POST/api/auth/reset-password

Iseta kwakhona iphasiwedi ngokusekelwe kwi-Reset-Token esebenzayo.

`POST /api/auth/reset-password` iseta kwakhona iphasiwedi ngoncedo lwe-Reset-Token esebenzayo. Le ndlela ayifuni kungena okukhoyo, kuba yenzelwe kanye abasebenzisi abangasakwaziyo ukusebenzisa iphasiwedi yabo yangaphambili. Kumzimba wesicelo kuthunyelwa `token` kunye ne-`password`. I-token ivela kwi-imeyile yokuseta kwakhona ethunyelwe ngaphambili; iphasiwedi entsha kufuneka izalisekise iimfuno ezisezantsi ezisebenzayo kwiseva. Umnxeba awuyiyo idempotent. Emva kokuseta kwakhona ngempumelelo, i-token esetyenzisiweyo iyaphela okanye ayisenzelwanga olunye utshintsho lwephasiwedi. Ngoko ke umthengi-software akufuneki aphinde isicelo esiyekileyo ngokungacacanga kwilophu ekhawulezayo. Endaweni yoko kufuneka abonise isiphumo kwaye, xa kufuneka, avumele umsebenzisi ukuba aqalise inkqubo entsha yokuseta kwakhona ngomsebenzi we-Forgot-Password. I-token engasebenziyo, ephelelwe lixesha okanye esele isetyenzisiwe kunye nephasiwedi engazalisekisi iimfuno ezisezantsi kukhokelela kwi-`400 VALIDATION_ERROR`. Umyalezo wempazamo woluntu akufuneki uveze iinkcukacha ezongezelelweyo zeakhawunti. I-token nephasiwedi entsha akufuneki zivele kwiiparamitha ze-URL, kwizixhobo zohlalutyo, kwiilogi zoluntu okanye kwiiskrini zenkxaso. Isicelo sifanele kuphela kwinkqubo yefom ekhuselwe yi-HTTPS. Impendulo ephumeleleyo ithi `{"ok":true}`. Iqinisekisa utshintsho lwephasiwedi olwenziweyo, hayi ukungena okutsha ngokuzenzekelayo. Emva kokuseta kwakhona, umsebenzisi kufuneka angene ngokuqhelekileyo ngephasiwedi entsha. Iiseshoni ezikhoyo kufuneka ziphathwe ngokwengqiqo yokwenyani ye-backend; amaxwebhu akufuneki athi zonke izixhobo ziyaphuma ngokubanzi, ukuba oko akungqinwanga. Uvavanyo oluphilayo olubhaliweyo luquka imeko engalunganga ene-token engasebenziyo nesimo esilindelekileyo esingu-400. Ukuseta kwakhona okuphumeleleyo kokwenyani akwenziwanga ngokwahlukileyo nge-token yemveliso kobu bungqina. Umbhalo kufuneka ugcine lo mda ngokucacileyo kwaye akufuneki uthathe impumelelo ye-End-to-End ngenxa yokufana ne-Login okanye i-Forgot Password.

Ukuqinisekiswa nokhuseleko

Akukho kuqinisekiswa kufunekayo

Idempotent: Hayi

Iiparamitha

token(body, string, kuyafuneka)— I-Reset-Token ekwi-imeyile
password(body, string, kuyafuneka)— Ipasiwedi entsha

Umzekelo we-request

{"token":"<Ithokheni evela kwi-imeyile yokusetha kwakhona>","password":"IphasiwediEntshaEkhuselekileyo!"}

Umzekelo we-response

{"ok":true}

Iikhowudi zeempazamo

400 VALIDATION_ERROR — I-token ayisebenzi, iphelelwe lixesha okanye iphasiwedi ayizalisekisi iimfuno ezisezantsi.

Ubungqina bovavanyo oluphilayo

Imeko engaphumelelanga (400, itokheni engavumelekanga) iqinisekisiwe ngqo; imeko yempumelelo ifana ngokwezobugcisa ne-forgot-password/login, ayizange ihanjiswe ngokwahlukileyo nge-Reset-Token yokwenene.

← Ungqinisiso