A request for creating a new password using the password action token.
-| The public client ID.
When using the hint
query parameter either a public or private client ID can be used.
6b200ebd-7843-4073-aef9-792482c9e1de
Password action token that was returned from the /password/reset
endpoint.
QJO3CA7QTPVCQ3OMROXF2MTDDED3EEC3
PKCE code verifier. Created by the client.
The code_challenge
is created by SHA256 hashing the code_verifier
and Base64 encoding the resulting hash.
The code_verifier
should be a high entropy cryptographically random string with a minimum of 43 characters and a maximum of 128 characters.
Ar0lAwU_jsuA~ZXX8-JnMbZFxrnDot2OtgLEi1kOT_FxD6Bo0EQDbbrvoym9xHvatNGnNzrObLJeK6e4U9m4pveRMbdwNGa4jwiAlKGvijVn0PW0hqb03_w1gQE00wTo
The new password to set for the shopper associated with the password action token.
new_password
The channel that the request is for. For a B2C Commerce request, this is angalous to the site ID.
RefArch
Adding a hint
query parameter with a value of cross_device
will remove the need to have the code_verifier for password reset request. If the hint
query parameter is used it must also have been used in the password action request.
cross_device