Password Flow

When To Use It

Use this flow for password initialization, forgot-password reset, or password change in an authenticated session.

Prerequisites

1. Authentication Models
2. Secure Channel

Call Sequence

1. choose the correct password path
2. use Secure Channel where required
3. keep the same user and session context across the flow
4. close the Secure Channel session after completion

Branch Decisions

1. first-time password initialization
2. forgot-password reset
3. authenticated password change

Common Failures

1. missing JWT on authenticated change
2. missing Secure Channel on protected mutations
3. stale reset token or stale session context
4. X-Client-Hash mismatch

Reference Entry