Update password

Developing

POST

/auth/reset-password

Updates the user account password using a valid password reset token generated through the password reset request process. This endpoint is used after the reset token has been verified and allows the user to securely create a new password without requiring their current password.

For security purposes, the system may also revoke all active sessions and refresh tokens associated with the account, requiring the user to authenticate again on all devices.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200Success

application/json

Bodyapplication/json

🟠400Validation Error

🟠400Invalid or Expired Token

🟠400Password Reused

🟠429Rate Limit Exceeded

🔴500Internal Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'http://localhost:3000/api/v1/auth/reset-password' \
--header 'Content-Type: application/json' \
--data-raw '{
    "token": "64ae4dedd09f6b5fd6f8ad5d738d6e9c97988982da21c4b122fbed6be3f6d67a",
    "new_password": "LES@mmN5Hp9bV?w",
    "confirm_password": "AHEI$84LUFn0xu$"
}'

Response Example

200 - Example

{
    "status": "success",
    "message": "Password reset successfully."
}

Modified at 2026-05-16 22:19:25

Verify password reset token

Refresh access token