---
title: "Check a password-reset code without using it"
method: POST
path: "/auth/action/verify-reset"
tags: ["Auth Pages"]
---

# Check a password-reset code without using it

`POST /auth/action/verify-reset`

## Request

- Base URL: `https://api.hiyd.ai`
- URL: `https://api.hiyd.ai/auth/action/verify-reset`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Used by the hosted reset page to show whose password is being reset.

## Request body

- object
  - `oobCode` string, required

## Response `200`

Code is valid; returns the account's email

## Other responses

- `400`: Invalid, expired, or already-used code
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/hiyd/apis/hiyd-backend-api.md) - [All operations](https://skmtc.dev/hiyd/apis/hiyd-backend-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hiyd/apis/hiyd-backend-api/revisions/23598d347e1b?raw)