code: def reset_password(self, action_token, signed_data):
          
          try:
              action = "reset-password"
              user = get_user_by_action_token(action, action_token)
              if not user or not user.signed_data_match(signed_data, action):
                  raise mocha_exc.AppError("Verification Invalid!")
  
              if request.method == "POST":
                  password = request.form.get("password", "").strip()
                  password_confirm = request.form.get("password_confirm",
                                                      "").strip()
                  if not password or password != password_confirm:
                      raise exceptions.AuthError(
                          "Password is missing or passwords don't match")
  
                  user.change_password(password)
                  user.set_email_verified(True)
                  session_set_require_password_change(False)
                  flash_success("Password updated successfully!")
                  return redirect(__options__.get("login_view") or self.login)
  
              return {"action_token": action_token, "signed_data": signed_data}
  
          except (mocha_exc.AppError, exceptions.AuthError) as ex:
              flash_error(str(ex))
          except Exception as e:
              logging.exception(e)
              flash_error("Unable to reset password")
          return redirect(self.login)
docs: Reset the user password. It was triggered by LOST-PASSWORD