Changes the user password on the reset-password page. Side effect: a successful reset REVOKES ALL of the user’s existing sessions — every other device will get 401 on its next refresh and must re-login.

POST/api/auth/reset-password

Query parameters

tokenstringrequired

Request body

requiredapplication/json

newPasswordstringrequired

confirmPasswordstringrequired

Responses

200OK

any

400Error

any

500Internal Server Error

any

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Parameters

tokenquery*

Bodyapplication/json

newPasswordstring*confirmPasswordstring*

Request

curl -X POST "http://localhost:8000/api/auth/reset-password?token=string" \
  -H "Content-Type: application/json" \
  -d '{
  "newPassword": "string",
  "confirmPassword": "string"
}'

const response = await fetch("http://localhost:8000/api/auth/reset-password?token=string", {
  method: "POST",
  headers: {
    "Content-Type": "application/json"
  },
  body: "{\n  \"newPassword\": \"string\",\n  \"confirmPassword\": \"string\"\n}"
});

Response

{
  "message": "You have successfully changed your password"
}

{
  "message": "Access denied",
  "error": "Bad Request",
  "statusCode": 400
}

{
  "message": "Something went wrong",
  "error": "Internal Server Error",
  "statusCode": 500
}