---
title: "Verify the current password for a sensitive operation"
method: POST
path: "/auth/re-authenticate"
tags: ["Auth"]
---

# Verify the current password for a sensitive operation

`POST /auth/re-authenticate`

## Request

- Base URL: `https://api.flashdata.dev/v2`
- URL: `https://api.flashdata.dev/v2/auth/re-authenticate`
- Auth: API key in cookie `__Host-fd_session` and API key in header `X-CSRF-Token`

Records a short-lived recent-auth proof on the current server-side session.

## Request body

- object
  - `password` string, required

## Response `200`

Session has recent authentication

- Reauthentication
  - `reauthenticatedUntil` string, date-time, required

## Other responses

- `401`: Authentication required or invalid
- `403`: Authenticated but not permitted, or CSRF validation failed
- `429`: Rate, concurrency, batch, or pending-job limit exceeded

---

[API](https://skmtc.dev/flashdata/apis/flashdata-customer-api.md) · [All operations](https://skmtc.dev/flashdata/apis/flashdata-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flashdata/apis/flashdata-customer-api/revisions/109179fe9313?raw)