---
title: "Request a one-time password reset link"
method: POST
path: "/auth/password-reset/request"
---

# Request a one-time password reset link

`POST /auth/password-reset/request`

## Request

- Base URL: `https://api.eurobase.dev`
- URL: `https://api.eurobase.dev/auth/password-reset/request`
- Auth: none declared

Every well-formed address gets the same 202 answer; the link, valid 30 minutes, is emailed after the response and only to an active account (ADR 0085).

## Request body

- PasswordResetRequest
  - `email` string, required

## Response `202`

Accepted, whether or not the address has an account

- PasswordResetRequestResponse
  - `ok` true, required

## Other responses

- `400`: Malformed email rejected
- `429`: Persistent per-email request limit exceeded (same answer for every address); no password-failure step-up applies
- `503`: Password reset email sender not configured (same answer for every address), or the client address could not be proven (ADR 0086)

---

[API](https://skmtc.dev/eurobase/apis/eurobase-api.md) · [All operations](https://skmtc.dev/eurobase/apis/eurobase-api/llms.txt) · [OpenAPI document](https://skmtc.dev/eurobase/apis/eurobase-api/revisions/5266a299d18a?raw)