Update current user profile

curl --request PATCH \
  --url https://flows.super.ai/api/profile/me \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "first_name": "John",
  "last_name": "Doe",
  "password": "MySecureP@ssw0rd123"
}
'

import requests

url = "https://flows.super.ai/api/profile/me"

payload = {
    "first_name": "John",
    "last_name": "Doe",
    "password": "MySecureP@ssw0rd123"
}
headers = {
    "X-API-Key": "<api-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {
    'X-API-Key': '<api-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({first_name: 'John', last_name: 'Doe', password: 'MySecureP@ssw0rd123'})
};

fetch('https://flows.super.ai/api/profile/me', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://flows.super.ai/api/profile/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'first_name' => 'John',
    'last_name' => 'Doe',
    'password' => 'MySecureP@ssw0rd123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://flows.super.ai/api/profile/me"

	payload := strings.NewReader("{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://flows.super.ai/api/profile/me")
  .header("X-API-Key", "<api-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://flows.super.ai/api/profile/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["X-API-Key"] = '<api-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}"

response = http.request(request)
puts response.read_body

{
  "email": "<string>",
  "first_name": "<string>",
  "last_name": "<string>",
  "organization_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "created_at": "2023-11-07T05:31:56Z",
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "modified_by": "<string>",
  "role": "app_user",
  "status": "pending",
  "updated_at": "2023-11-07T05:31:56Z",
  "user_auth_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

profile

Update current user profile

Update the currently authenticated user’s profile information.

Allows users to modify their personal information including first and last name. Only the fields provided in the request body will be updated. Omitted fields remain unchanged. The user is automatically identified from their authentication credentials.

Context:

Only first_name and last_name can be updated via this endpoint
Password field in request body is reserved for future use (not implemented)
Email, role, status, and organization cannot be changed by users
Updates are immediate and reflected in database upon success
Full user profile returned in response with updated values

Behavior:

Extracts user_id from authenticated user context
Validates request body fields (min/max length constraints)
Queries database to verify user exists
Updates only first_name and last_name if provided
Persists changes to database with updated_at timestamp
Returns complete updated user profile

Use Cases:

User wants to correct misspelled name
User prefers different name display (nickname vs full name)
User changes last name after marriage or legal name change
Profile updates during onboarding or account setup
Internationalization of name display

Field Update Rules:

first_name: 1-100 characters if provided, unchanged if null
last_name: 1-100 characters if provided, unchanged if null
password: Not currently implemented, reserved for future use
All other fields (email, role, status): Use admin endpoints to modify

Related Endpoints:

GET /profile/me - Retrieve current user profile
PUT /admin/users/ - Admin endpoint to update any user
POST /auth/change-password - Change password (separate auth flow)

PATCH

api

profile

Update current user profile

curl --request PATCH \
  --url https://flows.super.ai/api/profile/me \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "first_name": "John",
  "last_name": "Doe",
  "password": "MySecureP@ssw0rd123"
}
'

import requests

url = "https://flows.super.ai/api/profile/me"

payload = {
    "first_name": "John",
    "last_name": "Doe",
    "password": "MySecureP@ssw0rd123"
}
headers = {
    "X-API-Key": "<api-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {
    'X-API-Key': '<api-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({first_name: 'John', last_name: 'Doe', password: 'MySecureP@ssw0rd123'})
};

fetch('https://flows.super.ai/api/profile/me', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://flows.super.ai/api/profile/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'first_name' => 'John',
    'last_name' => 'Doe',
    'password' => 'MySecureP@ssw0rd123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://flows.super.ai/api/profile/me"

	payload := strings.NewReader("{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://flows.super.ai/api/profile/me")
  .header("X-API-Key", "<api-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://flows.super.ai/api/profile/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["X-API-Key"] = '<api-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"first_name\": \"John\",\n  \"last_name\": \"Doe\",\n  \"password\": \"MySecureP@ssw0rd123\"\n}"

response = http.request(request)
puts response.read_body

{
  "email": "<string>",
  "first_name": "<string>",
  "last_name": "<string>",
  "organization_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "created_at": "2023-11-07T05:31:56Z",
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "modified_by": "<string>",
  "role": "app_user",
  "status": "pending",
  "updated_at": "2023-11-07T05:31:56Z",
  "user_auth_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

Authorizations

X-API-Key

string

header

required

API key authentication. Include your API key in the X-API-Key header as: X-API-Key YOUR_API_KEY

Example:

X-API-Key: saf_1234567890

Authorization

string

header

required

JWT Bearer token authentication. Include your access token in the Authorization header as: Bearer YOUR_ACCESS_TOKEN

Example:

Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

Body

application/json

Request model for updating the authenticated user's profile information.

All fields are optional. Only provided fields will be updated, allowing partial updates without affecting other user attributes. Omitted fields remain unchanged in the database.

first_name

string | null

User's first name. Used for display in the UI and in email communications. Must be at least 1 character if provided. Set to null or omit to leave unchanged.

Required string length: 1 - 100

Example:

"John"

last_name

string | null

User's last name or family name. Combined with first_name for full name display. Must be at least 1 character if provided. Set to null or omit to leave unchanged.

Required string length: 1 - 100

Example:

"Doe"

password

string | null

New password for the user account. Note: Password updates are currently not implemented in the API. This field is reserved for future functionality. Password changes should be handled through the authentication service.

Required string length: 8 - 128

Example:

"MySecureP@ssw0rd123"

Response

User profile updated successfully with new values

User model

string

required

first_name

string

required

last_name

string

required

organization_id

string<uuid>

required

created_at

string<date-time>

string<uuid>

modified_by

string

role

enum<string>

default:app_user

Available options:

org_admin,

backoffice,

app_user,

reviewer,

publisher,

integration

status

enum<string>

default:pending

Available options:

pending,

active,

inactive

updated_at

string<date-time>

user_auth_id

string<uuid> | null

Get current user profile List all service accounts