@h-ai/iam 0.1.0-alpha.40 → 0.1.0-alpha.42

package/README.md

@@ -375,7 +375,14 @@ await iam.user.updateCurrentUser(accessToken, { displayName: '新名称' })
 await iam.user.changeCurrentUserPassword(accessToken, 'oldPass', 'newPass')
 
 // 管理操作
-const users = await iam.user.listUsers({ page: 1, pageSize: 20, search: 'alice', include: ['roles'] })
+const users = await iam.user.listUsers({
+  page: 1,
+  pageSize: 20,
+  search: 'alice',
+  sortBy: 'createdAt',
+  sortDirection: 'desc',
+  include: ['roles'],
+})
 await iam.user.updateUser(userId, { enabled: false }) // 禁用用户 → 自动清除会话
 await iam.user.deleteUser(userId) // 删除用户 → 事务清除角色关联
 
@@ -395,6 +402,7 @@ const valid = iam.user.validatePassword('weak')
 - **防枚举攻击**：`requestPasswordReset` 对不存在的邮箱返回 `ok(undefined)` 而非错误
 - **validatePassword 是同步方法**：这是 `UserOperations` 中唯一的同步方法，其余均为异步
 - **搜索模糊匹配**：`listUsers` 支持按用户名、邮箱、手机号、显示名称模糊搜索，LIKE 通配符已转义
+- **服务端排序**：`listUsers` 仅允许 `username`、`email`、`displayName`、`enabled`、`createdAt` 排序；字段经白名单映射，未指定时默认按创建时间倒序
 
 ---
 

package/dist/index.d.ts

@@ -601,6 +601,10 @@ interface AuthzOperations {
  * @module iam-user-types
  */
 
+/** 用户列表允许的服务端排序字段。 */
+type UserSortField = 'username' | 'email' | 'displayName' | 'enabled' | 'createdAt';
+/** 用户列表排序方向。 */
+type UserSortDirection = 'asc' | 'desc';
 /**
  * 用户列表查询选项
  */
@@ -609,6 +613,10 @@ interface ListUsersOptions extends PaginationOptionsInput {
     search?: string;
     /** 按启用状态过滤，不传则返回全部 */
     enabled?: boolean;
+    /** 服务端排序字段；未指定时保持按创建时间倒序的历史行为。 */
+    sortBy?: UserSortField;
+    /** 服务端排序方向；仅在指定 sortBy 时生效，默认 desc。 */
+    sortDirection?: UserSortDirection;
     /** 包含关联数据（如 'roles' 表示同时返回用户角色列表） */
     include?: ('roles')[];
 }
@@ -1489,4 +1497,4 @@ interface IamFunctions {
 
 declare const iam: IamFunctions;
 
-export { type AgreementConfig, AgreementConfigSchema, type AgreementDisplay, type ApiKey, type ApiKeyConfig, ApiKeyConfigSchema, type ApiKeyCredentials, type ApiKeyOperations, type AuthResult, type AuthStrategy, type AuthStrategyType, AuthStrategyTypeSchema, type AuthnOperations, type AuthzOperations, type ConsumeTicketOptions, type ConsumedTicket, type CreateApiKeyOptions, type CreateApiKeyResult, type CreateSessionOptions, type Credentials, HaiIamError, type IamConfig, type IamConfigInput, IamConfigSchema, type IamConfigSettingsInput, type IamFunctions, type IssueTicketOptions, type IssuedTicket, type LdapClientFactory, type LdapConfig, LdapConfigSchema, type LdapCredentials, type ListUsersOptions, type LoginConfig, LoginConfigSchema, type OtpConfig, OtpConfigSchema, type OtpCredentials, type PasswordConfig, PasswordConfigSchema, type PasswordCredentials, type PasswordResetConfig, PasswordResetConfigSchema, type Permission, type PermissionQueryOptions, type PermissionType, type RbacConfig, RbacConfigSchema, type RegisterConfig, RegisterConfigSchema, type RegisterOptions, type RegisterResult, type Role, type SecurityConfig, SecurityConfigSchema, type Session, type SessionConfig, SessionConfigSchema, type SessionData, type SessionFieldUpdates, type SessionOperations, type StoredUser, type TicketGrant, type TicketOperations, type TokenPair, type UpdateCurrentUserInput, type User, type UserOperations, iam };
+export { type AgreementConfig, AgreementConfigSchema, type AgreementDisplay, type ApiKey, type ApiKeyConfig, ApiKeyConfigSchema, type ApiKeyCredentials, type ApiKeyOperations, type AuthResult, type AuthStrategy, type AuthStrategyType, AuthStrategyTypeSchema, type AuthnOperations, type AuthzOperations, type ConsumeTicketOptions, type ConsumedTicket, type CreateApiKeyOptions, type CreateApiKeyResult, type CreateSessionOptions, type Credentials, HaiIamError, type IamConfig, type IamConfigInput, IamConfigSchema, type IamConfigSettingsInput, type IamFunctions, type IssueTicketOptions, type IssuedTicket, type LdapClientFactory, type LdapConfig, LdapConfigSchema, type LdapCredentials, type ListUsersOptions, type LoginConfig, LoginConfigSchema, type OtpConfig, OtpConfigSchema, type OtpCredentials, type PasswordConfig, PasswordConfigSchema, type PasswordCredentials, type PasswordResetConfig, PasswordResetConfigSchema, type Permission, type PermissionQueryOptions, type PermissionType, type RbacConfig, RbacConfigSchema, type RegisterConfig, RegisterConfigSchema, type RegisterOptions, type RegisterResult, type Role, type SecurityConfig, SecurityConfigSchema, type Session, type SessionConfig, SessionConfigSchema, type SessionData, type SessionFieldUpdates, type SessionOperations, type StoredUser, type TicketGrant, type TicketOperations, type TokenPair, type UpdateCurrentUserInput, type User, type UserOperations, type UserSortDirection, type UserSortField, iam };

package/dist/index.js

@@ -4247,6 +4247,18 @@ function createCacheResetTokenRepository() {
 
 // src/user/iam-user-functions.ts
 var logger10 = core.logger.child({ module: "iam", scope: "user" });
+var USER_SORT_COLUMNS = {
+  /** 用户名列。 */
+  username: "username",
+  /** 邮箱列。 */
+  email: "email",
+  /** 用户显示名称列。 */
+  displayName: "display_name",
+  /** 账号启用状态列。 */
+  enabled: "enabled",
+  /** 用户创建时间列。 */
+  createdAt: "created_at"
+};
 async function createUserOperations(deps) {
   try {
     const { config, passwordStrategyResult, sessionFunctions, authzFunctions, onPasswordResetRequest } = deps;
@@ -4472,10 +4484,12 @@ function buildUserQueryOps(ctx) {
         params.push(options.enabled ? 1 : 0);
       }
       const where = conditions.length > 0 ? conditions.join(" AND ") : void 0;
+      const sortColumn = options?.sortBy ? USER_SORT_COLUMNS[options.sortBy] : USER_SORT_COLUMNS.createdAt;
+      const sortDirection = options?.sortBy && options.sortDirection === "asc" ? "ASC" : "DESC";
       const usersResult = await userRepository.findPage({
         where,
         params: params.length > 0 ? params : void 0,
-        orderBy: "created_at DESC",
+        orderBy: `${sortColumn} ${sortDirection}`,
         pagination: options ? { page: options.page, pageSize: options.pageSize } : void 0
       });
       if (!usersResult.success) {