7.10. Change Your Password

[Note] Note

This action requires HTTPS to avoid sending the password over an insecure connection.

Perform an HTTPS POST with the header Content-Type: application/json, _action=modifyPassword in the query string, and the old and new passwords in JSON format as the POST data.

The JSON POST DATA must include the following fields:

oldPassword

The value of this field is the current password as a UTF-8 string.

newPassword

The value of this field is the new password as a UTF-8 string.

On success, the HTTP status code is 200 OK, and the response body is an empty JSON resource:

$ curl \
            --request POST \
            --cacert ca-cert.pem \
            --user bjensen:hifalutin \
            --header "Content-Type: application/json" \
            --data '{"oldPassword": "hifalutin", "newPassword": "chngthspwd"}' \
            --silent \
            https://localhost:8443/api/users/bjensen?_action=modifyPassword

            {}