How to implement "Type your password to make this change" feature

[Luis B]

Hey there,
For our use case, we want to protect certain profile updates within our app, like an email change, with an additional request for the user to type in their password first. What's the best way to implement this.
At this point the user is already logged in using Oauth code grant flow. should call the login API? or is there a better way?

Thanks

[dan]

Hi @luis-b !

I would use step up auth for this situation.

It is documented here: https://fusionauth.io/docs/v1/tech/guides/multi-factor-authentication#step-up-auth