Sign in
user

Change Password

Change user's master password by re-keying all workspace keys.

Client must:

  1. Sign "email|timestamp" with current Ed25519 key (proves current password)
  2. Provide new Ed25519 signing key (derived from new password)
  3. Re-wrap all workspace keys with new X25519 public key

Server will:

  1. Verify signature with stored signing_key_pub
  2. Derive new X25519 encryption key from new Ed25519 signing key
  3. Update both keys and all workspace wrapped keys

Note: This changes the master password (encryption password), not authentication password. Both local and SSO users can change their master password.

post/api/user/change_password

Request body

signaturestring required
timestampinteger required
new_signing_keystring required
rewrapped_workspace_keysobject required

Response

Successful Response

detailstring required
workspaces_updatedinteger required

Changes

Changed in 2 of the 34 revisions of this API.321

  • aa4b06f8dede32See the full diff
    • ▲

      added the new required request property new_signing_key

      new-required-request-property

    • ▲

      added the new required request property signature

      new-required-request-property

    • ▲

      added the new required request property timestamp

      new-required-request-property

    • ●

      removed the request property current_public_key

      request-property-removed

    • ●

      removed the request property new_public_key

      request-property-removed

    This revision also has 2 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • 849d5e8732f61See the full diff
    • ○

      endpoint added

      endpoint-added

    This revision also has 8 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog