Sets a new password from a reset link.

POST

/api/v1/auth/password-reset/confirm

Every session belonging to the account is ended. A reset request usually means control of the password has been lost, and leaving the sessions alone would leave whoever had it signed in.

Errors

400 when the token is unknown, spent or expired, or the new password fails the policy. 404 when this instance sends no mail.

Request Body

application/json

body

Body of POST /auth/password-reset/confirm.

password*string

What to set the password to.

token*string

The token from the link.

Response Body

Password set; every session ended

curl -X POST 'https://example.com/api/v1/auth/password-reset/confirm' \  -H 'Content-Type: application/json' \  -d '{  "password": "string",  "token": "string"}'

Empty