Read current member profile
Generated from the checked-in source. Do not edit this reference by hand.
GET /api/v1/auth/profile
Current authenticated member only; the target member is derived from authentication, never supplied by the caller. Requires an operator/member session with Read permission; installation bearer credentials are rejected. Browser member-cookie sessions are also supported by the existing authentication middleware. All responses carry Cache-Control: no-store. Returns the saved name, nullable password-login email, nullable avatar and numeric profile revision.
Operation: getMemberProfile.
Authentication
Section titled “Authentication”Use the credential and permission scope described above. Each object below is an alternative; schemes within one object are required together.
[ { "bearerAuth": [] }]HTTP request
Section titled “HTTP request”Set NIU_ORIGIN to your installation origin (without /v1). Replace path, query and header placeholders with the required values. Query examples use curl 7.87 or newer to encode values with --url-query. Use the credential scope described above; a bearer token must have the authority required by this operation.
curl --fail-with-body -X GET "$NIU_ORIGIN/api/v1/auth/profile" \ -H "Authorization: Bearer $NIU_BEARER_TOKEN"Parameters
Section titled “Parameters”No path, query, or header parameters are declared.
Request body
Section titled “Request body”No request body is declared.
Responses
Section titled “Responses”HTTP 200
Section titled “HTTP 200”Current saved member data.
Response headers:
{ "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }}Content type: application/json.
{ "type": "object", "required": [ "data" ], "properties": { "data": { "type": "object", "required": [ "name", "email", "avatar_data_url", "revision" ], "properties": { "name": { "type": "string" }, "email": { "type": [ "string", "null" ] }, "avatar_data_url": { "type": [ "string", "null" ], "description": "Normalized PNG data URL, or null when no avatar is saved." }, "revision": { "type": "integer", "format": "int64", "minimum": 0 } } } }}HTTP 401
Section titled “HTTP 401”Missing, invalid or revoked member authentication.
HTTP 403
Section titled “HTTP 403”Read permission required; installation credentials cannot access member data, or a write failed origin/cookie checks.
HTTP 503
Section titled “HTTP 503”Durable storage unavailable.
Behavior and supported scope
Section titled “Behavior and supported scope”Current authenticated member only; the target member is derived from authentication, never supplied by the caller. Requires an operator/member session with Read permission; installation bearer credentials are rejected. Browser member-cookie sessions are also supported by the existing authentication middleware. All responses carry Cache-Control: no-store. Returns the saved name, nullable password-login email, nullable avatar and numeric profile revision.
Supported scope: implemented