Reset password

Resetting a password requires the code returned from the forgotPassword mutation. If the code has already expired, the mutation will return an error. A code can only be used once. So once you submit a valid password reset code along with the user's desired new password, you won't be able to use the code again.

Query

mutation ResetPassword($code: String!, $newPassword: String!) {
  tenant {
    resetPassword(code: $code, newPassword: $newPassword) {
      id
      username
      updatedAt
    }
  }
}

Variables

{
  "code": "BAhkWOopgRXDqC_fEQ5n-",
  "newPassword": "password"
}

Response

{
  "data": {
    "tenant": {
      "resetPassword": {
        "id": "1",
        "updatedAt": "2020-12-28T20:57:20",
        "username": "[e-mail]"
      }
    }
  }
}

Error response if code is either used, or already expired.

{
  "data": {
    "tenant": {
      "resetPassword": null
    }
  },
  "errors": [
    {
      "locations": [
        {
          "column": 5,
          "line": 3
        }
      ],
      "message": "invalid code",
      "path": [
        "tenant",
        "resetPassword"
      ]
    }
  ]
}