Skip to main content
Only succeeds for the user’s own id, unless the caller authenticates with your secret key - same rule as get(). is_active/is_blocked aren’t settable through this method - those are stripped server-side unless the caller is already an admin, since letting a user reactivate or unblock themselves would defeat the point of the flags (see Admin access).