Family APIs
Overview
This API has been available since 1.7.0
A Family allows you to define relationships between one or more Users. A adult User may belong to a single Family, a teen or child may belong to one or more families.
The following APIs are provided to manage Families and Family memberships.
Add a User to a Family
This API is used to add a User to a Family. You cannot directly create a family, instead a family is implicitly created when the first User is added.
Request
URI
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
URI
{familyId}
Request Parameters
The Id to use for the new Family. If not specified a secure random UUID will be generated.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Request Body
The unique userId of the User to add to a family.
Set to true
to indicate a family owner. This value will be ignored if the user role is Teen
or Child
.
The role of the user in the family.
ifdef::create_request[]
When creating a family the first user must be an Adult
, this value must be set to Adult
.
endif::[]
ifndef::create_request[]
The possible values are:
Adult
Child
Teen
endif::[]
Example Request JSON
{
"familyMember": {
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f",
"owner": true,
"role": "Adult"
}
}
Response
The response for this API contains the Family that was created.
Response CodesCode | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |
Response Body
The unique Id of the family.
The instant that the Family was added to the FusionAuth database.
The instant that the Family was updated in the FusionAuth database.
The members of this family.
The instant when the user was added to the family.
The instant when the family member was last updated.
True if this user is the owner of the family, the first Adult user in the family will automatically be set as the owner. A teen or child cannot be the family owner.
The role of the family member. The possible values are:
Adult
Child
Teen
The unique user Id of the family member.
Example Response JSON
{
"family": {
"id": "a815b480-d52d-4755-96ac-749c067925d7",
"insertInstant": 1595361142909,
"lastUpdateInstant": 1595361143101,
"members": [
{
"insertInstant": 1562010348111,
"lastUpdateInstant": 1595361143101,
"owner": true,
"role": "Adult",
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f"
}
]
}
}
Retrieve a Family
This API is used to retrieve a Family by a User Id or by Family Id.
Request
URI
{familyId}
Request Parameters
The unique Id of the Family.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Request
URI
?userId={userId}
Request Parameters
The unique Id of the User.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
The response for this API contains the requested family or families.
Code | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
404 | The object you requested doesn't exist. The response will be empty. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |
Response Body
The unique Id of the family.
The instant that the Family was added to the FusionAuth database.
The instant that the Family was updated in the FusionAuth database.
The members of this family.
The instant when the user was added to the family.
The instant when the family member was last updated.
True if this user is the owner of the family, the first Adult user in the family will automatically be set as the owner. A teen or child cannot be the family owner.
The role of the family member. The possible values are:
Adult
Child
Teen
The unique user Id of the family member.
Example Response JSON
{
"family": {
"id": "a815b480-d52d-4755-96ac-749c067925d7",
"insertInstant": 1595361142909,
"lastUpdateInstant": 1595361143101,
"members": [
{
"insertInstant": 1562010348111,
"lastUpdateInstant": 1595361143101,
"owner": true,
"role": "Adult",
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f"
}
]
}
}
Response Body
The list of Family objects.
The unique Id of the family.
The instant that the Family was added to the FusionAuth database.
The instant that the Family was updated in the FusionAuth database.
The members of this family.
The instant when the user was added to the family.
The instant when the family member was last updated.
True if this user is the owner of the family, the first Adult user in the family will automatically be set as the owner. A teen or child cannot be the family owner.
The role of the family member. The possible values are:
Adult
Child
Teen
The unique user Id of the family member.
Example Response JSON
{
"families": [
{
"id": "a815b480-d52d-4755-96ac-749c067925d7",
"insertInstant": 1595361142909,
"lastUpdateInstant": 1595361143101,
"members": [
{
"insertInstant": 1562010348111,
"lastUpdateInstant": 1595361143101,
"owner": true,
"role": "Adult",
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f"
}
]
}
]
}
Update a Family
This API is used to update an existing Family member. You may only update the User’s role or owner status.
Request
URI
{familyId}
Request Parameters
The unique Id of the Family.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Request Body
The unique userId of the User to add to a family.
Set to true
to indicate a family owner. This value will be ignored if the user role is Teen
or Child
.
The role of the user in the family.
ifdef::create_request[]
When creating a family the first user must be an Adult
, this value must be set to Adult
.
endif::[]
ifndef::create_request[]
The possible values are:
Adult
Child
Teen
endif::[]
Example Request JSON
{
"familyMember": {
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f",
"owner": true,
"role": "Adult"
}
}
Response
The response for this API contains the Family that was updated.
Code | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
404 | The object you are trying to update doesn't exist. The response will be empty. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |
Response Body
The unique Id of the family.
The instant that the Family was added to the FusionAuth database.
The instant that the Family was updated in the FusionAuth database.
The members of this family.
The instant when the user was added to the family.
The instant when the family member was last updated.
True if this user is the owner of the family, the first Adult user in the family will automatically be set as the owner. A teen or child cannot be the family owner.
The role of the family member. The possible values are:
Adult
Child
Teen
The unique user Id of the family member.
Example Response JSON
{
"family": {
"id": "a815b480-d52d-4755-96ac-749c067925d7",
"insertInstant": 1595361142909,
"lastUpdateInstant": 1595361143101,
"members": [
{
"insertInstant": 1562010348111,
"lastUpdateInstant": 1595361143101,
"owner": true,
"role": "Adult",
"userId": "b3360a2d-e81d-4314-b9f1-244a916ca52f"
}
]
}
}
Remove a User from a Family
This API is used to remove a User from an existing Family.
Request
URI
{familyId}/{userId}
Request Parameters
The unique Id of the Family.
The unique Id of the User.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Response
This API does not return a JSON response body.
Code | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
404 | The object you requested doesn't exist. The response will be empty. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |
Retrieve Pending Family Members
This API is used to retrieve the users pending parent approval.
Request
URI
?parentEmail={parentEmail}
Request Parameters
The email address of the parent.
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Response
The response for this API contains the requested pending users.
Code | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
404 | The object you requested doesn't exist. The response will be empty. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |
Response Body
True if the User is active. False if the User has been deactivated. Deactivated Users will not be able to login.
The User’s birthdate formatted as YYYY-MM-DD
An object that can hold any information about the User that should be persisted.
The User’s email address.
The User’s full name as a separate field that is not calculated from firstName and lastName.
The User’s unique Id.
The instant when the user was created.
The user’s parent’s email address.
Indicates that the User’s password needs to be changed during their next login attempt.
The instant that the User last changed their password.
An array of locale strings that give, in order, the User’s preferred languages. These are important for email templates and other localizable text. See Locales.
The Id of the Tenant that this User belongs to.
The User’s preferred timezone. This can be used as a default to display instants, and it is recommended that you allow User’s to change this per-session. The string will be in an IANA time zone format.
The algorithm used by the TOTP authenticator. With the current implementation, this will always be HmacSHA1
.
The length of code generated by the TOTP. With the current implementation, this will always be 6
.
The time-step size in seconds. With the current implementation, this will always be 30.
The value of the email address for this method. Only present if user.twoFactor.methods[x]
.method is email
.
The unique Id of the method.
true
if this method was used most recently.
The type of this method. There will also be an object with the same value containing additional information about this method. The possible values are:
authenticator
email
sms
The value of the mobile phone for this method. Only present if user.twoFactor.methods[x]
.method is sms
.
A base64 encoded secret
This field is required when method is authenticator
.
A list of recovery codes. These may be used in place of a code provided by an MFA factor. They are single use.
If a recovery code is used in a disable request, all MFA methods are removed. If, after that, a Multi-Factor method is added, a new set of recovery codes will be generated.
The User’s preferred delivery for verification codes during a two factor login request.
The possible values are:
None
TextMessage
Determines if the User has two factor authentication enabled for their account or not.
Removed in version 1.26.0The username of the User.
The current status of the username. This is used if you are moderating usernames via CleanSpeak. The possible values are:
ACTIVE
- the username is activePENDING
- the username is pending approval/moderationREJECTED
- the username was rejected during moderation
If a username has been rejected, it is still possible to allow the User to update it and have the new one moderated again.
Whether or not the User’s email has been verified.
Example Response JSON
{
"users": [
{
"active": true,
"birthDate": "2009-10-31",
"data": {
"attr1": "value1",
"attr2": [
"value2",
"value3"
]
},
"email": "somekid@piedpiper.com",
"fullName": "Kid A",
"id": "00000000-0000-0001-0000-000000000003",
"insertInstant": 1572551641422,
"parentEmail": "somekidsparent@piedpiper.com",
"passwordChangeRequired": false,
"passwordLastUpdateInstant": 1572551641422,
"preferredLanguages": [
"en",
"fr"
],
"tenantId": "64653766-6162-6234-3036-393935316533",
"timezone": "America/Denver",
"twoFactorDelivery": "None",
"twoFactorEnabled": false,
"username": "somekid",
"usernameStatus": "ACTIVE",
"verified": true
}
]
}
Request Parental Approval
This API is used to send an email requesting parental approval for a child registration using the configured tenant.familyConfiguration.familyRequestEmailTemplateId
.
Request
URI
Request Headers
The unique Id of the tenant used to scope this API request.
The tenant Id is not required on this request even when more than one tenant has been configured because the tenant can be identified based upon the request parameters or it is otherwise not required.
Specify a tenant Id on this request when you want to ensure the request is scoped to a specific tenant. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result.
See Making an API request using a Tenant Id for additional information.
Request Body
The email address of the parent.
Example Request JSON
{
"parentEmail": "somekidsparent@piedpiper.com"
}
Response
This API does not return a JSON response body.
Response CodesCode | Description |
---|---|
200 | The request was successful. The response will contain a JSON body. |
400 | The request was invalid and/or malformed. The response will contain an Errors JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. |
401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See Authentication. |
500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. |
503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. |