api.user do
  api.id         @user.id
  api.login      @user.login
  api.admin      @user.admin?
  api.firstname  @user.firstname
  api.lastname   @user.lastname
  api.mail       @user.mail
  api.created_on @user.created_on
  api.last_login_on @user.last_login_on
  api.api_key    @user.api_key unless User.current.authorized_by_oauth?

  render_api_custom_values @user.visible_custom_field_values, api
end
