Function convertToUser

backend/api/v1/user_service.go:717–749

(ctx context.Context, iamManager *iam.Manager, user *store.UserMessage)

}

func convertToUser(ctx context.Context, iamManager *iam.Manager, user *store.UserMessage) (*v1pb.User, error) {
	groups, err := iamManager.GetUserGroups(ctx, common.GetWorkspaceIDFromContext(ctx), user.Email)
	if err != nil {
		return nil, err
	}

	workspaceID := common.GetWorkspaceIDFromContext(ctx)
	convertedUser := &v1pb.User{
		Name:  common.FormatUserEmail(user.Email),
		State: convertDeletedToState(user.MemberDeleted),
		Email: user.Email,
		Phone: user.Phone,
		Title: user.Name,
		Profile: &v1pb.User_Profile{
			LastLoginTime:          user.Profile.LastLoginTime,
			LastChangePasswordTime: user.Profile.LastChangePasswordTime,
			Source:                 user.Profile.Source,
		},
		Groups:    groups,
		Workspace: common.FormatWorkspace(workspaceID),
	}

	if user.MFAConfig != nil {
		convertedUser.MfaEnabled = user.MFAConfig.OtpSecret != ""
		// Only expose temporary MFA secrets and recovery codes to the user themselves
		if currentUser, ok := GetUserFromContext(ctx); ok && currentUser.ID == user.ID {
			convertedUser.TempOtpSecret = user.MFAConfig.TempOtpSecret
			convertedUser.TempRecoveryCodes = user.MFAConfig.TempRecoveryCodes
			convertedUser.TempOtpSecretCreatedTime = user.MFAConfig.TempOtpSecretCreatedTime
		}
	}
	return convertedUser, nil
}

func validateEndUserEmail(email string) error {
	if common.IsServiceAccountEmail(email) {