Skip to main content
POST
Reset Password
Sets a new password for a user by validating a reset token received via email. On success, all existing refresh tokens for the user are invalidated, forcing re-authentication.

Body Parameters

string
required
The raw reset token from the password reset email link. The server hashes this token internally before comparing it to the stored hash.
string
required
The new password to set.

Response

boolean
true on success.
string
Confirmation message: "Password has been reset successfully."

Error Responses

Returned when the token does not match any user record or the token has expired (1 hour TTL).
All active sessions for the user are revoked when the password is reset. The user must sign in again after resetting their password.

See Also