Verify password reset token

Developing

POST

/auth/reset-password/confirm

Verifies whether a password reset token is valid, unexpired, and eligible to be used for updating the user’s password. This endpoint is typically called when the user opens the reset password URL before showing the “Create New Password” form.

If the token is valid, the client can allow the user to continue to the password update step. If the token is invalid, expired, revoked, or already used, the API returns an error response and the user should request a new password reset link.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200Success

application/json

Bodyapplication/json

🟠400Validation Error

🟠400Invalid or Expired Token

🟠429Rate Limit Exceeded

🔴500Internal Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'http://localhost:3000/api/v1/auth/reset-password/confirm' \
--header 'Content-Type: application/json' \
--data '{
    "token": "5e51ac325fe77baf6ba745c8b86dc6e20ce61d8b4f35b670ebfc88d9f1cb45f7",
    "type": "password_reset"
}'

Response Example

200 - Example

{
    "status": "success",
    "message": "Reset password token is valid.",
    "data": {
        "expires_at": "2026-05-18T08:10:51.828Z"
    }
}

Modified at 2026-05-16 22:19:16

Request a password reset email

Update password