Password Reminder

Rotate the expired password (OTP-gated)

Unauthenticated. Verifies email + current password + OTP + new-password policy, archives the old digest, writes the new digest, and refreshes password_expires_at. Returns 201 with data.type = "jwt" and sets the refresh-token cookie.

post/v1/password_reminder/update_password

Request

  • Base URL
    https://identity-api.paymongo.com
  • URL
    https://identity-api.paymongo.com/v1/password_reminder/update_password
  • Auth
    none required

Request body

Example request

{
  "data": {
    "attributes": {
      "code": "123456",
      "email": "user@example.com",
      "factor": "email",
      "new_password": "NewStr0ng!Pass",
      "new_password_confirmation": "NewStr0ng!Pass",
      "password": "OldStr0ng!Pass"
    }
  }
}

Response

Created

has_moreboolean

Example response

{
  "data": {
    "attributes": {
      "expiry_timer": 600,
      "organization_id": "org_123",
      "user_contact_number": "+639171234567",
      "user_first_name": "Juan",
      "user_last_name": "dela Cruz"
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.