I have a community and inside, I have a form to allow to the user to change his password.
To do that, the user has to enter his old password, the new password and the confirmation of the new password (usual).
I would like to know if there is a way to check that the username and the old password are valid.
I read this article (https://developer.secure.force.com/cookbook/recipe/verifying-password) but my problem is that the community user doesn't have a security token so it doesn't work (the profile has the permission "API Enabled").
Do you know if there is a way to test the username and the password via API for a community user please?
I can't user the standard feature because my client want something else.