Haven’t found any solutions yet. It looks like it requires manual implementation by the OpenAI team.
I have to admit, the instructions are a little vague here but it sounds like on Auth0’s end, email accounts and passwords can be stored in a different account database than social logins.
I asked ChatGPT and this is the answer it came up with (might actually work, but might not…), for OpenAI website developers:
When a user logs in with a social provider like Google using Auth0, you can still enable them to reset their password or add a password to their account by creating a secondary database connection. This way, users can have both social and email/password logins. Here’s a step-by-step process to implement this functionality:
- Create a new database connection:
- Go to the Auth0 Dashboard: https://manage.auth0.com/
- Navigate to “Connections” and then “Database.”
- Click on “Create DB Connection” and give it a name, e.g., “secondary-connection.”
- Configure the database settings as per your requirements.
- Update your application settings:
- In the Auth0 Dashboard, navigate to “Applications” and select your application.
- Under the “Connections” tab, enable both the social provider (e.g., Google) and the “secondary-connection” you created in step 1.
- Implement user-initiated account linking:
- Follow the Auth0 documentation on client-side implementation of user-initiated account linking: User-Initiated Account Linking: Client-Side Implementation
- This will allow users to link their social login with a password-based account.
- Add a “Reset Password” or “Add Password” option to your website:
- Create a UI element (e.g., a button or link) for users to reset their password or add a password.
- When a user clicks the “Reset Password” or “Add Password” option, redirect them to the Auth0-hosted password reset/change page for the “secondary-connection.”
- To do this, construct a URL like
https://${your_domain}/dbconnections/change_password?email=${user_email}&connection=${connection_name}&client_id=${client_id}- Replace
${your_domain},${user_email},${connection_name}, and${client_id}with your actual values.- Make sure the user is logged in with a social provider before redirecting them to this URL, so you can pre-fill their email address.
- Handle the password reset/add flow:
- Auth0 will send the user an email with a link to reset or add their password.
- Once the user completes the process, their social and email/password accounts will be linked in Auth0, and they can log in using either method.
By following these steps, users who initially sign in with a social login will be able to reset their password or add a password to their account using Auth0.