pub async fn change_password_handler(
__arg0: Extension<JWTAuthMiddleware>,
__arg1: Json<ChangePasswordSchema>,
) -> Result<impl IntoResponse, (StatusCode, Json<Value>)>Expand description
Replaces the caller’s password and kills every session including this one.
The bump invalidates the token that made this request, so the response
clears the cookies and the client is expected to log in again — leaving the
caller on a page whose every request has just started failing is worse than
sending them to /login.