action conjur_change_password {
  label: "Changes a user’s password."
  description: "You must provide the login name and current password or\nAPI key of the user whose password is to be updated in an HTTP Basic\nAuthentication header. Also replaces the user’s API key with a new\nsecurely generated random value. You can fetch the new API key using\nthe Login method.\n\nThe Basic authentication-compliant header is formed by:\n1. Concatenating the role's name, a literal colon character ':',\n   and the password or API key to create the authentication string.\n2. Base64-encoding the authentication string.\n3. Prefixing the authentication string with the scheme: `Basic `\n   (note the required space).\n4. Providing the result as the value of the `Authorization` HTTP header:\n   `Authorization: Basic <authentication string>`.\n\nYour HTTP/REST client probably provides HTTP basic authentication\nsupport. For example, `curl` and all of the Conjur client libraries\nprovide this.\n\nNote that machine roles (Hosts) do not have passwords. They authenticate\nusing their API keys, while passwords are only used by human users.\n"
  provider: conjur
  method: PUT
  path: "/authn/{account}/password"
  encoding: json
  input: {
    type: "object"
    properties: {
      account: {
        type: "string"
        description: "Conjur account name"
      }
    }
    required: ["account"]
    additionalProperties: false
  }
  output: {
    type: "object"
    additionalProperties: true
  }
}