Merge pull request #46 from TeskaLabs/feature/invalid-password-url-empty

Redirect to invalid code page when pwd_token is missing in query

Author: byewokko

CHANGELOG.md

@@ -1,5 +1,15 @@
 # CHANGELOG
 
+## v24.31
+
+### Releases
+
+- v24.31-alpha1
+
+### Features
+
+- Redirect to invalid code page when pwd_token is missing in query (#46, v24.31-alpha1, PLUM Sprint 240726)
+
 ## v24.19
 
 ### Releases

src/modules/auth/passwd/ResetPwdScreen.js

@@ -111,6 +111,11 @@ function ResetPwdCard(props) {
 		return redirect_uri
 	}
 
+	if (!resetPasswordCode || resetPasswordCode.length == 0) {
+		// Show the "Invalid or expired code, reset your password again" page when there is no password reset code in query
+		onRedirect("/cant-login", true);
+	}
+
 	if (completed) {
 		return (
 			<Card className="shadow animated fadeIn auth-card">