Auth

Set or change the Bearer actor's password

Machine route (apikey + user Bearer). Requires the signed auth_time claim to be no more than 5 minutes old; otherwise returns R402_AUTH_FRESHNESS_REQUIRED. Refresh-token rotation preserves auth_time and does not satisfy freshness. A successful change revokes all of the user's browser sessions.

post/auth/v1/account/password

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/v1/account/password
  • Auth: API key in header apikey and HTTP bearer

Request body

new_passwordstring required

New password, limited to 72 UTF-8 bytes.

Response

Password changed and browser sessions revoked.

oktrue required
sessions_revokedinteger required

Changes

No recorded changes to this operation across all 1 revision of this API.