Can password reset also serve to verify a user's email address?

Help
, , , ,
1

Hey Auth0 community, variations on this question have been asked before, but I don’t see any that are exactly this:

“It would be very convenient if a password reset could also act as an email verification. Can this be accomplished now? (pretty sure not), and if not, can it be added as an Auth0 feature?”

Today a user can sign up (with an email account), not yet verify the email of their new email-based account, then successfully reset their password, still having “email_verified=false” in their profile. Arguably they cannot have reset their password without having (in effect) verified their email address.

In our system we prevent people from ‘logging in’ until they have verified their email, so in our case a user can reset their password, and then 5 seconds later (try to) log in, only to see an error message telling them to please verify their account.

2

As it has been more than a few months since this topic was opened, and there has been no reply or further information provided as to the existence of the issue, we are closing this topic. Please don’t hesitate to create a new topic if this issue is still present, we would be happy to work with you to help find a resolution.