POST /api/admin/admins/:sub/password-reset (admins.disable: owners, step-up): the staff pool's only password reset (no self-service recovery). Revokes that admin's sessions and has Cognito email a new temporary password. Refused on yourself. Audited admin.password_reset.Staff cookie session; permission admins.disable; fresh password + TOTP step-up (10 minutes). Write requests need same-origin JSON and X-Admin-CSRF from this session.Source snapshot: admin/src/app/api/admin/admins/[sub]/password-reset/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.
Request
Authorization
API Key
Add parameter in cookie
__Host-hwa_session
Example:
__Host-hwa_session: ********************
or
Path Params
Header Params
Responses
🟢200
application/json
POST /api/admin/admins/:sub/password-reset (admins.disable: owners, step-up): the staff pool's only password reset (no self-service recovery). Revokes that admin's sessions and has Cognito email a new temporary password. Refused on yourself. Audited admin.password_reset.
Bodyapplication/json
🟠400
🟠401
🟠403
🟠429
⚪default
Request Request Example
Shell
JavaScript
Java
Swift
curl--location--request POST '/api/admin/admins//password-reset' \
--header'X-Admin-CSRF;'
