Spend a Reset code and set the new password. This does not sign the browser in: sign in with the new password afterwards.
Ask the runtime to mail a password reset link.
Resolves the same way whether or not the email is registered, so the reply cannot be used to discover which addresses have accounts.
Change the signed-in email credential after verifying its current password.
Optionalcredentials: unknownOptionalcredentials: unknownReport which account a Reset code belongs to, so a reset page can name it. Does not spend the code, so a mail scanner following the link first does not break it for the recipient.
Browser auth API.
The SDK stores the Sporades session token in localStorage and sends it over the same-origin client transport. Provider SDKs are not exposed to app code.