POST
/v1/me/passwordChanges the password you sign in with, everywhere. Every other device and browser is signed out at once; the device that asked stays signed in.
Request
curl -X POST https://api.proppertrading.com/v1/me/password \
-H "Authorization: Bearer ptat_9f2c1a44_3b8e7d2f5c9a1b4e6d8f0a2c4e6b8d1f" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: 6a2d9c1e-3f5b-4a7d-9e1c-2b4d6f8a0c3e" \
-d '{"current_password": "the-old-one", "password": "a-much-better-one"}'
| Field | Type | Description |
|---|---|---|
current_password | string | The password as it is now |
password | string | The new one. The same rules as on the website |
Response
204, with no body.
Errors
| Status | Code | Meaning |
|---|---|---|
| 400 | invalid_current_password | current_password is not the password |
| 403 | insufficient_scope | This device does not hold me:write |
| 422 | validation_failed | The new password does not meet the rules |
| 429 | rate_limit_exceeded | Six a minute |
Other devices are signed out
Their next request answers 401 revoked_token. That includes the person's
other phones, so say so before they confirm.