Sign in

v1

latestOpenAPI 3.0.32026-07-26172157253.6 KB
Client

Reset password with token

Reset user password with a token. The token can be:

  • Magic link token (64-character hex token from send-reset-password when method is 'link')
  • Reset token (from exchange-reset-password-token after code verification when method is 'code')

Both token types use RESET_PASSWORD purpose and are verified the same way.

Flow summary:

  • Code method: send-reset-password → exchange-reset-password-token → reset-password (with resetToken)
  • Link method: send-reset-password → GET /api/auth/email/reset-password-link → reset-password
post/api/auth/email/reset-password

Request body

newPasswordstring required

New password meeting configured requirements

otpstring required

Reset token (either from magic link or from exchange-reset-password-token endpoint)

Example request

{
  "newPassword": "newSecurePassword123",
  "otp": "a1b2c3d4..."
}

Response

Password reset successfully

messagestring

Example response

{
  "message": "Password reset successfully"
}