Verify Password Reset Code
Public: checks a reset code and returns a single-use reset token.
Public: checks a reset code and returns a single-use reset token.
Arguments
email*String!Email address.
code*String!The code from the email.
- returns
Result of a self-service password reset step (code sent by email).
success*Boolean!True when the step succeeded.
message?StringHuman-readable message, null when none.
resetToken?StringSet only by a successful verifyPasswordResetCode: single use, valid for 10 minutes.
errorCode?StringFailure kind: UNAVAILABLE, RATE_LIMITED, INVALID_EMAIL, INVALID_CODE, CODE_LOCKED, TOKEN_INVALID, PASSWORD_TOO_SHORT, PASSWORD_TOO_LONG, PASSWORD_MISMATCH or INTERNAL; null on success.
attemptsLeft?IntINVALID_CODE only: wrong tries left before the code is cancelled.
mutation VerifyPasswordResetCode($email: String!, $code: String!) { verifyPasswordResetCode(email: $email, code: $code) { success message resetToken errorCode attemptsLeft }}