auth-flows

Forgot Password

Request a password reset. ALWAYS returns 200 with a fixed body.

Rate-limited per client IP via the reused AuthService limiter (raises LoginRateLimitError -> 429). For a real user this mints a reset token and emits user.password_reset_requested; for an unknown email it is a silent no-op -- the response is byte-identical either way.

post/api/v1/auth/forgot-password

Request

  • Base URL: https://api.gnosari.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.gnosari.com/api/v1/auth/forgot-password
  • Auth: one of:
    • HTTP bearer
    • API key in header X-AUTH-TOKEN

Request body

emailstring email required

Response

Successful Response

messagestring required

Changes

No recorded changes to this operation across all 1 revision of this API.