Generate Reset Password Token for Admin User

POST

/auth/user/{auth_provider}/reset-password

Generate a reset password token for an admin user. This API route doesn't reset the admin's password or send them the reset instructions in a notification.

Instead, This API route emits the auth.password_reset event, passing it the token as a payload. You can listen to that event in a subscriber as explained in this guide, then send the user a notification. The notification is sent using a Notification Module Provider, and it should have the URL to reset the password in the Medusa Admin dashboard, such as http://localhost:9000/app/reset-password?token=123.

Use the generated token to update the user's password using the Reset Password API route.

Request

Path Params

Body Params application/json

Examples

Responses

🟢201Created

This response does not have a body.

🟠400Bad Request

🟠401Unauthorized

🟠404Record Not Found

🟠409409

🟠422Parameter Error

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl -X POST '{backend_url}/auth/user/emailpass/reset-password' \
-H 'Content-Type: application/json' \
--data-raw '{
  "identifier": "admin@medusa-test.com"
}'

Response Example

400 - Not Allowed Error

{
    "message": "Discount must be set to dynamic",
    "type": "not_allowed"
}

Modified at 2025-06-17 04:10:32

Validate Authentication Callback

Retrieve Registration JWT Token