Password no longer works after latest update

[DrOnion]

✅ Have you read and understood the above guidelines?

yes

📝 Provide a clear and concise description of the issue.

I was keen to get the latest update, to patch the JWT refactoring issue. Unfortunately, after updating it (via the in-app update script), my password no longer seems to work. I had a look in the .env file and can see the bcrypt hash, which I have validated is accurate, but I continue to get the error message: Invalid username or password

🔄 Steps to reproduce the issue.

Step 1: Update from the last main version to the latest inside the application
Step 2: Refresh browser
Step 3: Try logging in without success

❌ Paste the full error output (if available).

🖼️ Additional context (optional).

No response

[g-sezen]

I started experiencing the same problem after installing the latest update.

[nfinityparad0x]

same issue here, hopefully there is a work around or something haha

[oliwor]

i got the same issue. seems like we are locked out, because "update" in terminal of the lxc tells us to use the update function in the web surface (which we cant, because we cant log in)

[oliwor]

why is this closed?

i see there is an update 1.1.4 with this description:
Fix/password generation#615 (#617) by @Vivelis

but how can i update? i am locked out at the moment. please tell how to update

[MickLesk]

Run in /opt/PVE* bash update.sh

Its closed because duplicate of the other issue

[oliwor]

the script ran successfully:

[SUCCESS] Update completed successfully!

but i am still not able to log in. even after restarting the whole lxc.

it is still:

Invalid username or password

i dont think this issue is resolved

and i dont think this this is exactly the same as the other issue. in the other issue the user got a complety blank setup page.
in this issue we cant log in anymore. compare the screenshots.

[MickLesk]

I deploy a new - can Login, i Update my old - can Login.

[MickLesk]

you can run the bash update.sh again, did you get the login working? Otherwise share journalctl and browser console please

[oliwor]

i ran the update.sh script again. nothing changed. still cant login.

i checked the bcrypt hash in my .env and its definitly the right password that i try to use.

i noticed that my directory is /opt/ProxmoxVE-Local (and not /opt/PVEScripts-Local)
i did not named it that way manually.

does this make any difference?

heres a screenshot of the browser console:

but as i said i checked my creds manually.

[MickLesk]

This part is not part of the latest source. May redeploy an new lxc.

[oliwor]

i manually generated a new bcrypt hash for a new password and set it in my .env manually -> login works
i changed it back to my original creds -> login works again

¯_(ツ)_/¯

anyways. problem seems to be solved. i can login with my original creds again finally.

[MickLesk]

Lol, very strange. Special Chars? I tried 2 different Variants, Like:
Passw0rd! and P4$$w0rd!?!*

[oliwor]

no. i made sure that there arent any special chars in it.
only numbers and letters in caps and lower cases. randomly generated and 30 chars long.