diff --git a/releases/unreleased/change-password-form-fixed.yml b/releases/unreleased/change-password-form-fixed.yml new file mode 100644 index 00000000..6f855334 --- /dev/null +++ b/releases/unreleased/change-password-form-fixed.yml @@ -0,0 +1,10 @@ +--- +title: Change password form fixed +category: fixed +author: Jose Javier Merchante +issue: null +notes: > + An unused header in the UI made the attempts + to change the password fail. It tried to guess + the user from an invalid JWT token when multitenancy + was enabled. diff --git a/ui/src/views/ChangePassword.vue b/ui/src/views/ChangePassword.vue index 3ca186c6..89d59978 100644 --- a/ui/src/views/ChangePassword.vue +++ b/ui/src/views/ChangePassword.vue @@ -96,10 +96,8 @@ export default { }, headers() { const csrftoken = Cookies.get("csrftoken"); - const authtoken = Cookies.get("sh_authtoken"); const headers = { "X-CSRFToken": csrftoken, - Authorization: `JWT ${authtoken}`, }; return headers;