Auth

Update the authenticated user's password

Authenticated password update. Used by both the /reset-password recovery flow (after the recovery email callback issues a session) and voluntary password changes from account settings. Cookie session auth required (mnemom_session); bearer tokens are not accepted on this route. After a successful update, every other session for the same user is revoked with audit reason password_reset.

post/auth/password

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/password
  • Auth: API key in cookie mnemom_session

Request body

passwordstring required

New password. Must be at least 12 characters. The upstream identity provider applies additional weak-password and breach-list checks; failures surface as 400 with a password_rejected error code.

Response

Password updated. Other sessions for the same user are revoked best-effort.

okboolean

Changes

No recorded changes to this operation across all 1 revision of this API.