Users API

[mfriesen]

NOTE: only admins can use the POST/PATCH/PUT/DELETE, all users have access to GET

GET /users -> enabled is a boolean, status is the confirmationStatus
POST /users
GET /users/{username}/groups
PATCH /users/{username} -> used to update email or other user attributes, EXCLUDING groups
PUT /users/{username}/enabled -> body { "enabled": "true|false" } -> this is user enabled status, which is not the same as confirmation status, though both maybe sometimes be referred to as "user status"
DELETE /users/{username}
POST /groups -> creates a new group
POST /groups/users -> adds a user to a group
DELETE /groups/users/{username} -> delete user from group
DELETE /groups/{groupName}

Optional endpoints (good for users, more time to implement):
PUT /users/{username}/groups -> used to replace groups
GET /users/{username} -> I don't see a need for this one, unless people start actively using user attributes, so maybe a future enhancement

Future:
PUT /users/{username}/status -> body { "status": "CONFIRMED|RESET_PASSWORD|etc." } -> this is confirmation status, which will not be modifiable at this time

[mfriesen]

APIs that have been implemented.

GET /users <-- GET user list
POST /users <-- ADD USER

POST /groups/{groupName}/users <-- add user to group
DELETE /groups/{groupName}/users/{username} <-- remove user from group

GET /users/{username}
DELETE /users/{username}

PUT /users/(username)/disable
PUT /users/(username)/enable
PUT /users/(username)/reset-password