Forgot URL link ignoring reverse proxy config

Created on 16 April 2018, about 7 years ago
Updated 23 May 2025, 12 days ago

When a user with IP Restrictions in place clicks on a Password Reset URL, a user error is generated stating invalid IP and showing the IP address of the proxy.

Type: User
Date: (Actual date & Time)
User: (User's name)
Location: https://www.siteurl.com/user/reset/(nnn)/(lasttimeloggedin)/(hash)/login
Referrer: https://www.siteurl.com/user/reset/(nnn)/(lasttimeloggedin)/(hash)
Message: Session closed for user (username) - Invalid IP. 192.168.(proxy.ip)
Severity: notice
Hostname: (actual.ip.of.user)
Operations:

If we reset the password the user works just fine. It is only during the reset password that the reverse proxy is apparently not followed.

πŸ› Bug report
Status

Closed: outdated

Version

3.1

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States wmelnick

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡¦πŸ‡ΊAustralia darvanen Sydney, Australia

    This looks very much like a problem with the infrastructure in question rather than the module - which is backed up by there being no activity here for 7 years.

    I'm going to close this as outdated, but feel free to reopen if you discover there's an actual issue with the module here.

Production build 0.71.5 2024