Change Password

[DanielCaspers]

Motivation
Customers shall be able to change their account password.

Acceptance criteria
TBD

[DanielCaspers]

@scaspers how do you expect the ownership of this to work? How about the flow?

[YoMurphy]

Approve

[DanielCaspers]

@scaspers I can't continue with estimating this task until you define it. Could you either explain the flow over a call or take your hand at editing my comment (or leaving one here for me to paste in as a req).

[DanielCaspers]

@scaspers , see my questions on #26. I am wondering if there password is changed, do you want them logged out and to have to log back in, since their access token will update? Or would you rather leave their session untouched?

UI planned would be a button in a toolbar added to the "My Account" page that launches a "Change Password" dialog, taking a "Password" and "Confirm Password" field. I would then call POST auth/changepw on submit.

[scaspers]

auth/changepw endpoint documentation on postman has been updated and includes the ability to change an authenticated users password and maintaining the current login. This can be done without using the Oauth flow.