Crear contraseña definitiva (primer login)

POST

/drivers/respond-new-password

curl --request POST \
  --url https://api.dev.lade.com.mx/drivers/respond-new-password \
  --header 'Content-Type: application/json' \
  --data '{ "session": "AYABeGx...", "username": "jperez123", "newPassword": "NuevaPassword123!" }'

• Development environment (dominio custom)
• QA environment
• Production environment
• Development environment (legacy — execute-api URL directo)

Responde al challenge NEW_PASSWORD_REQUIRED que Cognito devuelve en el primer login de un conductor (contraseña temporal). Espejo de /auth/mfa/respond pero contra el pool de conductores y sin cookies — la app Flutter guarda los tokens ella misma.

Request Body^required

Media typeapplication/json

object

session

required

Session devuelto por /drivers/login junto con el challenge

string

username

required

string

newPassword

required

string format: password

Example

{
  "session": "AYABeGx...",
  "username": "jperez123",
  "newPassword": "NuevaPassword123!"
}

Responses

200

Contraseña creada, sesión iniciada

Media typeapplication/json

object

message

string

tokens

object

idToken

string

accessToken

string

refreshToken

string

expiresIn

integer

Example

{
  "message": "Contraseña creada, sesión iniciada",
  "tokens": {
    "idToken": "eyJraWQ...",
    "accessToken": "eyJraWQ...",
    "refreshToken": "eyJjdHk...",
    "expiresIn": 3600
  }
}

400

Solicitud inválida

Media typeapplication/json

object

error

required

string

message

string

field

string

Example

{
  "error": "Validation failed",
  "field": "email",
  "message": "Invalid email format"
}

401

No autenticado

Media typeapplication/json

object

error

required

string

message

string

field

string

Example

{
  "error": "Unauthorized",
  "message": "Invalid or expired token"
}