Get all users API returns deleted users too

Affected API:
GET /users

Expected behaviour:
Only return existing users.

Actual Behavior:
returns existing users and a user deleted several days ago.

I have only tested this in a sandbox environment.
We deleted a user because we hit the max of 3 available users on the sandbox environment, and needed to grant another user access.

Steps to reproduce:
Delete a user. Call the /users api with a get request. See that the deleted user is still listed.

Doesn’t the “active_flag” help you?!

1 Like

Exactly as @MoizesMendes said.

GET /users does return delete Users, but the active_flag lets you know whether or not they are deleted.