Sluby
REST APIAuth

Change the signed-in member's password.

Studio sessions only. Every other session of the account ends; this one stays. `revoked` is how many ended.

POST
/api/v1/auth/password/change

Studio sessions only. Every other session of the account ends; this one stays. revoked is how many ended.

Authorization

cookieAuth
cookiesluby_session<token>

Signed session cookie issued to the Studio at sign-in (email and password, GitHub, setup, or an invite or reset link).

Request Body

application/json
  1. body
current_password*string
Length1 <= length <= 1024
new_password*string
Length10 <= length <= 256

Response Body

Changed.

application/json
  1. response
success*unknown
revoked*integer
Example Request
curl -X POST 'https://sluby.example.com/api/v1/auth/password/change' \  -H 'Content-Type: application/json' \  -d '{  "current_password": "string",  "new_password": "stringstri"}'
Example Response
{  "success": true,  "revoked": 0}

Sign in with an email and password. POST

10 attempts per client address in 10 minutes, and 5 wrong passwords per email in 15 minutes.

What an invite or reset link is for. GET

Public: the join and reset pages call it with the token from their url. 30 link requests per client address in 10 minutes.