UPDATE_PASSWORD action triggered from an API call doesn't inherit maxAuthAge policy

Keycloak version 24.0.1

The Maximum Authentication Age is set to 0 and the password policy has been enabled for the realm. The current password is required when the user tries to update the password from his Keycloak account.

On the other hand, when we send an “execute-actions-email” with the “UPDATE_PASSWORD” action, the Password update form doesn’t display the current password input field.

I’m assuming the maxAuthAge policy can’t be read due to the redirection. Do we have a workaround for that?

Thanks