Reset password with token
POST
/auth/password/reset
Completes the password reset flow by verifying the token and updating the password. All existing sessions are invalidated to prevent session fixation attacks.
Request Body
Section titled “Request Body ”object
token
required
string
newPassword
required
string
Responses
Section titled “ Responses ”Password reset successful
object
message
required
string
Invalid request (e.g., password too short)
Invalid or expired token
User not found