First Time Reset — POST /api/v1/auth/first-time-reset

First Time Reset

Forced password reset for self-registered users on first login.

Endpoint: POST /api/v1/auth/first-time-reset

Authentication: Send a signed-in user’s access token in Authorization: Bearer <access token>, or an API key in X-API-Key: <API key>.

Parameters

Name	In	Required	Type	Default	Description
X-API-Key	header	no	string or null		API key, as an alternative to the access token (see Authentication).

Request body

Content type	Body	Required
application/json	FirstTimeResetRequest	yes

Responses

Status	Meaning	Body
204	Successful Response	No body
422	Validation Error	HTTPValidationError (application/json)

204 returns no body.

Errors this endpoint returns, read from its source code:

• 400, with the message “Passwords do not match”
• 403, with the message “Password reset not required for this account. Use change-password instead”
• 503, with the message “Token revocation store unavailable; password reset was not applied”

It can also return 401 if your credential is missing or expired, 403 if your credential does not allow this request, and 404 if the item does not exist or you cannot see it. Your role, your project membership and the key’s scope decide what a credential allows. See Errors and retries.

More details

• Group: Authentication
• Operation ID: first_time_reset_api_v1_auth_first_time_reset_post
• Source code: backend/app/routers/auth.py, line 695
• Specification: OpenAPI JSON