Address production-readiness review: clearer errors, safer votes, and ops hardening.

Distinguish auth/lookup failures, make votes idempotent on visible questions, bound shutdown, page admin users, LRU throttle, trusted-proxy CIDRs, avatar cleanup, versioned migrations, and session cleanup logging.
2026-08-22 12:16:59 -07:00
parent 5bdaa8977f
commit 29b0536215
26 changed files with 612 additions and 146 deletions
@@ -71,7 +71,7 @@ func (p *Postgres) CreateUser(ctx context.Context, u *User) error {
 		Role:         string(role),
 		CreatedAt:    u.CreatedAt,
 	}); err != nil {
-		return err
+		return mapUniqueViolation(err)
 	}
 	if err := tx.Commit(); err != nil {
 		return err
@@ -89,8 +89,8 @@ func (p *Postgres) UserByUsername(ctx context.Context, username string) (*User,
 	return UserByUsername(ctx, p.db, username)
 }

-func (p *Postgres) ListUsers(ctx context.Context) ([]User, error) {
-	return ListUsers(ctx, p.db)
+func (p *Postgres) ListUsers(ctx context.Context, q ListUsersQuery) ([]User, string, string, error) {
+	return ListUsers(ctx, p.db, q)
 }

 func (p *Postgres) CountAdmins(ctx context.Context) (int, error) {