Change Password

1) `POST /password/change` — Change Password (Logged-in User)

Changes the password of an authenticated user who is currently logged in.

This endpoint is used when a user is already signed in and wants to update their password as a security or preference action. The system validates a one-time password-change verification code (activation_code) issued specifically for the change-password flow. If the code is valid and not expired, the user’s password is updated to new_password and takes effect immediately.

If verification fails, the password remains unchanged and an error response is returned.

Authentication

✅ Required: Bearer token for the logged-in session

Authorization: Bearer <access_token>

Request Body (Form Data)

user_id (optional if derived from token)

activation_code (required)

new_password (required)

Behavior Notes

Typically requires a prior call to send a verification code for password change (mode = password change).

user_id can be taken from the access token; include it only if your system requires it explicitly.

One-Line Summary

Changes the password for a logged-in user after validating a one-time password-change code.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://appfloor.in/auth-service/password/change' \ --header 'Authorization: Bearer <token>' \ --form 'user_id="\"187626754904\""' \ --form 'new_password="\"mypassword\""' \ --form 'activation_code="\"2347\""'

{ "error": { "code": "XF_VALIDATION_ERROR", "message": "The signup failed or wrong user_id", "path": "/auth-service/validate/activation/code", "timestamp": "2026-01-12T08:11:59.993079561Z" } }

1) POST /password/change — Change Password (Logged-in User)#

Authentication#

Request Body (Form Data)#

Behavior Notes#

One-Line Summary#

Request

Responses

1) `POST /password/change` — Change Password (Logged-in User)

Authentication

Request Body (Form Data)

Behavior Notes

One-Line Summary