yao/openapi/user/TODO.md
Max 6f3a57cb33 Refactor login cookie handling to improve security and organization
- Consolidated cookie management into a new SendLoginCookies function, which sends access token, refresh token, and session ID cookies with appropriate security settings.
- Updated authback functions in the signin and oauth files to utilize the new SendLoginCookies function, enhancing code clarity and reducing duplication.
2025-09-18 10:10:58 +08:00

96 lines
2.4 KiB
Markdown

# User Module TODO
## ✅ Implemented (5/80)
### Authentication
- ✅ GET `/user/login` - Get login page configuration
- ✅ POST `/user/login` - User login
### OAuth & Third-Party Integration
- ✅ GET `/user/oauth/:provider/authorize` - Get OAuth authorization URL
- ✅ POST `/user/oauth/:provider/authorize/prepare` - Handle OAuth POST callback (Apple, WeChat)
- ✅ POST `/user/oauth/:provider/callback` - Handle OAuth GET callback (Google, GitHub)
## ❌ TODO (75/80)
### Authentication
- ❌ POST `/user/register` - User registration
- ❌ POST `/user/logout` - User logout
### Profile Management
- ❌ GET `/user/profile` - Get user profile
- ❌ PUT `/user/profile` - Update user profile
### Account Security (13 endpoints)
- ❌ Password management (3 endpoints)
- ❌ Email management (5 endpoints)
- ❌ Mobile management (5 endpoints)
### Multi-Factor Authentication (12 endpoints)
- ❌ TOTP management (7 endpoints)
- ❌ SMS MFA management (5 endpoints)
### OAuth & Third-Party Integration
- ❌ GET `/user/oauth/providers` - Get linked OAuth providers
- ❌ DELETE `/user/oauth/:provider` - Unlink OAuth provider
- ❌ GET `/user/oauth/providers/available` - Get available OAuth providers
- ❌ POST `/user/oauth/:provider/connect` - Connect OAuth provider
### API Keys Management (6 endpoints)
- ❌ CRUD operations and regeneration for API keys
### Credits & Top-up (6 endpoints)
- ❌ Credits info, history, and top-up management
### Subscription Management (2 endpoints)
- ❌ Subscription info and updates
### Usage Statistics (2 endpoints)
- ❌ Usage statistics and history
### Billing & Invoices (2 endpoints)
- ❌ Billing history and invoice list
### Referral & Invitations (4 endpoints)
- ❌ Referral codes, statistics, history, commissions
### Team Management (15 endpoints)
- ❌ Team CRUD (5 endpoints)
- ❌ Member management (5 endpoints)
- ❌ Invitation management (5 endpoints)
### Invitation Response (3 endpoints)
- ❌ Cross-module invitation handling
### User Preferences (3 endpoints)
- ❌ User preference settings
### Privacy Settings (3 endpoints)
- ❌ Privacy settings
### User Management (Admin) (5 endpoints)
- ❌ User CRUD operations
## Progress Summary
- **Completion**: 6.25% (5/80)
- **Core Features**: Authentication and OAuth completed
- **Next Steps**: Recommend implementing basic user management (register, logout, profile) first