Azure B2C email auth: should I be able to sign in without a password or it is a bug?
The flow includes sign-in, sign out and a few other actions.
it is reproducible with https://aadb2cplayground.azurewebsites.net
We consider this to be a major security issue.