Add privacy-safe cuber discovery and public profiles
@coder13 已经在做这个了。
开始于 2021年4月7日。
评估
这个 Issue 还没有评估数据。
描述
Goal
Help authenticated cubers find someone they already know or raced with and open a safe public profile before sending a friend request.
MVP discovery contract
- Search only by normalized username and, when the target has explicitly enabled WCA identity visibility, WCA ID.
- Never search by email, ingest email for this feature, accept email as an identifier, or reveal whether an email exists.
- Require authentication, enforce bounded/rate-limited queries, and return a capped paginated result set.
- Respect blocks and profile visibility without telling a blocked user that a block caused an omitted result.
- Support entry points from the lobby user list, room users/times/chat, the friends hub, and direct username search.
- Do not add algorithmic stranger recommendations in the MVP.
Public profile contract
Use one explicit server-side public projection containing only fields the viewer may see:
- stable public user identifier;
- display name and username;
- WCA identity and WCA-hosted avatar only when the target opted to reveal them;
- viewer-relative friend state: none, outgoing request, incoming request, or friends;
- relevant actions: request/cancel/accept/decline/unfriend/block and invite when eligible.
Do not reuse the editable /profile response for another user, and never include access tokens, email, hidden real name/WCA ID, private preferences, private-room membership, friend graph, or notification data.
Acceptance criteria
- Add authenticated, indexed user search backed by #185's normalized username field.
- Add an authenticated public-profile endpoint and
/users/:idclient route with explicit field projection. - Make user names/avatars open the public profile from existing lobby and room surfaces without breaking timer interaction or mobile layouts.
- Show correct viewer-relative friendship actions using #75 and handle concurrent/stale transitions.
- Return stable empty, not-found/unavailable, blocked, rate-limited, loading, and error states without user-enumeration leaks.
- Add server tests for every visibility combination, email-like queries, blocks, pagination, ID tampering, and unauthenticated access.
- Add client tests for hidden/visible WCA identity, friend states, keyboard accessibility, and responsive layouts.
- Add a two-user Cypress flow for search → profile → friend request.
Dependencies
- #185 normalized username migration
- #191 email removal/purge
- #75 friendship lifecycle
Deferred
- Opt-in language/timezone/event/pace matching is tracked in #190.
- Solve history, PBs, and rankings depend on the results-history work and are not required for this MVP.
- Public unauthenticated profiles are out of scope.
- 主要语言
- JavaScript
- 星标
- 29
- 派生
- 9
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
coder13/LetsCube 的其他 Issue
-
难度 3/5 1-2 天 新手友好度 65/100
-
难度 4/5 3-5 天 新手友好度 55/100
-
难度 3/5 1-2 天 新手友好度 68/100
-
难度 4/5 3-5 天 新手友好度 48/100
-
area: data area: platform enhancement priority: P1
难度 5/5 一周以上 新手友好度 28/100
相似的 Issue
-
[Bug] Composer can submit an IME confirmation when keyCode is 229 but isComposing is false可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭
难度 2/5 1-3 小时 新手友好度 72/100
apache/rocketmq-dashboard#6067 ·
维护者通常 4 天内回复
-
severity: low
难度 2/5 1-3 小时 新手友好度 70/100
luainkernel/lunatik#1853 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 62/100
维护者通常 1 天内回复
-
factory-active factory-automatic harness/claude-code task-identify-harness-labels-done task-identify-issue-type-done
难度 2/5 1-3 小时 新手友好度 62/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 62/100
维护者通常 1 天内回复