---
title: "Add POST /auth/reset-password to confirm password reset"
description: "New endpoint to complete the password reset flow using the oobCode from the reset email."
date: 2026-05-06
tags: ["TIE Auth"]
---

> Documentation Index
> Fetch the complete documentation index at: https://truememory-docs.mvstg.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Add POST /auth/reset-password to confirm password reset

A new `POST /auth/reset-password` endpoint completes the two-step password reset flow. Previously, callers had to call Firebase's Identity Toolkit REST API directly to exchange an `oobCode` for a new password. Now TIE Auth handles this as a first-class endpoint.

**Request:**

```bash
POST /auth/reset-password
Content-Type: application/json

{
  "oob_code": "<code from the reset email link>",
  "new_password": "NewSecurePassword123!"
}
```

**Response** (`200 OK`): `{ "status": "ok" }`

**New error codes:**

| Code | Status | When |
|------|--------|------|
| `AUTH_INVALID_OOB_CODE` | 400 | The code is invalid or has expired |
| `AUTH_PASSWORD_RESET_FAILED` | 400 | Other Firebase-level failure |

The existing `POST /auth/forgot-password` endpoint is unchanged — it still sends the reset email as step 1.

See [Password Reset](/authentication/email-password/#password-reset) for the full flow.

Source: https://truememory-docs.mvstg.com/changelog/tie-auth/2026-05-06-reset-password-endpoint//index.md