Backend: new migration adds users.email_verified_at (null = unverified); registration leaves it null, and the register/login/me payloads now expose email_verified and email_verified_at. Frontend (web/): Vite + Vue 3 + TypeScript PWA (vite-plugin-pwa). Pinia auth store keeps the token in localStorage and validates it via GET /api/me on load. vue-router guards redirect unauthenticated visitors to /login, preserving the intended path; /register creates an account and signs in immediately (with the email unverified). Placeholder home page, minimal styling, generated icons. Dev server proxies /api to the API. docker-compose.yml gains an optional "web" service (profile: frontend) so `docker compose --profile frontend up -d` runs the dev server alongside the API; `docker compose up -d` still starts the API alone. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
77 lines
1.7 KiB
PHP
77 lines
1.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Repository;
|
|
|
|
use PDO;
|
|
|
|
/**
|
|
* Data access for the `users` table. Rows are returned as associative arrays.
|
|
*
|
|
* @phpstan-type UserRow array{id: int, email: string, password_hash: string, email_verified_at: string|null, created_at: string, updated_at: string}
|
|
*/
|
|
final class UserRepository
|
|
{
|
|
public function __construct(private readonly PDO $pdo)
|
|
{
|
|
}
|
|
|
|
/**
|
|
* @return UserRow|null
|
|
*/
|
|
public function findByEmail(string $email): ?array
|
|
{
|
|
$stmt = $this->pdo->prepare('SELECT * FROM users WHERE email = :email');
|
|
$stmt->execute(['email' => $email]);
|
|
|
|
$row = $stmt->fetch();
|
|
|
|
return $row === false ? null : $this->cast($row);
|
|
}
|
|
|
|
/**
|
|
* @return UserRow|null
|
|
*/
|
|
public function findById(int $id): ?array
|
|
{
|
|
$stmt = $this->pdo->prepare('SELECT * FROM users WHERE id = :id');
|
|
$stmt->execute(['id' => $id]);
|
|
|
|
$row = $stmt->fetch();
|
|
|
|
return $row === false ? null : $this->cast($row);
|
|
}
|
|
|
|
/**
|
|
* @return UserRow
|
|
*/
|
|
public function create(string $email, string $passwordHash): array
|
|
{
|
|
$stmt = $this->pdo->prepare(
|
|
'INSERT INTO users (email, password_hash) VALUES (:email, :password_hash)'
|
|
);
|
|
$stmt->execute([
|
|
'email' => $email,
|
|
'password_hash' => $passwordHash,
|
|
]);
|
|
|
|
/** @var UserRow $user */
|
|
$user = $this->findById((int) $this->pdo->lastInsertId());
|
|
|
|
return $user;
|
|
}
|
|
|
|
/**
|
|
* @param array<string, mixed> $row
|
|
* @return UserRow
|
|
*/
|
|
private function cast(array $row): array
|
|
{
|
|
$row['id'] = (int) $row['id'];
|
|
|
|
/** @var UserRow $row */
|
|
return $row;
|
|
}
|
|
}
|