POST/api/auth/reset-password
Iseta kwakhona iphasiwedi ngokusekelwe kwi-Reset-Token esebenzayo.
`POST /api/auth/reset-password` iseta kwakhona iphasiwedi ngoncedo lwe-Reset-Token esebenzayo. Le ndlela ayifuni kungena okukhoyo, kuba yenzelwe kanye abasebenzisi abangasakwaziyo ukusebenzisa iphasiwedi yabo yangaphambili. Kumzimba wesicelo kuthunyelwa `token` kunye ne-`password`. I-token ivela kwi-imeyile yokuseta kwakhona ethunyelwe ngaphambili; iphasiwedi entsha kufuneka izalisekise iimfuno ezisezantsi ezisebenzayo kwiseva. Umnxeba awuyiyo idempotent. Emva kokuseta kwakhona ngempumelelo, i-token esetyenzisiweyo iyaphela okanye ayisenzelwanga olunye utshintsho lwephasiwedi. Ngoko ke umthengi-software akufuneki aphinde isicelo esiyekileyo ngokungacacanga kwilophu ekhawulezayo. Endaweni yoko kufuneka abonise isiphumo kwaye, xa kufuneka, avumele umsebenzisi ukuba aqalise inkqubo entsha yokuseta kwakhona ngomsebenzi we-Forgot-Password. I-token engasebenziyo, ephelelwe lixesha okanye esele isetyenzisiwe kunye nephasiwedi engazalisekisi iimfuno ezisezantsi kukhokelela kwi-`400 VALIDATION_ERROR`. Umyalezo wempazamo woluntu akufuneki uveze iinkcukacha ezongezelelweyo zeakhawunti. I-token nephasiwedi entsha akufuneki zivele kwiiparamitha ze-URL, kwizixhobo zohlalutyo, kwiilogi zoluntu okanye kwiiskrini zenkxaso. Isicelo sifanele kuphela kwinkqubo yefom ekhuselwe yi-HTTPS. Impendulo ephumeleleyo ithi `{"ok":true}`. Iqinisekisa utshintsho lwephasiwedi olwenziweyo, hayi ukungena okutsha ngokuzenzekelayo. Emva kokuseta kwakhona, umsebenzisi kufuneka angene ngokuqhelekileyo ngephasiwedi entsha. Iiseshoni ezikhoyo kufuneka ziphathwe ngokwengqiqo yokwenyani ye-backend; amaxwebhu akufuneki athi zonke izixhobo ziyaphuma ngokubanzi, ukuba oko akungqinwanga. Uvavanyo oluphilayo olubhaliweyo luquka imeko engalunganga ene-token engasebenziyo nesimo esilindelekileyo esingu-400. Ukuseta kwakhona okuphumeleleyo kokwenyani akwenziwanga ngokwahlukileyo nge-token yemveliso kobu bungqina. Umbhalo kufuneka ugcine lo mda ngokucacileyo kwaye akufuneki uthathe impumelelo ye-End-to-End ngenxa yokufana ne-Login okanye i-Forgot Password.
Ukuqinisekiswa nokhuseleko
Akukho kuqinisekiswa kufunekayo
Idempotent: Hayi
Iiparamitha
token(body, string, kuyafuneka)— I-Reset-Token ekwi-imeyilepassword(body, string, kuyafuneka)— Ipasiwedi entshaUmzekelo we-request
{"token":"<Ithokheni evela kwi-imeyile yokusetha kwakhona>","password":"IphasiwediEntshaEkhuselekileyo!"}Umzekelo we-response
{"ok":true}Iikhowudi zeempazamo
400 VALIDATION_ERROR — I-token ayisebenzi, iphelelwe lixesha okanye iphasiwedi ayizalisekisi iimfuno ezisezantsi.Ubungqina bovavanyo oluphilayo
Imeko engaphumelelanga (400, itokheni engavumelekanga) iqinisekisiwe ngqo; imeko yempumelelo ifana ngokwezobugcisa ne-forgot-password/login, ayizange ihanjiswe ngokwahlukileyo nge-Reset-Token yokwenene.