' to true at realm settings level and I am getting the 'forgot passsword?' button on the UI. When I click on this button, it makes an API call to /login-actions/reset-credential but doesn't return the forgot password screen. Instead, it returns the same login screen.

image

This issue is only happening when I use Home IDP Discovery step. Below is the simplified version of my authentication flow to reproduce this issue.

image

When I tried using the browser flow, it works fine and I get the forgot password screen on clicking of the button. I want to know how to make it work with IDP discovery step.

xgp commented 3 months ago

@rtufisi Can you take a look at this to reproduce with

  1. the current, released version
  2. the new version you worked on
  3. the basic home idp extension without our changes

?

rtufisi commented 3 months ago

Sure. I will look into it

rtufisi commented 3 months ago

Hei @ankur-tj . Could you provide us with additional information regarding this issue? I tried to reproduce the issue under the conditions that @xgp mentioned but I couldn't manage it.

Perhaps you can give the Home Idp Discovery step configs under the alias "alias212". Another thing will be the version of keycloak you use. I'm trying to reproduce the issue on phasetwo-keycloak:25.0.1

So basically the repro steps I've tried are:

  1. in the master realm create the Authentiation flow mentioned in the first comment.
  2. activate the Reset password in the Realm settings
  3. assign the authentication flow to the "account-console" client
  4. create a test user and a set of credentials
  5. Access {{domain}}/auth/realms/master/account/ and start the login flow

Could you please confirm you are experiencing the same behaviour?

xgp commented 2 months ago

Closing pending requested information. Please reopen if this is still an issue.