@rebasepro/server 0.10.1-canary.6f89f77 → 0.10.1-canary.7609565

package/dist/index.es.js

@@ -11064,6 +11064,8 @@ function createAdminRolesRoute(config) {
 *   DELETE /users/:uid
 *   POST /bootstrap
 */
+/** Upper bound for `GET /users?ids=…`, so one request can't fan out unbounded. */
+var MAX_USER_IDS_PER_LOOKUP = 100;
 function createAdminUsersRoute(config) {
 	const router = new Hono();
 	const authRepo = config.authRepo;
@@ -11131,6 +11133,20 @@ function createAdminUsersRoute(config) {
 		});
 	});
 	router.get("/users", requireAdmin, async (c) => {
+		const idsParam = c.req.query("ids");
+		if (idsParam !== void 0) {
+			const ids = [...new Set(idsParam.split(",").map((id) => id.trim()).filter(Boolean))].slice(0, MAX_USER_IDS_PER_LOOKUP);
+			const users = (await Promise.all(ids.map(async (id) => {
+				const result = await authRepo.getUserWithRoles(id);
+				return result ? toAdminUser(result.user, result.roles.map((r) => r.id)) : void 0;
+			}))).filter((u) => u !== void 0);
+			return c.json({
+				users,
+				total: users.length,
+				limit: ids.length,
+				offset: 0
+			});
+		}
 		const limitParam = c.req.query("limit");
 		const offsetParam = c.req.query("offset");
 		const search = c.req.query("search");