Password

Reset password

POST/api/v1/auth/password/reset

Sets a new password using the code from POST /password/forgot.

No authentication required

Credential check — tight, feeds automatic IP blocking

Body parameters

`email`stringrequired	Account email address.
`code`stringrequired	The reset code from the email.
`newPassword`stringrequired	New password. Minimum 8 characters.
`locale`string	en or fr.

Possible errors

422

OTP_INVALID

Code de vérification invalide ou expiré.

Notes

All existing sessions are revoked once the password is reset.

Request

curl --request POST \
  --url https://api.swiftgoma.com/api/v1/auth/password/reset \
  --header 'Content-Type: application/json' \
  --data '{
  "email": "aline@example.com",
  "code": "482913",
  "newPassword": "NewSecurePassword123",
  "locale": "fr"
}'

200Example response

{
  "success": true,
  "data": {
    "id": "3f2a1c9e-7b41-4e2a-9c31-8e6b2d4f10aa",
    "name": "Aline Mapendo",
    "role": "BUYER",
    "email": "aline@example.com",
    "isEmailVerified": true,
    "phone": "243812345678",
    "isPhoneVerified": false,
    "createdAt": "2026-01-14T10:32:00.000Z"
  }
}