curl --request POST \
--url https://api.example.com/api/v2/auth/forgot-passwordRequest a password reset link
curl --request POST \
--url https://api.example.com/api/v2/auth/forgot-password{ "email": "user@example.com" }
200 OK (prevents user enumeration). Reset link expires in 1 hour.
Then reset the password:
POST /api/v2/auth/reset-password
{"token": "from_email", "new_password": "new_secure_password"}