Method SearchProjectUsers

admin/server/users.go:587–630

SearchProjectUsers returns a list of users that match the given search/email query.

(ctx context.Context, req *adminv1.SearchProjectUsersRequest)

// SearchProjectUsers returns a list of users that match the given search/email query.
func (s *Server) SearchProjectUsers(ctx context.Context, req *adminv1.SearchProjectUsersRequest) (*adminv1.SearchProjectUsersResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.org", req.Org),
		attribute.String("args.project", req.Project),
		attribute.String("args.email_query", req.EmailQuery),
	)

	proj, err := s.admin.DB.FindProjectByName(ctx, req.Org, req.Project)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	if !claims.ProjectPermissions(ctx, proj.OrganizationID, proj.ID).ManageProject {
		return nil, status.Error(codes.PermissionDenied, "not authorized to search project users")
	}

	token, err := unmarshalPageToken(req.PageToken)
	if err != nil {
		return nil, err
	}

	pageSize := validPageSize(req.PageSize)

	users, err := s.admin.DB.SearchProjectUsers(ctx, proj.ID, req.EmailQuery, token.Val, pageSize)
	if err != nil {
		return nil, err
	}

	nextToken := ""
	if len(users) >= pageSize {
		nextToken = marshalPageToken(users[len(users)-1].Email)
	}

	dtos := make([]*adminv1.User, len(users))
	for i, user := range users {
		dtos[i] = s.userToPB(user, false)
	}

	return &adminv1.SearchProjectUsersResponse{
		Users:         dtos,
		NextPageToken: nextToken,
	}, nil
}

func (s *Server) userToPB(u *database.User, isCurrentUser bool) *adminv1.User {
	// Compute a HMAC-SHA256 hash of the email if Pylon identity verification is configured.