Update Profile

Update the authenticated user’s name, profile picture, email, or password.

PUT /api/user/profile

Requires authentication.

Authorization · string · required

Bearer token obtained from /api/auth/login or /api/auth/signup. Format: Bearer <token>.

Request body

All fields are optional. Only the fields you include will be updated.

name · string

New display name for the user.

profile_picture · string

URL of the new profile picture.

email · string

New email address. Must not be in use by another account.

newPassword · string

New password to set for the account.

To change the password, provide newPassword. The authenticated JWT is used as the primary authorization check — no currentPassword field is required by the current implementation.

If you supply a new email, the API will reject the request with 400 if that address is already registered to another account.

Example

cURL

curl --request PUT \
  --url http://localhost:3000/api/user/profile \
  --header 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...' \
  --header 'Content-Type: application/json' \
  --data '{
    "name": "Maria S.",
    "email": "[e-mail]",
    "newPassword": "newS3cr3t"
  }'

Response

200 OK

Returns the full updated user profile, including the current email.

id · string · required

Unique identifier for the user.

name · string · required

The user’s display name.

email · string · required

The user’s current email address.

profile_picture · string

URL of the user’s profile picture. null if not set.

points · number · required

Total habit points accumulated.

current_streak · number · required

Current consecutive days with at least one completed habit.

max_streak · number · required

All-time highest streak.

created_at · string · required

ISO 8601 timestamp of when the account was created.

updated_at · string · required

ISO 8601 timestamp of the most recent profile update.

Example response

{
  "id": "a3f2c1d0-89b4-4e7a-b6f5-1234567890ab",
  "name": "Maria S.",
  "email": "[e-mail]",
  "profile_picture": "https://example.com/avatars/maria.jpg",
  "points": 120,
  "current_streak": 5,
  "max_streak": 14,
  "created_at": "2026-01-10T08:30:00.000Z",
  "updated_at": "2026-03-17T10:05:00.000Z"
}

Errors

Status	Description
400	Supplied email is already in use by another account, or request body fails validation.
401	Missing, invalid, or expired token.