Users
Operations of the Identity API (public). Paths are relative to your deployment's API host.
GET /api/identity-api/users/me
GET me (users)
Executes get me for users within the authenticated request context. Validate request DTO constraints and return the documented response contract.
Authentication: bearer token (Authorization: Bearer <token>)
| Parameter | In | Type | Required | Description |
|---|---|---|---|---|
X-Org-Id | header | string | no | Optional active organization context. When supplied, the response carries the team (subgroup) memberships the user has within this organization. |
x-org-id | header | string | yes |
| Status | Description | Body |
|---|---|---|
| 200 | Get current user profile | application/json object |
| 400 | Bad Request | application/json object |
| 401 | Unauthorized | application/json object |
PATCH /api/identity-api/users/me
PATCH me (users)
Executes update me for users within the authenticated request context. Validate request DTO constraints and return the documented response contract.
Authentication: bearer token (Authorization: Bearer <token>)
Request body: application/json UpdateMeDto
| Status | Description | Body |
|---|---|---|
| 200 | Update current user profile | application/json object |
| 400 | Bad Request | application/json object |
| 401 | Unauthorized | application/json object |
DELETE /api/identity-api/users/me
DELETE me (users)
Self-service: permanently delete the AUTHENTICATED user's own account. Runs the full org cascade (personal/sole orgs deleted, shared-org ownership transferred), writes a tombstone, deletes the Keycloak user, audits DELETE_USER with the user as actor, and emits user.deleted. Idempotent (404-gone ⇒ no-op). No platform-admin role required — the caller can only ever delete themselves.
Authentication: bearer token (Authorization: Bearer <token>)
| Status | Description | Body |
|---|---|---|
| 204 | ||
| 401 | Unauthorized | application/json object |
GET /api/identity-api/users/me/activity
GET me/activity (users)
Executes get my activity for users within the authenticated request context. Validate request DTO constraints and return the documented response contract.
Authentication: bearer token (Authorization: Bearer <token>)
| Parameter | In | Type | Required | Description |
|---|---|---|---|---|
limit | query | number | no | |
page | query | number | no |
| Status | Description | Body |
|---|---|---|
| 200 | ||
| 401 | Unauthorized | application/json object |
GET /api/identity-api/users/me/organizations
GET me/organizations (users)
Executes get my organizations for users within the authenticated request context. Validate request DTO constraints and return the documented response contract.
Authentication: bearer token (Authorization: Bearer <token>)
| Status | Description | Body |
|---|---|---|
| 200 | Get organizations for current user | application/json object |
| 401 | Unauthorized | application/json object |
PATCH /api/identity-api/users/me/preferences
PATCH me/preferences (users)
Executes update my preferences for users within the authenticated request context. Validate request DTO constraints and return the documented response contract.
Authentication: bearer token (Authorization: Bearer <token>)
Request body: application/json UpdatePreferencesDto
| Status | Description | Body |
|---|---|---|
| 200 | Update current user preferences | application/json object |
| 400 | Bad Request | application/json object |
| 401 | Unauthorized | application/json object |