---
title: "Complete New Password"
method: POST
path: "/auth/complete-new-password"
tags: ["auth"]
---

# Complete New Password

`POST /auth/complete-new-password`

## Request

- Base URL: `https://api.verdun.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.verdun.ai/auth/complete-new-password`
- Auth: none declared

## Request body

- CompleteNewPasswordRequest
  - `email` string, email, required: Email address of the invited operator
  - `session` string, required: Cognito session returned by the NEW_PASSWORD_REQUIRED login challenge
  - `new_password` string, required: The operator's chosen permanent password

## Response `200`

Successful Response

- LoginResponse
  - `user_id` string, uuid, required: Authenticated user's unique ID (UUID).
  - `access_token` string, nullable: Short-lived access token (JWT).
  - `id_token` string, nullable: Identity token (JWT) for client-side identity.
  - `refresh_token` string, nullable: Refresh token used to obtain new access tokens.
  - `expires_in` integer, nullable: Seconds until the access token expires.
  - `challenge` string, nullable: A Cognito challenge that must be completed before tokens are issued.
  - `session` string, nullable: Opaque Cognito session for completing the challenge.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/verdun/apis/verdun-api.md) - [All operations](https://skmtc.dev/verdun/apis/verdun-api/llms.txt) - [OpenAPI document](https://skmtc.dev/verdun/apis/verdun-api/revisions/35a2a6ebedda?raw)