Verify Reset Password Code API
Verify the password reset code sent via email before allowing password change
Verify Reset Password Code API
Verify the password reset code sent to your email. This validation step ensures the code is correct before allowing the password to be changed.
Code Validation
Verify reset code is valid.
Time-Limited
Codes expire for security.
Security Step
Prevents unauthorized resets.
Endpoint Overview
/graphqlVerify the password reset code sent to a user's email address. This step must be completed before the password can be changed.
Request Parameters
emailString!RequiredThe email address that received the reset code.
verificationCodeString!RequiredThe verification code from the password reset email.
GraphQL Mutation
mutation verifyResetPasswordCode($email: String!, $verificationCode: String!) {
verifyResetPasswordCode(email: $email, verificationCode: $verificationCode) {
success
token
}
}Variables:
{
"email": "user@example.com",
"verificationCode": "123456"
}HTTP Request:
curl -X POST https://api.orbnet.com/graphql \
-H "Content-Type: application/json" \
-d '{
"query": "mutation verifyResetPasswordCode($email: String!, $verificationCode: String!) { verifyResetPasswordCode(email: $email, verificationCode: $verificationCode) { success token } }",
"variables": {
"email": "user@example.com",
"verificationCode": "123456"
}
}'Response
{
"data": {
"verifyResetPasswordCode": {
"success": true,
"token": "reset_token_abc123xyz"
}
}
}{
"errors": [
{
"message": "Invalid verification code",
"path": ["verifyResetPasswordCode"],
"extensions": {
"code": "INVALID_CODE"
}
}
],
"data": null
}{
"errors": [
{
"message": "Verification code has expired",
"path": ["verifyResetPasswordCode"],
"extensions": {
"code": "CODE_EXPIRED"
}
}
],
"data": null
}Password Reset Flow
Request Reset
Receive Code
Verify Code
Reset Password
Security Features
Code Expiration
Codes expire after a set time period.
One-Time Use
Codes can only be used once.
Rate Limited
Prevents brute force attempts.
Email Match
Code only works with original email.
Best Practices
Check Spam
Look in spam folder for reset email.
Act Quickly
Use code before it expires.
Exact Code
Enter code exactly as received.
Request New
Request new code if expired.
Related Endpoints
Token Required for Reset
After successful verification, use the returned token with the Reset Password endpoint to set your new password.
Ready to Set New Password?
Use the returned token to reset your password.