Add API support for creating user roles on plans via POST /user-plans.
Add helpers for creating OpenAPI properties and parameters more DRY-ly.
Require non-null created-by and updated-by values on all entities except users: we need to bootstrap those without a pre-existing user.
Ensure that deletion operations specify the correct updating user who ordered the deletion.
Refactor spec.cljc into sub-namespaces to reduce file size / cognitive load.
Plans, users and edges transformations
Consolidate boundary-dependent data transformations to ns common.edges. Add property-based tests.
Fix bug in SQL when creating a user plan relation row.
WIP. Add plan-related endpoints to OpenAPI spec: show-plan, update-plan, delete-plan, and create-plan.
Add plans table and make tests pass
DB Migrations:
Create new table plans
Create new table users_plans
Update tests to not rely on deleting existing data; use generated data.
Add API endpoint for activating a user
Users CRUD API, migrations, PII scrubbing, etc.
Add notes in README about core data model.
Migrations:
Add is_superuser boolean column to users table.
Update user email uniqueness constraint such that a new user can have the same email as a deleted user.
Miscellaneous migration:
Drop machine_users table.
Add updated_by FK column to forms, users, olds, and users_olds.
Add created_by FK column to users, olds, and users_olds.
Add inserted_at timestamp column to users, olds, and users_olds.
Updates to OpenAPI spec:
Add local test server.
Add paths (endpoints) for most CRUD operations on the global pool of users. Begin adding paths for OLD-specific users.
Add schemata related to CRUD on users, including new is-superuser attribute.
Ensure that DB access more smoothly produces Clojure-idiomatic data structures.
Replace the non-operational :returning-execute-kebab HugSQL directive with the actually working :returning-execute :one-kebab directive in all places it is needed.
Favour use of * (over naming specific columns) in SELECT and RETURNING clauses.
Ensure created_by and updated_by are valuated during resource mutation, where applicable.
Add client fns for CRUD operations on users and forms. Ensure that these fns allow for interaction with the REST API using data structures that are Clojure-idiomatic. (The round-tripping through REST API conventions is transparent.
Add API error codes :deletion-request-for-current-user and :unique-email-constraint-violated.
Add clock component to main system.
Update authorization logic to distinguish superuser-authorized actions from regular user-authorized ones.
Ensure that the Clojure OpenAPI spec orders the paths in such a manner that the reitit router will deterministically create the routes appropriately.
Prohibit API key authentication when the key's user has been deleted.
Make pagination logic not specific to forms; use "items" instead of "forms".
Add ns dvb.common.edges for transforming data at the edges. Right now it mainly contains functionality for transforming Clojure-idiomatic structures to REST API-idiomatic ones and is used by the HTTP client sub-project.
Add ns dvb.server.scrub for scrubbing PII from arbitrary data structures.
Add ns dvb.server.log as an abstraction over the underlying log library, which scrubs the PII out of the logged data.
Add end-to-end test ns which uses the client and a running API to test CRUD operations on users.
Changes