Change a password before logging in
POST/api/auth/password/reset
Replace the caller's password without a session, or challenge for the second factor.
The caller has no session, so the challenge for an enrolled second factor is issued here, only after the current password has verified, and the caller resubmits the whole request with the code or assertion attached.
Request
Responses
- 200
- 400
- 401
- 403
- 422
Successful Response
Bad request
Invalid credentials
Insufficient permissions
Validation Error