@studious-lms/server 1.1.24 → 1.2.6

package/src/models/auth.ts

@@ -0,0 +1,247 @@
+/**
+ * Auth model – user lookup, session CRUD, Redis session cache.
+ * findUserBySessionToken checks Redis first, then DB.
+ */
+import { getRedis } from "../lib/redis.js";
+import { prisma } from "../lib/prisma.js";
+
+/** @returns User by username (includes password for login). */
+export function findUserByUsername(username: string) {
+  return prisma.user.findFirst({
+    where: { username },
+    select: {
+      id: true,
+      username: true,
+      password: true,
+      email: true,
+      verified: true,
+    },
+  });
+}
+
+/** @returns User by username or email. */
+export function findUserByUsernameOrEmail(username: string, email: string) {
+  return prisma.user.findFirst({
+    where: {
+      OR: [{ username }, { email }],
+    },
+    select: {
+      id: true,
+      username: true,
+      email: true,
+      verified: true,
+    },
+  });
+}
+
+/** @returns User by email with profile. */
+export function findUserByEmail(email: string) {
+  return prisma.user.findFirst({
+    where: { email },
+    select: {
+      id: true,
+      email: true,
+      role: true,
+      profile: {
+        select: {
+          displayName: true,
+          bio: true,
+          location: true,
+          website: true,
+          profilePicture: true,
+        },
+      },
+    },
+  });
+}
+
+/** @returns User by ID with profile. */
+export function findUserById(id: string) {
+  return prisma.user.findUnique({
+    where: { id },
+    select: {
+      id: true,
+      username: true,
+      profile: {
+        select: {
+          displayName: true,
+          bio: true,
+          location: true,
+          website: true,
+          profilePicture: true,
+          profilePictureThumbnail: true,
+        },
+      },
+    },
+  });
+}
+
+/** Create a user with empty profile. */
+export function createUser(data: {
+  username: string;
+  email: string;
+  password: string;
+  verified?: boolean;
+}) {
+  return prisma.user.create({
+    data: {
+      username: data.username,
+      email: data.email,
+      password: data.password,
+      verified: data.verified ?? false,
+      profile: { create: {} },
+    },
+    select: {
+      id: true,
+      username: true,
+      email: true,
+    },
+  });
+}
+
+/** Create a session. */
+export function createSession(data: {
+  id: string;
+  userId: string;
+  expiresAt: Date;
+}) {
+  return prisma.session.create({
+    data,
+  });
+}
+
+/** Delete all sessions for user. Invalidates Redis cache. */
+export async function deleteSessionsByUserId(userId: string) {
+  const sessions = await prisma.session.findMany({
+    where: { userId },
+  });
+  for (const session of sessions) {
+    await getRedis()?.del(`session:${session.id}`);
+  }
+  return prisma.session.deleteMany({
+    where: { userId },
+  });
+}
+
+/** Delete short-lived sessions (no classId) expiring before date. */
+export function deleteShortLivedSessionsByUserId(
+  userId: string,
+  expiresBefore: Date
+) {
+  return prisma.session.deleteMany({
+    where: {
+      userId,
+      classId: null,
+      expiresAt: { lte: expiresBefore },
+    },
+  });
+}
+
+/** Delete a user. */
+export function deleteUserById(id: string) {
+  return prisma.user.delete({
+    where: { id },
+  });
+}
+
+/** @returns Session by ID. */
+export function findSessionById(id: string) {
+  return prisma.session.findUnique({
+    where: { id },
+  });
+}
+
+/** @returns Session with user. */
+export function findSessionByIdWithUser(id: string) {
+  return prisma.session.findUnique({
+    where: { id },
+    include: {
+      user: { select: { id: true } },
+    },
+  });
+}
+
+/** Set user verified status. */
+export function updateUserVerified(userId: string, verified: boolean) {
+  return prisma.user.update({
+    where: { id: userId },
+    data: { verified },
+  });
+}
+
+/** Update user password. */
+export function updateUserPassword(userId: string, password: string) {
+  return prisma.user.update({
+    where: { id: userId },
+    data: { password },
+  });
+}
+
+/** Delete a session. */
+export function deleteSessionById(id: string) {
+  return prisma.session.delete({
+    where: { id },
+  });
+}
+
+/** @returns User from session token. Checks Redis first, then DB. Caches in Redis. */
+export async function findUserBySessionToken(token: string) {
+  const session = await getRedis()?.get(`session:${token}`);
+
+  if (session)
+    return JSON.parse(session);
+
+  const user = await prisma.user.findFirst({
+    where: {
+      sessions: { some: { id: token } },
+    },
+    select: {
+      id: true,
+      username: true,
+    },
+  });
+
+  if (user) {
+    const r = getRedis();
+    if (r) {
+      const ttlSeconds = 30 * 24 * 60 * 60; // 30 days, match session expiry
+      await r.setex(`session:${token}`, ttlSeconds, JSON.stringify(user));
+    }
+    return user;
+  }
+
+  return null;
+}
+
+/** @returns Class IDs where user is a teacher. */
+export function findTeacherClassesByUserId(userId: string) {
+  return prisma.class.findMany({
+    where: {
+      teachers: { some: { id: userId } },
+    },
+    select: { id: true },
+  });
+}
+
+/** @returns Class if user is student or teacher. */
+export function findClassWithMember(classId: string, userId: string) {
+  return prisma.class.findFirst({
+    where: {
+      id: classId,
+      OR: [
+        { students: { some: { id: userId } } },
+        { teachers: { some: { id: userId } } },
+      ],
+    },
+  });
+}
+
+/** @returns Class if user is a teacher. */
+export function findClassWithTeacher(classId: string, teacherId: string) {
+  return prisma.class.findFirst({
+    where: {
+      id: classId,
+      teachers: { some: { id: teacherId } },
+    },
+  });
+}