@fonderie/auth 7.8.1 → 7.9.0

package/dist/index.d.cts

@@ -236,12 +236,24 @@ declare function startUserRetention(store: IStoreAdapter, options: IUserRetentio
 
 declare function validateAuthConfig(config: IAuthConfig): void;
 
+interface IUserPage {
+    users: Array<IUser & {
+        createdAtRaw?: string;
+    }>;
+    hasMore: boolean;
+}
+
 interface IAdminUserDTO extends IUserDTO {
     suspended: boolean;
     deletedAt: string | null;
     createdAt: string;
 }
 declare function toAdminUserDTO(user: IUser): IAdminUserDTO;
+interface IAdminUserPageDTO {
+    users: IAdminUserDTO[];
+    nextCursor: string | null;
+}
+declare function toAdminUserPageDTO(page: IUserPage): IAdminUserPageDTO;
 declare function describeAuthAdminRoutes(store: IStoreAdapter): IAdminRoute[];
 
-export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, validateAuthConfig };
+export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, toAdminUserPageDTO, validateAuthConfig };

package/dist/index.d.ts

@@ -236,12 +236,24 @@ declare function startUserRetention(store: IStoreAdapter, options: IUserRetentio
 
 declare function validateAuthConfig(config: IAuthConfig): void;
 
+interface IUserPage {
+    users: Array<IUser & {
+        createdAtRaw?: string;
+    }>;
+    hasMore: boolean;
+}
+
 interface IAdminUserDTO extends IUserDTO {
     suspended: boolean;
     deletedAt: string | null;
     createdAt: string;
 }
 declare function toAdminUserDTO(user: IUser): IAdminUserDTO;
+interface IAdminUserPageDTO {
+    users: IAdminUserDTO[];
+    nextCursor: string | null;
+}
+declare function toAdminUserPageDTO(page: IUserPage): IAdminUserPageDTO;
 declare function describeAuthAdminRoutes(store: IStoreAdapter): IAdminRoute[];
 
-export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, validateAuthConfig };
+export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, toAdminUserPageDTO, validateAuthConfig };

package/dist/index.js

@@ -541,6 +541,29 @@ var UserModel = class {
     this.store = store;
   }
   store;
+  // One page of users, newest first. Keyset-paginated on (created_at, id) —
+  // the same cursor contract as login history and the audit log. The +1
+  // over-fetch that detects a next page lives here so no outer clamp can
+  // shave it off. Soft-deleted rows are excluded, as in every other finder.
+  async list(query = {}) {
+    const limit = Math.min(query.limit ?? 50, MAX_LIST_LIMIT);
+    const params = [];
+    const where = ["deleted_at IS NULL"];
+    if (query.cursor) {
+      params.push(query.cursor.createdAt, query.cursor.id);
+      where.push(`(created_at, id) < ($${params.length - 1}::timestamptz, $${params.length}::uuid)`);
+    }
+    params.push(limit + 1);
+    const rows = await this.store.query(
+      `SELECT ${USER_COLUMNS}, created_at::text AS "createdAtRaw"
+			 FROM   fonderie_users
+			 WHERE  ${where.join(" AND ")}
+			 ORDER  BY created_at DESC, id DESC
+			 LIMIT  $${params.length}`,
+      params
+    );
+    return { users: rows.slice(0, limit), hasMore: rows.length > limit };
+  }
   async findById(id) {
     const [row] = await this.store.query(
       `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1 AND deleted_at IS NULL`,
@@ -813,6 +836,7 @@ var UserModel = class {
     return row ?? null;
   }
 };
+var MAX_LIST_LIMIT = 200;
 
 // src/models/session.model.ts
 var SessionModel = class {
@@ -3192,7 +3216,7 @@ function extractToken(request) {
 }
 
 // src/admin.ts
-import { HTTP as HTTP7, setApiResponse as setApiResponse7 } from "@fonderie/core";
+import { HTTP as HTTP7, encodeKeysetCursor as encodeKeysetCursor2, setApiResponse as setApiResponse7 } from "@fonderie/core";
 function toAdminUserDTO(user) {
   return {
     ...toUserDTO(user),
@@ -3201,6 +3225,11 @@ function toAdminUserDTO(user) {
     createdAt: user.createdAt.toISOString()
   };
 }
+function toAdminUserPageDTO(page) {
+  const last = page.users[page.users.length - 1];
+  const nextCursor = page.hasMore && last ? encodeKeysetCursor2(last.createdAtRaw ?? last.createdAt.toISOString(), last.id) : null;
+  return { users: page.users.map(toAdminUserDTO), nextCursor };
+}
 var ADMIN_PREFIX = "/_admin";
 var idOf = (ctx) => ctx.meta.params?.["id"] ?? "";
 var NOT_FOUND = () => setApiResponse7(HTTP7.NOT_FOUND, "NOT_FOUND", "No such user");
@@ -3223,12 +3252,24 @@ function adminRouteTable(store) {
     [
       "GET",
       "/_admin/users",
+      // With an email, the exact lookup support reaches for. Without one, a
+      // page of users — an operator who has to know a name before they can
+      // see anything cannot discover who signed up this morning.
       async (ctx) => {
-        const email2 = new URL(ctx.request.url).searchParams.get("email")?.trim().toLowerCase();
-        if (!email2)
-          return setApiResponse7(HTTP7.UNPROCESSABLE, "INVALID_PARAMETER", "email is required");
-        const user = await users.findByEmail(email2);
-        return user ? setApiResponse7(HTTP7.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
+        const params = new URL(ctx.request.url).searchParams;
+        const email2 = params.get("email")?.trim().toLowerCase();
+        if (email2) {
+          const user = await users.findByEmail(email2);
+          return user ? setApiResponse7(HTTP7.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
+        }
+        const rawLimit = Number(params.get("limit") ?? 50);
+        const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50;
+        const cursorParam = params.get("cursor");
+        const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null;
+        if (cursorParam && !cursor)
+          return setApiResponse7(HTTP7.UNPROCESSABLE, "INVALID_PARAMETER", "Invalid cursor");
+        const page = await users.list({ limit, ...cursor ? { cursor } : {} });
+        return setApiResponse7(HTTP7.OK, "USERS", "Users", toAdminUserPageDTO(page));
       }
     ],
     [
@@ -3591,6 +3632,7 @@ export {
   schemas_exports as schemas,
   startUserRetention,
   toAdminUserDTO,
+  toAdminUserPageDTO,
   toUserDTO,
   validate,
   validateAuthConfig,