Update a protected customer profile through delegated write access.

PATCH

/api/protected/customer-profiles/users/{userId}

Code sample: Shell / cURL

curl --request PATCH \
  --url 'https://auth.example.com/api/protected/customer-profiles/users/example?include=actor%2Csubject%2Caudit' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: example' \
  --data '{ "input": { "name": "Example User", "email": "[email protected]" }, "audit": { "reason": "user_requested_update" } }'

Applies an approved delegated customer-profile update. The request requires an Idempotency-Key header and an Authrim step-up receipt for the operation hash before the profile is mutated.

Authorizations

• bearerAuth

Parameters

Path Parameters

userId

required

string

Subject user id whose customer profile is updated.

Header Parameters

Idempotency-Key

required

string

Idempotency key used for delegated write replay protection.

Authrim-Step-Up-Receipt

string

Step-up receipt bound to the profile update operation. When omitted, the API returns step_up_required.

Query Parameters

include

string

Example

actor,subject,audit

Optional comma-separated response expansions.

Request Body ^required

Media type application/json

object

input

required

object

key

additional properties

audit

object

key

additional properties

Example

{
  "input": {
    "name": "Example User",
    "email": "[email protected]"
  },
  "audit": {
    "reason": "user_requested_update"
  }
}

Responses

200

Successful JSON response.

Media type application/json

object

customer_profile

required

object

sub

required

string

tenant_id

required

string

name

string | null

given_name

string | null

family_name

string | null

email

string | null format: email

email_verified

required

boolean

phone_number

string | null

phone_number_verified

required

boolean

address

object | null

updated_at

required

integer

key

additional properties

actor

object

id

string

subject

object

id

string

audit

object

key

additional properties

Example

{
  "customer_profile": {
    "sub": "user_123",
    "tenant_id": "tenant_123",
    "name": "Example User",
    "email": "[email protected]",
    "email_verified": true,
    "phone_number_verified": false,
    "updated_at": 1770000000000
  }
}

400

Error response.

Media type application/json

object

key

additional properties

Example ^generated

{
  "additionalProperty": "example"
}

401

Error response.

Media type application/json

object

key

additional properties

Example ^generated

{
  "additionalProperty": "example"
}

403

Error response.

Media type application/json

object

key

additional properties

Example ^generated

{
  "additionalProperty": "example"
}