(FusionAuth 1.41.0) How to Update the Password Reset Functionality for Users that Have Two-Factor On?
-
My issue is very similar to the one encountered in this post:
https://fusionauth.io/community/forum/topic/1720/fusionauth-1-33-0-update-how-to-update-the-password-reset-functionality-for-users-that-have-two-factor-onIn short, I'm trying to change a password for a user that has two factor enabled by doing the flow detailed in the docs. I send a start two factor request where I get a
code
andtwoFactorId
, I send a login request with these fields thus obtaining atrustToken
. But when attempting the change password request I get the following error:{ "generalErrors" : [ { "code" : "[TrustTokenRequired]", "message" : "This request requires a Trust Token. Use the Start Two-Factor API to obtain a Trust Token required to complete this request." } ] }
I even tried the workaround of sending the trust challenge together with the
trustToken
, but still im getting the error. Any ideas? -
@pedroparente You may try need to update the version of FusionAuth. Seems like it could be related to this issue. https://github.com/FusionAuth/fusionauth-issues/issues/1909 which was fixed in 1.43.0.