[Bug]: "Resend welcome email" does not contain link to set initial password #41005 in Nextcloud Hub 26 Winter (33.0.3)

[GentleRV]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

See BUG report #41005
According to this report, it was resolved.
In the latest version it come back

Steps to reproduce

1.Create a new user via the Admin UI (don't set a password, just username and email)
2.User receives an e-mail with "Set your password" link (don't do it)
3/Resend the email with the "three dots" button next to the user entry
4User receives no email at all

Expected behavior

The second E-Mail should be send and not be empty and identical to the first E-Mail

Nextcloud Server version

33

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.3

Web server

Nginx

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Fresh Nextcloud Server install

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

sudo -u www-data php occ config:list system
{
    "system": {
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "cloud.dutondata.com",
            "91.229.62.14",
            "[2001:db8::1]"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "33.0.3.2",
        "overwrite.cli.url": "http:\/\/localhost",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauth": true,
        "mail_smtpport": "994",
        "mail_sendmailmode": "smtp",
        "mail_smtpstreamoptions": {
            "ssl": {
                "allow_self_signed": false,
                "verify_peer": true,
                "verify_peer_name": true
            }
        }
    }
}

List of activated Apps

sudo -u www-data php occ app:list
Enabled:
  - activity: 6.0.0
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contactsinteraction: 1.14.1
  - dashboard: 7.13.0
  - dav: 1.36.0
  - federatedfilesharing: 1.23.0
  - federation: 1.23.0
  - files: 2.5.0
  - files_downloadlimit: 5.1.0
  - files_pdfviewer: 6.0.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - files_versions: 1.26.0
  - firstrunwizard: 6.0.0
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - nextcloud_announcements: 5.0.0
  - notifications: 6.0.0
  - oauth2: 1.21.0
  - password_policy: 5.0.0
  - photos: 6.0.0
  - privacy: 5.0.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0
  - related_resources: 4.0.0
  - serverinfo: 5.0.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - support: 5.0.0
  - survey_client: 5.0.0
  - systemtags: 1.23.0
  - text: 7.0.1
  - theming: 2.8.0
  - twofactor_backupcodes: 1.22.0
  - twofactor_totp: 15.0.0
  - updatenotification: 1.23.0
  - user_status: 1.13.0
  - viewer: 6.0.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflowengine: 2.15.0
Disabled:
  - admin_audit: 1.23.0
  - encryption: 2.21.0
  - files_external: 1.25.1
  - suspicious_login: 11.0.0
  - testing: 1.23.0
  - twofactor_nextcloud_notification: 7.0.0
  - user_ldap: 1.24.0

Nextcloud Signing status

Nextcloud Logs

Additional info

No response

[invario]

My findings:
I created a new user, blank password, valid email. No welcome email gets sent at all. I then pressed the three dots and chose "Resend welcome email" and immediately received a welcome email BUT the email received was like so:

In order to login, I had to follow the link (which is just a link to my NC home page) and select the "Forgot password" link. So I assume this is the same, or at the very least related somehow.

edit: Update: When I click the "resend welcome email" button a second time, only then does the proper email get sent:

[GentleRV]

So it is still a bug that need to be resolved

[Luc1282]

I'm unclear why this issue requires community triage, as it appears to be a fundamental functionality that is currently broken. Combined with the issue reported here (#59329), these bugs create significant friction during the onboarding process. I hope both can be prioritized for a fix soon.

[pabzm]

I can't reproduce that on Nextcloud 33.0.3. Can you please try to reproduce it with loglevel set to 0 (debug)? Then the logs will contain related lines, which could help to figure out what's wrong.

[invario]

Can't paste the log directly here due to it being too large. Attached as files instead.

Debug log taken from when I generate a new user with blank password and valid email address:
newuser.log

Debug log taken from when I click the "resend welcome email" link on the above new user:
resend_email.log

Also, now I am unable to get the proper welcome email with the "set your password" link even when I click the "resend welcome email" a second time, so I'm not sure why that is.

Also something I noted, and I'm not sure if this is normal. Line 11 in the "newuser.log" above where I redacted the email. It only shows the email partially '*REDACTED*@DOMAIN... which is odd to me, but maybe intentional. If my email were someone@yahoo.com it is showing in the log as someone@yahoo... but the ... at the end makes me think that it was intentionally truncated.