Update Password
POST/api/users/updatepassword
Tier: Internal — subject to change without notice.
Updates the caller's own password, verifying the supplied current password.
Id must equal the authenticated caller's id — this endpoint cannot be used to change another user's password. Logs a PasswordChange authentication event on success.
Request
Responses
- 200
- 400
- 401
The user whose password was changed. See User.UserDetailDto.
Id does not match the caller — InvalidOperation/"UserId"; CurrentPassword does not match the caller's existing password (the change is rejected) — InvalidOperation/"CurrentPassword"; or NewPassword fails the tenant's password policy, minimum-age, or history rules — InvalidOperation/"NewPassword".
Caller is not authenticated.