Generate Reset Password Token for Admin User

POST

/auth/user/{auth_provider}/reset-password

Generate a reset password token for an admin user. This API route doesn't reset the admin's password or send them the reset instructions in a notification.

Instead, This API route emits the auth.password_reset event, passing it the token as a payload. You can listen to that event in a subscriber as explained in this guide, then send the user a notification. The notification is sent using a Notification Module Provider, and it should have the URL to reset the password in the Medusa Admin dashboard, such as http://localhost:9000/app/reset-password?token=123.

Use the generated token to update the user's password using the Reset Password API route.

Request Example

JavaScript

Shell

Java

Swift

curl --location -g --request POST '{{BASE_URL}}/auth/user//reset-password' \
--header 'Content-Type: application/json' \
--data-raw '"admin@medusa-test.com"'

Response Example

400 - Not Allowed Error

{
    "message": "Discount must be set to dynamic",
    "type": "not_allowed"
}

Request

Path Params

auth_provider

string

required

The provider used for authentication.

Example:

emailpass

Body Params application/json

object {0}

Examples

Responses

🟢201Created

This response does not have a body.

🟠400Bad Request

🟠401Unauthorized

🟠404Record Not Found

🟠409409

🟠422Parameter Error

🔴500Server Error

Modified at 2025-06-17 04:10:32

Validate Authentication Callback

Retrieve Registration JWT Token