I am writing a custom embedded login page(Not universal login) and would like to have one time codes sent as email and as sms when a user has forgotten their password. Once they get the code they will need to enter it and then will be able to reset their password through the custom UI
Question: Should I use passwordless to achieve this by connecting Twilio and mandrill and repurposing the one time code from passwordless to verify the user and then let them reset their password?
Or is there a better approach?