auth

Validate Reset Link

Changed on

Say whether a password reset link can still be used, without using it.

post/api/v1/auth/password/reset/validate

Request

  • The document declares no server URL.
  • Auth: one of:
    • API key in header Otari-Key
    • API key in header x-api-key

Request body

tokenstring required

The token from the link.

Response

Successful Response

status'valid' | 'expired' | 'invalid' required

Whether a mailed verification or password reset link can still be used.

NOTE: INVALID covers a link that was never issued and one already used, because a used link's hash is gone.

Changes