User Management (1.0.0)

Creates or updates a user profile. Behavior varies by role.

User (client) role — four paths:

• Path A: Update an existing client who has a therapist-client relationship (returning login after invite).
• Path B: Create a new client completing a therapist invitation (first-time signup). Links the new user to existing TherapistClient, UserConsent, and ClientScreening records, then dispatches an Active status event.
• Path C: Update an existing self-registered client (no invitation).
• Path D: Create a new self-registered client with no therapist relationship.

Therapist role: Creates or updates a therapist account. On first login, checks for a matching TherapistInvitation to assign org membership; if none is found, grants org-admin status. Optionally triggers background sample-data seeding when SEEDING_ENABLED is True.

Destroy performs a soft-delete (is_deleted=True) rather than a hard-delete.

Creates or updates a user profile. Behavior varies by role.

User (client) role — four paths:

• Path A: Update an existing client who has a therapist-client relationship (returning login after invite).
• Path B: Create a new client completing a therapist invitation (first-time signup). Links the new user to existing TherapistClient, UserConsent, and ClientScreening records, then dispatches an Active status event.
• Path C: Update an existing self-registered client (no invitation).
• Path D: Create a new self-registered client with no therapist relationship.

Therapist role: Creates or updates a therapist account. On first login, checks for a matching TherapistInvitation to assign org membership; if none is found, grants org-admin status. Optionally triggers background sample-data seeding when SEEDING_ENABLED is True.

Destroy performs a soft-delete (is_deleted=True) rather than a hard-delete.

Aggregates all notification-relevant activity data for a given userId into a single response. Send the userId as a URL path parameter.

The response includes the most recent log date for each tracked activity:

• screen_gad7_logdate / screen_phq9_logdate: Date of the last GAD-7 or PHQ-9 screening. Falls back to the TherapistClient create_timestamp if the user has never been screened.
• journal_logdate: Timestamp of the most recent journal entry. Falls back to TherapistClient create_timestamp if none exist.
• mood_logdate: Timestamp of the most recent mood tracker log. Falls back to TherapistClient create_timestamp if none exist.
• goaltracking: Incomplete goal-tracking entries due within the last 10 days, grouped by due date.
• recommendation: Latest incomplete RecommendationDetail per recommendation type, joined with RecommendationMeta for display metadata.
• chat: Start time of the most recent ConversationSession for the user.

Aggregates all notification-relevant activity data for a given userId into a single response. Send the userId as a URL path parameter.

The response includes the most recent log date for each tracked activity:

• screen_gad7_logdate / screen_phq9_logdate: Date of the last GAD-7 or PHQ-9 screening. Falls back to the TherapistClient create_timestamp if the user has never been screened.
• journal_logdate: Timestamp of the most recent journal entry. Falls back to TherapistClient create_timestamp if none exist.
• mood_logdate: Timestamp of the most recent mood tracker log. Falls back to TherapistClient create_timestamp if none exist.
• goaltracking: Incomplete goal-tracking entries due within the last 10 days, grouped by due date.
• recommendation: Latest incomplete RecommendationDetail per recommendation type, joined with RecommendationMeta for display metadata.
• chat: Start time of the most recent ConversationSession for the user.

Bulk-creates or updates UserConsent records and retrieves required consents for a specific user.

POST — Accepts a list of consent objects. Items with a non-null "id" are updated; items without "id" are created. After saving, if the user is a Therapist and the consent type is not "BAA", a welcome email is dispatched to the therapist.

GET /{userId}/ — Returns all required consents for the given userId, merged with their ConsentMeta definitions into a flat record list.

Bulk-creates or updates UserConsent records and retrieves required consents for a specific user.

POST — Accepts a list of consent objects. Items with a non-null "id" are updated; items without "id" are created. After saving, if the user is a Therapist and the consent type is not "BAA", a welcome email is dispatched to the therapist.

GET /{userId}/ — Returns all required consents for the given userId, merged with their ConsentMeta definitions into a flat record list.

Bulk-creates or updates UserConsent records and retrieves required consents for a specific user.

POST — Accepts a list of consent objects. Items with a non-null "id" are updated; items without "id" are created. After saving, if the user is a Therapist and the consent type is not "BAA", a welcome email is dispatched to the therapist.

GET /{userId}/ — Returns all required consents for the given userId, merged with their ConsentMeta definitions into a flat record list.

Lists consent metadata definitions used to populate consent forms. Accepts two optional query parameters:

• role (default: "User"): Filters consent templates by the role they target (e.g. "User", "Therapist").
• consent_type (optional): Narrows results to a specific consent category (e.g. "BAA", "system", "therapist").

Returns all matching active ConsentMeta records.

Lists consent metadata definitions used to populate consent forms. Accepts two optional query parameters:

• role (default: "User"): Filters consent templates by the role they target (e.g. "User", "Therapist").
• consent_type (optional): Narrows results to a specific consent category (e.g. "BAA", "system", "therapist").

Returns all matching active ConsentMeta records.

Creates a new consent signature or retrieves an existing one.

POST — If "id" is provided in the request body and a matching UserConsentSignature record exists, the existing signature is returned (read-before-write pattern). If "id" is absent or null, a new signature record is created and returned with HTTP 201.

Creates or updates a login audit trail record for a user. Accepts a POST request with user_id and any audit fields in the request body. If a UserLoginAudit record already exists for the given user_id it is updated; otherwise a new record is created. Returns the id of the upserted record.

Retrieves user details by loginId. Returns basic user profile information for the active (non-deleted) user whose loginId matches the provided value. Send loginId as a URL path parameter.

Retrieves user details by loginId. Returns basic user profile information for the active (non-deleted) user whose loginId matches the provided value. Send loginId as a URL path parameter.

Registers or updates a device push-notification token for a user.

POST — Accepts "userid" and "device_id" in the request body. If an active UserDeviceToken record already exists for that userid + device_id combination, it is partially updated (e.g. refreshed token value) and returns the record id with HTTP 200. If no matching record exists, a new token record is created and returned with HTTP 201.

Retrieves all pending (incomplete) screening records for a given userId. Returns ClientScreening rows where is_completed=False. Send userId as a URL path parameter. Returns 204 if an error occurs.

Retrieves all pending (incomplete) screening records for a given userId. Returns ClientScreening rows where is_completed=False. Send userId as a URL path parameter. Returns 204 if an error occurs.

Searches for a user by email address. Accepts a POST request with an "emailid" field in the request body. Performs a case-insensitive partial match and returns the first matching active (non-deleted) user. Returns 400 if the emailid field is missing.

Searches for a user by email address. Accepts a POST request with an "emailid" field in the request body. Performs a case-insensitive partial match and returns the first matching active (non-deleted) user. Returns 400 if the emailid field is missing.

Creates or updates all sections of a therapist's practice profile in a single request. Requires "userId" in the request body. Processes four profile sections in sequence:

• credentials: Professional licences/certifications. Items with a non-null "id" are updated; items with id=null are created.
• theoreticalOrientation: Therapeutic modalities, each with nested "UserInterventionTech" entries which are also individually upserted.
• populations: Patient population groups the therapist works with.
• specialties: Clinical specialty areas.

Returns {"success": true} on completion.

Retrieves the complete practice profile for a therapist by userId. Returns all four profile sections in a single response:

• credentials: Professional licences and certifications.
• theoreticalOrientation: Therapeutic modalities with nested intervention techniques.
• Populations: Patient population groups the therapist works with.
• Specialties: Clinical specialty areas.

Send the therapist userId as a URL path parameter.

Retrieves the complete practice profile for a therapist by userId. Returns all four profile sections in a single response:

• credentials: Professional licences and certifications.
• theoreticalOrientation: Therapeutic modalities with nested intervention techniques.
• Populations: Patient population groups the therapist works with.
• Specialties: Clinical specialty areas.

Send the therapist userId as a URL path parameter.

Retrieves user details by userId. Returns basic user profile information merged with therapist-relationship fields (is_profile_active, invite_sent) sourced from the TherapistClient table. Returns null for those fields if no therapist-client relationship exists. Send userId as a URL path parameter.

Retrieves user details by userId. Returns basic user profile information merged with therapist-relationship fields (is_profile_active, invite_sent) sourced from the TherapistClient table. Returns null for those fields if no therapist-client relationship exists. Send userId as a URL path parameter.

Retrieves user details by userLoginName. Returns full user profile information for any active (non-deleted) user whose userLoginName matches the provided value. Supports listing all users (GET, no param) or fetching a single user by their userLoginName (GET /{userloginname}/).

Retrieves user details by userLoginName. Returns full user profile information for any active (non-deleted) user whose userLoginName matches the provided value. Supports listing all users (GET, no param) or fetching a single user by their userLoginName (GET /{userloginname}/).