(FusionAuth 1.41.0) How to Update the Password Reset Functionality for Users that Have Two-Factor On?

pedroparente

My issue is very similar to the one encountered in this post:
https://fusionauth.io/community/forum/topic/1720/fusionauth-1-33-0-update-how-to-update-the-password-reset-functionality-for-users-that-have-two-factor-on

In short, I'm trying to change a password for a user that has two factor enabled by doing the flow detailed in the docs. I send a start two factor request where I get a code and twoFactorId, I send a login request with these fields thus obtaining a trustToken. But when attempting the change password request I get the following error:

{
  "generalErrors" : [ {
    "code" : "[TrustTokenRequired]",
    "message" : "This request requires a Trust Token. Use the Start Two-Factor API to obtain a Trust Token required to complete this request."
  } ]
}

I even tried the workaround of sending the trust challenge together with the trustToken, but still im getting the error. Any ideas?

mark.robustelli

@pedroparente You may try need to update the version of FusionAuth. Seems like it could be related to this issue. https://github.com/FusionAuth/fusionauth-issues/issues/1909 which was fixed in 1.43.0.