User Profile

Update the current user's profile information and password. Both endpoints require an authenticated user (Bearer token); no workspace is required.

Update Profile

PATCH /wallethero-api/user/profile

Update the current user's first and/or last name. At least one updatable field must be provided.

Auth: Bearer token (authenticated user).

Request Body

Field	Type	Required	Description
first_name	string	No	New first name (min 1 character)
last_name	string	No	New last name (min 1 character)

Note: The validation schema also accepts an email field, but the handler ignores it — only first_name and last_name are applied.

Example Request

curl -X PATCH "https://api.wallethero.app/wallethero-api/user/profile" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "first_name": "Jonathan",
    "last_name": "Smith"
  }'

Response (200)

{
  "message": "Profile updated successfully",
  "user": {
    "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "email": "[email protected]",
    "first_name": "Jonathan",
    "last_name": "Smith"
  }
}

Errors

Status	Code	Description
400	INVALID_PAYLOAD	No valid updatable fields (first_name/last_name) provided

SDK

No SDK method — call the REST endpoint directly.

---

Change Password

PATCH /wallethero-api/user/password

Change the current user's password. The current password is verified before the new one is applied.

Auth: Bearer token (authenticated user).

Request Body

Field	Type	Required	Description
current_password	string	Yes	Current password (used for verification)
new_password	string	Yes	New password, minimum 8 characters

Example Request

curl -X PATCH "https://api.wallethero.app/wallethero-api/user/password" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "current_password": "oldPassword123",
    "new_password": "newSecurePassword456"
  }'

Response (200)

{
  "message": "Password changed successfully"
}

Errors

Status	Code	Description
400	INVALID_PAYLOAD	Missing fields, or current password is incorrect

SDK

No SDK method — call the REST endpoint directly.