yao/openapi/user/TODO.md
Max 6f3a57cb33 Refactor login cookie handling to improve security and organization
- Consolidated cookie management into a new SendLoginCookies function, which sends access token, refresh token, and session ID cookies with appropriate security settings.
- Updated authback functions in the signin and oauth files to utilize the new SendLoginCookies function, enhancing code clarity and reducing duplication.
2025-09-18 10:10:58 +08:00

2.4 KiB

User Module TODO

Implemented (5/80)

Authentication

  • GET /user/login - Get login page configuration
  • POST /user/login - User login

OAuth & Third-Party Integration

  • GET /user/oauth/:provider/authorize - Get OAuth authorization URL
  • POST /user/oauth/:provider/authorize/prepare - Handle OAuth POST callback (Apple, WeChat)
  • POST /user/oauth/:provider/callback - Handle OAuth GET callback (Google, GitHub)

TODO (75/80)

Authentication

  • POST /user/register - User registration
  • POST /user/logout - User logout

Profile Management

  • GET /user/profile - Get user profile
  • PUT /user/profile - Update user profile

Account Security (13 endpoints)

  • Password management (3 endpoints)
  • Email management (5 endpoints)
  • Mobile management (5 endpoints)

Multi-Factor Authentication (12 endpoints)

  • TOTP management (7 endpoints)
  • SMS MFA management (5 endpoints)

OAuth & Third-Party Integration

  • GET /user/oauth/providers - Get linked OAuth providers
  • DELETE /user/oauth/:provider - Unlink OAuth provider
  • GET /user/oauth/providers/available - Get available OAuth providers
  • POST /user/oauth/:provider/connect - Connect OAuth provider

API Keys Management (6 endpoints)

  • CRUD operations and regeneration for API keys

Credits & Top-up (6 endpoints)

  • Credits info, history, and top-up management

Subscription Management (2 endpoints)

  • Subscription info and updates

Usage Statistics (2 endpoints)

  • Usage statistics and history

Billing & Invoices (2 endpoints)

  • Billing history and invoice list

Referral & Invitations (4 endpoints)

  • Referral codes, statistics, history, commissions

Team Management (15 endpoints)

  • Team CRUD (5 endpoints)
  • Member management (5 endpoints)
  • Invitation management (5 endpoints)

Invitation Response (3 endpoints)

  • Cross-module invitation handling

User Preferences (3 endpoints)

  • User preference settings

Privacy Settings (3 endpoints)

  • Privacy settings

User Management (Admin) (5 endpoints)

  • User CRUD operations

Progress Summary

  • Completion: 6.25% (5/80)
  • Core Features: Authentication and OAuth completed
  • Next Steps: Recommend implementing basic user management (register, logout, profile) first