API reference
PATCHRequires Bearer token
Change password
/api/v1/profile/{user}/update-password
Self-service. Throttled (6/min). Revokes every Sanctum token except the current session. Fields are old_password and new_password.
Path parameters
| Field | Type | Description |
|---|---|---|
user Required | string | Path parameter user. |
Query parameters
This endpoint has no query parameters.
Request body
| Field | Type | Description |
|---|---|---|
old_password Required | string | Current password. e.g. "P@ssw0rd!" |
new_password Required | string | New password (same strength rules as register). e.g. "N3w-P@ssw0rd" |
Responses
| Status | Meaning |
|---|---|
| 200 | Password updated successfully |
| 401 | Missing or invalid Bearer token. |