Plixstar
API Reference

Account setup

GET
/api/v1/account/must-change-password

True iff family_members or b2b_members has must_change_password=true for the caller.

Authorization

better-auth.session_token
better-auth.session_token<token>

In: cookie

Response Body

curl -X GET "https://example.com/api/v1/account/must-change-password"
Empty
POST
/api/v1/account/setup

Verifies current password against BetterAuth bcrypt hash, dual-writes new password to Supabase + BetterAuth, updates profile fields (name/phone/address/billing), and flips ALL caller memberships from pending → active with must_change_password=false.

Authorization

better-auth.session_token
better-auth.session_token<token>

In: cookie

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/api/v1/account/setup" \  -H "Content-Type: application/json" \  -d '{}'
Empty
POST
/api/v1/account/change-password

Authorization

better-auth.session_token
better-auth.session_token<token>

In: cookie

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/api/v1/account/change-password" \  -H "Content-Type: application/json" \  -d '{}'
Empty