users

The frontend boot endpoint.

GET always responds 200, regardless of authentication and site privacy: user is null for anonymous callers, and the rest of the payload is limited to privacy-safe configuration the frontend always needs (to render login screens, privacy interstitials, forms, and navigation). It also sets the CSRF cookie, so a fresh browser session can make authenticated POSTs after calling this.

PATCH updates the current user's profile and returns the same payload.

get/api/users/me

Request

  • The document declares no server URL.
  • Auth: one of:
    • HTTP basic
    • API key in cookie sessionid

Response

can_inviteboolean required
have_sessionsboolean required
sso_login_urlstring required
sso_logout_urlstring required

Changes

No recorded changes to this operation across all 5 revisions of this API.