Members

People and the roles they hold.

11 endpoints · base URL https://api.aerscheduler.com

get/orgUsers

List members

Every member of your organization with the roles they hold. This is the endpoint to use for “who is in this organization” — the per-role routes (/instructors, /students, and so on) are unimplemented stubs and are not part of this API.

Responses

`200`	OK	The members.→ { data: OrganizationUser[] }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/orgUsers \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/users

List users

Every person in your organization, as User records. Prefer GET /orgUsers, which carries roles.

Responses

`200`	OK	The users.→ { data: User[] }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/users \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

patch/users

Update your own profile

Changes your own name, phone, or other profile fields.

Request body

Fields to change.

`name`	`string`
`phone`	`string`

Responses

`200`	OK	Updated.
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl -X PATCH https://api.aerscheduler.com/users \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"…","phone":"…"}'

delete/users

Delete your own account

Soft-deletes the signed-in account.

Responses

`204`	No Content	Success. No body.
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl -X DELETE https://api.aerscheduler.com/users \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/orgUsers/{orgUserId}

Get a member

One membership record, with roles.

Path parameters

orgUserIdrequired integer The membership id. Note this is NOT the user id.

Responses

`200`	OK	Success.→ { data: OrganizationUser }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`404`	Not Found	No such member in your organization.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/orgUsers/:orgUserId \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/orgUsers/preferences

Get your notification preferences

What you have opted into, for this organization.

Responses

`200`	OK	Success.→ { data: object }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/orgUsers/preferences \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

patch/orgUsers/preferences

Update your notification preferences

Changes only the keys you send.

Responses

`200`	OK	Success.→ { data: object }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl -X PATCH https://api.aerscheduler.com/orgUsers/preferences \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/users/{id}

Get a user

One person in your organization.

Path parameters

idrequired integer The user id.

Responses

`200`	OK	Success.→ { data: User }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`404`	Not Found	No such user in your organization.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/users/:id \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/users/{userId}/approvedResources

List a member's approved resources

Which aircraft this person has been checked out on.

Path parameters

userIdrequired integer The user id.

Responses

`200`	OK	The approved resources.→ { data: Resource[] }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/users/:userId/approvedResources \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

get/users/{userId}/roles

Get a member's roles

The roles a person holds in your organization. Requires the admin role.

Path parameters

userIdrequired integer The user id.

Responses

`200`	OK	Success.→ { data: User }
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl https://api.aerscheduler.com/users/:userId/roles \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN"

patch/users/{userId}/roles

Set a member's roles

Replaces the whole role set — send every role you want them to keep, not just the change. Requires the admin role.

Two invariants are enforced: an organization must always have at least one owner and at least one administrator, and an owner must also be an administrator.

Path parameters

userIdrequired integer The user id.

Request body

The complete role set.

`owner`	`boolean`
`admin`	`boolean`
`dispatcher`	`boolean`
`instructor`	`boolean`
`student`	`boolean`
`renter`	`boolean`
`technician`	`boolean`

Responses

`200`	OK	Roles updated.
`400`	Bad Request	The change would leave the organization without an owner or an administrator.
`401`	Unauthorized	No token, an expired token, or a malformed one. Sign in again.
`403`	Forbidden	Authenticated, but not allowed to do this.
`429`	Too Many Requests	Rate limited. `Retry-After` says how long to wait.

Example request

curl -X PATCH https://api.aerscheduler.com/users/:userId/roles \
  -H "Authorization: Bearer $AERSCHEDULER_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"owner":true,"admin":true}'

PreviousOrganizationsThe flight school itself: membership, invitations, and settings.NextReservationsBooking, rescheduling, and closing out flights.