Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Usage Milestone: Google Analytics Module google_analytics crossed 1,000 active installs. Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Release: GraphQL Compose Codegen 1.1.2 Minor update available for module graphql_compose_codegen (1.1.2). Release: Mapy.com 1.1.3 Minor update available for module mapycom (1.1.3). Release: Ckeditor5 entity browser 3.0.3 Minor update available for module ckeditor5_entity_browser (3.0.3). Release: Ckeditor5 entity browser 3.0.1 Minor update available for module ckeditor5_entity_browser (3.0.1). Release: Ckeditor5 entity browser 3.0.2 Minor update available for module ckeditor5_entity_browser (3.0.2). Release: Teamleader Integration 4.0.2 Minor update available for module teamleader (4.0.2). Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

User API

9 sites Security covered Drupal 10–11
View on drupal.org

This module offers a REST API for managing user accounts, including advanced registration and secure endpoints for changing passwords, canceling accounts, and updating email addresses. It integrates with verification services to ensure security for sensitive operations.

The User API module provides a comprehensive REST API for managing user accounts in Drupal, offering enhanced functionality beyond core user operations.

Key Features

  • Advanced user registration endpoint with improved capabilities compared to core
  • Endpoints to set (change) or unset user password
  • Endpoints to cancel the user account
  • Endpoints to change the email address
  • High Security due to requiring a external verification factor in API request for modifying operations

Available Endpoints

  • /user-api/register - Enhanced user account creation
  • /user-api/register/resend-email - Resend the registration email
  • /user-api/set-password/init - Send set password email
  • /user-api/set-password - Set the password if verified
  • /user-api/cancel-account/init - Send the cancel account email
  • /user-api/cancel-account - Cancel the account if verified
  • /user-api/set-email/init - Send a confirmation email to new email. Optionally sends notification to existing email.
  • /user-api/set-email - Change the email address if verified
  • /user-api/unset-password/init - Send email of password removal
  • /user-api/unset-password - Remove password from account if verified

Integration

Seamlessly integrates with the Verification API module to ensure secure handling of sensitive account operations through external factors, like Link in E-Mail, Magic-Code, etc.

Depends on

Dependencies of the latest stable release

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
9
Tracked since
Dec 2024
Latest release
1 year ago
Releases (12 mo)
0 ▼ from 9
Maintenance
Dormant

Release Timeline

Releases

Version Type Core Release date
2.1.0 Stable 10–11 Mar 4, 2025
2.1.0-rc7 Pre-release 10–11 Mar 4, 2025
2.1.0-rc6 Pre-release 10–11 Dec 18, 2024
2.1.0-rc5 Pre-release 10–11 Dec 18, 2024
2.0.0-rc4 Pre-release 10–11 Dec 17, 2024
2.0.0-rc3 Pre-release 10–11 Dec 11, 2024
2.0.0-rc2 Pre-release 10–11 Dec 11, 2024
2.0.0-rc1 Pre-release 10 Dec 11, 2024
2.x-dev Dev 10–11 Dec 11, 2024