Update the signed-in user's own profile

PUT

/users

Updates the current user's profile (Devise registration update). Field-sensitivity policy: name and slack_user_id save without a password; changing the email — the login identifier — requires current_password (re-authentication for sensitive changes). When email confirmation is enabled, an email change is held in unconfirmed_email until the confirmation link is followed; otherwise it applies immediately. Provider-managed users (OIDC/LDAP) cannot change email here — the identity provider owns it and the parameter is ignored.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type

HTTP (token)

Request Body

application/json

{

  

"user": {

  

  

"name": "Jane Doe",

  

  

"slack_user_id": "U123456"

  

}

}

Responses

Profile updated

Content-Type

application/json

{

  

"toast": {

  

  

"title": "Account updated.",

  

  

"message": [

  

  

  

"Profile updated successfully."

  

  

],

  

  

"variant": "success"

  

}

}

PUT

/users

Playground

Server

Authorization

tokenAuth

Body

Samples

Powered by VitePress OpenAPI