Confirm Password Reset
Sets a new password with the code from the reset email, verifies the email and ends every session of the account. A wrong code and an unknown email answer alike. Sets no cookie: sign in with the new password.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
The six-digit code from the reset email.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/auth/v1/password-reset/confirm" \ -H "Content-Type: application/json" \ -d '{ "code": "string", "email": "string", "password": "string" }'{}Request Password Reset POST
Emails a password-reset code if the account exists, in the background. Always answers the same, in the same padded time, whether or not it does. At most 5 codes go out per person an hour.
Resend Code POST
Sends the verification code again. Reads the HttpOnly step cookie. Always answers the same, whether or not a code was sent; at most 5 codes go out per person an hour.