Master Password

The master password is used to encrypt the GeoServer key store and for an emergency login using the user root.

Warning

The use of HTTPS is recommended, otherwise all password are sent in plain text.

/security/masterpw[.<format>]

Fetches the master password and allows to change the master password

Method Action Status code Formats Default Format
GET Fetch the master password 200,403 XML, JSON  
PUT Changes the master password 200,405,422 XML, JSON  

Formats for PUT (master password change).

XML

<masterPassword>
   <oldMasterPassword>oldPassword</oldMasterPassword>
   <newMasterPassword>newPassword</newMasterPassword>
</masterPassword>

JSON

{ "oldMasterPassword":"oldPassword",
  "newMasterPassword":"newPassword" }

Exceptions

Exception Status code
GET without administrative privileges 403
PUT without administrative privileges 405
PUT with the wrong current master password 422
PUT with a new master password rejected by the password policy 422