Move user profile data from Auth0

[vnugent]

#202 part 2

• Maintain our own user profile in the db
• Import public-facing user profile data from Auth0
• Create user profile Create/Read/Update GQL API
• Create a new GQL query for user profile page
• Add/update unit tests

Overview

1. One-time migration job to copy user profiles (only public information) from Auth0 to Mongo
   Note: Email is considered 'private'. Currently, email is not returned from any GQL queries.

  # what to copy from Auth0
  username?: string
  userUuid: string
  displayName?: string
  bio?: string
  website?: string
  email?: string
  avatar?: string

3. Going forward we will maintain user profile and metadata in our own DB
4. Auth0 continues to handle authentication/password change/JWT

Migration steps (staging and prod)

• deploy build
• run yarn import-users to copy user public profile data from Auth0
• merge and deploy FE Refactor username update to work with new profile API open-tacos#830
• reenable new user sign up in Auth0

New queries & mutations

Useful for getting username from uuid

query MyQuery2 {
  getUsername(input: {userUuid: "b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c"}) {
    username
    lastUpdated
    userUuid
  }
}


{
  "data": {
    "getUsername": {
      "username": "viet-test-profile1",
      "lastUpdated": 1676628726836,
      "userUuid": "b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c"
    }
  }

getUserPublicProfileByUuid() currently not being used by the frontend (yet)

query MyQuery {
  getUserPublicProfileByUuid(
    input: {userUuid: "b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c"}
  ) {
    displayName
    bio
    website
    avatar
    userUuid
    username
  }
}

{
  "data": {
    "getUserPublicProfileByUuid": {
      "displayName": "viet",
      "bio": "test profile",
      "website": "",
      "avatar": "https://s.gravatar.com/avatar/c185452daad3fe5bf7707813b1a295e8?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Fvi.png",
      "userUuid": "b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c",
      "username": "viet-test-profile1"
    }
  }
}

Query for openbeta.io/u/<username> page

query MyQuery3 {
  getUserPublicPage(input: {username: "viet-test-profile1"}) {
    profile {
      website
      username
      userUuid
      displayName
      avatar
      bio
    }
    mediaList {
      id
      mediaUrl
    }
  }
}

{
  "data": {
    "getUserPublicPage": {
      "profile": {
        "website": "",
        "username": "viet-test-profile1",
        "userUuid": "b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c",
        "displayName": "viet",
        "avatar": "https://s.gravatar.com/avatar/c185452daad3fe5bf7707813b1a295e8?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Fvi.png",
        "bio": "test profile"
      },
      "mediaList": [
        {
          "id": "645836e5854f76d7a9dcf76c",
          "mediaUrl": "/u/b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c/KfB8dcN6gg.jpg"
        },
        {
          "id": "645836e5854f76d7a9dcf767",
          "mediaUrl": "/u/b9f8ab3b-e6e5-4467-9adb-65d91c7ebe7c/WgMbnnP9kQ.jpeg"
        }]
    }
}

Does username exist?

Uses by the username change form to see if a username already exists

query MyQuery4 {
  usernameExists(input: {username: "newuser"})
}

{
  "data": {
    "usernameExists": true
  }
}

[vnugent]

@zichongkao @musoke can you please have a look at this PR

[zichongkao]

Seems fine to me!

[zichongkao]

Hopefully these files are comprehensive. There's a risk that users can sign up and create new Auth0 accounts while this script is being run right? I can the rate of users joining is low, and we can check after the fact that the counts match up.

[vnugent]

There's a risk that users can sign up and create new Auth0 accounts while this script is being run right?

For this reason I disabled new user sign up before I downloaded all user folders/image files from Sirv a couple weeks ago. There's also a new check in the frontend for all logged in users. If a logged in user is not found in the Users collection, they must select a username which will then create a new document in Users.

[musoke]

this all looks good to me!