Skip to content

Send Devise password reset email (admin only)

POST
/users/{userId}/send_password_reset

Triggers a Devise password reset email to the specified user. Requires admin role and SMTP to be configured. Returns 422 if SMTP is disabled — use the generate_reset_link endpoint instead. Returns 500 if email delivery fails.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Responses

Reset email sent successfully

application/json
JSON
{
  
"toast": {
  
  
"title": "Reset email sent.",
  
  
"message": [
  
  
  
"Password reset email sent to jane.doe@example.org."
  
  
],
  
  
"variant": "success"
  
}
}

Playground

Server
Authorization

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)