auth

Request a password reset link by email.

Always returns 200 with an identical body regardless of whether the email is registered (AC #1/#3 — anti-enumeration, STRIDE S1/S2). Rate-limited: 10 req/min per IP (Tier 1) + 3 req/hour per email (Redis).

post/v1/auth/password-reset/request

Request

  • Base URL: https://api.andish.ru (the document declares no server; this is the origin it was published from)
  • URL: https://api.andish.ru/v1/auth/password-reset/request
  • Auth: none declared

Request body

emailstring email required

Email address to send the password-reset link to.

Response

Uniform response — does not reveal email existence

messagestring

Uniform message — does not reveal whether the email exists.

Changes

No recorded changes to this operation across all 1 revision of this API.