Hello if an user change his password all of his refresh tokens revoked. to better user experience not forcing relogin in current using device the https://fusionauth.io/docs/v1/tech/apis/users#change-a-users-password gives one time password to relogin in server side to access new refresh and access tokens without notifying user that's fine non mfa enabled users. If two factor authentication enabled user change his password then server side relogin with one time password to access new refresh and access tokens gives status 242 require Complete Two Factor Authentication how to bypass this step without totp

I misunderstood there are two api for

• One for verify application level email verify by
  https://fusionauth.io/docs/v1/tech/apis/registrations#verify-a-user-registration

• Another for verify tenet level email verify api
  https://fusionauth.io/docs/v1/tech/apis/users#verify-a-users-email

@dan
Iam tested also in 1.18.5 same 404 error message

@dan
Im using fusionauth 1.17.5

I am used api to create users when i need to verify user email by api
https://fusionauth.io/docs/v1/tech/apis/registrations#verify-a-user-registration
not working.
When application level verify email working, but verify tenent user with
http://localhost:9011/api/user/verify-registration/si-R7tOTG5eFtiK1GUKJ4EOUUKIWah7sNHPvawJ8wYQ
gives 404 code. i set X-FusionAuth-TenantId header also
this is screen shot
https://drive.google.com/file/d/1bpmv0L5zeDDixPe4hXcnX0ScJVxgsU3E/view?usp=sharing

I am using api to reset password from the documentation
https://fusionauth.io/docs/v1/tech/apis/users#start-forgot-password-workflow from this i need to send reset id and new password after that it show success or fail if resetid expiry. Is any way to check rest id is valid or not without showing reset form