API reference / Accounts
post
/v2/accounts/password-resetAsk for a password-reset link
- Operation
requestPasswordReset- Authentication
- None — public
**Always 202**, for the same reason as the confirmation resend: an answer that differed for a known and an unknown address would say who has an account here. Only an active, confirmed applicant account is mailed. The link works once and expires in an hour.
Request
Body
emailstringrequiredResponses
202Accepted. Says nothing about whether the address exists.
statusstringrequiredmessagestringrequired400The request body or query failed validation.
errorobjectrequired429Too many requests. Three per fifteen minutes per address.
errorobjectrequiredExample
curl -X POST https://api.haavisa.com/v2/accounts/password-reset \
-H "Content-Type: application/json" \
-d '{
"email": "<email>"
}'More in Accounts
POST/v1/tokenGET/v1/token/introspectPOST/v1/token/mfaPOST/v1/token/revokePOST/v2/accountsGET/v2/accounts/mePATCH/v2/accounts/meGET/v2/accounts/me/messaging-consentPUT/v2/accounts/me/messaging-consentPOST/v2/accounts/mfa/activatePOST/v2/accounts/mfa/disablePOST/v2/accounts/mfa/enrollPOST/v2/accounts/password-reset/confirmPOST/v2/accounts/sign-inPOST/v2/accounts/sign-outPOST/v2/accounts/verify-emailPOST/v2/accounts/verify-email/resend
Something unclear? The eligibility guide explains the model behind the answers; the errors guide covers the envelope.