feat(server): auth server (#2773)

apps/server/schema.prisma

@@ -1,29 +1,10 @@
-datasource db {
-  provider = "postgresql"
-  url      = env("DATABASE_URL")
-}
-
 generator client {
   provider = "prisma-client-js"
 }
 
-model User {
-  id                String                    @id @default(uuid()) @db.VarChar
-  name              String                    @db.VarChar
-  email             String                    @unique @db.VarChar
-  tokenNonce        Int                       @default(0) @map("token_nonce") @db.SmallInt
-  avatarUrl         String?                   @map("avatar_url") @db.VarChar
-  /// Available if user signed up through OAuth providers
-  password          String?                   @db.VarChar
-  /// User may created by email collobration invitation before signup.
-  /// We will precreate a user entity in such senarios but leave fulfilled as false until they signed up
-  /// This implementation is convenient for handing unregistered user permissoin
-  fulfilled         Boolean                   @default(true)
-  createdAt         DateTime                  @default(now()) @map("created_at") @db.Timestamptz(6)
-  connectedAccounts ConnectedAccount[]
-  workspaces        UserWorkspacePermission[]
-
-  @@map("users")
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
 }
 
 model Workspace {
@@ -35,18 +16,6 @@ model Workspace {
   @@map("workspaces")
 }
 
-model ConnectedAccount {
-  id             String @id @default(uuid()) @db.VarChar
-  userId         String @map("user_id")
-  /// the general provider name, e.g. google, github, facebook
-  provider       String @db.VarChar
-  /// the user id provided by OAuth providers, or other user identitive credential like `username` provided by GitHub
-  providerUserId String @unique @map("provider_user_id") @db.VarChar
-  user           User   @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("connected_accounts")
-}
-
 model UserWorkspacePermission {
   id          String    @id @default(uuid()) @db.VarChar
   workspaceId String    @map("workspace_id") @db.VarChar
@@ -56,8 +25,64 @@ model UserWorkspacePermission {
   /// Whether the permission invitation is accepted by the user
   accepted    Boolean   @default(false)
   createdAt   DateTime  @default(now()) @map("created_at") @db.Timestamptz(6)
-  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
   user        User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
 
   @@map("user_workspace_permissions")
 }
+
+model User {
+  id            String                    @id @default(uuid()) @db.VarChar
+  name          String
+  email         String?                   @unique
+  emailVerified DateTime?                 @map("email_verified")
+  // image field is for the next-auth
+  avatarUrl     String?                   @map("image") @db.VarChar
+  accounts      Account[]
+  sessions      Session[]
+  workspaces    UserWorkspacePermission[]
+  createdAt     DateTime                  @default(now()) @map("created_at") @db.Timestamptz(6)
+  /// Not available if user signed up through OAuth providers
+  password      String?                   @db.VarChar
+
+  @@map("users")
+}
+
+model Account {
+  id                String  @id @default(cuid())
+  userId            String  @map("user_id")
+  type              String
+  provider          String
+  providerAccountId String  @map("provider_account_id")
+  refresh_token     String? @db.Text
+  access_token      String? @db.Text
+  expires_at        Int?
+  token_type        String?
+  scope             String?
+  id_token          String? @db.Text
+  session_state     String?
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([provider, providerAccountId])
+  @@map("accounts")
+}
+
+model Session {
+  id           String   @id @default(cuid())
+  sessionToken String   @unique @map("session_token")
+  userId       String   @map("user_id")
+  expires      DateTime
+  user         User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("sessions")
+}
+
+model VerificationToken {
+  identifier String
+  token      String   @unique
+  expires    DateTime
+
+  @@unique([identifier, token])
+  @@map("verificationtokens")
+}