cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
718
Views
1
Helpful
3
Replies

How to change password with existing password and new password by Webex API.

anand_dhage
Level 1
Level 1

I want to create SetUser request for change password operation.

Password change has to be done by giving current password and new password in the request.

Is this type of request available in Webex API.

Any help appreciated.

1 Accepted Solution

Accepted Solutions

nmorrow
Cisco Employee
Cisco Employee

Hello,

     SetUser is an overwrite function, password provided in the request body will overwrite current value. This is expected behavior if authenticated as a site admin, as site admin has privilege to directly set end user passwords without knowing the original. If authenticating as self, then old password must be used in the securityContext to authenticate the request in the first place, before the overwrite will occur.

View solution in original post

3 Replies 3

nmorrow
Cisco Employee
Cisco Employee

Hello,

     SetUser is an overwrite function, password provided in the request body will overwrite current value. This is expected behavior if authenticated as a site admin, as site admin has privilege to directly set end user passwords without knowing the original. If authenticating as self, then old password must be used in the securityContext to authenticate the request in the first place, before the overwrite will occur.

Thank you Nathan for your reply.

Is there any way by which I can change the password by entering the current password and new password through Rest API.

There is no REST API, but URL API uses generic HTTP GET/POST and an active WebEx logged in session (via API or manual log in). URL API request p.php?AT=LI, used for log in, will allow you to provide a current username (WID), current password (PW), and new password (NPW), as you are requesting. PW and NPW are secure information and this API will not allow GET to be used for secure information, you will need to issue these via HTTPS POST using an HTML form so that passwords are not easily readable in browser history.

For new development, XML API is still the preferred option. SetUser does not require site admin authentication. When authenticating as the host, the current username and password are required, and go in the securityContext for authentication. The new password goes in the request body. This method will not leave an active WebEx login session in the browser for further use, while still requiring the current password before updating to the new.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: