e-bon
e-bon.ro
Portal

Profile

Manage your personal e-bon account from the Portal — display name, phone number, the read-only email and role badge, and how to change your password.

Profile

The My Profile page is your personal account screen — the one place to update the display name your teammates see, keep your phone number in sync, check which role you currently hold and rotate your password. It is not the organization page (for company name, billing address and locations see Organization) and it does not manage your subscription (for that see Billing & plans). Everything on this page is scoped to you: changes here only affect your own user record.

Open the profile page

Open the Portal sidebar and choose Settings → Profile. The page lives at /portal/settings/profile. It is available to every authenticated user regardless of role — Owner, Admin and Operator all see exactly the same form.

The screen is split into two cards laid out side-by-side on wide viewports and stacked on narrow ones:

  • Personal Information — display name, email, phone, account-creation date, role.
  • Change Password — current password plus the new-password and confirm-password fields.

Update your personal information

The Personal Information card backs the GET /api/v1/users/me (read) and PATCH /api/v1/users/me (write) endpoints. It surfaces five fields:

  • Display Name — editable. The name your teammates and the receipt operator UI see. Required to save: an empty value disables the Save button.
  • Email — read-only. The address you log in with. The hint “Contact support to change your email address” sits under the field; there is no in-portal flow to change the email yourself, by design — the address ties together your authentication, your audit log entries and your billing receipts, so it is changed only via support to keep that chain intact.
  • Phone — editable. Free-form text, placeholder +40 7XX XXX XXX. Used by your organization’s admins for out-of-band contact (it is not sent to ANAF, it is not wired into receipt SMS or any external system).
  • Account created — read-only timestamp of your user record’s createdAt, formatted to your browser locale.
  • Role — read-only badge. One of Owner (primary colour), Admin (info colour) or Operator (neutral colour). The role is set by the user who invited you and can only be changed by an Owner or Admin from outside this page.
The Save button is enabled only when the display name is non-empty. The submit is incremental: only fields whose value changed are sent in the PATCH body, so you can update the phone without touching the display name (or vice versa). On success a toast confirms “Profile updated successfully”.

Change your password

The Change Password card lives in the same screen and posts to POST /api/v1/users/me/change-password. It does not require a re-login — your existing session stays valid after the change.

Type your current password

The Current Password field is required and validated client-side: leaving it blank shows “Current password is required” on blur. The API also re-verifies it server-side, so a wrong value here returns a 401 and the form surfaces the error.

Type your new password

Minimum 8 characters — anything shorter shows “Minimum 8 characters” on blur and the Change Password button stays disabled. There is no upper bound and no required character-class rule (no forced symbols, digits or mixed-case); pick a long passphrase rather than a short one with special characters.

Confirm the new password

Type the new password again in the Confirm Password field. If it does not match the New Password field, “Passwords do not match” is shown and the submit button stays disabled.

Click Change Password

The button is gated on all three checks above (current present, new ≥ 8 chars, confirm matches). On success the three fields are cleared and a toast confirms “Password changed successfully”. On failure (most commonly a wrong current password) the error toast surfaces the API message and the form stays as you typed it.

Changing your password does not revoke your existing API keys, sign other devices out of the Portal, or invalidate other active sessions on the same account. If you suspect your account is compromised, change the password here and rotate every API key you own from the API keys page.

Sign out

There is no sign-out control on the profile page itself. To log out, open the user menu in the top-right of the Portal (the avatar in the layout header) and pick Logout — that flow lives in the navigation chrome, not in Settings.

Next steps

  • Organization — company name, CUI/CIF, structured billing address and locations.
  • Notifications — choose which email addresses receive automated notifications and which categories.
  • Billing & plans — manage your e-bon subscription and download invoices.
  • API keys — issue and rotate the credentials POS partners use against the e-bon API.
  • Webhooks — push real-time events to your own systems.

Webhooks

Set up Portal webhook endpoints — Owner/Admin role gate, the create / edit / delete / test / rotate-secret flows, the one-time secret reveal, and how to subscribe to the eight live WebhookEventType events without writing a line of code.

Organization

Manage your e-bon organization from the Portal — company name, CUI/CIF, billing address, plan and locations. Restricted to Owner and Admin roles.