Skip to content

Request password reset

POST
/api/v1/auth/password-reset/request

Public, unauthenticated endpoint that initiates a password reset for the given email. Always returns 202 Accepted regardless of whether the email exists, to prevent account enumeration. Returns 404 when password reset is disabled (security.passwordReset.enabled=false).

object
email
string

Reset request accepted (email may or may not exist)

object
status
string

Invalid JSON body

object
error
object
code
string
message
string
status
required
integer format: int32

Password reset not enabled on this controller

object
error
object
code
string
message
string
status
required
integer format: int32