Request password reset email

POST https://app.speybooks.com/api/v1/password-reset/forgot-password

Request a password reset email. Always returns the same success message regardless of whether the email exists, preventing enumeration. Rate limited to one email per address per minute.

If the user exists and is active, invalidates previous tokens and sends a new reset link.

Body parameters

email string required

Email address of the account to reset. Always returns success to prevent email enumeration.

Response

200 Always returns success regardless of whether the email exists, to prevent enumeration attacks.

Show response fields

message string

Generic success message. Does not confirm account existence.

Error codes

429 Rate limit exceeded. Try again later.

Request POST /v1/password-reset/forgot-password curl

curl -X POST https://api.speybooks.com/v1/auth/forgot-password \
  -H "Content-Type: application/json" \
  -d '{"email": "user@example.com"}'

Response 200

{
  "success": true,
  "message": "If an account exists with this email, you will receive a password reset link shortly."
}