Fan Profile

The Fan Profile service manages user profile data for fans authenticated via Cortex SSO. It provides endpoints for retrieving and updating profile information, fetching public profiles, and handling GDPR data deletion requests.

The Profile service is a separate microservice from the Auth service and has its own base URL.

Environments

Environment	Base URL
Stage	`https://profile-stage.fanscore.com`
Production	`https://profile.fanscore.com`

Authentication

Most endpoints require a valid JWT Bearer token obtained from the Cortex Auth service. The one exception is Get Public Profiles, which uses an API key passed as a query parameter.

Postman Collection

For full request/response examples, use the Postman collection:

FanScore Authentication (External)

Profile Fields Reference

Field	Type	Description
`id`	integer	Unique user ID
`email`	string	User's email address
`guardianEmail`	string	Guardian's email (for junior accounts)
`minorId`	string	Junior account username (e.g. `junior123`)
`firstName`	string	First name
`otherNames`	string	Middle/other names
`lastName`	string	Last name
`title`	string	Title (Mr, Mrs, etc.)
`birthDate`	string (ISO 8601)	Date of birth
`gender`	string	`M`, `F`, or `null`
`address1`	string	Address line 1
`address2`	string	Address line 2
`town`	string	Town/city
`region`	string	Region/county
`country`	string	ISO country code (e.g. `GB`)
`postcode`	string	Postal code
`contactNumber`	string	Phone number
`screenName`	string	Display name (may require approval)
`screenNameApproved`	boolean	Whether the screen name has been approved
`profilePicture`	string	URL to profile picture (or base64 on upload)
`profilePictureApproved`	boolean	Whether the picture has been approved
`biography`	string	User biography
`language`	string	BCP 47 language tag (e.g. `en`)
`companyName`	string	Company name
`companyPhoneNumber`	string	Company phone
`companyAddressOne`	string	Company address line 1
`companyAddressTwo`	string	Company address line 2
`companyTown`	string	Company town
`companyCountry`	string	Company country
`companyPostcode`	string	Company postal code
`metadata`	object	Custom key-value pairs
`lastUpdated`	string (ISO 8601)	Last profile update timestamp
`suppressed`	boolean	Whether the user is suppressed from marketing
`suppressions`	array	List of suppression providers and reasons