action appwrite_account_update_recovery {
  label: "Complete Password Recovery"
  description: "Use this endpoint to complete the user account password reset. Both the **userId** and **secret** arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the [POST /account/recovery](/docs/client/account#accountCreateRecovery) endpoint.\n\nPlease note that in order to avoid a [Redirect Attack](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md) the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface."
  provider: appwrite
  method: PUT
  path: "/account/recovery"
  encoding: json
  input: {
    type: "object"
    required: ["password", "passwordAgain", "secret", "userId"]
    properties: {
      password: {
        type: "string"
        description: "New password. Must be between 6 to 32 chars."
      }
      passwordAgain: {
        type: "string"
        description: "New password again. Must be between 6 to 32 chars."
      }
      secret: {
        type: "string"
        description: "Valid reset token."
      }
      userId: {
        type: "string"
        description: "User account UID address."
      }
    }
  }
  output: {
    type: "object"
    description: "Token"
    required: ["$id", "expire", "secret", "userId"]
    properties: {
      "$id": {
        type: "string"
        description: "Token ID."
      }
      expire: {
        type: "integer"
        format: "int32"
        description: "Token expiration date in Unix timestamp."
      }
      secret: {
        type: "string"
        description: "Token secret key. This will return an empty string unless the response is returned using an API key or as part of a webhook payload."
      }
      userId: {
        type: "string"
        description: "User ID."
      }
    }
  }
}