The user’s last password reset date is available in the metadata, but accessing it can be tricky. This is where Auth0 Actions come in handy.

Atomic Object is a software consultancy specializing in custom software development and product design. Readers can learn about software development methodologies, user-centered design principles, and agile practices. With case studies, blog posts, and technical insights, Atomic Object provides  guidance and expertise for building innovative and user-friendly software products.

Atomic Spin

Auth0 Actions provide a way to add custom claims to ID tokens during the login flow, eliminating the need for additional API calls. By creating a post-login action in Node.js, developers can inject user metadata like last_password_reset directly into tokens. This approach is particularly useful for implementing features like enforcing 90-day password resets while reducing machine-to-machine token usage and improving application performance.

Add Custom Claims Using Auth0 Actions