Password Reset
Public, pre-auth endpoints for requesting and confirming a password reset.
Request Password Reset
POST /wallethero-api/password-reset-request
Request a password reset email. A reset token is created and emailed to the user.
Auth: Public (no token required — pre-auth flow).
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
email | string (email) | Yes | Email address of the account |
Example Request
bash
curl -X POST "https://api.wallethero.app/wallethero-api/password-reset-request" \
-H "Content-Type: application/json" \
-d '{
"email": "[email protected]"
}'Response (200)
Always returns success to prevent email enumeration:
json
{
"message": "If an account with this email exists, a password reset link has been sent."
}Notes
- Reset tokens expire after 1 hour.
- Requesting a new reset deletes any existing reset tokens for that email.
SDK
No SDK method — call the REST endpoint directly.
Confirm Password Reset
POST /wallethero-api/password-reset-confirm
Set a new password using the reset token from the email.
Auth: Public (no token required — pre-auth flow).
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
token | string (UUID) | Yes | Reset token from the email |
password | string | Yes | New password, minimum 8 characters |
Example Request
bash
curl -X POST "https://api.wallethero.app/wallethero-api/password-reset-confirm" \
-H "Content-Type: application/json" \
-d '{
"token": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"password": "newSecurePassword123"
}'Response (200)
json
{
"message": "Password reset successfully"
}Errors
| Status | Code | Description |
|---|---|---|
| 400 | INVALID_PAYLOAD | Token/password missing or invalid, token invalid/expired/already used, or user not found |
Notes
- Each reset token can only be used once; it is marked used after a successful reset.
- After resetting, the user should sign in with the new password.
SDK
No SDK method — call the REST endpoint directly.