Ehy guys, in the settings flow can I “force” the u...
# ory-network
c
Ehy guys, in the settings flow can I “force” the user to have to send their password to be able to change any trails or the same password? Currently, in the settings flow, the user can change any value simply by sending a request with the new value, what I want to do is that the user is forced to send their current password in said request as well.
s
have a look at https://www.ory.sh/docs/kratos/session-management/overview#privileged-sessions you could use that in combination with
metadata_public
to write a custom update handler that enforces the privileged session state