@spfn/auth 0.2.0-beta.26 → 0.2.0-beta.28

package/dist/server.d.ts

@@ -113,6 +113,23 @@ declare const users: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        username: drizzle_orm_pg_core.PgColumn<{
+            name: "username";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         passwordHash: drizzle_orm_pg_core.PgColumn<{
             name: "password_hash";
             tableName: "users";
@@ -253,6 +270,7 @@ declare function getUserByIdService(userId: number): Promise<{
     id: number;
     email: string | null;
     phone: string | null;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
@@ -270,6 +288,7 @@ declare function getUserByEmailService(email: string): Promise<{
     id: number;
     email: string | null;
     phone: string | null;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
@@ -287,6 +306,7 @@ declare function getUserByPhoneService(phone: string): Promise<{
     id: number;
     email: string | null;
     phone: string | null;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
@@ -303,6 +323,34 @@ declare function updateLastLoginService(userId: number): Promise<void>;
  * Update user data
  */
 declare function updateUserService(userId: number, updates: Partial<NewUser>): Promise<void>;
+/**
+ * Check if username is available
+ *
+ * @returns true if the username is available
+ */
+declare function checkUsernameAvailableService(username: string): Promise<boolean>;
+/**
+ * Update username with duplicate check
+ *
+ * @param userId - User ID (string, number, or bigint)
+ * @param username - New username or null to clear
+ * @throws UsernameAlreadyTakenError if username is already in use by another user
+ */
+declare function updateUsernameService(userId: string | number | bigint, username: string | null): Promise<{
+    createdAt: Date;
+    updatedAt: Date;
+    id: number;
+    email: string | null;
+    phone: string | null;
+    username: string | null;
+    passwordHash: string | null;
+    passwordChangeRequired: boolean;
+    roleId: number;
+    status: "active" | "inactive" | "suspended";
+    emailVerifiedAt: Date | null;
+    phoneVerifiedAt: Date | null;
+    lastLoginAt: Date | null;
+}>;
 
 /**
  * @spfn/auth - RBAC Initialization Service
@@ -2765,6 +2813,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2783,6 +2832,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2801,6 +2851,26 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
+        passwordHash: string | null;
+        passwordChangeRequired: boolean;
+        roleId: number;
+        status: "active" | "inactive" | "suspended";
+        emailVerifiedAt: Date | null;
+        phoneVerifiedAt: Date | null;
+        lastLoginAt: Date | null;
+    }>;
+    /**
+     * 사용자명으로 사용자 조회
+     * Read replica 사용
+     */
+    findByUsername(username: string): Promise<{
+        createdAt: Date;
+        updatedAt: Date;
+        id: number;
+        email: string | null;
+        phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2819,6 +2889,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2840,6 +2911,7 @@ declare class UsersRepository extends BaseRepository {
             id: number;
             email: string | null;
             phone: string | null;
+            username: string | null;
             passwordHash: string | null;
             passwordChangeRequired: boolean;
             roleId: number;
@@ -2862,6 +2934,7 @@ declare class UsersRepository extends BaseRepository {
         email: string | null;
         phone: string | null;
         id: number;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2882,6 +2955,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2900,6 +2974,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2918,6 +2993,7 @@ declare class UsersRepository extends BaseRepository {
         id: number;
         email: string | null;
         phone: string | null;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2934,6 +3010,7 @@ declare class UsersRepository extends BaseRepository {
         email: string | null;
         phone: string | null;
         id: number;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
@@ -2975,6 +3052,7 @@ declare class UsersRepository extends BaseRepository {
     fetchMinimalUserData(userId: number): Promise<{
         userId: number;
         email: string | null;
+        username: string | null;
         isEmailVerified: boolean;
         isPhoneVerified: boolean;
     }>;
@@ -2988,6 +3066,7 @@ declare class UsersRepository extends BaseRepository {
     fetchFullUserData(userId: number): Promise<{
         userId: number;
         email: string | null;
+        username: string | null;
         isEmailVerified: boolean;
         isPhoneVerified: boolean;
         lastLoginAt: Date | null;
@@ -4710,6 +4789,7 @@ declare function getUser(c: Context | {
     email: string | null;
     phone: string | null;
     id: number;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
@@ -5204,4 +5284,4 @@ declare const authRegisterEvent: _spfn_core_event.EventDef<{
 type AuthLoginPayload = typeof authLoginEvent._payload;
 type AuthRegisterPayload = typeof authRegisterEvent._payload;
 
-export { type AuthConfig, AuthContext, type AuthLoginPayload, AuthProviderSchema, type AuthRegisterPayload, COOKIE_NAMES, type CreateOAuthStateParams, type GoogleTokenResponse, type GoogleUserInfo, type Invitation, InvitationStatus, InvitationsRepository, KeyAlgorithmType, type KeyPair, KeysRepository, type NewInvitation, type NewPermission, type NewPermissionEntity, type NewRole, type NewRoleEntity, type NewRolePermission, type NewUser, type NewUserPermission, type NewUserProfile, type NewUserPublicKey, type NewUserSocialAccount, type NewVerificationCode, type OAuthState, type Permission, type PermissionEntity, PermissionsRepository, type Role, type RoleEntity, type RoleGuardOptions, type RolePermission, RolePermissionsRepository, RolesRepository, type SessionData, type SessionPayload, SocialAccountsRepository, SocialProvider, type TokenPayload, type UpdateProfileParams, type User, type UserPermission, UserPermissionsRepository, type UserProfile, UserProfilesRepository, type UserPublicKey, type UserSocialAccount, UsersRepository, type VerificationCode, VerificationCodesRepository, VerificationPurpose, acceptInvitation, addPermissionToRole, authLogger, authLoginEvent, authRegisterEvent, authSchema, cancelInvitation, configureAuth, createAuthLifecycle, createInvitation, createOAuthState, createRole, decodeToken, deleteInvitation, deleteRole, exchangeCodeForTokens, expireOldInvitations, generateClientToken, generateKeyPair, generateKeyPairES256, generateKeyPairRS256, generateToken, getAllRoles, getAuth, getAuthConfig, getAuthSessionService, getGoogleAuthUrl, getGoogleOAuthConfig, getGoogleUserInfo, getInvitationByToken, getInvitationWithDetails, getKeyId, getKeySize, getOptionalAuth, getRole, getRoleByName, getRolePermissions, getSessionInfo, getSessionTtl, getUser, getUserByEmailService, getUserByIdService, getUserByPhoneService, getUserId, getUserPermissions, getUserProfileService, getUserRole, hasAllPermissions, hasAnyPermission, hasAnyRole, hasPermission, hasRole, hashPassword, initializeAuth, invitationsRepository, isGoogleOAuthEnabled, keysRepository, listInvitations, parseDuration, permissions, permissionsRepository, refreshAccessToken, removePermissionFromRole, requireAnyPermission, requirePermissions, requireRole, resendInvitation, roleGuard, rolePermissions, rolePermissionsRepository, roles, rolesRepository, sealSession, setRolePermissions, shouldRefreshSession, shouldRotateKey, socialAccountsRepository, unsealSession, updateLastLoginService, updateRole, updateUserProfileService, updateUserService, userInvitations, userPermissions, userPermissionsRepository, userProfiles, userProfilesRepository, userPublicKeys, userSocialAccounts, users, usersRepository, validateInvitation, validatePasswordStrength, verificationCodes, verificationCodesRepository, verifyClientToken, verifyKeyFingerprint, verifyOAuthState, verifyPassword, verifyToken };
+export { type AuthConfig, AuthContext, type AuthLoginPayload, AuthProviderSchema, type AuthRegisterPayload, COOKIE_NAMES, type CreateOAuthStateParams, type GoogleTokenResponse, type GoogleUserInfo, type Invitation, InvitationStatus, InvitationsRepository, KeyAlgorithmType, type KeyPair, KeysRepository, type NewInvitation, type NewPermission, type NewPermissionEntity, type NewRole, type NewRoleEntity, type NewRolePermission, type NewUser, type NewUserPermission, type NewUserProfile, type NewUserPublicKey, type NewUserSocialAccount, type NewVerificationCode, type OAuthState, type Permission, type PermissionEntity, PermissionsRepository, type Role, type RoleEntity, type RoleGuardOptions, type RolePermission, RolePermissionsRepository, RolesRepository, type SessionData, type SessionPayload, SocialAccountsRepository, SocialProvider, type TokenPayload, type UpdateProfileParams, type User, type UserPermission, UserPermissionsRepository, type UserProfile, UserProfilesRepository, type UserPublicKey, type UserSocialAccount, UsersRepository, type VerificationCode, VerificationCodesRepository, VerificationPurpose, acceptInvitation, addPermissionToRole, authLogger, authLoginEvent, authRegisterEvent, authSchema, cancelInvitation, checkUsernameAvailableService, configureAuth, createAuthLifecycle, createInvitation, createOAuthState, createRole, decodeToken, deleteInvitation, deleteRole, exchangeCodeForTokens, expireOldInvitations, generateClientToken, generateKeyPair, generateKeyPairES256, generateKeyPairRS256, generateToken, getAllRoles, getAuth, getAuthConfig, getAuthSessionService, getGoogleAuthUrl, getGoogleOAuthConfig, getGoogleUserInfo, getInvitationByToken, getInvitationWithDetails, getKeyId, getKeySize, getOptionalAuth, getRole, getRoleByName, getRolePermissions, getSessionInfo, getSessionTtl, getUser, getUserByEmailService, getUserByIdService, getUserByPhoneService, getUserId, getUserPermissions, getUserProfileService, getUserRole, hasAllPermissions, hasAnyPermission, hasAnyRole, hasPermission, hasRole, hashPassword, initializeAuth, invitationsRepository, isGoogleOAuthEnabled, keysRepository, listInvitations, parseDuration, permissions, permissionsRepository, refreshAccessToken, removePermissionFromRole, requireAnyPermission, requirePermissions, requireRole, resendInvitation, roleGuard, rolePermissions, rolePermissionsRepository, roles, rolesRepository, sealSession, setRolePermissions, shouldRefreshSession, shouldRotateKey, socialAccountsRepository, unsealSession, updateLastLoginService, updateRole, updateUserProfileService, updateUserService, updateUsernameService, userInvitations, userPermissions, userPermissionsRepository, userProfiles, userProfilesRepository, userPublicKeys, userSocialAccounts, users, usersRepository, validateInvitation, validatePasswordStrength, verificationCodes, verificationCodesRepository, verifyClientToken, verifyKeyFingerprint, verifyOAuthState, verifyPassword, verifyToken };

package/dist/server.js

@@ -4586,6 +4586,9 @@ var init_users = __esm({
         // Format: +[country code][number] (e.g., +821012345678)
         // Used for: SMS login, 2FA, notifications
         phone: text2("phone").unique(),
+        // Username (unique, optional)
+        // Used for: display, mention, public profile URL
+        username: text2("username").unique(),
         // Authentication
         // Bcrypt password hash ($2b$10$[salt][hash], 60 chars)
         // Nullable to support OAuth-only accounts
@@ -4625,6 +4628,7 @@ var init_users = __esm({
         // Indexes for query optimization
         index2("users_email_idx").on(table.email),
         index2("users_phone_idx").on(table.phone),
+        index2("users_username_idx").on(table.username),
         index2("users_status_idx").on(table.status),
         index2("users_role_id_idx").on(table.roleId)
       ]
@@ -5343,6 +5347,14 @@ var init_users_repository = __esm({
         const result = await this.readDb.select().from(users).where(eq(users.phone, phone)).limit(1);
         return result[0] ?? null;
       }
+      /**
+       * 사용자명으로 사용자 조회
+       * Read replica 사용
+       */
+      async findByUsername(username) {
+        const result = await this.readDb.select().from(users).where(eq(users.username, username)).limit(1);
+        return result[0] ?? null;
+      }
       /**
        * 이메일 또는 전화번호로 사용자 조회
        * Read replica 사용
@@ -5484,6 +5496,7 @@ var init_users_repository = __esm({
         const user = await this.readDb.select({
           id: users.id,
           email: users.email,
+          username: users.username,
           emailVerifiedAt: users.emailVerifiedAt,
           phoneVerifiedAt: users.phoneVerifiedAt
         }).from(users).where(eq(users.id, userId)).limit(1).then((rows) => rows[0] ?? null);
@@ -5493,6 +5506,7 @@ var init_users_repository = __esm({
         return {
           userId: user.id,
           email: user.email,
+          username: user.username,
           isEmailVerified: !!user.emailVerifiedAt,
           isPhoneVerified: !!user.phoneVerifiedAt
         };
@@ -5508,6 +5522,7 @@ var init_users_repository = __esm({
         const user = await this.readDb.select({
           id: users.id,
           email: users.email,
+          username: users.username,
           emailVerifiedAt: users.emailVerifiedAt,
           phoneVerifiedAt: users.phoneVerifiedAt,
           lastLoginAt: users.lastLoginAt,
@@ -5520,6 +5535,7 @@ var init_users_repository = __esm({
         return {
           userId: user.id,
           email: user.email,
+          username: user.username,
           isEmailVerified: !!user.emailVerifiedAt,
           isPhoneVerified: !!user.phoneVerifiedAt,
           lastLoginAt: user.lastLoginAt,
@@ -7031,6 +7047,7 @@ async function revokeKeyService(params) {
 
 // src/server/services/user.service.ts
 init_repositories();
+import { UsernameAlreadyTakenError } from "@spfn/auth/errors";
 async function getUserByIdService(userId) {
   return await usersRepository.findById(userId);
 }
@@ -7046,6 +7063,20 @@ async function updateLastLoginService(userId) {
 async function updateUserService(userId, updates) {
   await usersRepository.updateById(userId, updates);
 }
+async function checkUsernameAvailableService(username) {
+  const existing = await usersRepository.findByUsername(username);
+  return !existing;
+}
+async function updateUsernameService(userId, username) {
+  const userIdNum = typeof userId === "string" ? Number(userId) : Number(userId);
+  if (username !== null) {
+    const existing = await usersRepository.findByUsername(username);
+    if (existing && existing.id !== userIdNum) {
+      throw new UsernameAlreadyTakenError({ username });
+    }
+  }
+  return await usersRepository.updateById(userIdNum, { username });
+}
 
 // src/server/events/index.ts
 init_esm();
@@ -8719,9 +8750,31 @@ var updateUserProfile = route3.patch("/_auth/users/profile").input({
   const { body } = await c.data();
   return await updateUserProfileService(userId, body);
 });
+var checkUsername = route3.get("/_auth/users/username/check").input({
+  query: Type.Object({
+    username: Type.String({ minLength: 1 })
+  })
+}).handler(async (c) => {
+  const { query } = await c.data();
+  return { available: await checkUsernameAvailableService(query.username) };
+});
+var updateUsername = route3.patch("/_auth/users/username").input({
+  body: Type.Object({
+    username: Type.Union([
+      Type.String({ minLength: 1 }),
+      Type.Null()
+    ], { description: "New username or null to clear" })
+  })
+}).handler(async (c) => {
+  const { userId } = getAuth(c);
+  const { body } = await c.data();
+  return await updateUsernameService(userId, body.username);
+});
 var userRouter = defineRouter3({
   getUserProfile,
-  updateUserProfile
+  updateUserProfile,
+  checkUsername,
+  updateUsername
 });
 
 // src/server/routes/oauth/index.ts
@@ -9307,6 +9360,7 @@ export {
   cancelInvitation,
   changePasswordService,
   checkAccountExistsService,
+  checkUsernameAvailableService,
   configureAuth,
   createAuthLifecycle,
   createInvitation,
@@ -9395,6 +9449,7 @@ export {
   updateRole,
   updateUserProfileService,
   updateUserService,
+  updateUsernameService,
   userInvitations,
   userPermissions,
   userPermissionsRepository,