Change my password

QA Environment

https://qa-api.kiolinkapp.com

PATCH

/v1/my-business/account/password

My Account

Last modified:2026-10-05 22:27:10

Maintainer:Not configured

Changes the signed-in business user's password after checking the current one. No password rules are enforced (unlike POST /v1/auth/reset-password), and password_limit_date is not renewed. The response includes the new bcrypt hash. No permission is required.

When a required field is missing, the response is HTTP 200 with a message, but the handler keeps running: nothing is changed.

Acts on the signed-in business user and their business. KIO users get HTTP 500.

Requires a valid session token. No permission is required.

Request

Authorization

API Key

Add parameter in header

authorization

Example:

authorization: ********************

Body Params application/jsonRequired

Example

{
  "current_password": "MyP4ssw0rd!",
  "new_password": "MyN3wP4ss!"
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request PATCH 'https://qa-api.kiolinkapp.com/v1/my-business/account/password' \
--header 'authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '{
  "current_password": "MyP4ssw0rd!",
  "new_password": "MyN3wP4ss!"
}'

Responses

🟢200The updated user

application/json

The updated user. A missing field is also reported with this status, with a message body.

Bodyapplication/json

Examples

SuccessMissing field

{
    "_id": "65f1c2a9e4b0a1b2c3d4e5f6",
    "firstname": "Ana",
    "lastname": "López",
    "email": "ana.lopez@example.com",
    "devices": [
        {
            "_id": "65f1c2a9e4b0a1b2c3d4e603",
            "brand": "Apple",
            "model": "MacBook Pro 14",
            "series": "F2LZK0ABCD12"
        }
    ],
    "device_tokens": [],
    "consoles": [],
    "active": true,
    "role": "65f1c2a9e4b0a1b2c3d4e5b2",
    "business": "65f1c2a9e4b0a1b2c3d4e5a1",
    "created_at": "2025-05-01T18:00:00.000Z",
    "level": "Administrador",
    "verify_email": "deliverable",
    "delete_request": false,
    "id_service_desk_plus": "0",
    "two_factor_auth_activated": false,
    "two_factor_auth_unavailable": false,
    "sent_feedback": false,
    "__v": 0,
    "password": "$2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy",
    "dc_access": "65f1c2a9e4b0a1b2c3d4e5c3"
}

🟠400`current_password` is wrong

🟠401The session token expired

🟠403The `Authorization` header is missing, the token is invalid,

🔴500Unexpected error

Modified at 2026-10-05 22:27:10

Get my account

Add one of my personal devices