Overview

This command in the Authentication adapter, can be used to change the password for a User or Application. When a password is changed it will not invalidated previously generated tokens. This means that if password is changed due to possible breach, it should be done after a logout has been issued.

Architecture diagram

Payload example

{
  "User": "user@example.com",
  "OldSecret": "oldPassword123",
  "NewSecret": "newPassword456"
}