Profile
The Profile page (/profile) holds your own password, your second factor and your API tokens. Every signed in
user can open it.
Actions
| Section | Button | Effect |
|---|---|---|
| Password | Change password (Current password, New password, Confirm password) | you sign in again with the new password |
| Two-factor authentication | Enable two-factor (scan, then 6 digit code), Configure a new device, Disable two-factor (confirm with your password; the policy may refuse it for your roles) | TOTP from an authenticator app |
| API tokens | New API token > Create token, revoke | the token is shown once: copy it at once |
Typical tasks
- Script the API. New API token, copy it, send it as
Authorization: Bearer <token>; revoke it when it is no longer used. See REST API.