We want our system to know the verification status of our users. We are currently using log stream events, however this appears to be flawed in that you need to know implementation details about the full Auth0 API in order to do this (i.e. there is no one easy event to subscribe to for this, some unexpected scenarios can update this field).
We just got bitten by not knowing that in addition to the verify email link, and changes via the API, you can ALSO verify an email by responding to a password reset. And potentially from other emails too. We are also worried that more scenarios like this could be introduced without us knowing that we need to add monitoring for it to keep our application in sync.
We don’t want to play whack-a-mole with scenarios, we just want to subscribe to user events and know every time the user has changed, so that we can update this field in our application.
I see that the new event stream has user events (user.created, user.updated, user.deleted). Are these all-encompassing? If I subscribe to these three events, can I feel confident that it is not possible for this field to update without our system being notified and syncing?
I saw this was asked in the past, but that topic is from 2019 and referring to a webhook extension that I cannot find, so I assume it’s not valid anymore.