Laravel “reset” password doesn’t work but “forgot” password does

  Kiến thức lập trình

Using Laravel 11 with Breeze, the Reset Password page is not working as intended. When user fills out the form and presses the button, the page just redirects immediately back to the homepage. No confirmation message is displayed – it’s like it isn’t submitting the form at all. No entry added to DB password_reset_tokens. No email sent.

The Forgot Password function works perfectly. It’s just Reset Password that’s not working.

I haven’t attempted to make any changes to the default behaviors in these Breeze components.

UPDATE An issue seems to be around whether the user is logged in or not. When logged out, user can successfully go through the Forgot Password flow. When logged in, however, after visiting the request password reset page and entering their email address, submitting the form just bounces them back to application homepage without creating a reset request.


    <form method="POST" action="{{ route('') }}">

        <!-- Password Reset Token -->
        <input type="hidden" name="token" value="{{ $request->route('token') }}">

        <!-- Email Address -->
        <div style="margin-top:40px">
            <x-input-label for="email" :value="__('Email')" />
            <x-text-input id="email" class="block mt-1 w-full" type="email" name="email" :value="old('email', $request->email)" required autofocus autocomplete="username" />
            <x-input-error :messages="$errors->get('email')" class="mt-2" />

        <!-- Password -->
        <div class="mt-4">
            <x-input-label for="password" :value="__('Password')" />
            <x-text-input id="password" class="block mt-1 w-full" type="password" name="password" required autocomplete="new-password" />
            <x-input-error :messages="$errors->get('password')" class="mt-2" />

        <!-- Confirm Password -->
        <div class="mt-4">
            <x-input-label for="password_confirmation" :value="__('Confirm Password')" />

            <x-text-input id="password_confirmation" class="block mt-1 w-full"
                                name="password_confirmation" required autocomplete="new-password" />

            <x-input-error :messages="$errors->get('password_confirmation')" class="mt-2" />

        <div class="flex items-center justify-end mt-4">
                {{ __('Reset Password') }}


    <div class="mb-4 text-sm text-gray-600">
        <h3>Forgot your password or want to reset it?</h3>
        <p class="text-center">Enter the email address you use to sign in to receive a password reset link.</p>

    <!-- Session Status -->
    <x-auth-session-status class="mb-4" :status="session('status')" />

    <form method="POST" action="{{ route('') }}">

        <!-- Email Address -->
        <div style="margin-top: 40px">
            <x-input-label for="email" :value="__('Email')" />
            <x-text-input id="email" class="block mt-1 w-full" type="email" name="email" :value="old('email')" required autofocus />
            <x-input-error :messages="$errors->get('email')" class="mt-2" />

        <div class="flex items-center justify-end mt-4">
            <button type="submit" class="primary">Send password reset link</button>


Route::get('/reset-password', function () { return view('auth.forgot-password'); })->name('password.request');



use AppHttpControllersAuthAuthenticatedSessionController;
use AppHttpControllersAuthConfirmablePasswordController;
use AppHttpControllersAuthEmailVerificationNotificationController;
use AppHttpControllersAuthEmailVerificationPromptController;
use AppHttpControllersAuthNewPasswordController;
use AppHttpControllersAuthPasswordController;
use AppHttpControllersAuthPasswordResetLinkController;
use AppHttpControllersAuthRegisteredUserController;
use AppHttpControllersAuthVerifyEmailController;
use IlluminateSupportFacadesRoute;

Route::middleware('guest')->group(function () {
    Route::get('register', [RegisteredUserController::class, 'create'])

    Route::post('register', [RegisteredUserController::class, 'store']);

    Route::get('login', [AuthenticatedSessionController::class, 'create'])

    Route::post('login', [AuthenticatedSessionController::class, 'store']);

    Route::get('forgot-password', [PasswordResetLinkController::class, 'create'])

    Route::post('forgot-password', [PasswordResetLinkController::class, 'store'])

    Route::get('reset-password/{token}', [NewPasswordController::class, 'create'])

    Route::post('reset-password', [NewPasswordController::class, 'store'])

Route::middleware('auth')->group(function () {
    Route::get('verify-email', EmailVerificationPromptController::class)

    Route::get('verify-email/{id}/{hash}', VerifyEmailController::class)
                ->middleware(['signed', 'throttle:6,1'])

    Route::post('email/verification-notification', [EmailVerificationNotificationController::class, 'store'])

    Route::get('confirm-password', [ConfirmablePasswordController::class, 'show'])

    Route::post('confirm-password', [ConfirmablePasswordController::class, 'store']);

    Route::put('password', [PasswordController::class, 'update'])->name('password.update');

    Route::post('logout', [AuthenticatedSessionController::class, 'destroy'])



namespace AppHttpControllersAuth;

use AppHttpControllersController;
use IlluminateAuthEventsPasswordReset;
use IlluminateHttpRedirectResponse;
use IlluminateHttpRequest;
use IlluminateSupportFacadesHash;
use IlluminateSupportFacadesPassword;
use IlluminateSupportStr;
use IlluminateValidationRules;
use IlluminateViewView;

class NewPasswordController extends Controller
     * Display the password reset view.
    public function create(Request $request): View
        return view('auth.reset-password', ['request' => $request]);

     * Handle an incoming new password request.
     * @throws IlluminateValidationValidationException
    public function store(Request $request): RedirectResponse
            'token' => ['required'],
            'email' => ['required', 'email'],
            'password' => ['required', 'confirmed', RulesPassword::defaults()],

        // Here we will attempt to reset the user's password. If it is successful we
        // will update the password on an actual user model and persist it to the
        // database. Otherwise we will parse the error and return the response.
        $status = Password::reset(
            $request->only('email', 'password', 'password_confirmation', 'token'),
            function ($user) use ($request) {
                    'password' => Hash::make($request->password),
                    'remember_token' => Str::random(60),

                event(new PasswordReset($user));

        // If the password was successfully reset, we will redirect the user back to
        // the application's home authenticated view. If there is an error we can
        // redirect them back to where they came from with their error message.
        return $status == Password::PASSWORD_RESET
                    ? redirect()->route('login')->with('status', __($status))
                    : back()->withInput($request->only('email'))
                            ->withErrors(['email' => __($status)]);

Why isn’t this page working as it should?

New contributor

d c is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

Theme wordpress giá rẻ Theme wordpress giá rẻ Thiết kế website