auth
Forgot Password
Send a reset link, if that address has an account.
The response is identical either way. Telling an anonymous caller whether an address is registered turns this endpoint into an account-enumeration oracle, which is worth more to an attacker than the reset itself.
post/v1/auth/forgot
Request
- Base URL: https://api.mocapless.com (the document declares no server; this is the origin it was published from)
- URL: https://api.mocapless.com/v1/auth/forgot
- Auth: none declared
Request body
Response
Successful Response
object required
Changes
No recorded changes to this operation across all 1 revision of this API.