Leave the workspace (ФЗ-152 §14 right-to-be-forgotten).
Soft-deletes the authenticated user. PII columns (email, password_hash) are wiped immediately. The workspace (tenant) survives if any other person in it is still alive — only the caller's own API keys are revoked in that case. If the caller was the workspace's last living person, the whole workspace is soft-deleted with them (response field workspace_deleted=true), same as before Task A4. An administrator with other living members but no other administrator is refused with 409 last_admin_cannot_leave (Task A4, docs/technical/team-mode-a4-contract-2026-09-01.md §2.2) — pass the admin role to someone else first, or remove the other members. Deletion is immediate and irreversible: there is no cooling-off period (CEO 2026-09-01). JWT-only: API-key auth returns 401 (per STRIDE A1 — keys are revoked as part of the deletion, so they cannot be the auth mechanism here). To erase the ENTIRE workspace regardless of who else is in it, use DELETE /v1/workspace (admin only).
Request
- Base URL: https://api.andish.ru (the document declares no server; this is the origin it was published from)
- URL: https://api.andish.ru/v1/auth/profile
- Auth: none declared
Response
Account soft-deleted — PII wiped, sessions revoked.
Changes
No recorded changes to this operation across all 1 revision of this API.