Rotate the expired password (OTP-gated)

Unauthenticated. Verifies email + current password + OTP + new-password policy, archives the old digest, writes the new digest, and refreshes password_expires_at. Returns 201 with data.type = "jwt" and sets the refresh-token cookie.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Password reminder update-password payload

data
object
Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json