feat(server): support refresh token (#15218)

packages/backend/server/src/models/user.ts

@@ -35,6 +35,7 @@ type UpdateConnectedAccountInput = Omit<
 
 declare global {
   interface Events {
+    'user.preDelete': { id: string };
     'user.created': User;
     'user.updated': User;
     'user.deleted': User & {
@@ -60,6 +61,16 @@ export type { ConnectedAccount, User };
 
 @Injectable()
 export class UserModel extends BaseModel {
+  async lockForAuthIssuance(id: string) {
+    const users = await this.db.$queryRaw<Array<Pick<User, 'id' | 'disabled'>>>`
+      SELECT id, disabled
+      FROM users
+      WHERE id = ${id}
+      FOR UPDATE
+    `;
+    return users[0];
+  }
+
   constructor(
     private readonly crypto: CryptoHelper,
     private readonly event: EventBus
@@ -284,6 +295,8 @@ export class UserModel extends BaseModel {
       }
     }
 
+    await this.event.emitAsync('user.preDelete', { id });
+
     await this.db.workspaceInvitation.deleteMany({
       where: { inviteeUserId: id },
     });