Change Password

PUT /api/v1/session/change_password/

Change the authenticated user password

Example request:

PUT /api/v1/session/change_password/ HTTP/1.1
Host: example.com
Content-Type: "application/json"

{
   "oldPassword": "foo",
   "newPassword": "bar",
   "confirmPassword": "bar"
}

Request JSON Object:

• oldPassword (string) – the old password of the user

• newPassword (string) – the new password of the user

• confirmPassword (string) – the confirmation password of the user. same as newPassword

Example response:

HTTP/1.1 200 OK

Status Codes:

• 200 OK – no error

Configuration Information for Change Password

The APIO behaviour for the validation of the passwords is controlled by the following setting:

 "VALIDATE_PASSWORD_LOCALLY": true,
 "VALIDATE_PASSWORD_LOCAL_RULE": true,
 "MINIMUM_PASSWORD_RULES": {
     "END_USER" : {
         "PASSWORD_MIN_SPECIAL_CHARACTERS": 1,
         "PASSWORD_MIN_UPPERCASE_LETTERS": 1,
         "PASSWORD_MIN_LOWERCASE_LETTERS": 1,
         "PASSWORD_MIN_DIGITS": 1,
         "PASSWORD_MIN_LENGTH": 8
     },
     "ADMIN" : {
         "PASSWORD_MIN_SPECIAL_CHARACTERS": 1,
         "PASSWORD_MIN_UPPERCASE_LETTERS": 1,
         "PASSWORD_MIN_LOWERCASE_LETTERS": 1,
         "PASSWORD_MIN_DIGITS": 1,
         "PASSWORD_MIN_LENGTH": 8
     }
},

Settings description:

• VALIDATE_PASSWORD_LOCALLY: APIO will check the passwords based on the user level rules fetched from the network element. Default is false.

• VALIDATE_PASSWORD_LOCAL_RULE: if the previous settings is false and that this settings is tru, the APIO will check the password with respect to an hardcoded local rule (min 8 chars, aat least 1 upper and 1 lower cases). This local rule can be overwritten in project mode. Default is false.

• MINIMUM_PASSWORD_RULES.**END_USER**: (from 1.11.0) minium password rules for End Users. Default are the ones in the example.

• MINIMUM_PASSWORD_RULES.**ADMIN**: (from 1.11.0) minium password rules for Admins (same for Group, Tenant, System). Default are the ones in the example.