Change the password by email. Click the link to enter, and the token is invalid.

[JY-K50105]

Summary

Change the password by email. Click the link to enter, and the token is invalid.
Observe all sending links. There are two lengths of tokens. The short length access will prompt invalid, and the long one is normal.

Normally：http://10.254.254.62:2389/index.php?action=resetbytoken&token=3vUCAPDFRYL7qzoetcJxIQvStduXO2lAPKIqM%2BjwLEVz2QvfNsBkDFsor%2BLBSiNTb1D4NYB%2FEM9uB%2BevPX0F0ShLEP73vHitVidIZTKBNcJGYJI6DDvbfTb8VQw01dIBEEl48lrZu6yRcr8MV7fnbFY2s%2BA%3D
Abnormal：http://10.254.254.62:2389/index.php?action=resetbytoken&token=3vUCAKoVlsd1ygZCfdSKQiSlO3m5amHFd0nOTvDca18KQcWOrn1MUp%2BhhvLCL3yqo8KTsuaeZL0lnpNwdJZb1UdZrMBEpbSlEExmaagubaydYnvb

Steps to reproduce

The current situation is UTC-8 time zone. The links sent from 7:51 a.m. to 8:41 a.m. are invalid, while those sent after 8:41 a.m. are normal.

Environment

Centos7

• Image version / tag:
• tiredofit/self-service-password:5.1.2