Users Module
Manage authenticated user profiles, preferences, and account metadata.
Description
The Users module handles the core identity and profile metadata for authenticated VeriWorkly users.
While VeriWorkly is heavily designed around a local-first philosophy, users who opt into creating an account (to utilize cloud sync, resume sharing, or managed backups) interact with these endpoints to manage their platform identity.
The Local-First Boundary
To maintain strict data privacy, this module respects a clear boundary: User Identity vs. Resume Data.
The User profile returned by these endpoints only contains top-level account metadata:
- Display Name
- Verified Email Address
- Cloud Sync Preferences (
autoSyncEnabled) - Relational counts (e.g., total resumes, total active share links)
Actual resume content (experience, education, templates) is never exposed through the /users
routes. That data is strictly managed via the separate Profile and Resume domains.
Security & Access Control
Identity operations are highly sensitive. All endpoints in this module enforce strict session validation.
| Feature | Enforcement |
|---|---|
| Authentication | Requires a valid Better Auth HTTP-only session cookie (veriworkly-auth.session_token). |
| Data Integrity | Email addresses are strictly read-only to prevent account hijacking. |
| Unauthorized Access | Requests missing valid cookies immediately return 401 Unauthorized. |