Summary

When users with spaces in their usernames are sync'd into Confluence from an external directory (e.g. Active Directory), they are unable to reset their password due to the following error:

The reset password token you have provided is no longer valid.

How to replicate

1. Set up a mail server with Confluence..
2. Sync a user directory containing a user whose username is in the following format: "FirstName LastName", whereby there is a space that separates the two names. For example, "Kent ng".
3. Logout and click on "Forgot your password?" on the login page.
4. Enter your username or e-mail address into the field and click on "Send it to me".
5. Check your e-mail for an e-mail from Confluence and click on the "Reset Password" button in the e-mail.
6. Enter your new password twice and click on "Reset".

Expected results

The password should be successfully changed.

Actual results

Workaround

Change the AD to read and write and let the admin to reset the password for the user from Confluence Users page or reset the password from the external AD.