Reset link is not working after I click on the link on the reset email notification

[Hsiang Lee]

I cannot go thru reset link on resetting the password

Given: I received the email from server with a link

When: I clicked on the link

Then: It will appear an error with this error: 

java.lang.NullPointerException: ConstantTimeComparison.isEqual does not accept null values.

 

[Angélica Luz]

Hi Hsiang,

I've checked the attachment and the stack trace us shown traces of the add-on BigPicture:

at.softwareplant.ppm.structureint.jiraserver.event.PluginIssueLinkListener.doFilter(PluginIssueLinkListener.java:72)

Would it be possible to disable the add-on or use the safe mode to test if the link will work?

- Disabling or enabling all apps (using Safe Mode)

Please, give a try and let us know how it goes.

Regards,
Angélica

[Hsiang Lee]

It's still not working. I tried doing it in safe mode.

Here's the follow complete details.

https://cl.ly/a4b80facec51 

[Angélica Luz]

Hi Hsiang,

Are there other users facing this issue or it's only one user?
Is this link for resetting password for internal user or customer?
Is this issue currently active on the instance?

Regards,
Angélica

[Eddy Fras]

Hi,

I have exactly the same issue on my side (Jira DC 7.5.4) for a specific user, here is the stack trace I get :

java.lang.NullPointerException: ConstantTimeComparison.isEqual does not accept null values.
at com.atlassian.security.utils.ConstantTimeComparison.isEqual(ConstantTimeComparison.java:31) [atlassian-secure-utils-3.2.3.jar:?]
at com.atlassian.security.utils.ConstantTimeComparison.isEqual(ConstantTimeComparison.java:47) [atlassian-secure-utils-3.2.3.jar:?]
at com.atlassian.jira.user.util.PasswordResetTokenBuilder.validateToken(PasswordResetTokenBuilder.java:81) [classes/:?]
at com.atlassian.jira.user.util.UserUtilImpl.validatePasswordResetToken(UserUtilImpl.java:408) [classes/:?]
at com.atlassian.jira.web.action.user.ResetPassword.validateUserAndToken(ResetPassword.java:105) [classes/:?]
at com.atlassian.jira.web.action.user.ResetPassword.doDefault(ResetPassword.java:62)

How can we fix that ?

Thanks