Password Management

Endpoints for managing, resetting, and updating user passwords.

Forgot Password (Request Reset OTP)

Triggers a password-reset OTP to be dispatched to the provided email address.

POST /api/v2/auth/forgot-password

Field	Type	Required	Description
`email`	`string`	Yes	Account email address

{
  "email": "user@example.com"
}

{
  "success": true,
  "message": "Password reset code sent to your email"
}

Sets a new password using the OTP received via email.

POST /api/v2/auth/reset-password

Field	Type	Required	Description
`email`	`string`	Yes	Account email address
`otpCode`	`string`	Yes	6-digit OTP code received
`newPassword`	`string`	Yes	New strong password

{
  "email": "user@example.com",
  "otpCode": "928371",
  "newPassword": "BrandNewPassword2026!"
}

{
  "success": true,
  "message": "Password reset successfully. Please log in with your new password."
}

Allows logged-in users to update their password by confirming their old password.

POST /api/v2/auth/change-password

Authorization: Bearer <jwt_access_token>

Field	Type	Required	Description
`currentPassword`	`string`	Yes	Existing password
`newPassword`	`string`	Yes	New desired password

{
  "currentPassword": "OldPassword123!",
  "newPassword": "NewStrongPassword2026!"
}

{
  "success": true,
  "message": "Password updated successfully"
}