DAdatadome
validate

Validate if this password update event should be allowed, denied or reviewed.

Analyzes a password update event in real time and returns a recommendation (allow, deny or review) so you can act on it.

post/v1/validate/password/update

Request

  • Base URL
    https://account-api.datadome.co
  • URL
    https://account-api.datadome.co/v1/validate/password/update
  • Auth
    API key in header x-api-key

Request body

accountstring required

User account (mail address, username, alias, login, ...)

partnerIdstring

For customers who sell their product as white label app, identify the partner using the solution to adapt detection models.

eventDatestring date-time

Date when the event occurred on your side, if you send it later than it happened (for example from a queue). Format ISO 8601 YYYY-MM-DDThh:mm:ss.sssTZD. DataDome uses it to order the events. If eventDate is absent or has an invalid format, DataDome uses module.requestTimeMicros instead, and the event is still processed.

reason'forcedReset' | 'forgotPassword' | 'userUpdate' required

Reason for the password change

status'attempted' | 'failed' | 'succeeded' | 'linkExpired' required

Status of the password change

accountCreationDatestring date-time

Date when account was created. Help improve detection for account created before Account Protect setup. Format ISO 8601 YYYY-MM-DDThh:mm:ssTZD

Example request

{
  "account": "john.doe@example.com",
  "reason": "forgotPassword",
  "status": "succeeded",
  "user": {
    "id": "user-4759"
  },
  "module": {
    "requestTimeMicros": 1705314600000000,
    "name": "my-module",
    "version": "1.0.0"
  }
}

Response

Password update response sent from Account Protect server to Customer

action'deny' | 'review' | 'challenge' | 'allow' required

Action answered to Customer endpoint

reasonsstring[]

List of models matching the event

eventIdstring required

Event identifier associated to this validate event (for both registration and login)

scoreinteger

The level of confidence when identifying a request as coming from a fraudster.

Example response

{
  "action": "allow",
  "eventId": "019441b4-7757-7ba4-a039-6d47b64ced20"
}

Changes

No recorded changes to this operation across all 1 revision of this API.