@fonderie/auth 7.8.1 → 7.9.1

package/brain/outcomes.md

@@ -136,7 +136,7 @@ Raw SQL ships in `node_modules/@fonderie/auth/dist/migrations/sql/` — read it
 
 | Method | Path | Middleware chain (auth / validation / handler) |
 |---|---|---|
-| GET | `/_admin/users` | `async (ctx) => { const email = new URL(ctx.request.url).searchParams.get('email')?.trim().toLowerCase(); if (!email) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'email is required'); const user = await users.findByEmail(email); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); }` |
+| GET | `/_admin/users` | `async (ctx) => { const params = new URL(ctx.request.url).searchParams; const email = params.get('email')?.trim().toLowerCase(); if (email) { const user = await users.findByEmail(email); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); } const rawLimit = Number(params.get('limit') ?? 50); const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50; const cursorParam = params.get('cursor'); const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null; if (cursorParam && !cursor) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'Invalid cursor'); const page = await users.list({ limit, ...(cursor ? { cursor } : {}) }); return setApiResponse(HTTP.OK, 'USERS', 'Users', toAdminUserPageDTO(page)); }` |
 | GET | `/_admin/users/:id` | `async (ctx) => { const user = await users.findById(idOf(ctx)); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); }` |
 | GET | `/_admin/users/:id/login-history` | `async (ctx) => { if (!(await users.findById(idOf(ctx)))) return NOT_FOUND(); const params = new URL(ctx.request.url).searchParams; const rawLimit = Number(params.get('limit') ?? 50); const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50; const cursorParam = params.get('cursor'); const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null; if (cursorParam && !cursor) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'Invalid cursor'); const page = await events.listByUser({ userId: idOf(ctx), limit, ...(cursor ? { cursor } : {}), }); return setApiResponse( HTTP.OK, 'LOGIN_HISTORY', 'Login history', toLoginHistoryPageDTO(page), ); }` |
 | DELETE | `/_admin/users/:id/sessions` | `async (ctx) => { if (!(await users.findById(idOf(ctx)))) return NOT_FOUND(); await sessions.deleteByUser(idOf(ctx)); return setApiResponse(HTTP.OK, 'SESSIONS_REVOKED', 'All sessions revoked'); }` |

package/brain/signatures.md

@@ -227,4 +227,6 @@ interface IAdminUserDTO extends IUserDTO {
 function describeAuthAdminRoutes(store: IStoreAdapter): IAdminRoute[]
 
 function toAdminUserDTO(user: IUser): IAdminUserDTO
+
+function toAdminUserPageDTO(page: IUserPage): IAdminUserPageDTO
 ```

package/dist/index.cjs

@@ -83,6 +83,7 @@ __export(index_exports, {
   schemas: () => schemas_exports,
   startUserRetention: () => startUserRetention,
   toAdminUserDTO: () => toAdminUserDTO,
+  toAdminUserPageDTO: () => toAdminUserPageDTO,
   toUserDTO: () => toUserDTO,
   validate: () => import_middlewares.validate,
   validateAuthConfig: () => validateAuthConfig,
@@ -583,6 +584,29 @@ var UserModel = class {
     this.store = store;
   }
   store;
+  // One page of users, newest first. Keyset-paginated on (created_at, id) —
+  // the same cursor contract as login history and the audit log. The +1
+  // over-fetch that detects a next page lives here so no outer clamp can
+  // shave it off. Soft-deleted rows are excluded, as in every other finder.
+  async list(query = {}) {
+    const limit = Math.min(query.limit ?? 50, MAX_LIST_LIMIT);
+    const params = [];
+    const where = ["deleted_at IS NULL"];
+    if (query.cursor) {
+      params.push(query.cursor.createdAt, query.cursor.id);
+      where.push(`(created_at, id) < ($${params.length - 1}::timestamptz, $${params.length}::uuid)`);
+    }
+    params.push(limit + 1);
+    const rows = await this.store.query(
+      `SELECT ${USER_COLUMNS}, created_at::text AS "createdAtRaw"
+			 FROM   fonderie_users
+			 WHERE  ${where.join(" AND ")}
+			 ORDER  BY created_at DESC, id DESC
+			 LIMIT  $${params.length}`,
+      params
+    );
+    return { users: rows.slice(0, limit), hasMore: rows.length > limit };
+  }
   async findById(id) {
     const [row] = await this.store.query(
       `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1 AND deleted_at IS NULL`,
@@ -855,6 +879,7 @@ var UserModel = class {
     return row ?? null;
   }
 };
+var MAX_LIST_LIMIT = 200;
 
 // src/models/session.model.ts
 var SessionModel = class {
@@ -3243,6 +3268,11 @@ function toAdminUserDTO(user) {
     createdAt: user.createdAt.toISOString()
   };
 }
+function toAdminUserPageDTO(page) {
+  const last = page.users[page.users.length - 1];
+  const nextCursor = page.hasMore && last ? (0, import_core12.encodeKeysetCursor)(last.createdAtRaw ?? last.createdAt.toISOString(), last.id) : null;
+  return { users: page.users.map(toAdminUserDTO), nextCursor };
+}
 var ADMIN_PREFIX = "/_admin";
 var idOf = (ctx) => ctx.meta.params?.["id"] ?? "";
 var NOT_FOUND = () => (0, import_core12.setApiResponse)(import_core12.HTTP.NOT_FOUND, "NOT_FOUND", "No such user");
@@ -3265,12 +3295,24 @@ function adminRouteTable(store) {
     [
       "GET",
       "/_admin/users",
+      // With an email, the exact lookup support reaches for. Without one, a
+      // page of users — an operator who has to know a name before they can
+      // see anything cannot discover who signed up this morning.
       async (ctx) => {
-        const email2 = new URL(ctx.request.url).searchParams.get("email")?.trim().toLowerCase();
-        if (!email2)
-          return (0, import_core12.setApiResponse)(import_core12.HTTP.UNPROCESSABLE, "INVALID_PARAMETER", "email is required");
-        const user = await users.findByEmail(email2);
-        return user ? (0, import_core12.setApiResponse)(import_core12.HTTP.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
+        const params = new URL(ctx.request.url).searchParams;
+        const email2 = params.get("email")?.trim().toLowerCase();
+        if (email2) {
+          const user = await users.findByEmail(email2);
+          return user ? (0, import_core12.setApiResponse)(import_core12.HTTP.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
+        }
+        const rawLimit = Number(params.get("limit") ?? 50);
+        const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50;
+        const cursorParam = params.get("cursor");
+        const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null;
+        if (cursorParam && !cursor)
+          return (0, import_core12.setApiResponse)(import_core12.HTTP.UNPROCESSABLE, "INVALID_PARAMETER", "Invalid cursor");
+        const page = await users.list({ limit, ...cursor ? { cursor } : {} });
+        return (0, import_core12.setApiResponse)(import_core12.HTTP.OK, "USERS", "Users", toAdminUserPageDTO(page));
       }
     ],
     [
@@ -3634,6 +3676,7 @@ function startUserRetention(store, options) {
   schemas,
   startUserRetention,
   toAdminUserDTO,
+  toAdminUserPageDTO,
   toUserDTO,
   validate,
   validateAuthConfig,