1
0
Fork 0
mirror of synced 2024-08-22 05:31:31 +12:00
appwrite/docs/references/account/update-recovery.md
2020-01-27 23:50:41 +02:00

3 lines
No EOL
532 B
Markdown

Use this endpoint to complete the user account password reset. Both the **userId** and **secret** arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the /auth/recovery endpoint.
Please note that in order to avoid a [Redirect Attack](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md) the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface.