Skip to main content
POST
/
:projectId
/
api
/
v7
/
auth
/
reset-password
Reset Password
curl --request POST \
  --url https://api.replyke.com/api/v6/:projectId/api/v7/auth/reset-password \
  --header 'Content-Type: application/json' \
  --data '
{
  "token": "<string>",
  "newPassword": "<string>"
}
'
{
  "success": true,
  "message": "<string>"
}
Sets a new password for a user by validating a reset token received via email. On success, all existing refresh tokens for the user are invalidated, forcing re-authentication.

​
Body Parameters

​
token
string
required
The raw reset token from the password reset email link. The server hashes this token internally before comparing it to the stored hash.
​
newPassword
string
required
The new password to set.

​
Response

​
success
boolean
true on success.
​
message
string
Confirmation message: "Password has been reset successfully."

​
Error Responses

{
  "error": "Invalid or expired password reset token.",
  "code": "auth/invalid-reset-token"
}
Returned when the token does not match any user record or the token has expired (1 hour TTL).
All active sessions for the user are revoked when the password is reset. The user must sign in again after resetting their password.

​
See Also