v1

latestOpenAPI 3.0.0BSD-3-Clause2026-07-146135105.7 KB
account

Complete Password Recovery

Use this endpoint to complete the user account password reset. Both the userId and secret arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the POST /account/recovery endpoint.

Please note that in order to avoid a Redirect Attack the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface.

put/account/recovery

Request body

passwordstring required

New password. Must be between 6 to 32 chars.

passwordAgainstring required

New password again. Must be between 6 to 32 chars.

secretstring required

Valid reset token.

userIdstring required

User account UID address.

Response

Token

$idstring required

Token ID.

expireinteger required

Token expiration date in Unix timestamp.

secretstring required

Token secret key. This will return an empty string unless the response is returned using an API key or as part of a webhook payload.

userIdstring required

User ID.