Customers
Reset a password
POST
tenantKeyheader
X-Tenant-Key<token>The public store key (pk_live_…). Required on every call.
X-Client-IP?stringOptional. IP address of the shopper (one IPv4/IPv6, no port, no list). Honoured only together with a valid X-Tenant-Secret; ignored otherwise. Used for rate limits and recorded with form submissions.
X-Tenant-Secret?stringOptional here. Server secret of the store: server-to-server only, never from a browser. Enables X-Client-IP.
application/json- body
token*stringemail*stringFormat
emailpassword*stringLength
8 <= lengthpassword_confirmation*stringLength
8 <= lengthapplication/json- response
data*curl -X POST 'https://api.elaraone.app/api/v1/auth/password/reset' \ -H 'X-Tenant-Key: pk_live_…' \ -H 'X-Tenant-Secret: your-server-secret' \ -H 'Content-Type: application/json' \ -d '{ "token": "string", "email": "[email protected]", "password": "stringst", "password_confirmation": "stringst"}'Example Response
{ "data": { "status": "password-reset" }}