Skip to content

Implement password reset token APIs #35

Open
Open
Implement password reset token APIs#35
Assignees
yunusBagewadi529
Labels
apiPublic or internal API design, request/response contracts, and endpoint behavior.backendServer-side logic, services, domain models, and business rules.emailEmail-related functionality such as verification, notifications, and transactional messaging.securityAuthentication, authorization, cryptography, and attack prevention changes.
@mohammadumar-dev

Description

@mohammadumar-dev
mohammadumar-dev
opened on Jan 12, 2026

Description

Implement APIs to initiate and complete password reset
using secure, single-use reset tokens.

Endpoints

  • POST /auth/forgot-password
    OR
  • POST /auth/reset-password

Acceptance Criteria

  • Secure reset token is generated and stored hashed
  • Token expiration is enforced
  • Password history rules are applied

Metadata

Metadata

Assignees

Labels

apiPublic or internal API design, request/response contracts, and endpoint behavior.backendServer-side logic, services, domain models, and business rules.emailEmail-related functionality such as verification, notifications, and transactional messaging.securityAuthentication, authorization, cryptography, and attack prevention changes.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions