Get Current User

curl --request GET \
  --url https://api.example.com/api/auth/me

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/auth/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/auth/me"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/auth/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "401": {},
  "404": {},
  "500": {},
  "success": true,
  "user": {
    "_id": "<string>",
    "email": "<string>",
    "role": "<string>",
    "full_name": "<string>",
    "phone": "<string>",
    "is_email_verified": true,
    "is_phone_verified": true,
    "profile_picture_url": "<string>",
    "seller_profile": {
      "identity_document": "<string>",
      "selfie_url": "<string>",
      "verification_status": "<string>",
      "verification_method": "<string>",
      "verified_at": "<string>",
      "verified_by": "<string>",
      "rejection_reason": "<string>",
      "is_verified_badge": true
    },
    "is_active": true,
    "last_login": "<string>",
    "created_at": "<string>",
    "updated_at": "<string>"
  }
}

GET

api

auth

Get Current User

curl --request GET \
  --url https://api.example.com/api/auth/me

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/auth/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/auth/me"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/auth/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "401": {},
  "404": {},
  "500": {},
  "success": true,
  "user": {
    "_id": "<string>",
    "email": "<string>",
    "role": "<string>",
    "full_name": "<string>",
    "phone": "<string>",
    "is_email_verified": true,
    "is_phone_verified": true,
    "profile_picture_url": "<string>",
    "seller_profile": {
      "identity_document": "<string>",
      "selfie_url": "<string>",
      "verification_status": "<string>",
      "verification_method": "<string>",
      "verified_at": "<string>",
      "verified_by": "<string>",
      "rejection_reason": "<string>",
      "is_verified_badge": true
    },
    "is_active": true,
    "last_login": "<string>",
    "created_at": "<string>",
    "updated_at": "<string>"
  }
}

Endpoint

GET /api/auth/me

Authentication

Required. Include a valid JWT token in the Authorization header.

Authorization: Bearer <token>

Request

No request parameters required. The user is identified from the JWT token.

Response

boolean

Indicates whether the request was successful.

object

Complete user profile information (password hash is excluded).

string

User’s unique identifier.

string

User’s email address.

string

User’s role (“seller” or “admin”).

string

User’s full name.

string

User’s phone number in international format.

boolean

Whether the user’s email has been verified.

boolean

Whether the user’s phone number has been verified.

string

URL to the user’s profile picture.

object

Seller-specific profile information. Null for admin users.

string

URL or identifier for the seller’s identity document.

string

URL to the seller’s selfie image.

string

Verification status: “pending”, “verified”, or “rejected”.

string

Method used for verification: “manual” or “automatic”.

string

ISO 8601 timestamp of when verification was completed.

string

User ID of the admin who verified this seller (for manual verification).

string

Reason for rejection if verification_status is “rejected”.

boolean

Whether the seller has a verified badge displayed.

boolean

Whether the user account is active.

ISO 8601 timestamp of the user’s last login.

string

ISO 8601 timestamp of when the account was created.

string

ISO 8601 timestamp of when the account was last updated.

Example Request

curl -X GET https://api.horsetrust.com/api/auth/me \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

const token = localStorage.getItem('authToken');

const response = await fetch('https://api.horsetrust.com/api/auth/me', {
  method: 'GET',
  headers: {
    'Authorization': `Bearer ${token}`
  }
});

const data = await response.json();

if (data.success) {
  console.log('Current user:', data.user);
}

Example Response

200 Success

{
  "success": true,
  "user": {
    "_id": "507f1f77bcf86cd799439011",
    "email": "seller@example.com",
    "role": "seller",
    "full_name": "John Smith",
    "phone": "+5491112345678",
    "is_email_verified": false,
    "is_phone_verified": false,
    "profile_picture_url": null,
    "seller_profile": {
      "identity_document": "https://storage.example.com/docs/id-123.pdf",
      "selfie_url": "https://storage.example.com/selfies/selfie-123.jpg",
      "verification_status": "pending",
      "is_verified_badge": false
    },
    "is_active": true,
    "last_login": "2026-03-05T10:30:00.000Z",
    "created_at": "2026-03-01T08:00:00.000Z",
    "updated_at": "2026-03-05T10:30:00.000Z"
  }
}

Error Responses

error

Unauthorized - Missing or invalid authentication token.

{
  "success": false,
  "message": "Authentication required"
}

error

Not Found - User not found (may have been deleted).

{
  "success": false,
  "message": "User not found"
}

error

Server Error - Internal server error.

{
  "success": false,
  "message": "Server error"
}

Notes

This endpoint requires a valid JWT token obtained from login or registration
The password hash is never included in the response for security
Use this endpoint to check if the current token is still valid
The response includes complete profile information including verification status
This is useful for maintaining user state in client applications

Update Seller Profile

⌘I

Authentication

Horses

Chat

Admin

Get Current User

Endpoint

Authentication

Request

Response

Example Request

Example Response

Error Responses

Notes

​Endpoint

​Authentication

​Request

​Response

​Example Request

​Example Response

​Error Responses

​Notes

Endpoint

Authentication

Request

Response

Example Request

Example Response

Error Responses

Notes