POST /auth/recover-account

When the user cannot access their primary identity (email or phone), verify identity through a pre-set recovery contact and initiate the password reset flow. References: NIST SP 800-63B §5.1.1.2, OWASP ASVS V2.3.

Request Body

Schema: dto.RecoverAccountRequest

Field	Type	Required	Example	Constraints	Description
identity	string	Yes

Responses

Status	Description	Schema
200	Recovery code sent to trusted contact	dto.RecoverAccountResponse
400	Invalid request parameters	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.RecoverAccountResponse

Field	Type	Required	Example	Constraints	Description
contact_types	array of string	No
expires_in	integer	No
masked_to	string	No
message	string	No

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No