PApaymongo
Users

Update the authenticated user's password (OTP-gated)

Two-call flow with the same payload. Empty code validates the payload and issues an OTP challenge — response has data.type = "challenge" and carries expiration_at/resend_at/factor. Populated code re-validates, verifies the OTP, applies the new password, and returns fresh tokens — response has data.type = "jwt". Both flows return 201; clients discriminate on data.type.

patch/v1/users/password

Request

  • Base URL
    https://identity-api.paymongo.com
  • URL
    https://identity-api.paymongo.com/v1/users/password
  • Auth
    HTTP bearer

Request body

Example request

{
  "data": {
    "attributes": {
      "code": "123456",
      "current_password": "OldStr0ng!Pass",
      "factor": "email",
      "password": "NewStr0ng!Pass",
      "password_confirmation": "NewStr0ng!Pass"
    }
  }
}

Response

Applied the new password (populated code in request)

has_moreboolean

Example response

{
  "data": {
    "attributes": {
      "expiry_timer": 600,
      "organization_id": "org_123",
      "user_contact_number": "+639171234567",
      "user_first_name": "Juan",
      "user_last_name": "dela Cruz"
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.