Skip to main content
POST
/
api
/
user
/
refresh
/
profile
Refresh user profile data
curl --request POST \
  --url https://pria.praxislxp.com/api/user/refresh/profile \
  --header 'x-access-token: <api-key>'
{
  "success": true,
  "token": "<string>",
  "profile": {
    "_id": "<string>",
    "email": "<string>",
    "fname": "<string>",
    "lname": "<string>",
    "picture": "<string>",
    "accountType": "user",
    "credits": 123,
    "creditsUsed": 123,
    "plan": "<string>",
    "status": "<string>",
    "customerId": "<string>",
    "institution": {},
    "remember_history_count": 123,
    "browser_voice": "<string>",
    "browser_voices": {},
    "rt_voice": "<string>",
    "use_location": true,
    "use_stt": true,
    "pin_ui": true,
    "showSideBar": true,
    "galleryAsGrid": true,
    "showPriaOptions": true,
    "ragOnlySearch": true,
    "dark_mode": true,
    "max_dialogues": 123,
    "mustChangePassword": true,
    "updatePasswordOnSSO": true,
    "resetCodeId": "<string>",
    "referralId": "<string>",
    "trial_end": "2023-11-07T05:31:56Z",
    "trial_used": true,
    "current_period_end": "2023-11-07T05:31:56Z",
    "cancel_at_period_end": true,
    "lxp_user_id": "<string>",
    "lxp_partner_name": "<string>",
    "lxp_role_name": "<string>",
    "canvasApiToken": {},
    "googleLoginToken": {},
    "googleOAuthScopes": [
      "<string>"
    ],
    "institutionGoogleOAuthEnabled": true,
    "institutionGoogleOAuthScopes": [
      "<string>"
    ],
    "institutionGoogleWorkspaceEnabled": true,
    "institutionGoogleUseInstitutionAccount": true
  }
}

Authorizations

​
x-access-token
string
header
required

JWT token passed in x-access-token header

Response

Profile refreshed successfully

​
success
boolean

Whether the operation was successful

​
token
string

Fresh JWT token (sliding session). Each profile refresh extends the session by the configured expiration period (default 6 hours). Store this token and use it for subsequent API requests.

​
profile
object

Full user profile object (User model fields merged with populated institution, plus Google OAuth flags). Sensitive fields (password, permissions, __v, created) are stripped.