cURL
curl --request POST \ --url https://api.example.com/api/auth/email/exchange-reset-password-token \ --header 'Content-Type: application/json' \ --data ' { "email": "user@example.com", "code": "123456" } '
{ "token": "<string>", "expiresAt": "2023-11-07T05:31:56Z" }
Step 1 of two-step password reset flow (only used when resetPasswordMethod is ‘code’):
This endpoint is not used when resetPasswordMethod is ‘link’ (magic link flow is direct).
"user@example.com"
6-digit numeric code from email
"123456"
Code verified successfully, reset token returned
Reset token to be used in reset-password endpoint
Token expiration timestamp