crewship auth
Self-service account commands. Login, logout, and whoami stay top-level (crewship login / logout / whoami); auth hosts the newer account
mutations.
crewship login.
Subcommands
auth passwd
Change your password. Interactively it prompts (no echo) for the current
password, then the new password twice. The new password must be at least
8 characters.
Passwords are never passed as flags — that would leak them into shell
history and process listings. For scripting, pipe two lines on stdin: the
current password first, the new password second.
Changing your password signs out your other active sessions — the
session you run this from stays logged in. It calls
POST /api/v1/users/me/password.
Wrong current-password guesses count against the same account lockout as
sign-in, and the route sits on the strict per-IP auth bucket (a CLI token
does not exempt it). Enough consecutive misses and the command fails with
API error (423): too many failed attempts… until the lockout window
expires — an admin can clear it with crewship admin reset-password.
auth avatar
Upload a new profile picture, or clear it back to initials. The image must
be a PNG, JPEG, or WebP no larger than 2 MB; it’s served from an
authenticated endpoint so other members see it on the roster and in chat.
Backed by POST/DELETE /api/v1/users/me/avatar.
Editing your display name is available in the web UI (Settings → Profile),
backed by
PATCH /api/v1/users/me.
A CLI verb for it may follow.