{% extends "docs/base.html" %}

{% block docs_content %}
  <div class="mb-4"><h1 class="h3 mb-1">Update user</h1><p class="text-muted mb-0">Update allowed non-activity user fields by username.</p></div>

  <div class="card shadow-sm mb-4"><div class="card-body"><h2 class="h6 text-uppercase text-muted">Endpoint</h2><div class="bg-light border rounded p-3"><pre class="mb-0"><code>PUT /api/v1/users/{username}</code></pre></div><div class="mt-2 d-flex gap-2"><span class="badge text-bg-info">Self</span></div></div></div>

  <div class="card shadow-sm mb-4"><div class="card-body"><h2 class="h6 text-uppercase text-muted">Request</h2><p class="mb-0">JSON body supports partial fields like <code>name</code> and <code>email</code>. Use <code>PUT /api/v1/users/{username}/activity</code> for activity changes. <code>is_active</code> is still rejected here.</p></div></div>

  <div class="card shadow-sm mb-4"><div class="card-body"><h2 class="h6 text-uppercase text-muted">Usage</h2><div class="bg-light border rounded p-3"><pre class="mb-0"><code>curl \
  --request PUT \
  --header "Authorization: Bearer $PEARING_API_TOKEN" \
  --header "Content-Type: application/json" \
  --data '{"name": "Alice Doe"}' \
  "$PEARING_API_URL/v1/users/alice"</code></pre></div></div></div>

  <div class="card shadow-sm mb-4"><div class="card-body"><h2 class="h6 text-uppercase text-muted">Success</h2><p class="mb-2"><code>200 OK</code> with the updated user. The response still includes <code>activity</code> and <code>activity_updated_at</code>.</p><div class="bg-light border rounded p-3"><pre class="mb-0"><code>{
  "uuid": "...",
  "username": "alice",
  "name": "Alice Doe",
  "activity": "",
  "activity_updated_at": null
}</code></pre></div></div></div>

  <div class="card shadow-sm"><div class="card-body"><h2 class="h6 text-uppercase text-muted">Errors</h2><ul class="mb-0"><li><code>400 Bad Request</code> for disallowed fields such as <code>activity</code> or <code>is_active</code>.</li><li><code>403 Forbidden</code> when caller targets another user or requests a disallowed update.</li><li><code>404 Not Found</code> when username does not exist.</li><li><code>409 Conflict</code> for duplicate username/email.</li></ul><p class="text-muted mt-2 mb-0">Common auth errors are documented on the API overview page.</p></div></div>
{% endblock %}