---
title: "Validates a forgot-password token and returns the associated appId. No app API key required — the token is proof of access. The optional `origin` query param is forwarded from the browser's Origin header; if provided, it must match one of the app's registered allowedOrigins (or the configured cloud-views URL) or a 403 is returned."
method: GET
path: "/account/internal/oauth2/validatePasswordToken"
tags: ["internal"]
---

# Validates a forgot-password token and returns the associated appId. No app API key required — the token is proof of access. The optional \`origin\` query param is forwarded from the browser's Origin header; if provided, it must match one of the app's registered allowedOrigins (or the configured cloud-views URL) or a 403 is returned.

`GET /account/internal/oauth2/validatePasswordToken`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/account/internal/oauth2/validatePasswordToken`
- Auth: none declared

## Query parameters

- `token` string, required
- `origin` string

## Response `200`

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)