Change own password

Change the authenticated user's password and return a fresh token.

A new token is required because the caller's current token still carries the stale must_change_password claim; returning a re-minted token is what actually clears the rotation gate client-side.

post/users/me:change-password

Request body

current_passwordstring required

new_passwordstring required

Response

Successful Response

access_tokenstring required

expires_ininteger required

must_change_passwordboolean required

token_typestring required

Changes

Changed in 2 of the 85 revisions of this API.11

Jul 1, 2026d65fcba0d25a1See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 61 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
Apr 13, 202676e8f60637281See the full diff
- ▲
  api path removed without deprecation
  api-path-removed-without-deprecation
This revision also has 179 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history