B2B Saas Authentication

/

API reference

/

Passwords

/

Reset Options

/

Password reset by session

Session reset

POSThttps://test.stytch.com/v1/b2b/passwords/session/reset

Reset the Member's password using their existing session. The endpoint will error if the session does not contain an authentication factor that has been issued within the last 5 minutes. Either session_token or session_jwt should be provided.

Note that a successful password reset via an existing session will revoke all active sessions for the member_id, except for the one used during the reset flow.

Body parameters

organization_id* string
password* string
session_token string
session_jwt string
session_duration_minutes int
session_custom_claims map<string, any>
locale string

Response fields

request_id string
status_code int
member_session object
member_id string
member object
organization object
session_token string
session_jwt string
intermediate_session_token string
member_authenticated boolean
mfa_required object
primary_required object
curl --request POST \
  --url https://test.stytch.com/v1/b2b/passwords/session/reset \
  -u 'PROJECT_ID:SECRET' \
  -H 'Content-Type: application/json' \
  -d '{
    "organization_id": "organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931",
    "password": "$B&M)3$B$eCk_2@c",
    "session_token": "mZAYn5aLEqKUlZ_Ad9U_fWr38GaAQ1oFAhT8ds245v7Q"
  }'

RESPONSE

200
{
  "status_code": 200,
  "request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
  "member_id": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f",
  "member_session": {...},
  "member": {...},
}

Common Error Types