---
title: "Serve the password reset form (browser redirect target)."
method: GET
path: "/auth/password-reset"
tags: ["Auth"]
---

# Serve the password reset form (browser redirect target).

`GET /auth/password-reset`

Returns an HTML page containing the password reset form. This endpoint is
the link target embedded in the reset email sent by `POST /auth/password-forgot`.

The `token` query parameter must be a 64-character lowercase hex string.
An invalid or missing token returns HTTP 400.

This endpoint is unauthenticated and intended for browser use only.
To perform the actual password update, the form submits to `POST /auth/password-reset`.

## Query parameters

- `token` string, required

## Response `200`

HTML password reset form rendered successfully.

## Other responses

- `400` — Token is missing, not 64 lowercase hex characters, or otherwise invalid.

---

[API](https://skmtc.net/voipbin/apis/voipbin-api.md) · [All operations](https://skmtc.net/voipbin/apis/voipbin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voipbin/voipbin-api/revisions/79e779080bcc/schema)