How to Prevent Double Email Issues with FusionAuth's Forgot Password API

[wesley]

We are using the /api/user/forgot-password API for password resets, with sendForgotPasswordEmail set to false since we send our own email. However, users are now receiving two emails: our custom email and a password reset email from FusionAuth using our template. This issue occurs only in our pre-live and production environments, not in the local Dockerized version. What could be causing this?

[wesley]

This issue may occur if the Forgot Password email template is still enabled in FusionAuth. To resolve this:

• Disable the Forgot Password email template at the tenant level:
  Navigate to Tenant > Edit Tenant > Email tab > Template Settings.
  Set the Forgot Password template to Feature Disabled.

• Check the application-specific settings:
  If you have an application-specific template set up, ensure the Forgot Password template is also disabled under the Application settings.

• Verify API configuration in the PHP client (if applicable):
  If you’re using the PHP client, ensure sendForgotPasswordEmail is explicitly set to "false" (as a string with quotes), not just false (boolean). This ensures the value is passed correctly.
  These steps should prevent FusionAuth from sending its own Forgot Password email when the API is called, resolving the double-email issue.