PUT `/auth/me/password`

Set new password after verifying old password; upon successful change, automatically revoke all sessions to ensure account security. Reference: NIST SP 800-63B §5.1.1.2, OWASP ASVS V2.1.

Authentication `bearerAuth` application/json

Request Body

Schema: dto.HTTPChangePasswordRequest

Field	Type	Required	Constraints	Description
`new_password`	`string`	Yes	length: 8–?	New password
`old_password`	`string`	No		Old password (optional for admin reset)
`password_transmission`	`string`	No		plain\|hash\|symmetric\|asymmetric

Responses

Status	Description	Schema
200	Password changed successfully, all sessions revoked	`dto.ChangePasswordResponse`
400	Invalid request parameters or old password verification failed	`gitee_com_linmes_authms_base_dto.SimpleResponse`
401	Unauthenticated or invalid token	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal server error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Referenced Schemas

dto.ChangePasswordResponse

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No
`message`	`string`	No

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No

Try this API in Scalar → Download OpenAPI spec (JSON) ↓

PUT /auth/me/password