Profile

Authenticated profile retrieval and updates

Retrieve user profile

get
Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

Responses
chevron-right
200

Profile retrieved

application/json
get
/users/profile/

Update user profile

put

Updates profile fields. Required fields are driven by USER_REQUIRED_FIELDS (System Configuration).

Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

X-CSRFTokenstringRequired

CSRF token header for unsafe methods (POST/PUT/PATCH/DELETE)

Body
Responses
chevron-right
200

Profile updated

application/json
put
/users/profile/

Partially update user profile

patch
Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

X-CSRFTokenstringRequired

CSRF token header for unsafe methods (POST/PUT/PATCH/DELETE)

Body
Responses
chevron-right
200

Profile updated

application/json
patch
/users/profile/

Retrieve loyalty-enabled profile

get
Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

Responses
chevron-right
200

Profile retrieved

application/json
get
/users/profile-with-loyalty/

Update profile with loyalty sync

put

Updates profile and, when configured, synchronizes loyalty data using CUSTOMER_LOYALTY_CARD_SERVICE (Dynamic Configuration). Phone changes require SMS verification (code + resend flow).

Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

X-CSRFTokenstringRequired

CSRF token header for unsafe methods (POST/PUT/PATCH/DELETE)

Body
Responses
chevron-right
200

Profile updated

application/json
put
/users/profile-with-loyalty/

Partially update profile with loyalty sync

patch
Authorizations
CookiestringRequired

Session cookie (e.g., sessionid=abc123)

Header parameters
CookiestringRequired

Session cookie header (e.g. sessionid=abc123)

X-CSRFTokenstringRequired

CSRF token header for unsafe methods (POST/PUT/PATCH/DELETE)

Body
Responses
chevron-right
200

Profile updated

application/json
patch
/users/profile-with-loyalty/

Last updated

Was this helpful?