Check Email Validity Before Auth0 Password Change on Custom Login Page

Help
,
1

how to validate if the email doesn’t exist in Auth0 Customize Login Page before calling webAuth.changePassword function.

3

Hi @menas,

Unfortunately, this is by design, and it is currently not possible or recommended to check whether the email exists on the Password Change page, since this could lead to user enumeration attacks.

I hope this helps!

Please let me know if you have any questions.

Thanks,
Rueben

1 Like
4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.