Skip to main content
POST
Reset recovered password

Body

application/json

New account password.

Request to set a new password after recovery-code verification.

password
string
required

New password for the Vero OMS account.

Minimum string length: 1

Response

Password updated; authenticated session or pending second-factor challenge.

Check status on every successful HTTP response. authenticated includes the JWT; mfa_required requires POST /api/auth/mfa/verify with the response cookie.

status
enum<string>
required

Indicates that authentication is complete and the JWT can be used.

Available options:
authenticated
sessionToken
string
required

Account session token. Keep it confidential. Use it for session resumption; use jwt for REST API authorization.

jwt
string
required

Bearer JWT for protected REST API requests. Send it as Authorization: Bearer .

session
object
required

Active authenticated session.

identity
object | null
required

Account identity, or null if absent.

tokenizedSession
object
required

Authenticated session containing the JWT in tokenized.