Skip to main content
POST /api/auth/change-password Changes the password for the currently authenticated user. Rate limited to 3 requests per hour per IP address.
Changing your password immediately revokes all active refresh tokens for your account. Any device or session using a refresh token will need to log in again to obtain a new one.

​
Authentication

Authorization: Bearer <access_token>

​
Request body

​
old_password
string
required
The user’s current password. Must match the stored password exactly.
​
new_password
string
required
The new password to set. Must meet the following requirements:
  • Minimum 8 characters
  • At least one uppercase letter (A–Z)
  • At least one lowercase letter (a–z)
  • At least one digit (0–9)

​
Response

​
200 OK

​
success
boolean
required
true on success.
​
message
string
Confirmation message.

​
Error responses

StatusDescription
400Missing required fields or new_password does not meet validation requirements
401Access token invalid, or old_password is incorrect
404User account not found
curl --request POST \
  --url https://task-forge-gbd6h8gtg8hchve9.chilecentral-01.azurewebsites.net/api/auth/change-password \
  --header 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI0MiIsImlhdCI6MTc0MjI4NjQwMCwiZXhwIjoxNzQyMzcyODAwfQ.ghi789' \
  --header 'Content-Type: application/json' \
  --data '{
    "old_password": "SecurePass123",
    "new_password": "NewSecurePass456"
  }'

{
  "success": true,
  "message": "Contrasena cambiada con exito"
}

Build docs developers (and LLMs) love

Get started for freeTalk to us