POST/api/auth/reset-password
Isetha kabusha iphasiwedi isebenzisa i-reset token evumelekileyo.
`POST /api/auth/reset-password` isetha kutsha iphasiwedi isebenzisa i-reset token evumelekileyo. Le ndlela kayidingi ukungena okusekukhona, ngoba yenzelwe khona abasebenzisi abangasenelisi ukusebenzisa iphasiwedi yabo yakuqala. Ku-request body kuthunyelwa `token` le-`password`. I-token ivela ku-imeyili yokusetha kutsha ethunyelwe ngaphambili; iphasiwedi entsha kumele igcwalise izidingo ezincane ezisebenza ohlangothini lweseva. Ubizo kalusilo idempotent. Ngemva kokusetha kutsha okuphumeleleyo, i-token esetshenzisiweyo isiphelile kumbe kayisenzelwanga olunye untshintsho lwephasiwedi. Ngakho i-client kayivumelekanga ukuphinda i-request ephazamiseke ngendlela engacacanga ngokuphindaphinda masinyane. Esikhundleni salokho kumele ibonise umphumela njalo nxa kudingeka ivumele umsebenzisi aqalise inqubo entsha yokusetha kutsha ngomsebenzi we-Forgot-Password. I-token engavumelekanga, ephelelwe yisikhathi kumbe esisetshenzisiwe, kanye lephasiwedi engagcwalisi izidingo ezincane, kuletha `400 VALIDATION_ERROR`. Umlayezo wephutha wobala kawumelanga uveze eminye imininingwane ye-akhawunti. I-token lephasiwedi entsha kakumelanga kuvele kumapharamitha e-URL, emathuluzini okuhlaziya, kuma-log obala kumbe kuma-screenshot osizo. I-request ingeyendlela yefomu evikelwe yi-HTTPS kuphela. Impendulo ephumeleleyo ithi `{"ok":true}`. Iqinisekisa untshintsho lwephasiwedi olwenziweyo, hatshi ukungena okutsha ngokuzenzakalelayo. Ngemva kokusetha kutsha, umsebenzisi kumele angene ngendlela ejwayelekileyo ngephasiwedi entsha. Amaseshini akhona kumele aphathwe ngokwengqondo yangempela ye-backend; imibhalo kayivumelekanga ukuthi ikhiphe zonke izixhobo ngokujwayelekileyo nxa lokho kungafakazelwanga. Ukuhlolwa bukhoma okufakazelweyo kuhlanganisa isimo esibi le-token engavumelekanga lesimo esilindelweyo 400. Ukusetha kutsha okuphumeleleyo kwangempela kakwenziwanga ngokwehlukileyo nge-token yokusebenza kwangempela kulobu bufakazi. Umbhalo kumele ugcine lo mkhawulo ngokucacileyo njalo kawumelanga uthathe impumelelo ye-End-to-End okuthiwa ikhona ngenxa yokufanana le-Login kumbe i-Forgot Password.
Ukuqinisekisa ubuwena lokuvikeleka
Kakudingeki ukuqinisekisa ubuwena
I-idempotent: Hatshi
Amapharamitha
token(body, string, kuyadingeka)— I-reset token evela ku-imeyilipassword(body, string, kuyadingeka)— Iphasiwedi entshaIsibonelo sesicelo (request)
{"token":"<Ithokheni evela ku-imeyili yokusetha kabusha>","password":"IphasiwediEntshaEvikelekileyo!"}Isibonelo sempendulo (response)
{"ok":true}Amakhodi amaphutha
400 VALIDATION_ERROR — I-token ayivumelekile, iphelelwe yisikhathi kumbe iphasiwedi ayifezi imibandela encane.Ubufakazi bokuhlola okuphilayo
Ikhesi elingaphumelelanga (400, i-token engavumelekileyo) liqinisekiswe bukhoma; ikhesi eliphumelelayo lifana ngokwemakenikha le-forgot-password/login, kayihlolwanga ngokuhlukileyo nge-reset token yangempela.