Require User to Re-enter Password

[auth0]

Require User to Re-enter Password

[cocojoe]

11 is now the default for the HLP 😄

[cocojoe]

It sounds like you are possibly using the wrong tool for the job here, re-enter implies they have already been authenticated but are perhaps accessing a secure screen which requires additional validation.

In that case I would look perhaps at something like Touch ID / Face ID to quickly perform this validation inside the app. https://github.com/auth0/auth0.swift#biometric-authentication

[ahmattox]

@cocojoe Makes sense. It is what you're describing, but in this case I don't think that would be appropriate. Verifying with a password is preferred. Happy to give more details if that context is helpful.

[ahmattox]

@cocojoe If this not currently possible, is it something that could be considered? Or can I provide any more details? We were pretty set on Auth0 for a new app, but this is a critical need.

[cocojoe]

@ahmattox as you mentioned you could disable rememberLastLogin Lock options in your Hosted Login Page in the Auth0 Dashboard.

[ahmattox]

That could work. Is the hosted login a feature that will be supported in the future? According to the documentation hosted pages are not supported by Lock v11 and Auth0.js v9.

[cocojoe]

Yes, Lock 11 was released to address a different issue. The hosted login page doesn't need to use it.

Lock v11 is a version of Lock tailored for embedded login in your applications. If you use Auth0's 
Hosted Login Page, do not upgrade to Lock v11. Instead, keep using the latest version of Lock 10. 
The Hosted Login Page remains the simplest and most secure method by which to authenticate 
users for your applications. Lock v11 is designed to make cross-origin authentication work smoothly 
for when you cannot use the Hosted Login Page and need to embed a login in your application.

[ahmattox]

Great! We'll give that a try, and let you know.

For what it's worth I feel this could still be a useful (albeit rare) feature, and seems like something the page already nearly supported. Also the versioning is a little strange if 10 and 11 are both simultaneously supported, but that's no problem.