navidrome/api/openapi/components/schemas/PasswordChangeRequest.yaml

type: object
description: "Change the caller's own password."
required: [currentPassword, newPassword]
properties:
  currentPassword:
    type: string
    minLength: 1
    maxLength: 1024
    description: The current password.
  newPassword:
    type: string
    minLength: 1
    maxLength: 1024
    description: The new password.
  revokeOtherGrants:
    type: boolean
    default: true
    description: "Revoke every other grant of the user. The calling grant always survives. Default true."
feat(api): add API v1 login, setup, token, grant and password endpoints Adds the seven auth operations to the spec (createAccessToken, listGrants, revokeGrant and logout in core; login, setupFirstAdmin and changePassword in the password module), the bearerAuth/grantAuth schemes, and vacuum rules requiring explicit security and a known x-scope. The strict handlers sit on core/apiauth and are covered end to end against a real SQLite database. The first operations with parameters make the generated code import github.com/oapi-codegen/runtime. An oapi-codegen overlay renames the shared offset/limit parameter types, since a generated Offset clashes with Ginkgo's dot-imported Offset in this package's tests; the published spec is unchanged. 2026-09-26 01:50:16 -04:00			`type: object`
			`description: "Change the caller's own password."`
			`required: [currentPassword, newPassword]`
			`properties:`
			`currentPassword:`
			`type: string`
			`minLength: 1`
			`maxLength: 1024`
			`description: The current password.`
			`newPassword:`
			`type: string`
			`minLength: 1`
			`maxLength: 1024`
			`description: The new password.`
			`revokeOtherGrants:`
			`type: boolean`
			`default: true`
			`description: "Revoke every other grant of the user. The calling grant always survives. Default true."`