Can a user automatically authenticate after password reset?

[adam.butler]

We want to invite users to fill out details in our system as painlessly as possible.

I am thinking to create auth0 users and email them to complete sign-up. I read though documentation here and it looks like there is an extra step for the user.

First they must set their password. Next they need to authenticate.

We know the user is who they say when they set the password because they followed the link in the email. Is there some way we could just authenticate them automatically? ie. they set their password and we programmatically authenticate them without them having to type it again?

If it makes any difference we use withAuthenticationRequired from auth0-react

[tyf]

Hey there @adam.butler welcome to the community!

@adam.butler

We know the user is who they say when they set the password because they followed the link in the email. Is there some way we could just authenticate them automatically? ie. they set their password and we programmatically authenticate them without them having to type it again?

Unfortunately, there isn’t a way to carry out an automatic login following password reset currently but they can be redirected straight to it if you aren’t already doing that. The following thread goes into this in a bit more detail:

Redirect / result_url in change password ticket not working

Hi, I’m struggling with the user redirect after a password reset on the hosted page. It looks as if result_url would be completely ignored. Here’s what I do: I create a password reset ticket (handing over user_id and result_url). All works fine, page opens, password is changed, success message shown. Result_url is 1:1 as in the allowed callback urls of both: Enduser app and M2M app. It always just stays on the the changed password success page. Any hint? Warm regards, Sebastian

I did a quick search in our feedback section and was surprised to not see anything related to this - It might be worth adding it yourself if you’ve got a minute! Our product team monitors these pretty closely for community engagement.