Validate the password reset token received via email. This is the second step in the password reset flow, verifying the token before allowing password change.
POST
/api/v1/auth/confirm-reset-token
curl \
--request POST 'http://localhost:3500/api/v1/auth/confirm-reset-token' \
--header "Content-Type: application/json" \
--data '{"email":"user@university.edu","token":"abc123def456ghi789"}'
Request example
Confirm reset token received in email
{
"email": "user@university.edu",
"token": "abc123def456ghi789"
}
Response examples (200)
{
"message": "Reset token confirmed successfully",
"success": true
}
Response examples (400)
{
"error": "Bad Request",
"message": [
"token should not be empty",
"email must be an email"
],
"statusCode": 400
}
Response examples (401)
{
"error": "Unauthorized",
"message": "Invalid or expired reset token",
"statusCode": 401
}
Response examples (404)
{
"error": "Not Found",
"message": "User not found",
"statusCode": 404
}