Skip to content

Single Account

A single entrecode Account.

The JSON Schema is


Property Type Format Description Writable
accountID String Version 4 UUID (RFC 4122) The unique identifier for an Account No. Gets generated on creation.
created String ISO-8601 formatted UTC Date String (YYYY-MM-DDTHH:mm:ss.sssZ, RFC 3339) Timestamp of the creation of the Account No. Gets written on creation.
email String valid eMail Address The primary eMail address of the account Yes
language String Shortened RFC5646 Syntax (en, de, …) The primary UI language for this account Yes
state String active, inactive, blocked, deleted The account state Yes
hasPassword Boolean Optional. Indicates if the user has a password set. No
hasPendingEmail Boolean Optional. Indicates if the user has a pending email change No
openID Array OAuth Accounts of linked OAuth / Open ID Connect accounts. Each Array item is an object including the fields sub (subject), iss (issuer), pending (true/false), email and name (as given from the OAuth issuer) Yes
permissions Array[String] Shiro permission string Permissions that are directly assigned to this account (excluding group permissions). Yes
groups Array objects containing name, groupID and a permissions array Groups this account is assigned to, including group permissions (permissions inherited by group membership). Groups are not linked to the group resource because other members may not be disclosed. No. Edit the group resource to change memberships.

Note to deprecated isPrincess field: This field is not included anymore. Just check for membership in the Princesses group.


Relation Name Target Resource Description Possible Methods
self Account The resource itself GET, PUT
collection Account List List of all available Accounts GET
ec:account/tokens Token List Collection of access tokens for this account GET


The Account List Resource is a Generic List Resource with embedded Account Resources.

Possible Actions


To read a single Account Resource, clients may perform GET on a ec:account relation.

To read the Account List Resource, clients may perform GET on a ec:accounts relation or on the collection relation of a single Account resource.

In both cases, the success status code is 200 OK.


  "accountID": "00000000-0000-4444-8888-000000000000",
  "created": "2014-12-04T17:00:38.208Z",
  "email": "",
  "hasPassword": true,
  "language": "en",
  "openID": [ ],
  "state": "active",
  "permissions": [
  "groups": [
      "name": "datamanager-user",
      "groupID": "fc8aff95-fd00-4f98-ac06-61659b48657b",
      "permissions": [
      "name": "appserver-user"
      "groupID": "a6b78f95-fd00-4f98-ac06-61659b45f3e2",
      "permissions": [
  "_links": {
    "self": {
      "href": ""
    "curies": {
      "href": "{rel}",
      "templated": true
    "ec:account/tokens": {
      "href": ""
    "collection": {
      "href": ""


To create a new Account Resource, the Signup process has to be executed. See ec:auth/register relation.


To update an existing Account Resource, clients may perform a PUT on ec:account or self at a single Account Resource. The JSON Schema for editing an Account is

All fields are optional and need their own permission. Fields where no permission is available will be ignored.



For setting permissions, additionally the permission acc:permissions:<permission> is needed. The permission acc:set-password:<uuid> enables changing the password without the need for oldPassword to be set.

Deleting an OAuth / OpenID Connect connection is only allowed if hasPassword is true or an other connection which is not pending exists. Adding a connection is not possible via PUT, instead a signup has to be done with an authenticated access token.

For changing email address or password, the according auth relations have to be used: Change eMail, Password reset. Both require validation over email.

Editing the groups array is not possible using the Account Resource. Sending the property with a PUT request has no effect. To add accounts to a group, the group resource has to be edited.

Note to deprecated isPrincess field: This field is not included anymore. Just add account to the Princesses group.

The success status code is 200 OK and the response body is the updated single Account resource.


Deletion is not possible at the moment. However, the state can be set to deleted.