Auth

Set or change the signed-in user's password

Hosted browser-session route (cookie + double-submit CSRF + same-origin). Freshness step-up: the session must have authenticated within 5 minutes else R402_AUTH_FRESHNESS_REQUIRED. new_password is at most 72 bytes. On success the user's OTHER sessions are rotated.

post/auth/account/password

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/account/password
  • Auth: API key in cookie __Host-Http-r402_session

Request body

new_passwordstring required

Response

{ ok, sessions_revoked }

object required

Changes

No recorded changes to this operation across all 1 revision of this API.