Set a new password from a reset link
curl --request POST \
--url https://my.server.express/api/v1/auth/reset-password \
--header 'Content-Type: application/json' \
--data '
{
"token": "<string>",
"password": "<string>"
}
'const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({token: '<string>', password: '<string>'})
};
fetch('https://my.server.express/api/v1/auth/reset-password', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://my.server.express/api/v1/auth/reset-password"
payload = {
"token": "<string>",
"password": "<string>"
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"success": true,
"message": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}Auth
Set a new password from a reset link
Redeems the token from the forgot-password email. The link is single-use — it carries a fingerprint of the old password hash, so once any new password is set it (and every older link) stops working. Revokes every refresh session on the account; existing access tokens expire on their own within 15 minutes. Expired, malformed, wrong-purpose and already-used links all return 400. Rate-limited to 10 requests per 15 minutes per IP. Writes a PASSWORD_RESET audit entry.
POST
/
v1
/
auth
/
reset-password
Set a new password from a reset link
curl --request POST \
--url https://my.server.express/api/v1/auth/reset-password \
--header 'Content-Type: application/json' \
--data '
{
"token": "<string>",
"password": "<string>"
}
'const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({token: '<string>', password: '<string>'})
};
fetch('https://my.server.express/api/v1/auth/reset-password', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://my.server.express/api/v1/auth/reset-password"
payload = {
"token": "<string>",
"password": "<string>"
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"success": true,
"message": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}