Browse the API reference

Reset Password

post/v1/auth/password/reset

Part of Auth.

Reset password with token from email. Invalidates all existing sessions. Returns JWT for auto-login.

Authentication

This operation does not require an API key.

Request body

Required, application/json.

Field	Type	Description
`token`required	string	Password reset token from email link
`new_password`required	string	New password (must meet security requirements)

Example request

curl

curl -X POST "https://api.robosystems.ai/v1/auth/password/reset" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string",
  "new_password": "string"
}'

Responses

200 Successful Response

Field	Type	Description
`user`required	object	User information
`org`optional	object	Organization information (personal org created automatically on registration)
`message`required	string	Success message
`status`optional	string	Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present) One of: `authenticated`, `mfa_required`, `mfa_enrollment_required` Default: `authenticated`
`mfa_token`optional	string	Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'
`token`optional	string	JWT authentication token (optional for cookie-based auth)
`expires_in`optional	integer	Token expiry time in seconds from now
`refresh_threshold`optional	integer	Recommended refresh threshold in seconds before expiry

Status	Meaning
400	Invalid request
422	Validation Error
429	Rate limit exceeded
500	Internal server error