Validate a password reset token
GET
/password/check-reset-token
const url = 'https://auth.timetonic.com/api/password/check-reset-token?token=example&email=hello%40example.com';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url 'https://auth.timetonic.com/api/password/check-reset-token?token=example&email=hello%40example.com'Validate a reset token and return the applicable authentication policies for the reset form. The email is required to resolve the user (the token is stored hashed per-user). Invalid, expired, and unknown-email all return an identical neutral 400 (anti-enumeration); the endpoint is timing- equalized and rate-limited.
Parameters
Section intitulée « Parameters »Query Parameters
Section intitulée « Query Parameters »token
required
string
email
required
string format: email
Responses
Section intitulée « Responses »Token valid — authentication policies returned
Media typeapplication/json
object
success
boolean
authenticationPolicies
object
Examplegenerated
{ "success": true, "authenticationPolicies": {}}Bad request
Media typeapplication/json
object
success
boolean
error
string
message
string
Example
{ "success": false, "error": "bad_request", "message": "Invalid request"}