Repository navigation
How to Enable Password Update in Mobile App Without Custom Implementation? #37006
Unanswered
alikarami010
asked this question in
Q&A
Replies: 1 comment
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi Keycloak Devs,
I’m integrating Keycloak authentication into a mobile app, and I need a secure way to allow users to update their passwords directly within the app. However, I want to avoid implementing a custom password update API for security reasons.
What I’ve Tried So Far:
1- Embedding the Keycloak Account Management page (/account/#/password) in an iFrame/WebView – Doesn’t work due to security restrictions.
2- Redirecting users to the Account Management page (/realms/{realm}/account/) – Users have to log in again, which disrupts the experience.
3- Using the reset credentials endpoint (/login-actions/reset-credentials) – Not ideal, as it’s meant for forgotten passwords, not logged-in users.
Ideal Solution:
Questions:
Any guidance or best practices would be greatly appreciated! Thanks in advance.
This message is clear, concise, and technical, ensuring you get meaningful responses from the Keycloak developers.
Let me know if you want me to tweak anything before you post it!
All reactions