Set a new password with a reset code

POST /v1/auth/password/reset

Signs out every device. Two-factor authentication stays on.

Body

application/json

codestringrequired

maxLength: 16

emailstringrequired

maxLength: 254

passwordstringrequired

The new password, at least 12 characters

maxLength: 512

Responses

errors: application/problem+json

204

No Content

422

Unprocessable Entity

429

Too Many Requests

500

Internal Server Error

Match errors on the problem's code, which stays the same, not on its message.

Send a request

Server

Body

The request goes from your browser straight to this server; nothing passes through this site. The API must allow this site's origin for CORS.

Requestexample

curl -X POST "$API_URL/v1/auth/password/reset" \
  -H "Content-Type: application/json" \
  -d '{
  "code": "123456",
  "email": "ada@example.com",
  "password": "string"
}'

body := strings.NewReader(`{
  "code": "123456",
  "email": "ada@example.com",
  "password": "string"
}`)
req, err := http.NewRequestWithContext(ctx, http.MethodPost,
	apiURL + "/v1/auth/password/reset", body)
if err != nil {
	return err
}
req.Header.Set("Content-Type", "application/json")
res, err := http.DefaultClient.Do(req)
if err != nil {
	return err
}
defer res.Body.Close()

const res = await fetch(`${apiUrl}/v1/auth/password/reset`, {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "code": "123456",
    "email": "ada@example.com",
    "password": "string"
  }),
});

Responseexample

{
  "code": "string",
  "status": 422,
  "title": "Unprocessable Entity",
  "detail": "string",
  "errors": [
    {
      "message": "expected length >= 1",
      "location": "body.name"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "type": "string"
}

{
  "code": "string",
  "status": 429,
  "title": "Too Many Requests",
  "detail": "string",
  "request_id": "req_9f86d081884c7d65",
  "type": "string"
}