Hi is it possible to disable the reset password and signup and do this via APIs only?

hey @anan7

Hey @rp_st . Yeah I want only someone with the certain to be able to do this through custom apis. So basically I’m building an internal application for a client. There are different departments like hr and technical.. so I want to give access to hr admins only to create a new employee for the company and help them reset their password if at all they forget it

Got it. Which recipe are you using of ours?

I'm using the email password login but we'll be changing it to the username and password flow based on the documentation

I see. So changing the disabling sign up docs for this can be found here: https://supertokens.com/docs/emailpassword/common-customizations/disable-sign-up/overview You can disable the password reset API that is consumer facing by following these docs: https://supertokens.com/docs/emailpassword/advanced-customizations/apis-override/disabling And then finally, you can create your own API which uses our backend SDK functions to allow admins to reset user's password.

perfect and thanks for the really quick response. Appreciate it.