Mintplex-Labs/anything-llm · error

Invalid user ID

Error message

Invalid user ID

What it means

Validation in POST /system/user (self-profile update): the authenticated session user's id cannot be coerced to a valid number, so the request cannot identify whose profile to update. Responds 400 with success:false before applying any changes.

Source

Thrown at server/endpoints/system.js:1258

        response.setHeader("Content-Type", contentType);
        response.status(200).send(data);
      } catch (e) {
        console.error(e);
        response.sendStatus(500).end();
      }
    }
  );

  // Used for when a user in multi-user updates their own profile
  // from the UI.
  app.post("/system/user", [validatedRequest], async (request, response) => {
    try {
      const sessionUser = await userFromSession(request, response);
      const { username, password, bio } = reqBody(request);
      const id = Number(sessionUser.id);

      if (!id) {
        response.status(400).json({ success: false, error: "Invalid user ID" });
        return;
      }

      const updates = {};
      // If the username is being changed, validate it.
      // Otherwise, do not attempt to validate it to allow existing users to keep their username if not changing it.
      if (username !== sessionUser.username)
        updates.username = User.validations.username(String(username));
      if (password) updates.password = String(password);
      if (bio) updates.bio = String(bio);

      if (Object.keys(updates).length === 0) {
        response
          .status(400)
          .json({ success: false, error: "No updates provided" });
        return;
      }

View on GitHub (pinned to 20f6d3546c)

Solutions

1. Provide a valid numeric user ID.
2. Verify the user exists before updating.

When it happens

Trigger: Thrown at server/endpoints/system.js:1244 when the library encounters an invalid state.

Common situations: A user management call referenced an invalid or nonexistent user ID.

AI-assisted analysis of Mintplex-Labs/anything-llm@20f6d3546c (2026-08-18). Data as JSON: /api/errors/7c0ef3742b8285c3. Report an issue: GitHub.