Change my password
POST/api/me/password
Lets a signed-in user change their own password. Requires the current password, enforces the strength policy, and forbids reusing the existing one. A correct change also clears the temporaryPassword flag (used after admin resets).
Auth: required
Request
Responses
- 200
- 400
- 401
- 404
- 500
Password updated.
Missing fields, weak password, wrong current password, or reused password.
Not signed in.
User record not found.
Server error.