POST /auth/recovery/complete
验证恢复码和恢复令牌后设置新密码，自动撤销所有会话以确保账户安全，并发送密码变更通知。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。
身份认证 None application/json
Request Body
Schema: dto.CompleteAccountRecoveryRequest
| Field | Type | Required | Example | Constraints | Description |
|---|
code |
string |
Yes |
|
|
验证码 |
new_password |
string |
Yes |
|
length: 8–? |
新密码 |
recovery_token |
string |
Yes |
|
|
恢复令牌 |
Referenced Schemas
dto.CompleteAccountRecoveryResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
message |
string |
No |
|
|
|
gitee_com_linmes_authms_base_dto.SimpleResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
code |
integer |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|