auth

Verify the current password, rotate credentials, and return a fresh session

Every other session (refresh tokens, MCP OAuth grants, bearer tokens via auth_version) is revoked, exactly like reset-password. The response carries a new access token + refresh cookie so this browser stays signed in. Wrong current password is a 400, not a 401: the product's authed fetch treats 401 as an expired access token and would refresh-and-replay.

post/auth/change-password

Request

  • Base URL: https://api.fed10.ai/api
  • URL: https://api.fed10.ai/api/auth/change-password
  • Auth: none declared

Request body

current_passwordstring required
new_passwordstring required

Response

Password changed; fresh session for this browser

tokenstring

JWT access token

Example response

{
  "user": {
    "auth_method": "password"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.