@spfn/auth 0.2.0-beta.42 → 0.2.0-beta.44

package/dist/server.js

@@ -4564,7 +4564,7 @@ var init_roles = __esm({
 });
 
 // src/server/entities/users.ts
-import { text as text2, check, boolean as boolean2, index as index2 } from "drizzle-orm/pg-core";
+import { text as text2, check, boolean as boolean2, index as index2, uuid } from "drizzle-orm/pg-core";
 import { id as id2, timestamps as timestamps2, enumText, utcTimestamp, foreignKey } from "@spfn/core/db";
 import { sql } from "drizzle-orm";
 var users;
@@ -4579,6 +4579,9 @@ var init_users = __esm({
       {
         // Identity
         id: id2(),
+        // Public-facing UUID (for URLs, external APIs)
+        // Never expose internal bigserial ID externally
+        publicId: uuid("public_id").notNull().unique().defaultRandom(),
         // Email address (unique identifier)
         // Used for: login, password reset, notifications
         email: text2("email").unique(),
@@ -4626,6 +4629,7 @@ var init_users = __esm({
           sql`${table.email} IS NOT NULL OR ${table.phone} IS NOT NULL`
         ),
         // Indexes for query optimization
+        index2("users_public_id_idx").on(table.publicId),
         index2("users_email_idx").on(table.email),
         index2("users_phone_idx").on(table.phone),
         index2("users_username_idx").on(table.username),
@@ -4653,8 +4657,8 @@ var init_user_profiles = __esm({
         // Foreign key to users table
         userId: foreignKey2("user", () => users.id).unique(),
         // Display Information
-        // Display name shown in UI (required)
-        displayName: text3("display_name").notNull(),
+        // Display name shown in UI (optional)
+        displayName: text3("display_name"),
         // First name (optional)
         firstName: text3("first_name"),
         // Last name (optional)
@@ -5355,6 +5359,14 @@ var init_users_repository = __esm({
         const result = await this.readDb.select().from(users).where(eq(users.username, username)).limit(1);
         return result[0] ?? null;
       }
+      /**
+       * Public ID(UUID)로 사용자 조회
+       * Read replica 사용
+       */
+      async findByPublicId(publicId) {
+        const result = await this.readDb.select().from(users).where(eq(users.publicId, publicId)).limit(1);
+        return result[0] ?? null;
+      }
       /**
        * 이메일 또는 전화번호로 사용자 조회
        * Read replica 사용
@@ -5495,6 +5507,7 @@ var init_users_repository = __esm({
       async fetchMinimalUserData(userId) {
         const user = await this.readDb.select({
           id: users.id,
+          publicId: users.publicId,
           email: users.email,
           username: users.username,
           emailVerifiedAt: users.emailVerifiedAt,
@@ -5505,6 +5518,7 @@ var init_users_repository = __esm({
         }
         return {
           userId: user.id,
+          publicId: user.publicId,
           email: user.email,
           username: user.username,
           isEmailVerified: !!user.emailVerifiedAt,
@@ -5521,6 +5535,7 @@ var init_users_repository = __esm({
       async fetchFullUserData(userId) {
         const user = await this.readDb.select({
           id: users.id,
+          publicId: users.publicId,
           email: users.email,
           username: users.username,
           emailVerifiedAt: users.emailVerifiedAt,
@@ -5534,6 +5549,7 @@ var init_users_repository = __esm({
         }
         return {
           userId: user.id,
+          publicId: user.publicId,
           email: user.email,
           username: user.username,
           isEmailVerified: !!user.emailVerifiedAt,
@@ -7246,6 +7262,7 @@ async function registerService(params) {
   });
   const result = {
     userId: String(newUser.id),
+    publicId: newUser.publicId,
     email: newUser.email || void 0,
     phone: newUser.phone || void 0
   };
@@ -7291,6 +7308,7 @@ async function loginService(params) {
   await updateLastLoginService(user.id);
   const result = {
     userId: String(user.id),
+    publicId: user.publicId,
     email: user.email || void 0,
     phone: user.phone || void 0,
     passwordChangeRequired: user.passwordChangeRequired
@@ -7770,6 +7788,7 @@ async function getAuthSessionService(userId) {
   ]);
   return {
     userId: user.userId,
+    publicId: user.publicId,
     email: user.email,
     emailVerified: user.isEmailVerified,
     phoneVerified: user.isPhoneVerified,
@@ -7787,6 +7806,7 @@ async function getUserProfileService(userId) {
   ]);
   return {
     userId: user.userId,
+    publicId: user.publicId,
     email: user.email,
     username: user.username,
     emailVerified: user.isEmailVerified,
@@ -7813,7 +7833,7 @@ async function updateUserProfileService(userId, params) {
   const userIdNum = typeof userId === "string" ? Number(userId) : Number(userId);
   const updateData = {};
   if (params.displayName !== void 0) {
-    updateData.displayName = emptyToNull(params.displayName) || "User";
+    updateData.displayName = emptyToNull(params.displayName);
   }
   if (params.firstName !== void 0) {
     updateData.firstName = emptyToNull(params.firstName);
@@ -7854,10 +7874,6 @@ async function updateUserProfileService(userId, params) {
   if (params.metadata !== void 0) {
     updateData.metadata = params.metadata;
   }
-  const existing = await userProfilesRepository.findByUserId(userIdNum);
-  if (!existing && !updateData.displayName) {
-    updateData.displayName = "User";
-  }
   await userProfilesRepository.upsertByUserId(userIdNum, updateData);
   const profile = await userProfilesRepository.fetchProfileData(userIdNum);
   return profile;