On the email password recipe, is there support for allowing an admin to set a temporary password and forcing the user to update password on next login? We have this use case because some users struggle with the reset password flow due to aggressive spam filters etc. I guess setting the password is easy enough from the api, but recording the fact that the user has to reset password and rejecting all other api requests until it’s done would be something we have to enforce ourselves ?

hey @pitchash