From 6cc77fe162645c1dc5d3a35411f15015ddf556b5 Mon Sep 17 00:00:00 2001 From: Illia Polosukhin Date: Thu, 26 Mar 2026 10:06:32 -0700 Subject: [PATCH] fix: guard created_by FK in user creation handler The auth identity user_id (from owner_id scope) may not match any user row in the DB, causing a FK violation on the created_by column. Check that the referenced user exists before setting created_by. Co-Authored-By: Claude Opus 4.6 (1M context) --- src/channels/web/handlers/users.rs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/channels/web/handlers/users.rs b/src/channels/web/handlers/users.rs index c89c70a6..f7f4a93c 100644 --- a/src/channels/web/handlers/users.rs +++ b/src/channels/web/handlers/users.rs @@ -61,7 +61,10 @@ pub async fn users_create_handler( created_at: now, updated_at: now, last_login_at: None, - created_by: Some(user.user_id.clone()), + created_by: match store.get_user(&user.user_id).await { + Ok(Some(_)) => Some(user.user_id.clone()), + _ => None, + }, metadata: serde_json::json!({}), };