forgot_password auth

POST 
/v1/auth/forgot-password

Request a password-reset OTP for the given email. Always returns 200 with the same generic message regardless of whether the account exists, to prevent account enumeration. Per-email and per-IP rate limits apply.

Request

Responses

200

Generic acknowledgement. Returned whether or not an account exists for the supplied email.

400

bad_request: Invalid input

429

Too many forgot-password requests for this email or IP.