Multi-tenancy authentication API reference - discovery email reset

Discovery Email reset

POSThttps://test.stytch.com/v1/b2b/passwords/discovery/email/reset

Reset the password associated with an email and start an intermediate session. This endpoint checks that the password reset token is valid, hasn’t expired, or already been used.

The provided password needs to meet the project's password strength requirements, which can be checked in advance with the password strength endpoint. If the token and password are accepted, the password is securely stored for future authentication and the user is authenticated.

Resetting a password will start an intermediate session and return a list of discovered organizations the session can be exchanged into.

Body parameters

password_reset_token* string

password* string

session_token string

session_jwt string

intermediate_session_token string

session_duration_minutes int

session_custom_claims map<string, any>

code_verifier string

locale string

Response fields

request_id string

status_code int

member_id string

member_email_id string

member_session object

session_token string

session_jwt string

intermediate_session_token string

member_authenticated boolean

mfa_required object

primary_required object

organization_id string

member object

organization object

curl --request POST \
  --url https://test.stytch.com/v1/b2b/passwords/discovery/email/reset \
  -u 'PROJECT_ID:SECRET' \
  -H 'Content-Type: application/json' \
  -d '{
    "password_reset_token": "SeiGwdj5lKkrEVgcEY3QNJXt6srxS3IK2Nwkar6mXD4=",
    "password": "GEQkzr#KYeSyM*t_"
  }'

RESPONSE

{
  "status_code": 200,
  "request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
  "member_id": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f",
  "intermediate_session_token": "",
  "member_authenticated": true,
  "mfa_required": null,
  "primary_required": null,
  "member_email_id": "member-email-test-1dd089b3-8904-47ef-b943-987968e549d4",
  "member": {...}
}