Body Parameters
The user’s current password for verification
The new password to set (will be securely hashed)
Response
Indicates whether the password was changed successfully
Confirmation message
Error Responses
Missing Fields - 400 Bad Request
Missing Fields - 400 Bad Request
User Not Found - 403 Forbidden
User Not Found - 403 Forbidden
User Not Password Authenticated - 400 Bad Request
User Not Password Authenticated - 400 Bad Request
Incorrect Password - 401 Unauthorized
Incorrect Password - 401 Unauthorized
Server Error - 500 Internal Server Error
Server Error - 500 Internal Server Error
Notes
- Only users authenticated via email and password can change their password.
- The current password must be correct.
- New password is hashed and stored securely.