Skip to content

Change your own password

POST
/api/auth/password
curl --request POST \
--url https://app.dycrypt.com/o/acme/api/auth/password \
--header 'Content-Type: application/json' \
--cookie JSESSIONID=<JSESSIONID> \
--data '{ "currentPassword": "example", "newPassword": "example" }'

Requires the current one — a stolen session must not be enough. Closed to tokens: a token has no password, so any behaviour here would be an accident rather than a feature.

Media typeapplication/json
object
currentPassword
required
string format: password
newPassword
required
string format: password
>= 8 characters
Examplegenerated
{
"currentPassword": "example",
"newPassword": "example"
}

Changed.

Media typeapplication/json
object
ok
boolean
Examplegenerated
{
"ok": true
}

The request is wrong — a bad date, a missing field, a value the product does not declare.

Media typeapplication/json

Every failure in this API has this shape and no other.

object
error
required
string
Example
{
"error": "this token does not have licenses:write"
}

The current password is wrong, or the caller is a token.

Media typeapplication/json

Every failure in this API has this shape and no other.

object
error
required
string
Example
{
"error": "this token does not have licenses:write"
}