Auth
Serve the password reset form (browser redirect target).
Returns an HTML page containing the password reset form. This endpoint is the link target embedded in the reset email sent by POST /auth/password-forgot.
The token query parameter must be a 64-character lowercase hex string. An invalid or missing token returns HTTP 400.
This endpoint is unauthenticated and intended for browser use only. To perform the actual password update, the form submits to POST /auth/password-reset.
get/auth/password-reset
Query parameters
tokenstring required
Example:a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6abcd
64-character lowercase hexadecimal password reset token from the reset email.
Response
HTML password reset form rendered successfully.