Get User Profile

Retrieve the authenticated user’s profile information and basic user data

Overview

This endpoint retrieves comprehensive profile and authentication data for the currently authenticated user. It returns both the user’s profile information (managed by Harbor Parking) and their basic authentication data (managed by Supabase Auth).

Authentication

Response

profile · object · required

User’s Harbor Parking profile information

Show Profile Object

id · string · required

Unique profile identifier (UUID)

email · string · required

User’s email address

full_name · string

User’s full name (optional)

apartment_number · string · required

User’s apartment number in the building

phone_number · string

User’s phone number (optional)

is_approved · boolean · required

Whether the user has been approved by a building administrator

is_admin · boolean · required

Whether the user has administrator privileges

created_at · string · required

Profile creation timestamp (ISO 8601)

updated_at · string · required

Profile last update timestamp (ISO 8601)

user · object · required

User’s authentication data from Supabase

Show User Object

id · string · required

Unique user identifier (UUID) - matches profile.id

email · string · required

User’s email address

email_confirmed_at · string

Email confirmation timestamp (ISO 8601)

created_at · string · required

User account creation timestamp (ISO 8601)

updated_at · string · required

User account last update timestamp (ISO 8601)

Example Request

cURL

curl -X GET "https://harbor-parking.vercel.app/api/profile" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json"

Example Response

Success Response

{
  "profile": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "email": "[e-mail]",
    "full_name": "John Doe",
    "apartment_number": "12A",
    "phone_number": "[phone]",
    "is_approved": true,
    "is_admin": false,
    "created_at": "2024-01-15T10:30:00Z",
    "updated_at": "2024-01-15T10:30:00Z"
  },
  "user": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "email": "[e-mail]",
    "email_confirmed_at": "2024-01-15T10:30:00Z",
    "created_at": "2024-01-15T10:30:00Z",
    "updated_at": "2024-01-15T10:30:00Z"
  }
}

Error Responses

401 Unauthorized

{
  "error": "Authentication required"
}

Use Cases

Check User Approval Status

const { profile } = await fetch('/api/profile').then(r => r.json());

if (!profile.is_approved) {
  // Redirect to pending approval page
  showPendingApprovalMessage();
} else {
  // User can access full features
  redirectToDashboard();
}

Display User Information

const { profile, user } = await fetch('/api/profile').then(r => r.json());

const userInfo = {
  displayName: profile.full_name || user.email,
  apartment: profile.apartment_number,
  isAdmin: profile.is_admin,
  memberSince: new Date(user.created_at).toLocaleDateString()
};

Profile Completeness Check

function checkProfileCompleteness(profile) {
  const missing = [];
  
  if (!profile.full_name) missing.push('full_name');
  if (!profile.phone_number) missing.push('phone_number');
  
  return {
    isComplete: missing.length === 0,
    missingFields: missing,
    completionPercentage: ((4 - missing.length) / 4) * 100
  };
}

Rate Limiting

This endpoint is rate limited to:

• 10 requests per minute per user
• 100 requests per hour per user

Security Notes

• Profile data is protected by Row Level Security (RLS)
• Users can only access their own profile data
• Administrators can view all profiles through separate admin endpoints
• Email and phone data should be handled securely in client applications

Next: Update Profile

Learn how to update user profile information