Security
Your session and how you sign in.
This session
How you sign in
An outside identity provider, not this product
Your password goes from the browser to the identity provider and never through Kenward. What comes back is a token, and the backend trusts it only after verifying it against that provider's public keys. Nothing here can read or reset it, which is the point.
Change your password
not builtChanging a password means calling the sign in service from this app, which is a write nobody has wired yet. Your account was created on this product's own sign up page, so until that write exists there is nowhere to change it.
Sessions on other devices
not builtListing every device signed into your account, and revoking one of them, needs the identity provider's admin side. This product deliberately holds no key that reaches it, so the list cannot be faked here and the sign out above ends only this one.