01.software Docs

resetCustomerPassword

Use the SDK for application integration. This read-only reference covers Commerce, Customer Auth, Membership and Events.

All HTTP operations
POST
/api/customers/reset-password

Tenant-bound hashed single-use reset tokens retain their original expiry across reissue. Reset discards all sibling tokens and returns a five-minute single-attempt recovery login permit; send it with the new password. Invalid token is 400. Successful password reset does not become 503 merely because post-commit revocation is queued.

Authorization

publishableKey
headerX-Publishable-Key<token>

Tenant publishable key for authentication (sent via X-Publishable-Key header)

Request Body

application/json
  1. body
token*string
Length1 <= length <= 128
password*string
Length8 <= length <= 128

Response Body

Existing direct customer-auth wire

application/json
  1. response
message*string
recoveryLoginPermit*string
recoveryLoginPermitExpiresAt*string
Formatdate-time

Examples may be generated from schemas; they are illustrative, not recorded successful API calls. Example snippets may omit required authentication headers.

Example Request
curl -X POST 'https://api.01.software/api/customers/reset-password' \  -H 'Content-Type: application/json' \  -d '{  "token": "string",  "password": "stringst"}'
Example Response
{  "message": "string",  "recoveryLoginPermit": "string",  "recoveryLoginPermitExpiresAt": "2019-08-24T14:15:22Z"}