Authentication API
Complete Recovery
Complete password recovery with new password
POST
Complete the password recovery process by setting a new password.
Request Body
Reset token from recovery verify step
New password (min 12 characters, must include uppercase, lowercase, number, and special character)
Response
Success message
New access token (user is automatically logged in)
New refresh token
Errors
Invalid token or weak password
Token not found
Notes
- User is automatically logged in after password reset
- All existing sessions are invalidated
- MFA must be re-verified if enabled