Commit Graph

2 Commits (3913640f5b12f749011cf06ac7dc2e1d2346a19c)

Author SHA1 Message Date
veypi c8504c3f70 feat(api/auth): Add batch query user API
- Add POST /api/auth/users endpoint for batch user query
    - Add IDs filter to SearchUsersRequest for batch lookup
    - Add Name and Icon fields to PublicUserInfo response
    - Implement searchUsersByIDs with deduplication and ordering
    - Extract buildPublicUserInfo helper for consistent public info mapping
2 months ago
veypi b0322047cd feat: Restrict user APIs to admins and add public user search
- Add /api/auth/users endpoint for authenticated users to search other users
    - Only return public info (id, username, nickname, avatar) in search results
    - Change /api/user routes to require user:admin permission instead of user:read
    - Update auth tests to use /api/auth/me for self updates
    - Add tests for new user search endpoint
4 months ago