GET /api/users
- Auth – optional.
- Query params –
limitandoffsetfor pagination. - Response – each entry contains:
- Unauthenticated callers:
{ id, firstName, lastName }. - Authenticated callers: the fields above plus
{ email, created }.
- Unauthenticated callers:
GET /api/users/{id}
- Auth – optional.
- Response – same shape as the list endpoint but for a single user. When the user does not exist the API responds with HTTP 400 and
{ "status": "error", "message": "User not found with id: ..." }.