Removes an account.

DELETE

/api/v1/admin/users/{id}

What goes with it and what does not

Sessions and API tokens are deleted by the database. Shares are not: their owner column is ON DELETE SET NULL, so their uploads become anonymous shares and keep working for whoever holds the code. Taking those files off the internet in the same motion would be a second decision made silently.

Errors

401 when nothing was signed in, 403 when the caller is not an administrator or used a bearer token, 404 when no account has that identifier, 409 when this would leave the instance with no administrator.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Path Parameters

id*string

Which account to remove

Response Body

Removed

curl -X DELETE 'https://example.com/api/v1/admin/users/string'

Empty