Skip to content

Render the React page for the password reset link - #12321

Merged
nbudin merged 1 commit into
mainfrom
fix-reset-password-edit-page
Oct 30, 2026
Merged

nbudin merged 1 commit into
mainfrom
fix-reset-password-edit-page

Conversation

@nbudin

@nbudin nbudin commented Oct 30, 2026

Copy link
Copy Markdown
Contributor

Purpose

Someone reported that password reset wasn't working for them. Trying it locally and on production, the "forgot password" step is fine, but the link in the reset email opens Devise's bare default form instead of our React ResetPassword page: no site header, no styling, tab title "Sign In".

PasswordsController overrides new to hand off to the React app, but never overrode edit, and the app has no app/views/devise/passwords, so Devise's stock view rendered. This adds the same one-liner override for edit. The React page reads the token from the query string itself, so nothing else is needed.

Testing

Verified against the local dev server: the reset link now renders the React page. I also added controller tests for both new and edit that assert the app shell is served with no server-rendered form. I couldn't run them locally because my test database had leftover rows, so CI is the first real run.

The bare form on production does work if you submit it (Nat tried it with a real reset), so this is a polish/regression fix rather than a hard break. I don't know for sure that it's what the reporting user hit.

Release plan and notes

🚢

🤖 Generated with Claude Code

PasswordsController overrode `new` to hand off to the React app, but not
`edit`, so the link in the reset email fell through to Devise's stock
view (there's no app/views/devise/passwords). Users got an unstyled form
instead of the ResetPassword page.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UKBUsvK2TxyNpBVBi531xz
@nbudin nbudin added bug patch Bumps the patch version number on release labels Oct 30, 2026
@nbudin
nbudin marked this pull request as ready for review October 30, 2026 05:11
@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage Report: Only Changed Files listed

Package Base Coverage New Coverage Difference
app/controllers/passwords_controller.rb 🟢 93.75% 🟢 94.44% 🟢 0.69%
app/graphql/concerns/cms_parent_implementation.rb 🔴 43.24% 🔴 45.95% 🟢 2.71%
Overall Coverage 🟢 67.35% 🟢 67.35% ⚪ 0%

Minimum allowed coverage is 0%, this run produced 67.35%

@nbudin
nbudin merged commit 11e1c11 into main Oct 30, 2026
27 checks passed
@nbudin
nbudin deleted the fix-reset-password-edit-page branch October 30, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug patch Bumps the patch version number on release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant