🔨 In Development — This section is still being developed and may change.
POST/v1/auth/password/forgot
Request a password reset (alias for /password/reset).
Sends a 4-digit verification code to the user's email if the account exists. For security, always returns success regardless of whether the email exists to prevent email enumeration.
email string required
The email address associated with the account.
- Generic response prevents email enumeration
- Rate limiting: 1 request per minute per email
- Time-limited codes: 5 minutes expiry
- Automatic cleanup of expired codes
Returns a success response. If the account exists, a 4-digit verification code is sent via email.