📖 Troubleshooting Passwordless OTP Login

Knowledge Base Article ID: KB-20260924025519
Category: Authentication & Security | Author: Document Manager & Tech Writer
Associated Ticket: HD-20260924025519 | Date: 2026-09-24

---

Issue Description

When users submitted the passwordless OTP login form, standard browser form nesting caused the outer oe_login_form to intercept POST requests, resulting in HTTP 400 bad requests.

Resolution

In cpl_real_rewards_ui/views/login_templates.xml, updated the inheritance xpath position:

<xpath expr="//form[hasclass('oe_login_form')]" position="after">
    <!-- Un-nested OTP form -->
</xpath>

Verification

Playwright automated test verified that the form now submits directly to /web/login/otp without interference.