---
title: "Update Current User"
method: POST
path: "/users/me"
tags: ["Users"]
---

# Update Current User

`POST /users/me`

Update the currently authenticated user

## Request body

- UpdateUserRequestDTO
  - `firstName` string — First name of the user
  - `lastName` string — Last name of the user
  - `username` string — Unique alphanumeric username, max 20 characters
  - `email` string, email — Email address of the user
  - `password` string — Strong password for the user account
  - `role` 'admin' | 'developer' | 'supportAgent' | 'viewer' — Role assigned to the user
  - `currentPassword` string

## Response `200`

OK

- UserDTO
  - `createdAt` string, date-time, required — The date and time when the entity was created.
  - `updatedAt` string, date-time, nullable, required — The date and time when the entity was last updated.
  - `metadata` object, nullable — Metadata used by merchants to store additional information about the entity.
  - `id` string, required — The unique identifier of the user
  - `firstName` string, nullable, required — First name of the user
  - `lastName` string, nullable, required — Last name of the user
  - `username` string, nullable, required — Username of the user, can be used for authorization.
  - `email` string, required — Email of the user, can be used for authorization.
  - `sessions` object[], required — Sessions associated with the user
    - `createdAt` string, date-time, required — The date and time when the entity was created.
    - `updatedAt` string, date-time, nullable, required — The date and time when the entity was last updated.
    - `metadata` object, nullable — Metadata used by merchants to store additional information about the entity.
    - `id` string, required — The unique identifier of the user session
    - `lastActiveAt` string, date-time, nullable, required — Timestamp of the last activity in this session
  - `role` 'admin' | 'developer' | 'supportAgent' | 'viewer', required — Role of the user
  - `immutable` boolean, required — Indicates if the user is immutable, meaning it cannot be modified or deleted by other users.

## Other responses

- `202` — The merchant is entitled but its environment is not provisioned yet. Provisioning has been kicked off (exactly once) and is in progress; retry the request — it succeeds once the environment is ready. Returned only for identity-token (dashboard) requests bound to a merchant, not for secret-key API calls; any such endpoint can return it while provisioning is underway.
- `400` — The request was rejected. `type` is `invalid_request_error` when the request itself is at fault — `errors` then lists every problem found, with field-attributable entries prefixed by the field’s path; `invalid_state_error` when the request was well-formed but the resource is not in a state that allows it; or `payment_error` when the payment was refused by the issuer or processor.
- `401` — No API key was supplied, or the key is not valid. `type` is `authentication_error`.
- `403` — The API key is valid but lacks the permission this operation requires. `type` is `permission_error`.
- `409` — `type` is `conflict_error`. The supplied `X-Idempotency-Key` was already used with a different request body (`code` is `idempotency_conflict`, and retrying will not help), or the resource is being modified by another in-flight request (`code` is `resource_locked`, and retrying with backoff will).
- `429` — Too many requests. The rate limit is applied per client across all operations. `type` is `rate_limit_error`.
- `500` — The request could not be completed because of an unexpected error. `type` is `api_error`.
- `504` — The request exceeded the processing time limit and was abandoned. `type` is `api_error` and `code` is `timeout` — unlike a plain 500 the request may still have taken effect, so retry with the same idempotency key rather than blindly.

---

[API](https://skmtc.dev/odus/apis/odus-orchestration-api.md) · [All operations](https://skmtc.dev/odus/apis/odus-orchestration-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/odus/odus-orchestration-api/revisions/d5fdcba31576/schema)