feat(core, schemas): list user grants by userId

[simeng-li]

Summary

Introduce a new GET /users/:userId/grants endpoint to support listing user grants by userId. With an optional filter parameter appType, allow filtering the grants by application type.

Testing

Integration tests added.

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[github-actions]

COMPARE TO master

Total Size Diff ⚠️ 📈 +12.25 KB

Diff by File

Name	Diff
packages/core/src/mocks/oidc-grant.ts	📈 +420 Bytes
packages/core/src/libraries/session.ts	📈 +915 Bytes
packages/core/src/queries/oidc-model-instance.test.ts	📈 +3.13 KB
packages/core/src/queries/oidc-model-instance.ts	📈 +2.07 KB
packages/core/src/routes/admin-user/session.openapi.json	📈 +856 Bytes
packages/core/src/routes/admin-user/session.ts	📈 +794 Bytes
packages/integration-tests/src/api/admin-user.ts	📈 +356 Bytes
packages/integration-tests/src/tests/api/sessions/index.test.ts	📈 +1.97 KB
packages/schemas/alterations/next-1772621060-add-oidc-model-instances-grant-account-id-index.ts	📈 +902 Bytes
packages/schemas/src/types/user-sessions.ts	📈 +779 Bytes
packages/schemas/tables/oidc_model_instances.sql	📈 +177 Bytes

[Copilot]

Pull request overview

Adds a management (dev-feature) API to list a user’s active OIDC application grants, with optional filtering by first-party vs third-party applications, and improves query performance via a dedicated index.

Changes:

• Add GET /users/:userId/grants (and OpenAPI doc) returning non-expired grants with optional appType filter.
• Add DB index for Grant lookups by (payload->>'accountId') + expires_at (including an alteration script for concurrent creation).
• Add schema guards/types and integration/unit test coverage for the new query/endpoint.

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
packages/schemas/tables/oidc_model_instances.sql	Adds a baseline schema index for Grant lookups by accountId/expiry.
packages/schemas/alterations/next-1772621060-add-oidc-model-instances-grant-account-id-index.ts	Adds concurrent migration to create/drop the new index safely in existing DBs.
packages/schemas/src/types/user-sessions.ts	Introduces Zod guards/types for “user application grant” API responses.
packages/core/src/queries/oidc-model-instance.ts	Adds query to fetch active Grant instances joined to Applications (supports appType filtering).
packages/core/src/queries/oidc-model-instance.test.ts	Adds unit tests asserting SQL generation and parameters for the new query.
packages/core/src/libraries/session.ts	Adds formatting/validation and library method to expose active grants to routes.
packages/core/src/routes/admin-user/session.ts	Adds the new admin-user grants route with request/response guards.
packages/core/src/routes/admin-user/session.openapi.json	Documents the new endpoint and its appType query parameter.
packages/integration-tests/src/api/admin-user.ts	Adds an integration-test API client helper for GET /users/:userId/grants.
packages/integration-tests/src/tests/api/sessions/index.test.ts	Adds an integration test validating grant retrieval and appType filtering.
packages/core/src/mocks/oidc-grant.ts	Adds a test helper to mock Grant instances in query unit tests.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.