GET
/
api
/
v1
/
users
/
me
Get my profile
curl --request GET \
  --url https://api.example.com/api/v1/users/me
import requests

url = "https://api.example.com/api/v1/users/me"

response = requests.get(url)

print(response.text)
const options = {method: 'GET'};

fetch('https://api.example.com/api/v1/users/me', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));
<?php

$curl = curl_init();

curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/api/v1/users/me",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}
package main

import (
"fmt"
"net/http"
"io"
)

func main() {

url := "https://api.example.com/api/v1/users/me"

req, _ := http.NewRequest("GET", url, nil)

res, _ := http.DefaultClient.Do(req)

defer res.Body.Close()
body, _ := io.ReadAll(res.Body)

fmt.Println(string(body))

}
HttpResponse<String> response = Unirest.get("https://api.example.com/api/v1/users/me")
.asString();
require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/users/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

Overview

Returns the authenticated user’s full profile — everything the Account and Edit Profile screens need. Call this right after login (the login payload carries only a lightweight summary) and again after any PATCH /users/me to refresh local state. dateOfBirth is decrypted transparently from encrypted-at-rest storage and returned as an ISO calendar date.

Authentication

Bearer <accessToken> required. Scope: user. Available throughout onboarding (not gated on completion).

Response — 200 OK

FieldTypeNotes
idstring24-char Mongo ObjectId.
emailstringLowercased. Read-only — not editable via PATCH.
firstNamestring | nullnull until collected at signup.
lastNamestring | nullnull until collected at signup.
dateOfBirthstring | nullISO YYYY-MM-DD, or null.
biostring | nullFree-text profile bio (≤ 500 chars), or null.
avatarUrlstring | nullPublic CDN URL of the profile photo, or null.
onboardingStatusenumIN_PROGRESS | COMPLETE.
currentStepinteger | null1..4 during onboarding; null once complete.
tenancyStatusenumNOT_SUBMITTED | PENDING | APPROVED | REJECTED.
subscriptionStatusstringLowercased subscription status.
createdAtstring | nullISO 8601 account creation timestamp. Drives the “Member since” label. null only on legacy rows without it.
{
  "id": "6a22f1897f96f4bd18ab7168",
  "email": "alice@example.com",
  "firstName": "Alice",
  "lastName": "Andersson",
  "dateOfBirth": "1990-06-15",
  "bio": "Looking to swap my 2-bed in Camden.",
  "avatarUrl": "https://swappr-public.fra1.cdn.digitaloceanspaces.com/avatars/6a22.../x.jpg",
  "onboardingStatus": "IN_PROGRESS",
  "currentStep": 2,
  "tenancyStatus": "PENDING",
  "subscriptionStatus": "none",
  "createdAt": "2024-01-15T09:30:00.000Z"
}

Error responses

StatusCodeMeaning
401UNAUTHENTICATEDMissing, malformed, or expired access token.
404NOT_FOUNDUser does not exist or has been soft-deleted.

See also

curl

curl https://api.swappr.co.uk/api/v1/users/me \
  -H "Authorization: Bearer $ACCESS_TOKEN"