POST
/
api
/
auth
/
forgot-password
Forgot Password
curl --request POST \
  --url https://api.example.com/api/auth/forgot-password

Request Body

{
  "email": "john@example.com"
}

Response

{
  "ok": true
}
A reset link is sent to the email address. The token expires after 1 hour.
Always returns success even if the email doesn’t exist, to prevent email enumeration.