Set a customer password using a reset key

This endpoint documentation is generated directly from openapi.yaml.

Endpoint

POST /auth/password-reset/set

Operation

Operation ID: setPasswordUsingResetToken

Update the customer password using a valid reset token

Authentication

No authentication required.

Request Body

Required: yes.

Content type: application/json

{
  "properties": {
    "g_recaptcha_response": {
      "description": "reCAPTCHA verification token",
      "type": "string"
    },
    "password": {
      "description": "The new password",
      "type": "string"
    },
    "token": {
      "description": "The password reset token",
      "type": "string"
    }
  },
  "required": [
    "token",
    "password",
    "g_recaptcha_response"
  ],
  "type": "object"
}
        

Responses

Status	Description	Content Types
200	Password updated successfully	application/json
400
404	Invalid or expired token	application/json

Schema for response 200 (application/json):

{
  "properties": {
    "message": {
      "type": "string"
    }
  },
  "type": "object"
}
        

Schema for response 404 (application/json):

{
  "$ref": "#/components/schemas/Error"
}
        

17 March 2026