Dozor
User

Hard-delete the signed-in user's account

Destructive. Confirmation phrase enforced server-side via `deleteAccountSchema` so a misclick can't wipe the account. One transaction: solo-member orgs are deleted outright (cascades invites + full data hierarchy); shared orgs get ownership transfer so an ownerless org is impossible after the cascade. The user row deletes last — cascades accounts, authenticators, memberships.

DELETE/api/user

Destructive. Confirmation phrase enforced server-side via deleteAccountSchema so a misclick can't wipe the account. One transaction: solo-member orgs are deleted outright (cascades invites + full data hierarchy); shared orgs get ownership transfer so an ownerless org is impossible after the cascade. The user row deletes last — cascades accounts, authenticators, memberships.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

confirmation*string

Response Body

curl -X DELETE "https://loading/api/user" \  -H "Content-Type: application/json" \  -d '{    "confirmation": "delete my account"  }'
Empty
Empty
Empty

Update display name PATCH

Renames the signed-in user. Avatar regeneration has its own endpoint (`POST /api/user/avatar`) — the two actions live in different parts of the profile form.

Regenerate the DiceBear avatar seed POST

Rolls the avatar seed to a fresh UUID. The `image` URL changes; everything else stays. Returns the new URL so the client updates its avatar slot without a full profile refetch.