/api/auth/change-password not allowed

I am having this issue as well. The only solution I found was a Stack Overflow post that mentioned rewriting the controller (which isn’t something I really want to do) Change user password in strapi - Stack Overflow

That said, in the source code it looks like there just isn’t actually a route for changing the password, even though it’s documented. Which is cool.