Password Recovery

curl -X POST "http://localhost:8080/recover" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com"
  }'

const response = await fetch('http://localhost:8080/recover', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    email: 'user@example.com'
  }),
});

const result = await response.json();

import requests

data = {
    "email": "user@example.com"
}

response = requests.post('http://localhost:8080/recover', json=data)
result = response.json()

package main

import (
    "bytes"
    "encoding/json"
    "net/http"
)

func main() {
    data := map[string]string{
        "email": "user@example.com",
    }
    
    jsonData, _ := json.Marshal(data)
    
    resp, err := http.Post(
        "http://localhost:8080/recover",
        "application/json",
        bytes.NewBuffer(jsonData),
    )
    // Handle response...
}

{
  "message": "If an account with that email exists, we've sent a password recovery link."
}

POST

recover

curl -X POST "http://localhost:8080/recover" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com"
  }'

const response = await fetch('http://localhost:8080/recover', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    email: 'user@example.com'
  }),
});

const result = await response.json();

import requests

data = {
    "email": "user@example.com"
}

response = requests.post('http://localhost:8080/recover', json=data)
result = response.json()

package main

import (
    "bytes"
    "encoding/json"
    "net/http"
)

func main() {
    data := map[string]string{
        "email": "user@example.com",
    }
    
    jsonData, _ := json.Marshal(data)
    
    resp, err := http.Post(
        "http://localhost:8080/recover",
        "application/json",
        bytes.NewBuffer(jsonData),
    )
    // Handle response...
}

{
  "message": "If an account with that email exists, we've sent a password recovery link."
}

Send a password recovery email to users who have forgotten their password. This endpoint initiates the password reset flow by sending a secure recovery link via email.

This endpoint always returns success (200) to prevent email enumeration attacks, even if the email doesn’t exist.

curl -X POST "http://localhost:8080/recover" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com"
  }'

const response = await fetch('http://localhost:8080/recover', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    email: 'user@example.com'
  }),
});

const result = await response.json();

import requests

data = {
    "email": "user@example.com"
}

response = requests.post('http://localhost:8080/recover', json=data)
result = response.json()

package main

import (
    "bytes"
    "encoding/json"
    "net/http"
)

func main() {
    data := map[string]string{
        "email": "user@example.com",
    }
    
    jsonData, _ := json.Marshal(data)
    
    resp, err := http.Post(
        "http://localhost:8080/recover",
        "application/json",
        bytes.NewBuffer(jsonData),
    )
    // Handle response...
}

Request Body

string

required

Email address of the user requesting password recovery.

string

URL to redirect to after password recovery verification. If not provided, uses the default redirect URL.

string

Captcha token for verification if captcha is enabled.

Response

string

Success message (always returned regardless of email existence)

{
  "message": "If an account with that email exists, we've sent a password recovery link."
}

Error Responses

{
  "code": 400,
  "msg": "Invalid email format",
  "details": "Please provide a valid email address"
}

{
  "code": 429,
  "msg": "Too many requests",
  "details": "Please wait before requesting another password recovery"
}