Request a password-reset code

POST 
/api/v1/password/forgot

Always 200, whether or not the identifier exists (does not leak account existence).

Request

Responses

200

Code sent if the account exists

401

Missing/invalid/disabled touchpoint credential

429

App-level rate limit exceeded