Skip to content

Reset password using a reset token

POST
/api/v1/auth/reset-password
Code sample: cURL
curl -X POST 'https://dashboard.justcrawl.io/api/v1/auth/reset-password' \
-H 'Content-Type: application/json' \
-d '{"token":"<reset-token-from-email>","password":"new-correct-horse-battery"}'

Completes the password-reset flow by exchanging the reset token (emailed by POST /api/v1/auth/forgot-password) for a new password. Side effects: the reset token is marked used (single-use); ALL of the user’s refresh tokens are revoked so existing sessions on every device are forced to re-login. The client must call POST /api/v1/auth/login after success to obtain a new access/refresh token pair.

Media type application/json
object
token
required
string
password
required
string
>= 8 characters <= 72 characters
Example generated
{
"token": "example",
"password": "example"
}

Password reset successful. All refresh tokens revoked across all devices.

Media type application/json
object
message
string
Example
{
"message": "Password has been reset"
}

Validation failed — request body or query is missing/invalid

Media type application/json
object
error
string
Example
{
"error": "Missing or invalid \"url\" field"
}

Unexpected server error. Logs and PostHog $exception capture

Media type application/json
object
error
string
Example
{
"error": "Something went wrong"
}