Reset password - Royalti.io API

curl --request PATCH \
  --url https://api.royalti.io/auth/resetpassword \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "user@example.com",
  "new_password": "NewSecurePassword123!",
  "confirm_password": "NewSecurePassword123!"
}
'

{
  "message": "Password Reset Successful"
}

PATCH

auth

resetpassword

curl --request PATCH \
  --url https://api.royalti.io/auth/resetpassword \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "user@example.com",
  "new_password": "NewSecurePassword123!",
  "confirm_password": "NewSecurePassword123!"
}
'

{
  "message": "Password Reset Successful"
}

This endpoint requires authentication. Include your Bearer token in the Authorization header.

Description

/auth/resetpassword Description: The /auth/resetpassword endpoint allows users to reset their password. This endpoint supports two different flows:

Flow 1: Forgot Password (Email Code Reset)

Use this flow when the user has forgotten their password and received a reset code via email from /auth/forgotpassword.

Provide the code as a query parameter
Provide email and new_password in the request body
No authentication required (the code validates the request)

Flow 2: Change Password (Authenticated)

Use this flow when a logged-in user wants to change their current password.

Provide email, current_password, and new_password in the request body
Requires valid Bearer token authentication
The current_password must match the user’s existing password

Method: PATCH Password Requirements:

Minimum 8 characters
At least one uppercase letter
At least one lowercase letter
At least one number
At least one special character

Query Parameter (Flow 1 only):

Parameter	Type	Description
code	string	The verification code sent to the user’s email (required for forgot password flow)

Request Payload:

Parameter	Type	Required	Description
email	string	Yes	The email address of the user
new_password	string	Yes	The new password to be set
confirm_password	string	No	Password confirmation (must match new_password if provided)
current_password	string	Conditional	Required for authenticated password change (Flow 2)

Note: You must provide either code (query param) OR current_password (body), but not both.

Code Examples

const response = await fetch('https://api.royalti.io/auth/resetpassword', {
  method: 'PATCH',
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    "email": "user@example.com",
    "new_password": "NewSecurePassword123!",
    "confirm_password": "NewSecurePassword123!",
    "current_password": "OldPassword123!"
  })
});

const data = await response.json();
console.log(data);

import requests

response = requests.patch(
  'https://api.royalti.io/auth/resetpassword',
  headers={
    'Authorization': f'Bearer {token}'
  },
  json={"email":"user@example.com","new_password":"NewSecurePassword123!","confirm_password":"NewSecurePassword123!","current_password":"OldPassword123!"}
)

data = response.json()
print(data)

curl -X PATCH https://api.royalti.io/auth/resetpassword \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","new_password":"NewSecurePassword123!","confirm_password":"NewSecurePassword123!","current_password":"OldPassword123!"}'

Authorizations

Authorization

string

header

required

JWT Authorization header using the Bearer scheme. Format: "Bearer {token}"

Query Parameters

code

string

The verification code sent to the user's email (required for forgot password flow)

Body

application/json

string<email>

required

The email address of the user

Example:

"user@example.com"

new_password

string

required

The new password to be set (must meet password complexity requirements)

Example:

"NewSecurePassword123!"

confirm_password

string

Password confirmation (optional, must match new_password if provided)

Example:

"NewSecurePassword123!"

current_password

string

Current password (required for authenticated password change, not needed if using code)

Example:

"OldPassword123!"

Response

Password reset successful

message

string

​Description

​Flow 1: Forgot Password (Email Code Reset)

​Flow 2: Change Password (Authenticated)

​Code Examples

Authorizations

Query Parameters

Body

Response

Description

Flow 1: Forgot Password (Email Code Reset)

Flow 2: Change Password (Authenticated)

Code Examples