SpendRock Docs
Auth

Set a new password from a reset link (ACCT-3)

Also marks the email verified (the link proves it) and signs out every session of the account. It doesn't sign in; sign in with the new password. No authentication needed.

POST
/auth/password/reset

Also marks the email verified (the link proves it) and signs out every session of the account. It doesn't sign in; sign in with the new password.

No authentication needed.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/auth/password/reset" \  -H "Content-Type: application/json" \  -d '{    "token": "string",    "password": "stringstri"  }'
Empty

Email a password reset link (ACCT-3) POST

Sends a link (valid 1h, single use) if the email has an account. Same answer either way. No authentication needed.

The caller's sign-in methods (ACCT-2, Settings → Sign-in methods) GET

Required scope: `account:read` (personal access tokens; sessions have every scope).