Here is a snap of ResetPasswords class:
$response = Password::broker($broker)->reset($credentials, function ($user, $password) {
$this->resetPassword($user, $password);
});
If I print the $response variable it always returns password.token, but it should return password.reset instead.
Where is the problem?
passwords.reset is returned when the password is successfully reset.
passwords.token is returned when the reset token is not valid.
Other possible return values are:
passwords.user is returned when the user cannot be found.
passwords.password is returned when the password does not pass validation.
You can see the password broker reset function here (Illuminate\Auth\Passwords\PasswordBroker::reset).
That function calls the validateReset() method (shown here (Illuminate\Auth\Passwords\PasswordBroker::validateReset)).
The values of the constants returned by that method are defined on the password broker interface (contract). You can view this here (Illuminate\Contracts\Auth\PasswordBroker).