Validate username and password without token

[tyf]

Hey there @monika.prakash, welcome back!

@monika.prakash

How can I check the password entered is correct with out creating token again ?

Is there any other api for this?

Given Auth0 doesn’t expose the user’s password, there may not be any way around this other than doing something like outlined in this post:

Change password validation

Hi @alex.moss2516, Found this community thread while I was searching for something else. While Auth0 does not expose the user’s password, you may use the Resource Owner Password Grant to verify the user’s password for sensitive tasks. The actual usage of the password grant is to obtain an access token for the user. However, you can to send the incoming user’s password to the /oauth/token endpoint and if you get back a token, that means the entered password is correct. Please note that Resourc…

Hope this helps!