1. Docs
  2. API Reference
  3. Change identity password (authenticated)

Change identity password (authenticated)

POST/v1/identity/auth/change-password

Request body

  • current_passwordstring*

    Current password

  • new_passwordstring*

    New password (8-64 chars). No composition rules — NIST SP 800-63B aligned. HaveIBeenPwned breach check runs server-side.

Code samples

cURLJavaScriptPythonGo
curl -X POST "https://api.canopy.dev/v1/identity/auth/change-password" \
  -H "Content-Type: application/json" \
  -d '{
    "current_password": "string",
    "new_password": "string"
  }'

Responses

200 Password changed
{
  "message": "string"
}

application/json

  • messagestring*
401 Invalid or expired token
403 This token is not authorized for this endpoint (wrong principal type — e.g., admin token on identity-only endpoint, or vice versa)

Returned object

On this page

Related endpoints

POSTAuthenticate identity and receive tokens
POSTIdentity multi-App login: complete Application selection from pre-auth session
POSTRefresh identity access token
POSTLogout identity and revoke tokens
POSTVerify identity email address
POSTResend identity verification email
POSTRequest identity password reset
POSTReset identity password with token
GETGet current identity profile
GETList identity active sessions
DELETERevoke a specific identity session
POSTLook up invite details by token
POSTAccept an invite