I came across the same issue to this the thread was years ago and didn’t seem like there’s any change or update.
I wonder if using the unofficial endpoint POST /lo/reset in the custom password reset page is still a good idea in 2022? So far there’s still no official alternative provided by Auth0. One of the employees from Auth0 has mentioned that the endpoint would continue to work. Would that still be the case? If not, what’s the alternative official/suggested way of doing it?
Yes the endpoint is still safe to use. That is for the Classic Universal Login and it is recommended to use the New Universal Login. I found a knowledge article talking about this endpoint.