Implement password reset token APIs #35
Description
Description
Implement APIs to initiate and complete password reset
using secure, single-use reset tokens.
Endpoints
- POST
/auth/forgot-password
OR - POST
/auth/reset-password
Acceptance Criteria
- Secure reset token is generated and stored hashed
- Token expiration is enforced
- Password history rules are applied
Metadata
Metadata
Assignees
Labels
Public or internal API design, request/response contracts, and endpoint behavior.Server-side logic, services, domain models, and business rules.Email-related functionality such as verification, notifications, and transactional messaging.Authentication, authorization, cryptography, and attack prevention changes.