The auth service currently only support login & registration. It does not support any verification, or forgot-passwords flow. This was by design to avoid the complexity of setting up Cognito and/or SES. We should consider adding this in the future, perhaps as a opt-in feature.