{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://auth.proudbase.com/schemas/events/user.password_reset.v1.json",
  "title": "user.password_reset (v1)",
  "description": "A user completed a self-service password reset. Emitted when a user completes the self-service password reset flow (the reset proof is consumed and the password replaced). All sessions and grants are revoked (session.revoked with reason \"password_reset\"); MFA requirements are unchanged. Ordinary password changes and administrator actions do not emit this event. org_id is never set.",
  "type": "object",
  "allOf": [
    {
      "$ref": "envelope.v1.json"
    }
  ],
  "properties": {
    "event_type": {
      "const": "user.password_reset"
    },
    "event_version": {
      "const": 1
    },
    "data": {
      "type": "object",
      "description": "Event data. All members are identifiers or state, so the minimal and standard payload forms are identical.",
      "required": [
        "user_id"
      ],
      "properties": {
        "user_id": {
          "$ref": "envelope.v1.json#/$defs/user_id",
          "description": "The user whose password was reset."
        }
      },
      "additionalProperties": false
    },
    "org_id": {
      "description": "Never set for this event type by the current server."
    }
  },
  "x-event-type": "user.password_reset",
  "x-subscribable": true,
  "x-emitted-by": [
    "internal/authentication/recovery.go: (*Service).CompletePasswordReset"
  ],
  "x-org-scoped": "never",
  "examples": [
    {
      "event_id": "obx_01jbg4gcz7r0pn6p1jgqeracc5",
      "event_type": "user.password_reset",
      "event_version": 1,
      "occurred_at": "2026-10-10T12:10:00.123456789Z",
      "realm_id": "rlm_01jbxe2ktygrnsjxt1j8etsahj",
      "data": {
        "user_id": "usr_01jb4rsd73q99h2e30n9ak6n8d"
      }
    }
  ]
}