Bulk deactivate users (route currently mapped to update-by-id)

Route currently delegates to ApiUserController.update(); id extraction reads "bulk" from path and fails UUID validation.

RBAC · user

Request body

Content type: application/json · schema AccessUpdateUserBodyV1

usernamestring

min length 3

emailstring <email>

first_namestring

last_namestring

phonestring

timezonestring

user_typestring

Enum: internalclientadmincontractor

contact_idstring <uuid>

two_factor_enabledboolean

is_google_userboolean

is_inactiveboolean

role_idsarray of string

itemsstring <uuid>

Response body

Success response 200 · schema AccessApiSuccessV1

dataanyOfRequired

anyOf (option 1)object

anyOf (option 2)array of object

itemsobject

metaobject

Response codes

200

Operation succeeded.

400

Current route fails UUID extraction because ApiBaseController.update() treats path segment "bulk" as {id}.

401

API key missing/invalid or key user not found.

403

RBAC denied for user:update.

500

Unexpected controller/service failure.

PUT /api/v1/users/bulk/deactivate

cURL

curl -X PUT "https://algapsa.com/api/v1/users/bulk/deactivate" \
  -H "X-API-Key: $ALGA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "username": "xxx",
  "email": "user@example.com",
  "first_name": "string",
  "last_name": "string",
  "phone": "string",
  "timezone": "string",
  "user_type": "internal",
  "contact_id": "01HN2K7VRB9PQ3Y0000000000",
  "two_factor_enabled": false,
  "is_google_user": false,
  "is_inactive": false,
  "role_ids": [
    "01HN2K7VRB9PQ3Y0000000000"
  ]
}'

TypeScript

const response = await fetch("https://algapsa.com/api/v1/users/bulk/deactivate", {
  method: "PUT",
  headers: {
    "X-API-Key": "$ALGA_API_KEY",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "username": "xxx",
    "email": "user@example.com",
    "first_name": "string",
    "last_name": "string",
    "phone": "string",
    "timezone": "string",
    "user_type": "internal",
    "contact_id": "01HN2K7VRB9PQ3Y0000000000",
    "two_factor_enabled": false,
    "is_google_user": false,
    "is_inactive": false,
    "role_ids": [
      "01HN2K7VRB9PQ3Y0000000000"
    ]
  })
});
const data = await response.json();

using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Put, "https://algapsa.com/api/v1/users/bulk/deactivate");
request.Headers.TryAddWithoutValidation("X-API-Key", "$ALGA_API_KEY");
request.Headers.TryAddWithoutValidation("Content-Type", "application/json");
request.Content = new StringContent(@"{
  ""username"": ""xxx"",
  ""email"": ""user@example.com"",
  ""first_name"": ""string"",
  ""last_name"": ""string"",
  ""phone"": ""string"",
  ""timezone"": ""string"",
  ""user_type"": ""internal"",
  ""contact_id"": ""01HN2K7VRB9PQ3Y0000000000"",
  ""two_factor_enabled"": false,
  ""is_google_user"": false,
  ""is_inactive"": false,
  ""role_ids"": [
    ""01HN2K7VRB9PQ3Y0000000000""
  ]
}", Encoding.UTF8, "application/json");
var response = await client.SendAsync(request);
var body = await response.Content.ReadAsStringAsync();

200 OK·application/json

{
  "data": {},
  "meta": {}
}