/bff/account/change-password

In-session password change. Verifies the current password against cas__user.password (with a shop__contact.password fallback while the identity migration is in progress), then writes a fresh bcrypt hash to BOTH cas__user.password and shop__contact.password inside one transaction.

AccountputBffAccountChange-password

Parameters

JSON body

Request body

application/json

currentPasswordstringRequired

Password currently in use — verified before the change is applied.

newPasswordstringRequired

New password. Must satisfy the platform strength policy.

Length: 8–∞

newPasswordAgainstringRequired

Confirmation of the new password. Must equal newPassword.

Length: 8–∞

Response schema

1 status code documented

200Success

success"true"Required

Response example

application/json

{
  "success": true
}

Request example

PUT /bff/account/change-password

put

curl -X PUT "https://api.bizkithub.com/bff/account/change-password" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{
  "currentPassword": "example_currentPassword",
  "newPassword": "example_newPassword",
  "newPasswordAgain": "example_newPasswordAgain"
}'

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key