Skip to main content
GET
Get current user
Returns the signed-in user plus organization and billing snapshot. The SPA uses this as bootstrap — including which features the client should show.
An organization API key authenticates, then this route 403s. It answers about the human, not the key’s tenant. Call it with an Auth0 token or a session.

Authorizations

Authorization
string
header
required

Organisation API key from Settings → API / /api/keys/. The secret is shown once. Send Authorization: Bearer sk-abacus-…. One active key per organisation. Ingest (/api/v2/ingest/*) refuses API keys — that surface is Auth0-only with ingest:read / ingest:write scopes.

Response

200 - application/json

Serializes the authenticated user's profile for the v2 API (consumed by abacus-spa).

role is the user's role in organizationowner, admin or member, or null when the user has no membership. Clients may gate navigation on it; the server remains the authority.

id
integer
required
read-only
date_joined
string<date-time>
required
read-only
organization_id
integer | null
required
read-only
organization_name
string | null
required
read-only
role
string | null
required
read-only
locale
enum<string> | null
required

User's preferred UI language. Populated from Auth0 locale claim on first login.

  • en - English
  • ar - Arabic
  • fr - French
  • ur - Urdu
  • hi - Hindi
  • es - Spanish
  • pt - Portuguese
Available options:
en,
ar,
fr,
ur,
hi,
es,
pt
email
string<email>
Maximum string length: 254
first_name
string
Maximum string length: 150
last_name
string
Maximum string length: 150