N1 APIDemo shop

AUTH / Profile

MUTATION

changeMyPassword

Mock

Mock. This operation is part of the approved contract but its module is not built yet. Run Core with N1_API_MODE=mock N1_DEV_AUTH=stub to get deterministic demo-shop data from it. The real server answers NOT_IMPLEMENTED until it ships; the schema and examples here will not change when it does.

Change your own password

Compare

Change your own password. Your other sessions are signed out. INVALID_CREDENTIALS if the current password is wrong.

POST/graphqlapp audience

Who can call this. Any signed-in shop user. You can run it against Local or Staging from the request panel, with a demo-shop token.

Headers

  • AuthorizationstringRequired

    Bearer <token>, issued for this endpoint's audience. The token decides the shop and roles; nothing in the request body can change them.

    Example: Bearer eyJhbGciOiJFZERTQSJ9…

  • Content-TypestringRequired

    Always application/json. Only POST is accepted.

    Example: application/json

  • Idempotency-KeystringRequired

    A key you generate once per user action (a UUID). Retrying with the same key never applies the change twice.

    Example: 0192f0c1-9b2a-7d40-8c3e-1f5a6b7c8d9e

  • X-Request-IdstringOptional

    Your id for this request (8–128 characters of A–Z a–z 0–9 . _ : -). Echoed back in the response header and in every error, so you can quote it when reporting a problem. Core makes one if you send none.

    Example: app-7f3c2a9e-checkout

Arguments

  • currentPasswordString!Required

    Your current password.

    Example: "demo-password-1"

  • newPasswordString!Required

    The new password, 10–128 characters.

    Example: "a-new-demo-password-2"

Returns

  • changeMyPasswordBoolean!Required

    Change your own password. Your other sessions are signed out. INVALID_CREDENTIALS if the current password is wrong.

Errors

CodeHTTPWhen
INVALID_CREDENTIALS401Login failed. The same answer for an unknown user and a wrong password, so it cannot be used to find out who has an account.
VALIDATION_FAILED400Input failed Zod or route schema validation. details lists each field path and problem.

Every error has the same body. See Errors.

Rate limit tier

Tier: per user. Over the limit you get RATE_LIMITED (HTTP 429) with a Retry-After header. See Response handling.