Sign in

v1

latestOpenAPI 3.0.32026-07-26172157253.6 KB
Client

Exchange reset password code for reset token

Step 1 of two-step password reset flow (only used when resetPasswordMethod is 'code'):

  1. Verify the 6-digit code sent to user's email
  2. Return a reset token that can be used to actually reset the password

This endpoint is not used when resetPasswordMethod is 'link', because the browser reset-link flow uses the emailed link token directly.

post/api/auth/email/exchange-reset-password-token

Request body

emailstring email required
codestring required

6-digit numeric code from email

Example request

{
  "email": "user@example.com",
  "code": "123456"
}

Response

Code verified successfully, reset token returned

tokenstring

Reset token to be used in reset-password endpoint

expiresAtstring date-time

Token expiration timestamp