Generate a password reset URL without sending email (admin only)
POST
/users/{userId}/generate_reset_link
Generates a Devise reset token and returns the full reset URL. Does not send email — the admin copies the link and delivers it to the user through a secure channel. Requires admin role. Works regardless of SMTP config.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Responses
Reset link generated
application/json
JSON "toast": { "title": "Reset link generated.", "message": [ "Reset link generated. Copy it and deliver to the user." ], "variant": "success" }, "reset_url": "https://vulcan.example.org/users/password/edit?reset_password_token=abc123def456"
{
}