Password Reset

​

Request Password Reset

​

Authentication

​

Request Body

​

Response

​

Error Responses

• 400 - Bad request (e.g., invalid email format, email not found)
• 500 - Internal server error

​

Example Request

curl -X POST https://api.vaniyk.com/api/auth/password-reset/request \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com"
  }'

​

Example Response

{
  "message": "Password reset email sent"
}

​

Usage Notes

• The user will receive an email with a password reset link
• The reset link redirects to the frontend URL configured in FRONTEND_URL environment variable
• The frontend should extract the reset token from the URL and use it when calling the update password endpoint
• Reset tokens are time-limited for security purposes

​

Update Password

​

Authentication

​

Request Body

​

Response

​

Error Responses

• 400 - Bad request (e.g., invalid or expired reset token, weak password)
• 500 - Internal server error

​

Example Request

curl -X POST https://api.vaniyk.com/api/auth/password-reset/update \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <reset_token>" \
  -d '{
    "password": "newSecurePassword789"
  }'

​

Example Response

{
  "message": "Password updated successfully"
}

​

Usage Notes

• The reset token must be included in the Authorization header
• The reset token is obtained from the password reset email link
• After successful password update, the user should log in with their new password
• The reset token becomes invalid after use
• Implement proper password strength requirements on the client side before submitting