How to bypass sending email in Auth0 change password flow with old password confirmation?

Question

I want to build a custom page for change password with auth0. The flow must be directly changing password without sending an email which has change password screen link. And there should be provision to confirm old password.

I have tried with the following code in Angular 2

auth0.changePassword({
connection:'db-conn',
username:'[email protected]'
password:'blahblah'
},() => {});

But this is throwing an error Password not allowed as it is deprecated in latest version.

Is there any other way to implement this?or any other api to call?

Answer 1

Please find below a link to a Github Repository with a working webtask sample that demonstrates how you can achieve password reset in the way you described.

Requires the user to verify their old password (by supplying their email (username) and existing password, and the new password / repeat new password combination. Finally, if verification is successful then updates their password without issuing a password reset email confirmation.

auth0-change-password-custom-verification