You should override the password reset post API, and in there, you can get access to the request object.
You can save the request object in the user_context and that same userContext object will be available in the
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).