Hey there,
For our use case, we want to protect certain profile updates within our app, like an email change, with an additional request for the user to type in their password first. What's the best way to implement this.
At this point the user is already logged in using Oauth code grant flow. should call the login API? or is there a better way?

Thanks

General question:
We have a single application 'my-app-dev' in FusionAuth, our users are registered there. we use the OAuth authorization code grant flow to login.
When we developers work locally, our web app is available in localhost, from there we can login by redirecting to
https://fusionauth.io/oauth2/authorize?client_id={app_id}&redirect_uri=http://localhost/oauth-callback&response_type=code&scope=offline_access&state=aaabbbccc this works fine.
Now we have a shared test environment in a different domain, to login from there is very similar, we redirect to
https://fusionauth.io/oauth2/authorize?client_id={app_id}&redirect_uri=http://test-web-app.mydomain.com/oauth-callback&response_type=code&scope=offline_access&state=aaabbbccc

Now, when we have both localhost and test-web-app.mydomain.com open in the browser and we login into the former then we just need to refresh the latter and we appear logged in automatically.
While this does not seem unexpected, is undesirable for us at the moment. Is there a way to support independent login for our two domains without creating a new application?

Thanks

I have enabled the "Self service registration" feature for my app, meaning Users have a button to create a new account in the login form. Clicking this button redirects to a different URL where the registration form is shown, the URL looks like

/oauth2/register?tenantId=xxxyyyzzz&client_id=aaabbbcccnonce=&pendingIdPLinkId=&redirect_uri=http%3A%2F%2Flocalhost%2Fmy-callback&response_mode=&response_type=code&scope=&state=&metaData...

Can I safely put a "Sign up" button in my app that points to this registration form URL, is there some documentation of what params are supported?

Thanks