Error
Authentication
Request a password reset
Always answers 202, whether or not the address has an account — the response must not reveal which. A new request voids any older link. The token is valid for one hour.
Rate limited to 5 requests per hour per IP.
POST
Error