Behavior Notes
- Endpoint path:
PUT /auth/user/me - Core profile fields + optional
is_business/biz_*(requires ext-business; otherwise400 module_not_installed). - Does not accept acquisition or privacy fields — use onboarding complete or privacy routes.
- Session auth; surgical cache update after success.
Update User Profile
PUT
/auth/user/me
Update authenticated user profile. Accepts core profile fields plus is_business/biz_* when ext-business is installed (400 module_not_installed otherwise). Does not accept acquisition or privacy fields — use POST /auth/user/me/onboarding/complete or /auth/user/me/privacy*.
Authorizations
SessionAuth
Session ID for authenticated requests
Type
API Key (header: X-Session-ID)
Request Body
application/json
JSON "name": "John", "last_name": "Doe", "user_name": "johndoe", "phone": "+1234567890", "dob": "1990-01-01", "gender": "string", "title": "string", "reference_id": "string", "recovery_email": "string", "tmz": "America/New_York", "metadata": { "additionalProperties": "string" }, "is_business": true, "biz_name": "string", "biz_country": "string", "biz_state": "string", "biz_position": "string", "biz_postal_code": "string"
{
}
Responses
Profile updated successfully
application/json
JSON "success": true, "data": { "user": { "id": "usr_abc123", "email": "user@example.com", "name": "John", "last_name": "Doe", "user_name": "johndoe", "user_type": "customer", "picture": "https://storage.pubflow.com/users/usr_abc123/picture.jpg", "phone": "+1234567890", "is_verified": true, "two_factor": false, "created_at": "2025-12-07T10:00:00Z", "updated_at": "2025-12-07T10:00:00Z", "first_time": true, "title": "string", "is_business": true, "biz_name": "string", "biz_country": "string", "biz_state": "string", "biz_position": "string", "gdpr_consent": true, "gdpr_consent_at": "string", "gdpr_consent_version": "string", "ccpa_applies": true, "ccpa_opt_out": true, "ccpa_opt_out_at": "string", "privacy_region": "string", "biz_postal_code": "string" } }
{
}