Password Reset
When the user clicks the reset link in the email, they arrive at your frontend with token and email in the query string. The frontend should submit these values to this endpoint along with a new password.
HTTP Request
POST /api/v1/auth/password/reset
| Parameter | Description |
|---|---|
email string | User’s email from the reset link. |
password string | New password (min. 8 characters, must include letters and numbers). |
passwordConfirmation string | Must match password. |
token string | The reset token received via email. |
Response
204 No Content
Indicates the password reset was successful. All existing tokens of the user are revoked — the user has to log in again.
Error Handling
422 Unprocessable Content — a field is missing, the password does not meet the requirements, or the confirmation does not match.
A wrong or expired token (tokens are valid for 60 minutes) returns: 400 Bad Request
json
{
"message": "Heslo sa nepodarilo obnoviť."
}