v50

OpenAPI 3.1.0Apache-2.0raw.githubusercontent.com2026-08-01147180956.9 KB
Users

Change own password

Change the authenticated user's password and return a fresh token.

A new token is required because the caller's current token still carries the stale must_change_password claim; returning a re-minted token is what actually clears the rotation gate client-side.

post/users/me:change-password

Request body

current_passwordstring required
new_passwordstring required

Response

Successful Response

access_tokenstring required
expires_ininteger required
must_change_passwordboolean required
token_typestring required