POST/api/auth/reset-password

Isetha kabusha iphasiwedi isebenzisa i-reset token evumelekileyo.

`POST /api/auth/reset-password` isetha kutsha iphasiwedi isebenzisa i-reset token evumelekileyo. Le ndlela kayidingi ukungena okusekukhona, ngoba yenzelwe khona abasebenzisi abangasenelisi ukusebenzisa iphasiwedi yabo yakuqala. Ku-request body kuthunyelwa `token` le-`password`. I-token ivela ku-imeyili yokusetha kutsha ethunyelwe ngaphambili; iphasiwedi entsha kumele igcwalise izidingo ezincane ezisebenza ohlangothini lweseva. Ubizo kalusilo idempotent. Ngemva kokusetha kutsha okuphumeleleyo, i-token esetshenzisiweyo isiphelile kumbe kayisenzelwanga olunye untshintsho lwephasiwedi. Ngakho i-client kayivumelekanga ukuphinda i-request ephazamiseke ngendlela engacacanga ngokuphindaphinda masinyane. Esikhundleni salokho kumele ibonise umphumela njalo nxa kudingeka ivumele umsebenzisi aqalise inqubo entsha yokusetha kutsha ngomsebenzi we-Forgot-Password. I-token engavumelekanga, ephelelwe yisikhathi kumbe esisetshenzisiwe, kanye lephasiwedi engagcwalisi izidingo ezincane, kuletha `400 VALIDATION_ERROR`. Umlayezo wephutha wobala kawumelanga uveze eminye imininingwane ye-akhawunti. I-token lephasiwedi entsha kakumelanga kuvele kumapharamitha e-URL, emathuluzini okuhlaziya, kuma-log obala kumbe kuma-screenshot osizo. I-request ingeyendlela yefomu evikelwe yi-HTTPS kuphela. Impendulo ephumeleleyo ithi `{"ok":true}`. Iqinisekisa untshintsho lwephasiwedi olwenziweyo, hatshi ukungena okutsha ngokuzenzakalelayo. Ngemva kokusetha kutsha, umsebenzisi kumele angene ngendlela ejwayelekileyo ngephasiwedi entsha. Amaseshini akhona kumele aphathwe ngokwengqondo yangempela ye-backend; imibhalo kayivumelekanga ukuthi ikhiphe zonke izixhobo ngokujwayelekileyo nxa lokho kungafakazelwanga. Ukuhlolwa bukhoma okufakazelweyo kuhlanganisa isimo esibi le-token engavumelekanga lesimo esilindelweyo 400. Ukusetha kutsha okuphumeleleyo kwangempela kakwenziwanga ngokwehlukileyo nge-token yokusebenza kwangempela kulobu bufakazi. Umbhalo kumele ugcine lo mkhawulo ngokucacileyo njalo kawumelanga uthathe impumelelo ye-End-to-End okuthiwa ikhona ngenxa yokufanana le-Login kumbe i-Forgot Password.

Ukuqinisekisa ubuwena lokuvikeleka

Kakudingeki ukuqinisekisa ubuwena

I-idempotent: Hatshi

Amapharamitha

token(body, string, kuyadingeka)— I-reset token evela ku-imeyili
password(body, string, kuyadingeka)— Iphasiwedi entsha

Isibonelo sesicelo (request)

{"token":"<Ithokheni evela ku-imeyili yokusetha kabusha>","password":"IphasiwediEntshaEvikelekileyo!"}

Isibonelo sempendulo (response)

{"ok":true}

Amakhodi amaphutha

400 VALIDATION_ERROR — I-token ayivumelekile, iphelelwe yisikhathi kumbe iphasiwedi ayifezi imibandela encane.

Ubufakazi bokuhlola okuphilayo

Ikhesi elingaphumelelanga (400, i-token engavumelekileyo) liqinisekiswe bukhoma; ikhesi eliphumelelayo lifana ngokwemakenikha le-forgot-password/login, kayihlolwanga ngokuhlukileyo nge-reset token yangempela.

← Ukuqinisekisa