Reset Password Form

GET 
/auth/reset-password

Validates the recovery token and displays the password change form. Typical Flow:

1. The user clicks on the link in the recovery email
2. The server validates that the token is valid and has not expired
3. If valid, it displays the HTML form to set a new password
4. If not valid or expired, it shows an error message Validations:

• Token must exist in the database
• Token must not be expired (maximum 1 hour)
• Token must not have been used previously Important Notes:
• This endpoint returns HTML, not JSON
• The form includes client-side validations
• Requires JavaScript enabled in the browser
• The token is consumed upon successful use

Request

Responses

200

HTML Reset Form

400

Invalid or expired token