---
title: "Open password reset flow from browser link click"
method: GET
path: "/api/auth/email/reset-password-link"
tags: ["Client"]
---

# Open password reset flow from browser link click

`GET /api/auth/email/reset-password-link`

Browser-oriented password reset link flow.

This endpoint is intended for users clicking password reset links in email.
It validates the token on the backend and redirects the browser to the
stored, validated `redirectTo` URL with the reset token in the query string.

Redirect query params:
- Ready: `token=...&insforge_status=ready&insforge_type=reset_password`
- Error: `insforge_status=error&insforge_type=reset_password&insforge_error=...`
- `token`: present only when `insforge_status=ready`
- `insforge_status`: `ready` or `error`
- `insforge_type`: always `reset_password`
- `insforge_error`: present only on error, human-readable message

Your app should render the reset-password form only when `insforge_status=ready`
and `token` is present.

## Query parameters

- `token` string, required

## Other responses

- `302` — Browser redirected to the stored redirect URL
- `400` — Invalid reset token or redirect target

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)