auth

OAuth request password reset

Forwards to IdP auth route POST /api/auth/request-password-reset with the same email. Optional query return_to is passed as IdP redirectTo only when safe; invalid/untrusted absolute URLs are ignored. Does not reveal whether the address exists.

post/oauth2/forgot-password

Request

  • Base URL: https://api.leisurevans.com
  • URL: https://api.leisurevans.com/oauth2/forgot-password
  • Auth: none declared

Query parameters

return_tostring uri-reference

Safe in-app or allowlisted absolute URL used as the reset-link callback destination.

redirect_uristring uri-reference

Deprecated alias for return_to.

Request body

emailstring email required

Response

Password reset email queued when the account exists.

successboolean required
messagestring required

Example response

{
  "success": true,
  "message": "If an account with that email exists, a password reset link has been sent."
}

Changes

No recorded changes to this operation across all 1 revision of this API.