Skip to main content
POST
Reset a password using a reset token

Body

application/json

Email + new password + reset token (as delivered in the reset link).

email
string<email>
required

Email of the admin user resetting the password. Validator rule: required|email.

Example:

"user@example.com"

password
string<password>
required

New password. Validator rule: required|Password::default() — must satisfy the framework default password policy (length / complexity).

Example:

"N3wPassword!"

token
string
required

Reset token from the password reset email. Validator rule: required.

Example:

"b13c6d4e0a8f..."

password_confirmation
string<password>

Optional confirmation field forwarded to the password broker; only required when the broker is configured to require it.

Example:

"N3wPassword!"

Response

Password reset succeeded. Body returns status=error, message=Password reset successfully due to the legacy bug noted in the description; the 200 status code is the authoritative success signal.

status
string
Example:

"error"

message
string
Example:

"Password reset successfully"