Allow user to change password

[aneilbaboo]

Looks like Auth0 provides a way. Let's replace the MECFS Report link in the hamburger menu with "Profile", which links to the change password page. "Profile" should only appear when logged in.

https://auth0.com/docs/hosted-pages/password-reset

[gcv]

@aneilbaboo: As far as I can tell, Auth0 does not provide a password change page. The one you linked above is for customizing the password reset page, which can only be accessed from the login screen.

See https://community.auth0.com/t/profile-and-change-password/6542 — judging by the lack of a response, the default "change password" envisioned by Auth0 is to have the user log out and use the reset password flow.

See also https://auth0.com/docs/connections/database/password-change, which confirms that password changes are supported only through the reset flow, or through the management API.

If we want to support a conventional "enter old password, enter the new password, confirm new password" flow, we need to design and implement it ourselves (not trivially: see https://community.auth0.com/t/how-do-i-change-password-with-old-password/7910).

[aneilbaboo]

Auth0 has a way of reseting the password from the login/signup, but the user must logout. Good enough for beta.

For Public Launch, we need to

• Design User profile UX & graphic design
• Implement lambdas to talk to Auth0 API and actually change the password & so on