Skip to main content

​
Users API

Manage user profiles, passwords, and profile pictures. All endpoints require authentication.

​
Endpoints

MethodPathDescription
GET/users/meGet current user profile
PUT/users/meUpdate profile
POST/users/me/passwordChange password
POST/users/me/profile-pictureUpload profile picture
POST/users/me/delete-requestSubmit account deletion request

​
Get Current User

GET /users/me
Authorization: Bearer <token>

​
Response 200 OK

{
  "id": "550e8400-e29b-41d4-a716-446655440000",
  "email": "user@example.com",
  "first_name": "John",
  "last_name": "Doe",
  "phone": "+91-9876543210",
  "company_id": "7b3f1c2d-4e5a-6f7b-8c9d-0e1f2a3b4c5d",
  "auth_provider": "email",
  "email_verified": true,
  "phone_verified": false,
  "is_active": true,
  "permissions": {},
  "profile_picture_url": "https://cdn.example.com/profile/abc.jpg",
  "created_at": "2024-01-01T00:00:00Z",
  "last_login_at": "2024-01-15T10:30:00Z"
}

​
Update Profile

PUT /users/me
Authorization: Bearer <token>

​
Request Body

All fields are optional — only include what you want to change. 
{
  "first_name": "John",
  "last_name": "Smith",
  "phone": "+91-9876543210"
}

​
Response 200 OK

Returns the updated user profile object.

​
Errors

StatusDetail
409Email already in use (if changing email)

​
Change Password

Only available for accounts with auth_provider = "email". Google OAuth accounts do not have a password. 
POST /users/me/password
Authorization: Bearer <token>

​
Request Body

{
  "current_password": "OldSecure@123",
  "new_password": "NewSecure@456"
}

​
Response 200 OK

{ "message": "Password updated successfully" }

​
Errors

StatusDetail
400Incorrect current password

​
Upload Profile Picture

Upload a profile picture. Stored in S3 and returned as a presigned URL. 
POST /users/me/profile-picture
Authorization: Bearer <token>
Content-Type: multipart/form-data

​
Request

FieldTypeDescription
fileimageJPG, JPEG, PNG, or WebP

​
Response 200 OK

Returns the updated user profile with the new profile_picture_url.

​
Errors

StatusDetail
400File must be an image

​
Request Account Deletion

Submit an account deletion request. Sends an email to the admin — account is deleted within 30 days. 
POST /users/me/delete-request
Authorization: Bearer <token>

​
Response 200 OK

{ "message": "Deletion request submitted. We will process it within 30 days." }

​
Rate Limits

EndpointLimit
Profile get/update120/min
Password change120/min
Profile picture upload10/min
Delete request20/min