From 88a652346b8e256ca70f680fe0008bdf6c0609c0 Mon Sep 17 00:00:00 2001 From: Deluan Date: Sat, 26 Sep 2026 02:21:25 -0400 Subject: [PATCH] docs(api): say a password change ends the user's other Navidrome sessions changePassword now documents that on Navidrome the change also ends the user's sessions on its other APIs, regardless of revokeOtherGrants, which only covers API v1 grants. --- api/bundled/openapi.json | 2 +- api/bundled/openapi.yaml | 2 +- api/openapi/paths/auth.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/api/bundled/openapi.json b/api/bundled/openapi.json index a2cfce901..c46fef1a7 100644 --- a/api/bundled/openapi.json +++ b/api/bundled/openapi.json @@ -459,7 +459,7 @@ "auth" ], "summary": "Change my password", - "description": "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. Answers 409 `password_managed_externally` when the password is not stored by this server.", + "description": "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. On Navidrome the change also ends the user's sessions on its other APIs, regardless of `revokeOtherGrants`, which only covers API v1 grants. Answers 409 `password_managed_externally` when the password is not stored by this server.", "security": [ { "bearerAuth": [] diff --git a/api/bundled/openapi.yaml b/api/bundled/openapi.yaml index f4a76c006..5b07e614d 100644 --- a/api/bundled/openapi.yaml +++ b/api/bundled/openapi.yaml @@ -298,7 +298,7 @@ paths: x-stability-level: alpha tags: [auth] summary: Change my password - description: "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. Answers 409 `password_managed_externally` when the password is not stored by this server." + description: "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. On Navidrome the change also ends the user's sessions on its other APIs, regardless of `revokeOtherGrants`, which only covers API v1 grants. Answers 409 `password_managed_externally` when the password is not stored by this server." security: [{bearerAuth: []}] requestBody: description: The current and the new password. diff --git a/api/openapi/paths/auth.yaml b/api/openapi/paths/auth.yaml index 9a3aedf37..5f7e3d58d 100644 --- a/api/openapi/paths/auth.yaml +++ b/api/openapi/paths/auth.yaml @@ -185,7 +185,7 @@ password: x-stability-level: alpha tags: [auth] summary: Change my password - description: "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. Answers 409 `password_managed_externally` when the password is not stored by this server." + description: "Changes the caller's password. By default every other grant of the user is revoked; the calling grant survives. On Navidrome the change also ends the user's sessions on its other APIs, regardless of `revokeOtherGrants`, which only covers API v1 grants. Answers 409 `password_managed_externally` when the password is not stored by this server." security: [{bearerAuth: []}] requestBody: description: The current and the new password.