Clarification for password reset

@aniri Is the backend completely implemented for resetting the password?

I see the endpoint _/auth/request-reset-password_ which has a correspondence to a screen in the application (02.2) , but this endpoint seem to just send a reset email.

For screen 02.3 I'm assuming that we should hit endpoint _/auth/reset-password_, but what should we use for _userId_ and _resetToken_ if the previous endpoint doesn't return anything?

Any thoughts on this?

Start by reviewing the /auth/request-reset-password and /auth/reset-password endpoints alongside application screens 02.2 and 02.3. Determine the expected userId and resetToken flow; the issue is complete when the backend and Android screen contract is defined and the required implementation scope is clear.

Written by the indexing model from the issue text.