Remove User from Project

Method

REST method is adopted.

HTTP Method

DELETE: Soft-delete one project user assignment

Naming Convention

snake_case is used for URI parameters. JSON response fields use camelCase.

Request and Response

Headers

Request Headers

• Authorization: Bearer <access_token>

URI

/api/v1/projects/{project_id}/users/{user_id}

Name	Type	Required	Description
project_id	integer	Required	Project ID
user_id	integer	Required	User record ID

Response (200 OK)

The deleted assignment is returned with deletedAt and deletedBy populated.

Authentication

A valid admin Cognito Bearer token with read/write access to users and projects is required.

Exception Handling

Description	Status Code	Status Name
Missing or invalid token	401	Unauthorized
Insufficient user or project permission	403	Forbidden
User, project, or active assignment not found	404	Not Found

Process Flow

1. Validate the admin session and write permissions.
2. Verify that the user and project belong to the same organization.
3. Soft-delete and return the active assignment.

Source: apps/admin/src/routes/v1/user-project.ts