checkUserPassword with @auth issues

Hi @miko,

Thanks for reporting this. This has been reported recently in Combining @secret and @auth directives and Auth rule with other directives .
This issue is being worked upon in this sprint and there is an RFC, Auth Rule for CheckPassword Query .

Let us know if the worked upon solution (A separate auth rule field for checkPassword query) fits your use case.