Reset password

import { createAdminClient } from '@spree/admin-sdk'

const client = createAdminClient({
  baseUrl: 'https://your-store.com',
  secretKey: 'sk_xxx',
})

// The token comes from the emailed link's ?token= param. On success the admin
// is signed in: a JWT comes back and the refresh token is set as an HttpOnly cookie.
const auth = await client.auth.resetPassword('reset-token-from-email', {
  password: 'new-password-123',
  password_confirmation: 'new-password-123',
})

spree api patch /auth/password_resets/{id} -d '{"password":"new-password-123","password_confirmation":"new-password-123"}'

{
  "token": "eyJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJ1c2VyX3R5cGUiOiJhZG1pbiIsImp0aSI6IjBiZTdhM2RmLWEyYzYtNDZkOC1hNTZiLWE4NDg4MGIyZGZiNCIsImlzcyI6InNwcmVlIiwiYXVkIjoiYWRtaW5fYXBpIiwiZXhwIjoxNzY4NDgyMDAwfQ.Vo2RzprqsH2XBa8DaSQ6awyXqlBA5QDFA5R7ygTezXY",
  "user": {
    "id": "adm_UkLWZg9DAJ",
    "email": "admin@example.com",
    "first_name": "Olga",
    "last_name": "Schneider",
    "full_name": "Olga Schneider",
    "selected_locale": null,
    "status": "active",
    "created_at": "2026-01-15T12:00:00.000Z",
    "updated_at": "2026-01-15T12:00:00.000Z",
    "last_active_at": null,
    "avatar_url": null,
    "roles": [
      {
        "id": "role_UkLWZg9DAJ",
        "name": "admin"
      }
    ],
    "stores": [
      {
        "id": "store_UkLWZg9DAJ",
        "name": "Spree Test Store",
        "code": "spree_1"
      }
    ]
  }
}

{
  "error": {
    "code": "password_reset_token_invalid",
    "message": "Password reset token is invalid or has expired."
  }
}