{ "opencollection": "1.0.0", "info": { "name": "Stytch B2B Authentication Application Passwords API", "version": "2.0.0" }, "items": [ { "info": { "name": "Passwords", "type": "folder" }, "items": [ { "info": { "name": "Resetstart", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/passwords/email/reset/start", "body": { "type": "json", "data": "{}" } }, "docs": "Initiates a password reset for the email address provided. This will trigger an email to be sent to the address, containing a magic link that will allow them to set a new password and authenticate." }, { "info": { "name": "Reset", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/passwords/email/reset", "body": { "type": "json", "data": "{}" } }, "docs": "Reset the user's password and authenticate them. This endpoint checks that the magic link `token` is valid, hasn't expired, or already been used – and can optionally require additional security settings, such as the IP address and user agent matching the initial reset request.\n\nThe provided password needs to meet our password strength requirements, which can be checked in advance with the password strength endpoint. If the token and password are accepted, the password is securely stored for futu" }, { "info": { "name": "Reset", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/passwords/existing_password/reset", "body": { "type": "json", "data": "{}" } }, "docs": "Reset the User's password using their existing password.\n\nNote that a successful password reset via an existing password will revoke all active sessions for the `user_id`." }, { "info": { "name": "Reset", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/passwords/session/reset", "body": { "type": "json", "data": "{}" } }, "docs": "Reset the user’s password using their existing session. The endpoint will error if the session does not have a password, email magic link, or email OTP authentication factor that has been issued within the last 5 minutes. This endpoint requires either a `session_jwt` or `session_token` be included in the request.\n\nNote that a successful password reset via an existing session will revoke all active sessions for the `user_id`, except for the one used during the reset flow." } ] } ], "bundled": true }