My issue is very similar to the one encountered in this post:
https://fusionauth.io/community/forum/topic/1720/fusionauth-1-33-0-update-how-to-update-the-password-reset-functionality-for-users-that-have-two-factor-on

In short, I'm trying to change a password for a user that has two factor enabled by doing the flow detailed in the docs. I send a start two factor request where I get a code and twoFactorId, I send a login request with these fields thus obtaining a trustToken. But when attempting the change password request I get the following error:

{
  "generalErrors" : [ {
    "code" : "[TrustTokenRequired]",
    "message" : "This request requires a Trust Token. Use the Start Two-Factor API to obtain a Trust Token required to complete this request."
  } ]
}

I even tried the workaround of sending the trust challenge together with the trustToken, but still im getting the error. Any ideas?

I am attempting to integrate two factor authentication into a project, but I'm not sure what to do when updating the change password feature. My objective is for the existing flow to appear identical to what it was without two factor, with no extra steps for the user if they have two factor enabled. That means not sending a two factor code.

My understanding is that to change a password when 2factor is enabled one must also send a trust token, which is generated when completing a two factor authentication, which in turn can only be completed with a code sent to the user.

My question is, is there a way to change the users password without sending them a code while two factor is enabled?