Start a password reset. Always returns 200 regardless of whether the email exists (no enumeration).

POST /v1/auth/password-reset/start

End-user session operationId: start_password_reset

Authorization

Called from the browser with the publishable application id (x-application-id); the access token lives in memory.

200 Reset email sent if the account exists

curl -X POST "http://localhost:8080/v1/auth/password-reset/start" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "string"
}'

live request

POST http://localhost:8080/v1/auth/password-reset/start

application/json