How can we express such actions using the REST dictionary?

Question

RESTful API

1) Cancel order action?

• POST /api/v1/order/1/cancel
  In this case, a new order cancellation resource is created, after such a RESTful it can no longer be called
  
• PATCH /api/v1/order/1
  {
  "status": "cancel"
  }
  In this case, any other parameters can be passed along with the status, this complicates role-based access validation
  

2) Action to create a verification request?
POST /api/v1/user/1/verification/request?
3) Action to create a password recovery request?
POST /api/v1/user/1/password/reset?
I have cognitive dissonance in this matter, where to read on this topic?