prefill option is lost after reset password

[larsthorup]

The prefill option does not carry through the reset password flow, so after requesting a password reset, Auth0 redirects back to the login screen but now with an empty email field. I would expect email to still be filled out, to minimize the chance of typos in the email field during login (which is why we are using prefill in the first place). See the screen shots below for details.

The issue can be reproduced with the HTML code below. Note that the clientId / domain combination that I use is configured for "Username-Password-Authentication" connection.

Browser: Seen in Chrome
OS: Seen on Windows

<script src="https://cdn.auth0.com/js/lock/10.11.0/lock.min.js"></script>
<script>
var clientId = '(my clientId)';
var domain = '(my domain)';
var options = {
  allowedConnections: [
    'Username-Password-Authentication'
  ],
  prefill: {
    email: '[email protected]'
  }
};
var lock = new Auth0Lock(clientId, domain, options);
lock.show();
</script>

[luisrudge]

I just opened a PR to fix this. It won't use the prefill value. It will use the actual email the user submitted. So, if you have prefill: '[email protected]' and the user changes the email input to [email protected], it will keep [email protected] when it goes back to the login page.

[larsthorup]

@luisrudge Thank you! That makes perfect sense. Looking forward to try it out soon.

[luisrudge]

This will be in the next release on Monday, if everything goes according to plan. 🎉

[nlake44]

@larsthorup Did this fix work for you? I'm seeing that the prefill option is only filling in the forgot password email and not the login email for version 10.16.0.

[larsthorup]

@nlake44 I am not actively using this feature at the moment, so I don't know.

[luisrudge]

@nlake44 this is working. PLease open another issue with a repro project if it's not working for you.

[nlake44]

@luisrudge The prefill option does what you're showing there. But from my understanding this issue was to prefill the email field upon sign in after redirect from the forgot password flow.

[luisrudge]

@nlake44 it also does that:

[nlake44]

@luisrudge Thanks for the quick response. I meant coming from the email redirect after the user has changed their password.

[luisrudge]

Ah, right. Yeah, that is not supported 😭

[nlake44]

Any suggestions on how to make it happen?

[luisrudge]

Maybe if you edit your email template and add some info (probably the email) in the redirect link, then in your page you can check if the link exists in the url, if it exists, you add it to the prefill option. It's a long shot, but might work