<div dir="ltr">No, with the admin endpoints you can't retrieve the password, nor can you expect an admin to know the existing password so it shouldn't verify it either.</div><div class="gmail_extra"><br><div class="gmail_quote">On 21 March 2016 at 14:35, Adrian Matei <span dir="ltr"><<a href="mailto:adrianmatei@gmail.com" target="_blank">adrianmatei@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi everyone,<div><br>Use case: "reset user password via REST admin API - <span style="color:rgba(0,0,0,0.901961);font-family:'Droid Sans Mono','DejaVu Sans Mono',monospace;font-size:0.90625em;line-height:1.45;white-space:pre-wrap;background-color:rgb(247,247,248)">PUT /admin/realms/{realm}/users/{id}/reset-password</span>" </div><div><br></div><div>Is there a possibility to verify the user's old password before changing it, as is the case via the Account app?</div><div><br></div><div>Thanks,</div><div>Adrian </div></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>