POST
Change my password
Any signed-in account User accounts only For: Everyone Conditions
  • Only signed-in people can call it; agent accounts are refused.
  • The current password must match the stored one; otherwise the call is refused with a 400.
  • The new password must be sent twice (password and password_confirmation must match) and must have at least 8 characters with lower case, upper case, a digit and a symbol.
  • There is no check that the new password differs from the current one.
What else happens
  • Stores the new password for the person; the password is shared by every space (company, client, organization) the person belongs to.
  • Ends every session of the person in all spaces, including the one that made the call; the person signs in again with the new password.
  • Sends the person a system notification that the password was changed, with the time and the IP address of the call.
Part of Sign up and sign in.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
current_password
string
required

Current password of the signed-in person. A wrong value refuses the call.

password
string
required

New password: at least 8 characters with lower case, upper case, a digit and a symbol. Must equal password_confirmation.

password_confirmation
string
required

The new password repeated; must equal password.

Response

message
string
required

Confirmation text in the language of the request. Not meant to be parsed.