Unlock a locked-out account (admin)
POST/api/admin/unlock-account
Clears an account's auto-expiring login lock ahead of its expiry, so a user locked out by failed attempts can sign in again immediately. System administrators only. Idempotent: clearing an already-unlocked account is a no-op success. This only lifts the login gate; it does not reset the in-memory rate-limiter counters for the current instance, so a fresh burst of bad passwords can re-lock the account. That is intentional - the durable lock is the thing an admin manages.
Request
Responses
- 200
- 400
- 403
- 404
- 500
Account unlocked (or already unlocked).
Missing userId.
Caller is not a system administrator.
Target user not found.
Unlock failed.