1
0
Fork 0
mirror of synced 2024-07-06 07:00:56 +12:00
appwrite/docs/references/account/update-recovery.md
2020-01-12 02:19:28 +02:00

3 lines
531 B
Markdown

Use this endpoint to complete the user account password reset. Both the **userId** and **token** arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the /auth/recovery endpoint.
Please note that in order to avoid a [Redirect Attack](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md) the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface.