---
title: "Password Reset Confirm"
method: POST
path: "/api/auth/password/reset/confirm"
tags: ["auth"]
---

# Password Reset Confirm

`POST /api/auth/password/reset/confirm`

## Request

- Base URL: `https://api.tintin-x.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tintin-x.com/api/auth/password/reset/confirm`
- Auth: none declared

Verify the code, set the new password, and revoke all existing JWTs.

Bumps `user.token_version` so any token issued before this call is
rejected by `get_current_user` on the next request. Frontend is
expected to redirect the user to the login page — no token is
returned.

## Request body

- PasswordResetConfirm
  - `email` string, email, required
  - `code` string, required
  - `new_password` string, required

## Response `200`

Successful Response

- PasswordResetResponse
  - `message` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tintin-x/apis/tintin-api.md) · [All operations](https://skmtc.dev/tintin-x/apis/tintin-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tintin-x/apis/tintin-api/revisions/8839a8d0a66c?raw)