Recovery Access

Initiates the password recovery process by sending a verification code to the user's registered email or phone number. Returns a temporary token for the next recovery step.

Endpoint

POST/v2/auth/recovery/request

Link

Gateway APIstagep.tst-apidmndelss.com

Request

Headers

Key	Value	Required
Authorization	Bearer <JWT>	Yes
Content-Type	application/json	Yes
Accept	application/json	Yes

Request Body (JSON)

Field	Type	Description	Required	Example
login	string	User's email or username.	Yes	"[email protected]"

Example Request Body:

json

{
  "login": "[email protected]"
}

---

Response (200 OK)

Returns a temporary token to be used in the recovery confirmation step.

Response Fields

Field	Type	Description	Example
token	string	One-time token for password reset. Valid for 15 minutes.	"xyz789abc"

Example Response:

json

{
  "token": "xyz789abc"
}

---

Error Responses

1. User Not Found:

   json

   {
     "error": "Account not found"
   }

2. Too Many Requests:

   json

   {
     "error": "Recovery attempts exceeded. Try again in 30 minutes"
   }

---

Next Steps

1. Check Email/SMS for a 6-digit recovery code.
2. Submit Code + Token to /v2/auth/recovery/confirm with a new password.

---

Notes

• Token Validity: 15 minutes (configurable).
• Security:

  • Codes are sent only to verified emails/phones.
  • Rate-limited to 3 attempts per hour.
• UI Flow:

  

Examples

Real request

Authorization:
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjE2NCwiZXhwIjoxNzYxMTI5NzYxLCJrZXkiOiI1Y2ZiOGZjN2RmYjk4ZjVkYmIyZTgwNTVkZWFhN2U2Zjk4MzEyYmE3Iiwib3RwX3ZlcmlmaWVkIjpmYWxzZX0.atnfresV4v9XT9f_ze3ShmVs337TWt087Ze0MNuiiWk
{
  "login": "[email protected]"
}

Real response

200 OK

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjE2NCwiZXhwIjoxNzYxMTMwMjY4LCJvdHBfdmVyaWZpZWQiOmZhbHNlfQ.JRS7E-q__bQU8o5pM1NMIgxN4KRf5jO2LpJX2_E_3F4"
}