requestPasswordReset email link (“Verify Email” button) redirects to Not Found

[rjcodedev]

New Issue Checklist

• Report security issues confidentially.
• Any contribution is under this license.
• Before posting search existing issues.

Issue Description

When calling Parse.User.requestPasswordReset(...) from the Parse JavaScript SDK, the password reset email is delivered successfully, but the CTA button/link in the email (labeled “Verify Email”) redirects to a Not Found page when clicked.

Working fine with parse-server version : 8.6.2 and below

Steps to reproduce

1. Trigger the password reset request using the Parse JS SDK:
   await Parse.User.requestPasswordReset(username);
2. Open the password reset email you receive.
3. Click the “Verify Email” button/link in the email.
4. Observe that it redirects to a Not Found page.

Actual Outcome

Clicking the email CTA (“Verify Email”) opens a URL that results in Not Found.

Expected Outcome

Clicking the link in the password reset email should open the Parse Server password reset page/route, allowing the user to set a new password successfully.

Environment

Server

• Parse Server version: 9.x.x
• Operating system: Windows
• Local or remote host (AWS, Azure, Google Cloud, Heroku, Digital Ocean, etc): Local

Client

• SDK (iOS, Android, JavaScript, PHP, Unity, etc): Javascript
• SDK version: 8.0.0

Logs

[parse-github-assistant]

🚀 Thanks for opening this issue!

ℹ️ You can help us to fix this issue faster by opening a pull request with a failing test. See our Contribution Guide for how to make a pull request, or read our New Contributor's Guide if this is your first time contributing.

[coderabbitai]

📝 CodeRabbit Plan Mode

Generate an implementation plan and prompts that you can use with your favorite coding agent.

• Create Plan

Examples

• Example 1
• Example 2

---

🔗 Similar Issues

Related Issues

• MFA - Cannot receive SMS token if maxPasswordHistory != 0 #9528
• https://github.com/parse-community/parse-server/issues/9868
• The beforeLogin hook will not be triggered when attempting to log in with an incorrect password. #9614

🔗 Related PRs

#9906 - feat: Add beforePasswordResetRequest hook [merged]

👤 Suggested Assignees

• riccardoch
• evenfle0-web
• tooodooo
• coratgerl

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

[mtrezza]

What is the URL? What's the exact Parse Server version?

[rjcodedev]

@mtrezza

After calling await Parse.User.requestPasswordReset(username);, I was redirected to the following URL when I clicked the “Verify email” button.

I have mounted parse-server on /app instead of /parse

parse-server version : 9.1.1
parse js sdk: 8.0.0