Auth0 "Password Rotation" Action incorrect redirect with expired password

Hi @udib,

Thanks for the reply.

I do not mean the ‘Customize Login Page’ section. I mean passing the prompt=login in your login request.

You will need to adjust your authorization parameters for your login call to include 'prompt=login`. This will depend on the SDK you are using. Note that this will always force your users to re-authenticate.

One other possibility would be to have a mechanism to have these users log out so that they can re-authenticate. Or having the session be as short-lived as possible.

Thanks,
Rueben