Update display name
Renames the signed-in user. Avatar regeneration has its own endpoint (`POST /api/user/avatar`) — the two actions live in different parts of the profile form.
/api/userRenames the signed-in user. Avatar regeneration has its own endpoint (POST /api/user/avatar) — the two actions live in different parts of the profile form.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
curl -X PATCH "https://loading/api/user" \ -H "Content-Type: application/json" \ -d '{ "name": "Sam Owner" }'Signed-in user's full profile GET
Returns name + email + avatar + linked OAuth accounts + registered passkeys. Powers the settings page's connect / disconnect / rename affordances.
Hard-delete the signed-in user's account DELETE
Destructive. Confirmation phrase enforced server-side via `deleteAccountSchema` so a misclick can't wipe the account. One transaction: solo-member orgs are deleted outright (cascades invites + full data hierarchy); shared orgs get ownership transfer so an ownerless org is impossible after the cascade. The user row deletes last — cascades accounts, authenticators, memberships.