Merge pull request #130 from FusionAuth/lyle/ENG-2742/change-password-using-jwt

changePasswordUsingJWT

Author: lyleschemmerling

src/main/java/io/fusionauth/client/FusionAuthClient.java

@@ -440,7 +440,9 @@ public ClientResponse<ChangePasswordResponse, Errors> changePassword(String chan
    * @param encodedJWT The encoded JWT (access token).
    * @param request The change password request that contains all the information used to change the password.
    * @return The ClientResponse object.
+   * @deprecated This method has been renamed to changePasswordUsingJWT, use that method instead.
    */
+  @Deprecated
   public ClientResponse<ChangePasswordResponse, Errors> changePasswordByJWT(String encodedJWT, ChangePasswordRequest request) {
     return startAnonymous(ChangePasswordResponse.class, Errors.class)
         .uri("/api/user/change-password")
@@ -466,6 +468,25 @@ public ClientResponse<Void, Errors> changePasswordByIdentity(ChangePasswordReque
         .go();
   }
 
+  /**
+   * Changes a user's password using their access token (JWT) instead of the changePasswordId
+   * A common use case for this method will be if you want to allow the user to change their own password.
+   * <p>
+   * Remember to send refreshToken in the request body if you want to get a new refresh token when login using the returned oneTimePassword.
+   *
+   * @param encodedJWT The encoded JWT (access token).
+   * @param request The change password request that contains all the information used to change the password.
+   * @return The ClientResponse object.
+   */
+  public ClientResponse<ChangePasswordResponse, Errors> changePasswordUsingJWT(String encodedJWT, ChangePasswordRequest request) {
+    return startAnonymous(ChangePasswordResponse.class, Errors.class)
+        .uri("/api/user/change-password")
+        .authorization("Bearer " + encodedJWT)
+        .bodyHandler(new JSONBodyHandler(request, objectMapper()))
+        .post()
+        .go();
+  }
+
   /**
    * Check to see if the user must obtain a Trust Token Id in order to complete a change password request.
    * When a user has enabled Two-Factor authentication, before you are allowed to use the Change Password API to change