Exchange reset password code for reset token

Step 1 of two-step password reset flow (only used when resetPasswordMethod is ‘code’):

1. Verify the 6-digit code sent to user’s email
2. Return a reset token that can be used to actually reset the password

This endpoint is not used when resetPasswordMethod is ‘link’ (magic link flow is direct).

Body

application/json

email · string<email> · required

Example:

"[e-mail]"

code · string · required

6-digit numeric code from email

Example:

"123456"

Response

200

application/json

Code verified successfully, reset token returned

token · string

Reset token to be used in reset-password endpoint

expiresAt · string<date-time>

Token expiration timestamp