# Change password

Endpoint: POST /auth/password
Version: 2025-03-26
Security: oauth2, bearerAuth, apiKeyHeader

## Request fields (application/json):

  - `password` (string)
    The password to authenticate with.

  - `username` (string)
    The username to authenticated. This can be a username or an email, depending on the configuration.

  - `exchangeToken` (string)
    Temporary exchange token generated by the /auth/exchange-token endpoint.

## Response 200 fields (application/json):

  - `message` (string)
    Description of the server action or error.

  - `status` (integer)
    HTTP status code.