Reset Password

​

POST /api/auth/reset-password/:token

​

Authentication

​

Path Parameters

​

Request Body

​

Request Example

{
  "password": "newSecurePassword456"
}

​

Response

​

Success Response (200 OK)

"Password reset successfull"

​

Error Responses

​

404 Not Found - Invalid Token

{
  "error": "Token not valid"
}

​

400 Bad Request - Validation Errors

{
  "errors": [
    {
      "msg": "Token not valid",
      "param": "token"
    },
    {
      "msg": "Password min length has to be 8 characters",
      "param": "password"
    }
  ]
}

​

cURL Example

curl -X POST https://api.example.com/api/auth/reset-password/123456 \
  -H "Content-Type: application/json" \
  -d '{
    "password": "newSecurePassword456"
  }'

​

Notes

• Token must be exactly 6 characters long
• Password is automatically hashed before storage
• Token is cleared (set to null) after successful password reset
• Rate limiting is applied to this endpoint
• After reset, user can login with the new password