Post Change Password

The post-change-password trigger runs after a Database connection user resets or changes their password. Use this trigger to email the user after a password change or to notify another system that the user’s password has changed, so that other sessions not managed by Auth0 can be revoked. Multiple Actions can be bound to this trigger, and the Actions will run in order.

Actions in this flow are non-blocking (asynchronous): the Auth0 pipeline continues to run without waiting for the Action to finish, so the Action’s outcome does not affect the Auth0 transaction.

References

Event object: Provides contextual information about the user and the connection on which the password was changed.
API object: Provides methods for changing the behavior of the flow.

Common use cases

Invalidate the user’s session in another system

A post-change-password Action can be used to invalidate the user’s session in another system:

const axios = require("axios");

/**
 * @param {Event} event - Details about user whose password was changed.
 */
exports.onExecutePostChangePassword = async (event) => {
  axios.post("https://my-api.exampleco.com/revoke-session", { params: { email: event.user.email }});
};

To use an npm library like axios, you must add the library to the Action as a dependency. To learn more, read the “Add a dependency” section in Write Your First Action.

Send an email after the user changes their password

A post-change-password Action can be used to notify the user by email that their password was changed:

const axios = require("axios");

/**
 * @param {Event} event - Details about user whose password was changed.
 */
exports.onExecutePostChangePassword = async (event) => {
  try {
    // https://sendgrid.api-docs.io/v3.0/mail-send
    axios.post('https://api.sendgrid.com/v3/mail/send',
      {
        personalizations: [{
          to: [{ email: event.user.email }]
        }],
        from: { email: 'admin@exampleco.com' },
        subject: 'Your password was changed',
        content: [{
          type: 'text/plain',
          value: 'The password for your ' + event.connection.name + ' account ' + event.user.email + ' was recently changed.'
        }]
      },
      {
        headers: {
          'Authorization': 'Bearer ' + event.secrets.SENDGRID_API_KEY
        },
      }
    );
  } catch (err) {
    console.log(`Error sending email to ${event.user.email}:`, err.message)
  }
};

For this Action to execute properly, the Action must contain a secret named SENDGRID_API_KEY and must have a dependency on the axios npm package.

Password Reset Post Challenge

Post Login

⌘I

Brand Customization

Code Customization

Third-Party Customization

Post Change Password

References

Common use cases

Invalidate the user’s session in another system

Send an email after the user changes their password

​References

​Common use cases

​Invalidate the user’s session in another system

​Send an email after the user changes their password

References

Common use cases

Invalidate the user’s session in another system

Send an email after the user changes their password