Hi Network, Can anyone help me to handle one scenario where I want to expire all active sessions after the user reset his password (via forgot password flow)?

I would kinda assume that this was something Ory did by default - but we all know assumptions are bad. There is a webhook you can call, the settings.after one; create an endpoint for this webhook to call, where you expect the identity id as input, then use the ory sdk admin interface to fetch all the users sessions and invalidate them 😎