Hey everyone, I'm currently investigating Ory as an authentication solution for our project, and I haven't found information on how to implement some of the flows. 1. How can I request a user to verify their email before changing it? 2. Is it possible to ask the user to enter their old password when setting a new one? If you have experience working with this, could you please share it with me? Thank you!

i think the flow in the diagram here covers what you're asking: https://www.ory.sh/docs/kratos/self-service/flows/user-settings

Thank you so much, it helped me to set up the password flow. But I still have a problem with changing email. After you log in to the system, you have permission to change the email. However, if you do so and then log out, you won't be able to log in again. (This issue occurs if the user enters an incorrect email address and you only require verified email addresses to log in) Have you ever solved this problem at some point?

I have not run into that issue yet

Maybe I missed something, but it seems like there's an issue on the Ory side. I've recorded a short video that shows this problem. (In case I want to allow users to log in only with verified emails, this could pose a problem)

hmm, yeah so its a privileged session (recently got a fresh session, i.e. not timed out),, so it can change email address which is an identifier at will without refreshing token.. same as my app. I'm self hosted. the main problem is that it changed without a verification required....

Oh, thanks for your input. I didn't see these GitHub issues yet. I think it will be easier to just disable the ability to change email for user at this point 🙂

exactly my thoughts 😄

Okay, I will notify you if I find anything