HTTP Api for changing user passwords

EventStoreDB V20.X
1

Does EventstoreDB 20 still support changing user passwords over http? I’m running 20 with the following configuration:

Environment=EVENTSTORE_RUN_PROJECTIONS=All
Environment=EVENTSTORE_SKIP_DB_VERIFY=true
Environment=EVENTSTORE_SKIP_INDEX_VERIFY=true
Environment=EVENTSTORE_INSECURE=true
Environment=EVENTSTORE_ENABLE_EXTERNAL_TCP=true
Environment=EVENTSTORE_EXT_TCP_PORT=1113
Environment=EVENTSTORE_ADMIN_ON_EXT=true
Environment=EVENTSTORE_STATS_ON_EXT=true
Environment=EVENTSTORE_ENABLE_ATOM_PUB_OVER_HTTP=true

for development work and my previous workflow was to configure a new password for the admin user as part of my ansible provisioning.

That provisioning did the equivalent of

curl -v http://localhost:2113/users/admin/command/change-password --user admin:changeit -X POST -H "Content-Type: application/json" --data '{"CurrentPassword": "changeit", "NewPassword": "changeit2"}'

in order to change the admin account’s password to something different. However, with ESDB 20, this action returns a 404. Is there a configuration flag I’m missing to allow this? Investigating the log outputs of the config options hasn’t given me any ideas yet.

I’m interested in this because I’m still using the 5.x client and I just want to upgrade my database, leaving the GRPC client upgrade to another time.

2

The endpoint URL changed. We are using

curl -k -H "Content-Type: application/json" -u admin:changeit --data "{\"NewPassword\":\"newpw\"}" https://localhost:2113/users/admin/command/reset-password
3

Thanks! I’ll give that a try and see if I can get it to work for me.

4

https://developers.eventstore.com/server/5.0.8/http-api/security/

It’s the same for 20.6

5

You should be able to set new passwords as part of your Ansible provisioning. Just make sure you’re handling any sensitive information carefully.

6