Hodoflow / Developers
Sign in
Browse documentation
Help Center →
Browse API reference
JSON:API v1 stable

Update the current user profile

Update the authenticated run-as user's supported profile fields.

PATCH /api/json/v1/users/{id}/profile

Access and behavior

Required scope
api_write
Authentication
Bearer token
Idempotency
supported
Operation ID
updateUserProfile

Request headers

Header Presence Description
Authorization Required Short-lived service-account bearer token.
Accept Required JSON:API response media type.
Idempotency-Key Optional Makes an unsafe request replay-safe for the configured retention window (24 hours by default). Reusing a key with different request parameters returns 409.
Content-Type Required Request document media type.

Parameters

id

path · Required

string

No description provided.

include

query · Optional

string

Relationship paths to include in the response

fields

query · Optional

object

Limits the response fields to only those listed for each type

Request body

application/vnd.api+json

Schema: object · Optional

first_name

Optional

string | null

User's first name. May be nil for accounts created via magic link before profile capture.

last_name

Optional

string | null

User's last name. May be nil for accounts created via magic link before profile capture.

phone_number

Optional

string | null

Phone number accepted by this operation.

timezone

Optional

string | null

IANA timezone string, e.g. 'America/New_York'. Detected from browser on signup.

request.json 
{
  "data": {
    "attributes": {
      "first_name": "<first_name>",
      "last_name": "<last_name>",
      "phone_number": "<phone_number>",
      "timezone": "<timezone>"
    },
    "type": "resource"
  }
}

Success response

200 Success
Media type
application/vnd.api+json
Schema
object

Errors and retries

Keep x-request-id from failed responses. Retry only rows marked retryable, and obey Retry-After when present.

Status Code Recovery Meaning
401 unauthorized Do not retry unchanged A valid bearer token is required.
403 forbidden Do not retry unchanged The service account lacks the required scope or object access.
429 rate_limited Retry after guidance The request exceeded its rate window; wait for Retry-After.
404 not_found Do not retry unchanged The resource was not found or is not visible to the run-as member.
409 idempotency_key_reused Do not retry unchanged The key was previously used for a different request.
422 invalid_request Do not retry unchanged The request document failed resource validation.

Related guides

JSON:API documents and media types Read and write Hodoflow's path-versioned JSON:API documents with the correct envelopes, headers, resource identities, and relationships. Scopes and run-as permissions Apply Hodoflow's two-layer authorization model and choose the least-privilege scope for each API surface and operation. Perform an idempotent write Create one test dashboard through JSON:API, replay the identical request safely, and recognize a conflicting key reuse.