{
  "message": "Password reset successfully"
}

Client

Reset password with token

Reset user password with a token. The token can be:

Magic link token (64-character hex token from send-reset-password when method is ‘link’)
Reset token (from exchange-reset-password-token after code verification when method is ‘code’)

Both token types use RESET_PASSWORD purpose and are verified the same way.

Flow summary:

Code method: send-reset-password → exchange-reset-password-token → reset-password (with resetToken)
Link method: send-reset-password → reset-password (with link token directly)

POST

api

auth

reset-password

{
  "message": "Password reset successfully"
}

application/json

newPassword

string

required

New password meeting configured requirements

Example:

"newSecurePassword123"

otp

string

required

Reset token (either from magic link or from exchange-reset-password-token endpoint)

Example:

"a1b2c3d4..."

Password reset successfully

message

string

Example:

"Password reset successfully"

⌘I