<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Forgot Password]]></title><description><![CDATA[<p dir="auto">Hi,</p>
<p dir="auto">We are using <code>anonymous_client.forgot_password</code> to reset the forgotten passwords. We have noticed that the API never returns 404 (The User could not be found.) status code, even if the provided email address does not exist. It returns 200.</p>
<p dir="auto">Could you please have a look?</p>
<p dir="auto">Best regards,<br />
JM</p>
]]></description><link>https://fusionauth.io/community/forum/topic/3115/forgot-password</link><generator>RSS for Node</generator><lastBuildDate>Thu, 23 Apr 2026 18:03:23 GMT</lastBuildDate><atom:link href="https://fusionauth.io/community/forum/topic/3115.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 09 Apr 2026 21:41:06 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Forgot Password on Thu, 16 Apr 2026 23:20:46 GMT]]></title><description><![CDATA[<p dir="auto"><a class="mention plugin-mentions-user plugin-mentions-a" href="https://fusionauth.io/community/forum/uid/426">@johnmiller</a> I'm not 100% sure but that may be by design. You don't want to give away too much information. If it returned a specific error code, then you would know if the user exists or not.</p>
]]></description><link>https://fusionauth.io/community/forum/post/8583</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/8583</guid><dc:creator><![CDATA[mark.robustelli]]></dc:creator><pubDate>Thu, 16 Apr 2026 23:20:46 GMT</pubDate></item></channel></rss>