GET /auth/me

This page covers two endpoints that operate on the currently authenticated merchant’s own account: one to retrieve your profile and one to change your password. Both require a valid Bearer token or API key.

Fetch the full profile for the authenticated merchant. Use this endpoint to display account information in your dashboard, check KYC status, or confirm account state at any point in your session.

Endpoint

GET https://api.dubupay.com/api/v1/auth/me

Authentication required. Include Authorization: Bearer <access_token> or X-Api-Key: <key>.

Response

HTTP 200 OK on success.

success

boolean

true when the profile was retrieved successfully.

data

object

The merchant profile object.

Show data

string

UUID of the merchant account.

business_name

string

Registered business name.

string

Email address on the account.

is_verified

boolean

Whether the email address has been verified.

is_active

boolean

Whether the account is currently active.

kyc_status

string

Business KYC verification status (e.g. PENDING, APPROVED, REJECTED).

personal_kyc_status

string

Personal KYC status for the account owner.

country

string

The country associated with the merchant account, or null if not set.

created_at

string

ISO 8601 timestamp of when the account was created.

Example

curl https://api.dubupay.com/api/v1/auth/me \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

Response

{
  "success": true,
  "data": {
    "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "business_name": "Acme Trading Ltd",
    "email": "owner@acmetrading.com",
    "is_verified": true,
    "is_active": true,
    "kyc_status": "PENDING",
    "personal_kyc_status": "PENDING",
    "country": null,
    "created_at": "2024-11-01T09:00:00.000Z"
  }
}

PATCH /auth/me/password

Change the password on your merchant account. You must supply the correct current password — the API verifies it before applying the change. After a successful password change, all existing refresh tokens for your account are immediately revoked. You will need to log in again to obtain new tokens.

Endpoint

PATCH https://api.dubupay.com/api/v1/auth/me/password

Authentication required. Include Authorization: Bearer <access_token> or X-Api-Key: <key>.

Request body

current_password

string

required

Your current account password. The API verifies this against the stored hash before making any changes.

new_password

string

required

The new password you want to set. Must be at least 8 characters.

Response

HTTP 200 OK on success.

success

boolean

true when the password was changed successfully.

message

string

Confirmation message: "Password changed successfully".

Example

curl -X PATCH https://api.dubupay.com/api/v1/auth/me/password \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." \
  -H "Content-Type: application/json" \
  -d '{
    "current_password": "SuperSecret123",
    "new_password": "EvenMoreSecret456"
  }'

Response

{
  "success": true,
  "message": "Password changed successfully"
}

After changing your password

Your current refresh token is revoked immediately. You must call POST /auth/login with your new password to obtain a fresh token pair. Any other devices or sessions using the old refresh token will also be signed out.

Error responses

Endpoint	Status	Code	Description
Both	`401`	`UNAUTHORIZED`	No valid token or API key provided.
`PATCH /me/password`	`400`	`WRONG_PASSWORD`	`current_password` is incorrect.
`PATCH /me/password`	`400`	Validation error	`new_password` is missing or fewer than 8 characters.
Both	`404`	`NOT_FOUND`	The merchant account was not found (should not occur in normal usage).

Overview

Auth

Payments

Trading

Commerce

Webhooks

GET /auth/me — Retrieve your merchant profile

GET /auth/me

Endpoint

Response

Example

PATCH /auth/me/password

Endpoint

Request body

Response

Example

After changing your password

Error responses

​GET /auth/me

​Endpoint

​Response

​Example

​PATCH /auth/me/password

​Endpoint

​Request body

​Response

​Example

​After changing your password

​Error responses

GET /auth/me

Endpoint

Response

Example

PATCH /auth/me/password

Endpoint

Request body

Response

Example

After changing your password

Error responses