This question has been asked before here but not answered as far as I can tell. I want a “Change password” link on the user’s profile page on my app, where the user can change their password without going through the reset-by-email workflow from the login screen. This is pretty much a typical conven…

Thanks for the response. You will be unable to reach that management API endpoint in a single page application. This is due to the insecure nature of a SPA. We recommend that all calls to the management API be done via a non-interactive client (your backend). We have management api libraries for mo…

Hi @wwarby ! Welcome to the Auth0 Community. This can be accomplished using the the Management API /api/v2/tickets/password-change endpoint. This endpoint responds with a password change URL. Let me know if you have any questions about it or if this doesn’t solve your problem. [image] Aut…

Thanks dan, I gave that a quick test and I can get a valid response back and change a password. However, when I tried to call that API in the context of the user authenticated to my app, I get a 401 response and I see that when assigning roles to users, the option togrant permissions on the manageme…

Were you able to get any requests to the management API working from your application? What framework are you using to make requests to the management API? And if possible could you post the code you use to get the access token (please omit sensitive data i.e. domain, client ID, client secret etc.) …

Hi Dan, So I’m using Angular, and my code is tracking fairly closely to the Angular QuickStart from Auth0. It’s using the NPM package auth0-js and calling something like this (simplified for clarity) but nothing important lost here): // Normal page load: auth0 = new WebAuth({ clientID: environ…

Thanks Dan, I kinda figured that’s where this was headed but I appreciate the clear response. It’s a .NET core app on the back end and I’m pretty sure I know what I need to do to proxy the request through that. I get why it is the way it is because the change password link has to be generated with a…

@wwarby Thanks for the constructive criticism as well as the positive feedback! The hoops we jump through for security’s sake! Here is the relevant SDK: Documentation Also, getting community feedback is extremely important, and most effective if submitted here . I would be happy to submit something…

Okay, I’m 99% of the way there with this now - generating the URL server-side using a machine-to-machine connection and redirecting the user to it client-side, they can reset their password. The only snag is it doesn’t redirect them back to the application after they do - instead they just get a “yo…

Are you getting any errors in the console or anywhere else? I am trying to replicate the issue but everything is working okay over here. If you want to record a HAR file I can take a look at that. [image] Generate and Analyze HAR Files Learn how to troubleshoot with HAR files and steps …

I thought I knew what the problem was. From https://auth0.com/docs/universal-login/default-login-url: In certain cases (described below), Auth0 could need to redirect back to the application’s login initiation endpoint, using OIDC Third Party Initiated Login … When the password reset flow is compl…

Allow the user to change their password from a profile screen

Get Help

Topic		Replies	Views
Ability to generate password reset URL? Archived content password-reset , password , invite-only	3	8599	March 2, 2018
Login page for my API users Get Help	10	3405	November 15, 2019
Update user profile and change password Get Help management-api , users	2	453	May 31, 2024
Creating a custom password change page Get Help user-management , user-password-management	2	79	April 8, 2025
Question of bast practice of change password Get Help user-management , user-password-management	2	949	May 30, 2023

Allow the user to change their password from a profile screen

Related topics