Auth APIs/Password Recovery
Reset Password
POST
/auth/reset-passwordComplete a password reset using the token from the email link.
No authentication required
Content-Type:
application/jsonRequest Body
| Name | Type | Required | Description |
|---|---|---|---|
token | string | Required | From reset email |
newPassword | string | Required | 6–35 characters |
Request Example
JSON
{
"token": "a1b2c3d4e5f6...",
"newPassword": "NewSecureP@ss456"
}Code Examples
curl -X POST 'https://<your-domain>:3001/auth/reset-password' \
-H 'Content-Type: application/json' \
-d '{
"token": "a1b2c3d4e5f6...",
"newPassword": "NewSecureP@ss456"
}'Notes
- Token expires in 15 min.
- Max 5 failed attempts per token.
- Single-use.