I’m adding support for user self-administration via our existing API. I’m not too worried about a user updating their username or email (even email is shaky), but I’m unclear to how to safely allow a user to change their password or delete their account. Yes, they need a valid API token, but that’s …

Hi Jesse, Why do you say a valid API token is not hard for a hacker to acquire? That sounds like a problem to me. You should protect your M2M credentials just like regular credentials. For changing user info, the user should be authorized, perhaps even step-up auth (reentering password or MFA), an…

Safely delete a user via Management API

Get Help

system Closed June 2, 2020, 3:25pm 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Secure flow to let user delete their own account Get Help management-api , users	6	181	November 12, 2024
How to allow users to only update/delete their accounts through the management api Get Help management-api , users	2	1278	February 22, 2023
Changing User Password with Resource Owner Password Flow – Is It Safe or Should? Get Help management-api , grants	3	20	April 29, 2025
Management API User Authentication Get Help	2	3159	August 26, 2019
Handling password by Auth0 Get Help management-api , users	2	384	January 3, 2024

Safely delete a user via Management API

Related topics