Password changes

In order for a client user to be able to change a password, you must create a MyProfile OSLC resource that is based on the IBM® TRIRIGA® My Profile business object.

To support password changes, you must create the MyProfile resource with at least the Password property defined. You can define other properties to support other profile changes as necessary.

You gain access to the MyProfile resource in OSLC by using the following URI:

http://yourserver/oslc/so/MyProfile/userId

This URI always returns the current user’s profile, regardless of what user ID is entered, since a user is not allowed to view the profiles of other users. You can define query capabilities for the MyProfile resource, but the query results do not return more than the profile of the current user. You cannot define creation factories the MyProfile resource.

You cannot create or delete MyProfile objects through OSLC from the MyProfile resource.

Use the PATCH method along with the URI to change the profile. Include the following JSON string in the request to change the password:

{..."spi:Password":"password",...}

The password is in plain text form and is encrypted internally.

Use the HTTP POST method, along with the following headers, in password change requests:

- x-method-override: PATCH
- PATCHTYPE: CHPWD

The ID of the resource that represents My Profile is set in tririgaweb.properties file, as follows:

OSLC_MYPROFILE_RESOURCE=MyProfile