I have to implement a "password forgotten" in my app. In my Back (lang java) my route is ok, it works on postman but only because I have recovered a header authorizati