Set or change the app-lock PIN

Requires currentPin when a lock already exists. A wrong currentPin counts against the same attempt budget as the lock screen — otherwise an unlocked session could guess the PIN without limit and learn it for every future lock.

post/auth/app-lock

Request

Base URL
https://api.dre.app (the document declares no server; this is the origin it was published from)
Auth
HTTP bearer
TypeScript
https://skmtc.dev/dre/apis/dre-api/docs/auth/app-lock/post.ts
A function with typed inputs. Its response is checked against the schema.

Request body

pinstring required

The new PIN, 4-6 digits. Its length is what the client renders from later; a separate length field is not accepted, because two values that can disagree is a bug rather than a convenience.

currentPinstring

Required when a lock already exists. Changing a PIN proves knowledge of the current one, and a wrong value counts against the same attempt budget as the lock screen — otherwise an unlocked session is an unlimited PIN oracle.

Example request

{
  "pin": "1234",
  "currentPin": "1234"
}

Response

PIN set

Changes

No recorded changes to this operation across all 3 revisions of this API.