Skip to main content

change_password_handler

Function change_password_handler 

Source
pub async fn change_password_handler(
    __arg0: Extension<JWTAuthMiddleware>,
    __arg1: Json<ChangePasswordSchema>,
) -> Result<impl IntoResponse, (StatusCode, Json<Value>)>
Expand description

Replaces the caller’s password and kills every session including this one.

The bump invalidates the token that made this request, so the response clears the cookies and the client is expected to log in again — leaving the caller on a page whose every request has just started failing is worse than sending them to /login.