POST/api/auth/reset-password
Isetha kabusha iphasiwedi usebenzisa i-Reset-Token evumelekile.
`POST /api/auth/reset-password` isetha kabusha iphasiwedi isebenzisa i-reset token evumelekile. Lo mzila awudingi ukungena osekukhona, ngoba uhloselwe kanye abasebenzisi abangasakwazi ukusebenzisa iphasiwedi yabo yangaphambili. Ku-body ye-request kudluliselwa `token` ne-`password`. I-token ivela ku-imeyili yokusetha kabusha ethunyelwe ngaphambili; iphasiwedi entsha kufanele ihlangabezane nezimfuneko ezincane ezisebenzayo ohlangothini lweseva. Ukubiza akuyona i-idempotent. Ngemuva kokusetha kabusha okuphumelele, i-token esetshenzisiwe isisetshenzisiwe noma ayisahloselwe olunye ushintsho lwephasiwedi. Ngakho-ke i-client akufanele iphinde i-request enqamuke ngokungacacile ku-loop esheshayo. Esikhundleni salokho kufanele ibonise umphumela futhi uma kudingeka ivumele umsebenzisi aqale inqubo entsha yokusetha kabusha ngomsebenzi we-Forgot-Password. I-token engavumelekile, ephelelwe yisikhathi noma esivele isetshenzisiwe, kanye nephasiwedi engahlangabezani nezimfuneko ezincane, kuholela ku-`400 VALIDATION_ERROR`. Umlayezo wephutha womphakathi akufanele uveze eminye imininingwane ye-akhawunti. I-token nephasiwedi entsha akufanele kuvele kumapharamitha e-URL noma kumathuluzi okuhlaziya, kuma-log omphakathi noma kuma-screenshot okusekela. I-request ingeyenqubo yefomu evikelwe yi-HTTPS kuphela. I-response ephumelelayo ithi `{"ok":true}`. Iqinisekisa ushintsho lwephasiwedi olwenziwe, hhayi ngokuzenzakalelayo ukungena okusha. Ngemuva kokusetha kabusha, umsebenzisi kufanele angene ngokujwayelekile ngephasiwedi entsha. Amaseshini akhona kufanele aphathwe ngokwemqondo wangempela we-backend; imibhalo akufanele isho ukuphuma okujwayelekile kuwo wonke amadivayisi uma lokhu kungafakazelwanga. Ukuhlola bukhoma okufakazelwe kuhlanganisa isimo esingalungile ne-token engavumelekile nesimo esilindelekile esingu-400. Ukusetha kabusha okuphumelelayo kwangempela akwenziwanga ngokwehlukile nge-token yokukhiqiza kulobu bufakazi. Umbhalo kufanele ugcine ngokusobala lo mkhawulo futhi akufanele uthathe empumelelweni efanayo ye-Login noma ye-Forgot Password impumelelo okuthiwa ye-end-to-end.
Ukuqinisekisa ubunikazi nokuvikeleka
Akudingeki ukuqinisekisa ubunikazi
I-idempotent: Cha
Amapharamitha
token(body, string, kuyadingeka)— I-Reset-Token esuka ku-imeyilipassword(body, string, kuyadingeka)— Ipasiwedi entshaIsibonelo se-request
{"token":"<Ithokheni evela ku-imeyili yokusetha kabusha>","password":"IphasiwediEntshaEphephile!"}Isibonelo se-response
{"ok":true}Amakhodi amaphutha
400 VALIDATION_ERROR — I-Token ayivumelekile, iphelelwe yisikhathi noma iphasiwedi ayifinyeleli ezidingweni eziphansi.Ubufakazi bokuhlolwa bukhoma
Icala elingemihle (400, i-token engavumelekile) liqinisekisiwe bukhoma; icala eliphumelelayo lifana ngokwemishini ne-forgot-password/login, alizange lihlolwe ngokwehlukana nge-Reset-Token yangempela.