POST `/auth/reset-password`

Set a new password after successful verification via verification code, supporting both email and SMS verification methods. References: NIST SP 800-63B §5.1.1.2, OWASP ASVS V2.1.

Authentication None application/json

Request Body

Schema: dto.ResetPasswordRequest

Field	Type	Required	Constraints	Description
`code`	`string`	Yes		Verification code
`identity`	`string`	Yes		Email or phone
`new_password`	`string`	Yes	length: 8–32	New password

Responses

Status	Description	Schema
200	Password reset successful	`dto.ResetPasswordResponse`
400	Invalid request parameters or expired verification code	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal server error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Referenced Schemas

dto.ResetPasswordResponse

Reset password response

Field	Type	Required	Example	Constraints	Description
`message`	`string`	No			Message

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No

Try this API in Scalar → Download OpenAPI spec (JSON) ↓

POST /auth/reset-password