user

Change user password

Changed on

Change the user's password. The user must be authenticated with elevated permissions or provide a valid password reset ticket.

All of the user's existing sessions are revoked atomically as part of this operation, including the session used to make the request. Clients must treat the user as signed out after a successful response and obtain a new session via sign-in.

post/user/password

Request

  • Base URL
    https://{subdomain}.auth.{region}.nhost.run/v1
  • URL
    https://{subdomain}.auth.{region}.nhost.run/v1/user/password
  • Auth
    • HTTP bearer
    • or none

Request body

newPasswordstring required

A password of minimum 3 characters

ticketstring

Ticket to reset the password, required if the user is not authenticated

Example request

{
  "newPassword": "Str0ngPassw#ord-94|%"
}

Response

Password changed successfully

'OK' required

Changes

    • warning

      added the new otp-too-many-attempts enum value to the response property for the response status

    • warning

      added the new user-already-exists enum value to the response property for the response status

    • info

      removed the email-already-in-use enum value from the response property for the response status