safer update of the password

POST

/~/api/change_srp

use SRP protocol to change the password without transmitting it. If your channel is trusted, you can just specify 'password' in set_account or add_account, that's much simpler.

Request

Header Params

x-hfs-anti-csrf

string

optional

necessary only for POST requests

Default:

Body Params application/json

username

string

required

salt

string

required

verifier

string

required

Example

{
    "username": "string",
    "salt": "string",
    "verifier": "string"
}

Request samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST 'http://localhost/~/api/change_srp' \
--header 'x-hfs-anti-csrf: 1' \
--header 'Content-Type: application/json' \
--data-raw '{
    "username": "string",
    "salt": "string",
    "verifier": "string"
}'

Responses

🟢200Success

application/json

Body

object {0}

Example

{}

Modified at 2025-05-30 14:11:36

list admins

get plugin config