diff --git a/pkg/webtests/user_password_reset_test.go b/pkg/webtests/user_password_reset_test.go index 3c4b413fb..58e8b1bcd 100644 --- a/pkg/webtests/user_password_reset_test.go +++ b/pkg/webtests/user_password_reset_test.go @@ -65,4 +65,12 @@ func TestUserPasswordReset(t *testing.T) { require.Error(t, err) assert.Equal(t, http.StatusPreconditionFailed, getHTTPErrorCode(err)) }) + t.Run("Disabled user cannot reset password", func(t *testing.T) { + _, err := newTestRequest(t, http.MethodPost, apiv1.UserResetPassword, `{ + "new_password": "12345678", + "token": "disableduserpasswordresettoken" +}`, nil, nil) + require.Error(t, err) + assertHandlerErrorCode(t, err, user.ErrCodeAccountDisabled) + }) }