Auth APIs/Password Recovery
Forgot Password
POST
/auth/forgot-passwordInitiates a password reset email. Always returns success to prevent user enumeration.
No authentication required
Content-Type:
application/jsonRequest Body
| Name | Type | Required | Description |
|---|---|---|---|
identifier | string | Required | Email or username |
Request Example
JSON
{
"identifier": "admin@openvts.io"
}Response Example
200 OK
{
"action": true,
"message": "If an account exists with this identifier, a password reset email has been sent"
}Code Examples
curl -X POST 'https://<your-domain>:3001/auth/forgot-password' \
-H 'Content-Type: application/json' \
-d '{
"identifier": "admin@openvts.io"
}'Notes
- Rate Limit: 3 requests per 15 minutes per identifier.