john-okeefe
71584c1b55
- Add admin override capability to DELETE /api/auth/account endpoint - Move /api/auth/users to admin-only with complete user fields (first_name, last_name, role, theme) - Consolidate Bruno requests: remove duplicate List Users (Admin), merge Delete Account functionality - Update all documentation to reflect enhanced capabilities - Implement pgx 5 standards compliance with proper error handling BREAKING CHANGES: - /api/auth/users endpoint now requires admin role (was previously accessible) - DELETE /api/auth/account accepts optional user_id parameter for admin deletion
94 lines
2.3 KiB
Plaintext
94 lines
2.3 KiB
Plaintext
meta {
|
|
name: List Users
|
|
type: http
|
|
seq: 5
|
|
}
|
|
|
|
get {
|
|
url: {{base_url}}/api/auth/users
|
|
body: none
|
|
auth: inherit
|
|
}
|
|
|
|
settings {
|
|
encodeUrl: true
|
|
timeout: 0
|
|
}
|
|
|
|
docs {
|
|
## List Users
|
|
|
|
Retrieves a list of all users with complete user information.
|
|
|
|
**Method:** GET
|
|
|
|
**Endpoint:** /api/auth/users
|
|
|
|
**Authentication:** Required (Admin only)
|
|
|
|
**Response:** Array of user objects with complete information:
|
|
- `id` (string): User ID (UUID)
|
|
- `email` (string): Email address
|
|
- `username` (string): Username
|
|
- `first_name` (string): First name (empty if not set)
|
|
- `last_name` (string): Last name (empty if not set)
|
|
- `role` (string): User role ("user" or "admin")
|
|
- `theme` (string): Theme preference (empty if default)
|
|
- `created_at` (string): Creation timestamp (ISO 8601)
|
|
- `updated_at` (string): Last update timestamp (ISO 8601)
|
|
|
|
**Status Codes:**
|
|
- 200: Success
|
|
- 401: Unauthorized
|
|
- 403: Forbidden (admin access required)
|
|
|
|
**Features:**
|
|
- Admin-only endpoint with complete user information
|
|
- Returns first_name, last_name, role, theme fields
|
|
- Useful for user management interfaces
|
|
}
|
|
|
|
get {
|
|
url: {{base_url}}/api/auth/users
|
|
body: none
|
|
auth: inherit
|
|
}
|
|
|
|
settings {
|
|
encodeUrl: true
|
|
timeout: 0
|
|
}
|
|
|
|
docs {
|
|
## List Users (Admin)
|
|
|
|
Retrieves a list of all users with complete user information.
|
|
|
|
**Method:** GET
|
|
|
|
**Endpoint:** /api/auth/users
|
|
|
|
**Authentication:** Required (Admin only)
|
|
|
|
**Response:** Array of user objects with complete information:
|
|
- `id` (string): User ID (UUID)
|
|
- `email` (string): Email address
|
|
- `username` (string): Username
|
|
- `first_name` (string): First name (empty if not set)
|
|
- `last_name` (string): Last name (empty if not set)
|
|
- `role` (string): User role ("user" or "admin")
|
|
- `theme` (string): Theme preference (empty if default)
|
|
- `created_at` (string): Creation timestamp (ISO 8601)
|
|
- `updated_at` (string): Last update timestamp (ISO 8601)
|
|
|
|
**Status Codes:**
|
|
- 200: Success
|
|
- 401: Unauthorized
|
|
- 403: Forbidden (admin access required)
|
|
|
|
**Enhanced Features:**
|
|
- Now admin-only endpoint (moved from public to protected admin group)
|
|
- Returns complete user profile information including names and role
|
|
- Useful for comprehensive admin user management
|
|
}
|