This message was deleted.

/command/validate-password

cannot be used for this

• `password`: A password string to validate for compliance with password format and complexity requirements.

thus we do not have a way, to get to know if the password in code and the password in the system is the same. we could use

PUT /users/current/password

and somewhat rely on the 403 we should get, if the password is not the same

Returns 403 Forbidden if the authenticated user is a remote user or if

current_password

doesn't match the user's stored password.