Email a password reset code

POST 
/admin/auth/password/forgot

Answers 202 unconditionally, for the same anti-enumeration reason the magic-link route does: a response that varied with whether the address is registered would answer the one question this route must not answer.

Request

Responses

202

Accepted — always

400

Malformed body, or email missing

429

too_many_requests — three per hour per address, three per hour per IP