Merge pull request #58 from FusionAuth/lyle/ENG-2742/change-password-using-jwt

changePasswordUsingJWT

Author: lyleschemmerling

src/FusionAuth/FusionAuthClient.php

@@ -195,6 +195,7 @@ public function changePassword($changePasswordId, $request)
    *
    * @return ClientResponse The ClientResponse.
    * @throws \Exception
+   * @deprecated This method has been renamed to changePasswordUsingJWT, use that method instead.
    */
   public function changePasswordByJWT($encodedJWT, $request)
   {
@@ -223,6 +224,27 @@ public function changePasswordByIdentity($request)
         ->go();
   }
 
+  /**
+   * Changes a user's password using their access token (JWT) instead of the changePasswordId
+   * A common use case for this method will be if you want to allow the user to change their own password.
+   * 
+   * Remember to send refreshToken in the request body if you want to get a new refresh token when login using the returned oneTimePassword.
+   *
+   * @param string $encodedJWT The encoded JWT (access token).
+   * @param array $request The change password request that contains all the information used to change the password.
+   *
+   * @return ClientResponse The ClientResponse.
+   * @throws \Exception
+   */
+  public function changePasswordUsingJWT($encodedJWT, $request)
+  {
+    return $this->startAnonymous()->uri("/api/user/change-password")
+        ->authorization("Bearer " . $encodedJWT)
+        ->bodyHandler(new JSONBodyHandler($request))
+        ->post()
+        ->go();
+  }
+
   /**
    * Check to see if the user must obtain a Trust Token Id in order to complete a change password request.
    * When a user has enabled Two-Factor authentication, before you are allowed to use the Change Password API to change