Member password reset
The member password reset flow is a multi-step process that includes sending an email to the registered email address to reset a forgotten password and enable member authentication.
IMPORTANT
The member must have access to the registered email address to perform a password reset. To update a known password, use the member password update flow instead.
Member password reset flow
Create a password reset code
The password reset flow is initiated by calling the CreatePasswordResetCode endpoint. This endpoint creates a single-use password reset code and sends it to the member's registered email address.
The CreatePasswordResetCode endpoint
can be called with the member's current email or username.
{
"email": "string",
"username": "string"
}NOTE
The CreatePasswordResetCode endpoint will always return a successful response, regardless of the existence of a member with the provided email/username.
Validate the password reset code
As the created single-use password reset code may have expired, or may have already been used, use the ValidatePasswordResetCode to validate it.
{
"resetCode": "string"
}This endpoint returns an isValid response, indicating whether the password reset code can be used.
{
"isValid": true
}Reset member password
Finally, use the ResetPassword endpoint with the validated resetCode and updated password to set the member's new password.
{
"resetCode": "string",
"password": "string"
}IMPORTANT
When choosing a new password, the configured member password rules must be followed.