✅ Add tests setup + test sign in flow

* replace EthicsModal by LoginModal and start binding auth logic

* start implementing login modal + give a try to

@auth

/sveltekit

using Github oauth as a test

* start custom auth implementation instead of auth.js for consistency with moon-landing

* fetch user data from provider

* add migration from anonymous to user + bind frontend

* add missing auth secret + only migrate conversations for pre-existing users

* remove email scope as it's not needed

Co-authored-by: Eliott C. <[email protected]>

* no need to define .well-known path

Co-authored-by: Eliott C. <[email protected]>

* use env var for hf hub website url

* move sessionId to signature on csrf token exchange

* remove ethic modal check and set default settings on new users

* anonymous users can read only + modal on write tries

* refresh session cookie when existing user signin again rather than use the old one

* allow users to keep using the app without loging-in if env var is not present

* typo

* handle denied login

* do not use a form action for login as there is nothing post-ed

* use requiresUser instead of env var to define login modal or not

* move back to a form action for login so user can't be linked to /login directly

* show login modal even for pre-existing users

* fix logic of account creation/updates

* settings insertOne instead of updateOne

* fix missing userId to settings creation

* fix missing updatedAt when updating settings of pre-existing users

* show login modal for everyone + add comments

* fix login modal condition for both required/not required login

* 🔨

* bring back missing form values in login modal

* refactor default settings spread around to a constant

* missing default settings

* typo

* rename a bunch of things to remove SSO references

* always migrate conversations

* remove unneeded sha256 Node specific function, replace with browser crypto API

* fix typings

* Update src/lib/components/LoginModal.svelte

* use authCondition() in callback

* add logout

* 🐛 Fix signout

cc @Grsmto, because "path" of the cookie should be "/"

* fixup! 🐛 Fix signout

* add basic test setup with Vitest + tests of login DB updates

* add test for cookie

* try to run tests on CI

* try to fix docker compose not able to ignore .env file

* oopsy

* moved back .env before running tests

* add comment about docker compose .env workaround

* try to run mongo directly from github actions instead of docker-compose

* oopsy

* do we need to wait for mongo?

* move tested code back to relevant place + rename

* fix linting

* revert unnecessary change

---------

Co-authored-by: Eliott C. <[email protected]>

.github/workflows/lint-and-test.yml

@@ -25,3 +25,25 @@ jobs:
       - name: "Checking type errors"
         run: |
           npm run check
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    services:
+      mongodb:
+        image: mongo:6.0.5
+        ports:
+          - 27017:27017
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: "18"
+          cache: "npm"
+      - run: |
+          npm ci
+      - name: "Tests"
+        run: |
+          npm run test

package-lock.json

@@ -44,7 +44,8 @@
 				"tslib": "^2.4.1",
 				"typescript": "^4.9.3",
 				"unplugin-icons": "^0.16.1",
-				"vite": "^4.0.0"
+				"vite": "^4.0.0",
+				"vitest": "^0.31.0"
 			}
 		},
 		"node_modules/@antfu/install-pkg": {
@@ -879,6 +880,21 @@
 				"node": ">=4"
 			}
 		},
+		"node_modules/@types/chai": {
+			"version": "4.3.5",
+			"resolved": "https://registry.npmjs.org/@types/chai/-/chai-4.3.5.tgz",
+			"integrity": "sha512-mEo1sAde+UCE6b2hxn332f1g1E8WfYRu6p5SvTKr2ZKC1f7gFJXk4h5PyGP9Dt6gCaG8y8XhwnXWC6Iy2cmBng==",
+			"dev": true
+		},
+		"node_modules/@types/chai-subset": {
+			"version": "1.3.3",
+			"resolved": "https://registry.npmjs.org/@types/chai-subset/-/chai-subset-1.3.3.tgz",
+			"integrity": "sha512-frBecisrNGz+F4T6bcc+NLeolfiojh5FxW2klu669+8BARtyQv2C/GkNW6FUodVe4BroGMP/wER/YDGc7rEllw==",
+			"dev": true,
+			"dependencies": {
+				"@types/chai": "*"
+			}
+		},
 		"node_modules/@types/cookie": {
 			"version": "0.5.1",
 			"resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.5.1.tgz",
@@ -1146,6 +1162,102 @@
 				"url": "https://opencollective.com/typescript-eslint"
 			}
 		},
+		"node_modules/@vitest/expect": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-0.31.0.tgz",
+			"integrity": "sha512-Jlm8ZTyp6vMY9iz9Ny9a0BHnCG4fqBa8neCF6Pk/c/6vkUk49Ls6UBlgGAU82QnzzoaUs9E/mUhq/eq9uMOv/g==",
+			"dev": true,
+			"dependencies": {
+				"@vitest/spy": "0.31.0",
+				"@vitest/utils": "0.31.0",
+				"chai": "^4.3.7"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/runner": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-0.31.0.tgz",
+			"integrity": "sha512-H1OE+Ly7JFeBwnpHTrKyCNm/oZgr+16N4qIlzzqSG/YRQDATBYmJb/KUn3GrZaiQQyL7GwpNHVZxSQd6juLCgw==",
+			"dev": true,
+			"dependencies": {
+				"@vitest/utils": "0.31.0",
+				"concordance": "^5.0.4",
+				"p-limit": "^4.0.0",
+				"pathe": "^1.1.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/runner/node_modules/p-limit": {
+			"version": "4.0.0",
+			"resolved": "https://registry.npmjs.org/p-limit/-/p-limit-4.0.0.tgz",
+			"integrity": "sha512-5b0R4txpzjPWVw/cXXUResoD4hb6U/x9BH08L7nw+GN1sezDzPdxeRvpc9c433fZhBan/wusjbCsqwqm4EIBIQ==",
+			"dev": true,
+			"dependencies": {
+				"yocto-queue": "^1.0.0"
+			},
+			"engines": {
+				"node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
+		},
+		"node_modules/@vitest/runner/node_modules/yocto-queue": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.0.0.tgz",
+			"integrity": "sha512-9bnSc/HEW2uRy67wc+T8UwauLuPJVn28jb+GtJY16iiKWyvmYJRXVT4UamsAEGQfPohgr2q4Tq0sQbQlxTfi1g==",
+			"dev": true,
+			"engines": {
+				"node": ">=12.20"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
+		},
+		"node_modules/@vitest/snapshot": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-0.31.0.tgz",
+			"integrity": "sha512-5dTXhbHnyUMTMOujZPB0wjFjQ6q5x9c8TvAsSPUNKjp1tVU7i9pbqcKPqntyu2oXtmVxKbuHCqrOd+Ft60r4tg==",
+			"dev": true,
+			"dependencies": {
+				"magic-string": "^0.30.0",
+				"pathe": "^1.1.0",
+				"pretty-format": "^27.5.1"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/spy": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-0.31.0.tgz",
+			"integrity": "sha512-IzCEQ85RN26GqjQNkYahgVLLkULOxOm5H/t364LG0JYb3Apg0PsYCHLBYGA006+SVRMWhQvHlBBCyuByAMFmkg==",
+			"dev": true,
+			"dependencies": {
+				"tinyspy": "^2.1.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/utils": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-0.31.0.tgz",
+			"integrity": "sha512-kahaRyLX7GS1urekRXN2752X4gIgOGVX4Wo8eDUGUkTWlGpXzf5ZS6N9RUUS+Re3XEE8nVGqNyxkSxF5HXlGhQ==",
+			"dev": true,
+			"dependencies": {
+				"concordance": "^5.0.4",
+				"loupe": "^2.3.6",
+				"pretty-format": "^27.5.1"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
 		"node_modules/acorn": {
 			"version": "8.8.2",
 			"resolved": "https://registry.npmjs.org/acorn/-/acorn-8.8.2.tgz",
@@ -1167,6 +1279,15 @@
 				"acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
 			}
 		},
+		"node_modules/acorn-walk": {
+			"version": "8.2.0",
+			"resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz",
+			"integrity": "sha512-k+iyHEuPgSw6SbuDpGQM+06HQUa04DZ3o+F6CSzXMvvI5KMvnaEqXe+YVe555R9nn6GPt404fos4wcgpw12SDA==",
+			"dev": true,
+			"engines": {
+				"node": ">=0.4.0"
+			}
+		},
 		"node_modules/ajv": {
 			"version": "6.12.6",
 			"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
@@ -1244,6 +1365,15 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/assertion-error": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz",
+			"integrity": "sha512-jgsaNduz+ndvGyFt3uSuWqvy4lCnIJiovtouQN5JZHOKCS2QuhEdbcQHFhVksz2N2U9hXJo8odG7ETyWlEeuDw==",
+			"dev": true,
+			"engines": {
+				"node": "*"
+			}
+		},
 		"node_modules/autoprefixer": {
 			"version": "10.4.14",
 			"resolved": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.14.tgz",
@@ -1314,6 +1444,12 @@
 			"integrity": "sha512-u4cBQNepWxYA55FunZSM7wMi55yQaN0otnhhilNoWHq0MfOfJeQx0v0mRRpolGOExPjZcl6FtB0BB8Xkb88F0g==",
 			"optional": true
 		},
+		"node_modules/blueimp-md5": {
+			"version": "2.19.0",
+			"resolved": "https://registry.npmjs.org/blueimp-md5/-/blueimp-md5-2.19.0.tgz",
+			"integrity": "sha512-DRQrD6gJyy8FbiE4s+bDoXS9hiW3Vbx5uCdwvcCf3zLHL+Iv7LtGHLpr+GZV8rHG8tK766FGYBwRbu8pELTt+w==",
+			"dev": true
+		},
 		"node_modules/brace-expansion": {
 			"version": "1.1.11",
 			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
@@ -1410,6 +1546,15 @@
 				"node": ">=10.16.0"
 			}
 		},
+		"node_modules/cac": {
+			"version": "6.7.14",
+			"resolved": "https://registry.npmjs.org/cac/-/cac-6.7.14.tgz",
+			"integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==",
+			"dev": true,
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/callsites": {
 			"version": "3.1.0",
 			"resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -1446,6 +1591,24 @@
 				}
 			]
 		},
+		"node_modules/chai": {
+			"version": "4.3.7",
+			"resolved": "https://registry.npmjs.org/chai/-/chai-4.3.7.tgz",
+			"integrity": "sha512-HLnAzZ2iupm25PlN0xFreAlBA5zaBSv3og0DdeGA4Ar6h6rJ3A0rolRUKJhSF2V10GZKDgWF/VmAEsNWjCRB+A==",
+			"dev": true,
+			"dependencies": {
+				"assertion-error": "^1.1.0",
+				"check-error": "^1.0.2",
+				"deep-eql": "^4.1.2",
+				"get-func-name": "^2.0.0",
+				"loupe": "^2.3.1",
+				"pathval": "^1.1.1",
+				"type-detect": "^4.0.5"
+			},
+			"engines": {
+				"node": ">=4"
+			}
+		},
 		"node_modules/chalk": {
 			"version": "4.1.2",
 			"resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
@@ -1462,6 +1625,15 @@
 				"url": "https://github.com/chalk/chalk?sponsor=1"
 			}
 		},
+		"node_modules/check-error": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz",
+			"integrity": "sha512-BrgHpW9NURQgzoNyjfq0Wu6VFO6D7IZEmJNdtgNqpzGG8RuNFHt2jQxWlAs4HMe119chBnv+34syEZtc6IhLtA==",
+			"dev": true,
+			"engines": {
+				"node": "*"
+			}
+		},
 		"node_modules/chokidar": {
 			"version": "3.5.3",
 			"resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz",
@@ -1535,6 +1707,25 @@
 			"resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
 			"integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="
 		},
+		"node_modules/concordance": {
+			"version": "5.0.4",
+			"resolved": "https://registry.npmjs.org/concordance/-/concordance-5.0.4.tgz",
+			"integrity": "sha512-OAcsnTEYu1ARJqWVGwf4zh4JDfHZEaSNlNccFmt8YjB2l/n19/PF2viLINHc57vO4FKIAFl2FWASIGZZWZ2Kxw==",
+			"dev": true,
+			"dependencies": {
+				"date-time": "^3.1.0",
+				"esutils": "^2.0.3",
+				"fast-diff": "^1.2.0",
+				"js-string-escape": "^1.0.1",
+				"lodash": "^4.17.15",
+				"md5-hex": "^3.0.1",
+				"semver": "^7.3.2",
+				"well-known-symbols": "^2.0.0"
+			},
+			"engines": {
+				"node": ">=10.18.0 <11 || >=12.14.0 <13 || >=14"
+			}
+		},
 		"node_modules/cookie": {
 			"version": "0.5.0",
 			"resolved": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
@@ -1581,6 +1772,18 @@
 				"url": "https://opencollective.com/date-fns"
 			}
 		},
+		"node_modules/date-time": {
+			"version": "3.1.0",
+			"resolved": "https://registry.npmjs.org/date-time/-/date-time-3.1.0.tgz",
+			"integrity": "sha512-uqCUKXE5q1PNBXjPqvwhwJf9SwMoAHBgWJ6DcrnS5o+W2JOiIILl0JEdVD8SGujrNS02GGxgwAg2PN2zONgtjg==",
+			"dev": true,
+			"dependencies": {
+				"time-zone": "^1.0.0"
+			},
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/debug": {
 			"version": "4.3.4",
 			"resolved": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz",
@@ -1598,6 +1801,18 @@
 				}
 			}
 		},
+		"node_modules/deep-eql": {
+			"version": "4.1.3",
+			"resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-4.1.3.tgz",
+			"integrity": "sha512-WaEtAOpRA1MQ0eohqZjpGD8zdI0Ovsm8mmFhaDN8dvDZzyoUMcYDnf5Y6iu7HTXxf8JDS23qWa4a+hKCDyOPzw==",
+			"dev": true,
+			"dependencies": {
+				"type-detect": "^4.0.0"
+			},
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/deep-is": {
 			"version": "0.1.4",
 			"resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -2031,6 +2246,12 @@
 			"integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
 			"dev": true
 		},
+		"node_modules/fast-diff": {
+			"version": "1.2.0",
+			"resolved": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz",
+			"integrity": "sha512-xJuoT5+L99XlZ8twedaRf6Ax2TgQVxvgZOYoPKqZufmJib0tL2tegPBOZb1pVNgIhlqDlA0eO0c3wBvQcmzx4w==",
+			"dev": true
+		},
 		"node_modules/fast-glob": {
 			"version": "3.2.12",
 			"resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.2.12.tgz",
@@ -2170,6 +2391,15 @@
 			"resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz",
 			"integrity": "sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A=="
 		},
+		"node_modules/get-func-name": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz",
+			"integrity": "sha512-Hm0ixYtaSZ/V7C8FJrtZIuBBI+iSgL+1Aq82zSu8VQNB4S3Gk8e7Qs3VwBDJAhmRZcFqkl3tQu36g/Foh5I5ig==",
+			"dev": true,
+			"engines": {
+				"node": "*"
+			}
+		},
 		"node_modules/get-stream": {
 			"version": "6.0.1",
 			"resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz",
@@ -2504,6 +2734,15 @@
 				"url": "https://opencollective.com/js-sdsl"
 			}
 		},
+		"node_modules/js-string-escape": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/js-string-escape/-/js-string-escape-1.0.1.tgz",
+			"integrity": "sha512-Smw4xcfIQ5LVjAOuJCvN/zIodzA/BBSsluuoSykP+lUvScIi4U6RJLfwHet5cxFnCswUjISV8oAXaqaJDY3chg==",
+			"dev": true,
+			"engines": {
+				"node": ">= 0.8"
+			}
+		},
 		"node_modules/js-yaml": {
 			"version": "4.1.0",
 			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
@@ -2528,6 +2767,12 @@
 			"integrity": "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==",
 			"dev": true
 		},
+		"node_modules/jsonc-parser": {
+			"version": "3.2.0",
+			"resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.2.0.tgz",
+			"integrity": "sha512-gfFQZrcTc8CnKXp6Y4/CBT3fTc0OVuDofpre4aEeEpSBPV5X5v4+Vmx+8snU7RLPrNHPKSgLxGo9YuQzz20o+w==",
+			"dev": true
+		},
 		"node_modules/kleur": {
 			"version": "4.1.5",
 			"resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz",
@@ -2602,6 +2847,12 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/lodash": {
+			"version": "4.17.21",
+			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+			"integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
+			"dev": true
+		},
 		"node_modules/lodash.castarray": {
 			"version": "4.4.0",
 			"resolved": "https://registry.npmjs.org/lodash.castarray/-/lodash.castarray-4.4.0.tgz",
@@ -2620,6 +2871,15 @@
 			"integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==",
 			"dev": true
 		},
+		"node_modules/loupe": {
+			"version": "2.3.6",
+			"resolved": "https://registry.npmjs.org/loupe/-/loupe-2.3.6.tgz",
+			"integrity": "sha512-RaPMZKiMy8/JruncMU5Bt6na1eftNoo++R4Y+N2FrxkDVTrGvcyzFTsaGif4QTeKESheMGegbhw6iUAq+5A8zA==",
+			"dev": true,
+			"dependencies": {
+				"get-func-name": "^2.0.0"
+			}
+		},
 		"node_modules/lru-cache": {
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
@@ -2664,6 +2924,18 @@
 				"node": ">= 12"
 			}
 		},
+		"node_modules/md5-hex": {
+			"version": "3.0.1",
+			"resolved": "https://registry.npmjs.org/md5-hex/-/md5-hex-3.0.1.tgz",
+			"integrity": "sha512-BUiRtTtV39LIJwinWBjqVsU9xhdnz7/i889V859IBFpuqGAj6LuOvHv5XLbgZ2R7ptJoJaEcxkv88/h25T7Ciw==",
+			"dev": true,
+			"dependencies": {
+				"blueimp-md5": "^2.10.0"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/memory-pager": {
 			"version": "1.5.0",
 			"resolved": "https://registry.npmjs.org/memory-pager/-/memory-pager-1.5.0.tgz",
@@ -2758,6 +3030,18 @@
 				"mkdirp": "bin/cmd.js"
 			}
 		},
+		"node_modules/mlly": {
+			"version": "1.2.1",
+			"resolved": "https://registry.npmjs.org/mlly/-/mlly-1.2.1.tgz",
+			"integrity": "sha512-1aMEByaWgBPEbWV2BOPEMySRrzl7rIHXmQxam4DM8jVjalTQDjpN2ZKOLUrwyhfZQO7IXHml2StcHMhooDeEEQ==",
+			"dev": true,
+			"dependencies": {
+				"acorn": "^8.8.2",
+				"pathe": "^1.1.0",
+				"pkg-types": "^1.0.3",
+				"ufo": "^1.1.2"
+			}
+		},
 		"node_modules/mongodb": {
 			"version": "5.3.0",
 			"resolved": "https://registry.npmjs.org/mongodb/-/mongodb-5.3.0.tgz",
@@ -3104,6 +3388,21 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/pathe": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/pathe/-/pathe-1.1.0.tgz",
+			"integrity": "sha512-ODbEPR0KKHqECXW1GoxdDb+AZvULmXjVPy4rt+pGo2+TnjJTIPJQSVS6N63n8T2Ip+syHhbn52OewKicV0373w==",
+			"dev": true
+		},
+		"node_modules/pathval": {
+			"version": "1.1.1",
+			"resolved": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz",
+			"integrity": "sha512-Dp6zGqpTdETdR63lehJYPeIOqpiNBNtc7BpWSLrOje7UaIsE5aY92r/AunQA7rsXvet3lrJ3JnZX29UPTKXyKQ==",
+			"dev": true,
+			"engines": {
+				"node": "*"
+			}
+		},
 		"node_modules/picocolors": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz",
@@ -3136,6 +3435,17 @@
 				"node": ">= 6"
 			}
 		},
+		"node_modules/pkg-types": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.0.3.tgz",
+			"integrity": "sha512-nN7pYi0AQqJnoLPC9eHFQ8AcyaixBUOwvqc5TDnIKCMEE6I0y8P7OKA7fPexsXGCGxQDl/cmrLAp26LhcwxZ4A==",
+			"dev": true,
+			"dependencies": {
+				"jsonc-parser": "^3.2.0",
+				"mlly": "^1.2.0",
+				"pathe": "^1.1.0"
+			}
+		},
 		"node_modules/postcss": {
 			"version": "8.4.23",
 			"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.23.tgz",
@@ -3401,6 +3711,32 @@
 				}
 			}
 		},
+		"node_modules/pretty-format": {
+			"version": "27.5.1",
+			"resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz",
+			"integrity": "sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==",
+			"dev": true,
+			"dependencies": {
+				"ansi-regex": "^5.0.1",
+				"ansi-styles": "^5.0.0",
+				"react-is": "^17.0.1"
+			},
+			"engines": {
+				"node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0"
+			}
+		},
+		"node_modules/pretty-format/node_modules/ansi-styles": {
+			"version": "5.2.0",
+			"resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz",
+			"integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==",
+			"dev": true,
+			"engines": {
+				"node": ">=10"
+			},
+			"funding": {
+				"url": "https://github.com/chalk/ansi-styles?sponsor=1"
+			}
+		},
 		"node_modules/punycode": {
 			"version": "2.3.0",
 			"resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz",
@@ -3448,6 +3784,12 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/react-is": {
+			"version": "17.0.2",
+			"resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
+			"integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==",
+			"dev": true
+		},
 		"node_modules/read-cache": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz",
@@ -3656,6 +3998,12 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/siginfo": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
+			"integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+			"dev": true
+		},
 		"node_modules/signal-exit": {
 			"version": "3.0.7",
 			"resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
@@ -3744,6 +4092,18 @@
 				"memory-pager": "^1.0.2"
 			}
 		},
+		"node_modules/stackback": {
+			"version": "0.0.2",
+			"resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
+			"integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
+			"dev": true
+		},
+		"node_modules/std-env": {
+			"version": "3.3.3",
+			"resolved": "https://registry.npmjs.org/std-env/-/std-env-3.3.3.tgz",
+			"integrity": "sha512-Rz6yejtVyWnVjC1RFvNmYL10kgjC49EOghxWn0RFqlCHGFpQx+Xe7yW3I4ceK1SGrWIGMjD5Kbue8W/udkbMJg==",
+			"dev": true
+		},
 		"node_modules/streamsearch": {
 			"version": "1.1.0",
 			"resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz",
@@ -3798,6 +4158,18 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/strip-literal": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/strip-literal/-/strip-literal-1.0.1.tgz",
+			"integrity": "sha512-QZTsipNpa2Ppr6v1AmJHESqJ3Uz247MUS0OjrnnZjFAvEoWqxuyFuXn2xLgMtRnijJShAa1HL0gtJyUs7u7n3Q==",
+			"dev": true,
+			"dependencies": {
+				"acorn": "^8.8.2"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/antfu"
+			}
+		},
 		"node_modules/sucrase": {
 			"version": "3.32.0",
 			"resolved": "https://registry.npmjs.org/sucrase/-/sucrase-3.32.0.tgz",
@@ -4131,6 +4503,15 @@
 				"node": ">= 4.1.0"
 			}
 		},
+		"node_modules/time-zone": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/time-zone/-/time-zone-1.0.0.tgz",
+			"integrity": "sha512-TIsDdtKo6+XrPtiTm1ssmMngN1sAhyKnTO2kunQWqNPWIVvCm15Wmw4SWInwTVgJ5u/Tr04+8Ei9TNcw4x4ONA==",
+			"dev": true,
+			"engines": {
+				"node": ">=4"
+			}
+		},
 		"node_modules/tiny-glob": {
 			"version": "0.2.9",
 			"resolved": "https://registry.npmjs.org/tiny-glob/-/tiny-glob-0.2.9.tgz",
@@ -4141,6 +4522,30 @@
 				"globrex": "^0.1.2"
 			}
 		},
+		"node_modules/tinybench": {
+			"version": "2.5.0",
+			"resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.5.0.tgz",
+			"integrity": "sha512-kRwSG8Zx4tjF9ZiyH4bhaebu+EDz1BOx9hOigYHlUW4xxI/wKIUQUqo018UlU4ar6ATPBsaMrdbKZ+tmPdohFA==",
+			"dev": true
+		},
+		"node_modules/tinypool": {
+			"version": "0.5.0",
+			"resolved": "https://registry.npmjs.org/tinypool/-/tinypool-0.5.0.tgz",
+			"integrity": "sha512-paHQtnrlS1QZYKF/GnLoOM/DN9fqaGOFbCbxzAhwniySnzl9Ebk8w73/dd34DAhe/obUbPAOldTyYXQZxnPBPQ==",
+			"dev": true,
+			"engines": {
+				"node": ">=14.0.0"
+			}
+		},
+		"node_modules/tinyspy": {
+			"version": "2.1.0",
+			"resolved": "https://registry.npmjs.org/tinyspy/-/tinyspy-2.1.0.tgz",
+			"integrity": "sha512-7eORpyqImoOvkQJCSkL0d0mB4NHHIFAy4b1u8PHdDa7SjGS2njzl6/lyGoZLm+eyYEtlUmFGE0rFj66SWxZgQQ==",
+			"dev": true,
+			"engines": {
+				"node": ">=14.0.0"
+			}
+		},
 		"node_modules/to-regex-range": {
 			"version": "5.0.1",
 			"resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
@@ -4216,6 +4621,15 @@
 				"node": ">= 0.8.0"
 			}
 		},
+		"node_modules/type-detect": {
+			"version": "4.0.8",
+			"resolved": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz",
+			"integrity": "sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==",
+			"dev": true,
+			"engines": {
+				"node": ">=4"
+			}
+		},
 		"node_modules/type-fest": {
 			"version": "0.20.2",
 			"resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
@@ -4241,6 +4655,12 @@
 				"node": ">=4.2.0"
 			}
 		},
+		"node_modules/ufo": {
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/ufo/-/ufo-1.1.2.tgz",
+			"integrity": "sha512-TrY6DsjTQQgyS3E3dBaOXf0TpPD8u9FVrVYmKVegJuFw51n/YB9XPt+U6ydzFG5ZIN7+DIjPbNmXoBj9esYhgQ==",
+			"dev": true
+		},
 		"node_modules/undici": {
 			"version": "5.22.0",
 			"resolved": "https://registry.npmjs.org/undici/-/undici-5.22.0.tgz",
@@ -4395,6 +4815,29 @@
 				}
 			}
 		},
+		"node_modules/vite-node": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/vite-node/-/vite-node-0.31.0.tgz",
+			"integrity": "sha512-8x1x1LNuPvE2vIvkSB7c1mApX5oqlgsxzHQesYF7l5n1gKrEmrClIiZuOFbFDQcjLsmcWSwwmrWrcGWm9Fxc/g==",
+			"dev": true,
+			"dependencies": {
+				"cac": "^6.7.14",
+				"debug": "^4.3.4",
+				"mlly": "^1.2.0",
+				"pathe": "^1.1.0",
+				"picocolors": "^1.0.0",
+				"vite": "^3.0.0 || ^4.0.0"
+			},
+			"bin": {
+				"vite-node": "vite-node.mjs"
+			},
+			"engines": {
+				"node": ">=v14.18.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
 		"node_modules/vitefu": {
 			"version": "0.2.4",
 			"resolved": "https://registry.npmjs.org/vitefu/-/vitefu-0.2.4.tgz",
@@ -4409,6 +4852,84 @@
 				}
 			}
 		},
+		"node_modules/vitest": {
+			"version": "0.31.0",
+			"resolved": "https://registry.npmjs.org/vitest/-/vitest-0.31.0.tgz",
+			"integrity": "sha512-JwWJS9p3GU9GxkG7eBSmr4Q4x4bvVBSswaCFf1PBNHiPx00obfhHRJfgHcnI0ffn+NMlIh9QGvG75FlaIBdKGA==",
+			"dev": true,
+			"dependencies": {
+				"@types/chai": "^4.3.4",
+				"@types/chai-subset": "^1.3.3",
+				"@types/node": "*",
+				"@vitest/expect": "0.31.0",
+				"@vitest/runner": "0.31.0",
+				"@vitest/snapshot": "0.31.0",
+				"@vitest/spy": "0.31.0",
+				"@vitest/utils": "0.31.0",
+				"acorn": "^8.8.2",
+				"acorn-walk": "^8.2.0",
+				"cac": "^6.7.14",
+				"chai": "^4.3.7",
+				"concordance": "^5.0.4",
+				"debug": "^4.3.4",
+				"local-pkg": "^0.4.3",
+				"magic-string": "^0.30.0",
+				"pathe": "^1.1.0",
+				"picocolors": "^1.0.0",
+				"std-env": "^3.3.2",
+				"strip-literal": "^1.0.1",
+				"tinybench": "^2.4.0",
+				"tinypool": "^0.5.0",
+				"vite": "^3.0.0 || ^4.0.0",
+				"vite-node": "0.31.0",
+				"why-is-node-running": "^2.2.2"
+			},
+			"bin": {
+				"vitest": "vitest.mjs"
+			},
+			"engines": {
+				"node": ">=v14.18.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			},
+			"peerDependencies": {
+				"@edge-runtime/vm": "*",
+				"@vitest/browser": "*",
+				"@vitest/ui": "*",
+				"happy-dom": "*",
+				"jsdom": "*",
+				"playwright": "*",
+				"safaridriver": "*",
+				"webdriverio": "*"
+			},
+			"peerDependenciesMeta": {
+				"@edge-runtime/vm": {
+					"optional": true
+				},
+				"@vitest/browser": {
+					"optional": true
+				},
+				"@vitest/ui": {
+					"optional": true
+				},
+				"happy-dom": {
+					"optional": true
+				},
+				"jsdom": {
+					"optional": true
+				},
+				"playwright": {
+					"optional": true
+				},
+				"safaridriver": {
+					"optional": true
+				},
+				"webdriverio": {
+					"optional": true
+				}
+			}
+		},
 		"node_modules/webidl-conversions": {
 			"version": "7.0.0",
 			"resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
@@ -4432,6 +4953,15 @@
 			"integrity": "sha512-kyDivFZ7ZM0BVOUteVbDFhlRt7Ah/CSPwJdi8hBpkK7QLumUqdLtVfm/PX/hkcnrvr0i77fO5+TjZ94Pe+C9iw==",
 			"dev": true
 		},
+		"node_modules/well-known-symbols": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/well-known-symbols/-/well-known-symbols-2.0.0.tgz",
+			"integrity": "sha512-ZMjC3ho+KXo0BfJb7JgtQ5IBuvnShdlACNkKkdsqBmYw3bPAaJfPeYUo6tLUaT5tG/Gkh7xkpBhKRQ9e7pyg9Q==",
+			"dev": true,
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/whatwg-url": {
 			"version": "11.0.0",
 			"resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-11.0.0.tgz",
@@ -4459,6 +4989,22 @@
 				"node": ">= 8"
 			}
 		},
+		"node_modules/why-is-node-running": {
+			"version": "2.2.2",
+			"resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.2.2.tgz",
+			"integrity": "sha512-6tSwToZxTOcotxHeA+qGCq1mVzKR3CwcJGmVcY+QE8SHy6TnpFnh8PAvPNHYr7EcuVeG0QSMxtYCuO1ta/G/oA==",
+			"dev": true,
+			"dependencies": {
+				"siginfo": "^2.0.0",
+				"stackback": "0.0.2"
+			},
+			"bin": {
+				"why-is-node-running": "cli.js"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/word-wrap": {
 			"version": "1.2.3",
 			"resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz",

package.json

@@ -10,7 +10,8 @@
 		"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
 		"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
 		"lint": "prettier --plugin-search-dir . --check . && eslint .",
-		"format": "prettier --plugin-search-dir . --write ."
+		"format": "prettier --plugin-search-dir . --write .",
+		"test": "MONGODB_URL=mongodb://127.0.0.1:27017/ vitest"
 	},
 	"devDependencies": {
 		"@iconify-json/carbon": "^1.1.16",
@@ -32,7 +33,8 @@
 		"tslib": "^2.4.1",
 		"typescript": "^4.9.3",
 		"unplugin-icons": "^0.16.1",
-		"vite": "^4.0.0"
+		"vite": "^4.0.0",
+		"vitest": "^0.31.0"
 	},
 	"type": "module",
 	"dependencies": {

src/lib/server/database.ts

@@ -18,7 +18,7 @@ const client = new MongoClient(MONGODB_URL, {
 
 export const connectPromise = client.connect().catch(console.error);
 
-const db = client.db(MONGODB_DB_NAME);
+const db = client.db(MONGODB_DB_NAME + (import.meta.env.MODE === "test" ? "-test" : ""));
 
 const conversations = db.collection<Conversation>("conversations");
 const sharedConversations = db.collection<SharedConversation>("sharedConversations");

src/routes/login/callback/+server.ts

@@ -1,16 +1,8 @@
 import { redirect, error } from "@sveltejs/kit";
-import {
-	authCondition,
-	getOIDCUserData,
-	getRedirectURI,
-	refreshSessionCookie,
-	validateCsrfToken,
-} from "$lib/server/auth";
+import { getOIDCUserData, getRedirectURI, validateCsrfToken } from "$lib/server/auth";
 import { z } from "zod";
-import { collections } from "$lib/server/database";
-import { ObjectId } from "mongodb";
 import { base } from "$app/paths";
-import { DEFAULT_SETTINGS } from "$lib/types/Settings";
+import { updateUser } from "./updateUser";
 
 export async function GET({ url, locals, cookies }) {
 	const { error: errorName } = z
@@ -41,69 +33,7 @@ export async function GET({ url, locals, cookies }) {
 
 	const { userData } = await getOIDCUserData({ redirectURI: getRedirectURI(url) }, code);
 
-	const {
-		preferred_username: username,
-		name,
-		picture: avatarUrl,
-		sub: hfUserId,
-	} = z
-		.object({
-			preferred_username: z.string(),
-			name: z.string(),
-			picture: z.string(),
-			sub: z.string(),
-		})
-		.parse(userData);
-
-	const existingUser = await collections.users.findOne({ hfUserId });
-	let userId = existingUser?._id;
-
-	if (existingUser) {
-		// update existing user if any
-		await collections.users.updateOne(
-			{ _id: existingUser._id },
-			{ $set: { username, name, avatarUrl } }
-		);
-		// refresh session cookie
-		refreshSessionCookie(cookies, existingUser.sessionId);
-	} else {
-		// user doesn't exist yet, create a new one
-		const { insertedId } = await collections.users.insertOne({
-			_id: new ObjectId(),
-			createdAt: new Date(),
-			updatedAt: new Date(),
-			username,
-			name,
-			avatarUrl,
-			hfUserId,
-			sessionId: locals.sessionId,
-		});
-
-		userId = insertedId;
-
-		// update pre-existing settings
-		const { matchedCount } = await collections.settings.updateOne(authCondition(locals), {
-			$set: { userId, updatedAt: new Date() },
-			$unset: { sessionId: "" },
-		});
-
-		if (!matchedCount) {
-			// update settings if existing or create new default ones
-			await collections.settings.insertOne({
-				userId,
-				ethicsModalAcceptedAt: new Date(),
-				updatedAt: new Date(),
-				createdAt: new Date(),
-				...DEFAULT_SETTINGS,
-			});
-		}
-	}
-
-	// migrate pre-existing conversations
-	await collections.conversations.updateMany(authCondition(locals), {
-		$set: { userId },
-		$unset: { sessionId: "" },
-	});
+	await updateUser({ userData, locals, cookies });
 
 	throw redirect(302, base || "/");
 }

src/routes/login/callback/updateUser.spec.ts

@@ -0,0 +1,144 @@
+import { assert, it, describe, afterEach, vi, expect } from "vitest";
+import type { Cookies } from "@sveltejs/kit";
+import { collections } from "$lib/server/database";
+import { updateUser } from "./updateUser";
+import { ObjectId } from "mongodb";
+import { DEFAULT_SETTINGS } from "$lib/types/Settings";
+import { defaultModel } from "$lib/server/models";
+
+const userData = {
+	preferred_username: "new-username",
+	name: "name",
+	picture: "https://example.com/avatar.png",
+	sub: "1234567890",
+};
+
+const locals = {
+	userId: "1234567890",
+	sessionId: "1234567890",
+};
+
+// @ts-expect-error SvelteKit cookies dumb mock
+const cookiesMock: Cookies = {
+	set: vi.fn(),
+};
+
+const insertRandomUser = async () => {
+	const res = await collections.users.insertOne({
+		_id: new ObjectId(),
+		createdAt: new Date(),
+		updatedAt: new Date(),
+		username: "base-username",
+		name: userData.name,
+		avatarUrl: userData.picture,
+		hfUserId: userData.sub,
+		sessionId: locals.sessionId,
+	});
+
+	return res.insertedId;
+};
+
+const insertRandomConversations = async (count: number) => {
+	const res = await collections.conversations.insertMany(
+		new Array(count).fill(0).map(() => ({
+			_id: new ObjectId(),
+			title: "random title",
+			messages: [],
+			model: defaultModel.id,
+			createdAt: new Date(),
+			updatedAt: new Date(),
+			sessionId: locals.sessionId,
+		}))
+	);
+
+	return res.insertedIds;
+};
+
+describe("login", () => {
+	it("should update user if existing", async () => {
+		await insertRandomUser();
+
+		await updateUser({ userData, locals, cookies: cookiesMock });
+
+		const existingUser = await collections.users.findOne({ hfUserId: userData.sub });
+
+		assert.equal(existingUser?.name, userData.name);
+
+		expect(cookiesMock.set).toBeCalledTimes(1);
+	});
+
+	it("should migrate pre-existing conversations for new user", async () => {
+		const insertedId = await insertRandomUser();
+
+		await insertRandomConversations(2);
+
+		await updateUser({ userData, locals, cookies: cookiesMock });
+
+		const conversationCount = await collections.conversations.countDocuments({
+			userId: insertedId,
+			sessionId: { $exists: false },
+		});
+
+		assert.equal(conversationCount, 2);
+
+		await collections.conversations.deleteMany({ userId: insertedId });
+	});
+
+	it("should create default settings for new user", async () => {
+		await updateUser({ userData, locals, cookies: cookiesMock });
+
+		const user = await collections.users.findOne({ sessionId: locals.sessionId });
+
+		assert.exists(user);
+
+		const settings = await collections.settings.findOne({ userId: user?._id });
+
+		expect(settings).toMatchObject({
+			userId: user?._id,
+			updatedAt: expect.any(Date),
+			createdAt: expect.any(Date),
+			ethicsModalAcceptedAt: expect.any(Date),
+			...DEFAULT_SETTINGS,
+		});
+
+		await collections.settings.deleteOne({ userId: user?._id });
+	});
+
+	it("should migrate pre-existing settings for pre-existing user", async () => {
+		const { insertedId } = await collections.settings.insertOne({
+			sessionId: locals.sessionId,
+			ethicsModalAcceptedAt: new Date(),
+			updatedAt: new Date(),
+			createdAt: new Date(),
+			...DEFAULT_SETTINGS,
+			shareConversationsWithModelAuthors: false,
+		});
+
+		await updateUser({ userData, locals, cookies: cookiesMock });
+
+		const settings = await collections.settings.findOne({
+			_id: insertedId,
+			sessionId: { $exists: false },
+		});
+
+		assert.exists(settings);
+
+		const user = await collections.users.findOne({ hfUserId: userData.sub });
+
+		expect(settings).toMatchObject({
+			userId: user?._id,
+			updatedAt: expect.any(Date),
+			createdAt: expect.any(Date),
+			ethicsModalAcceptedAt: expect.any(Date),
+			...DEFAULT_SETTINGS,
+			shareConversationsWithModelAuthors: false,
+		});
+
+		await collections.settings.deleteOne({ userId: user?._id });
+	});
+});
+
+afterEach(async () => {
+	await collections.users.deleteMany({ hfUserId: userData.sub });
+	vi.clearAllMocks();
+});

src/routes/login/callback/updateUser.ts

@@ -0,0 +1,79 @@
+import { authCondition, refreshSessionCookie } from "$lib/server/auth";
+import { collections } from "$lib/server/database";
+import { ObjectId } from "mongodb";
+import { DEFAULT_SETTINGS } from "$lib/types/Settings";
+import { z } from "zod";
+import type { UserinfoResponse } from "openid-client";
+import type { Cookies } from "@sveltejs/kit";
+
+export async function updateUser(params: {
+	userData: UserinfoResponse;
+	locals: App.Locals;
+	cookies: Cookies;
+}) {
+	const { userData, locals, cookies } = params;
+
+	const {
+		preferred_username: username,
+		name,
+		picture: avatarUrl,
+		sub: hfUserId,
+	} = z
+		.object({
+			preferred_username: z.string(),
+			name: z.string(),
+			picture: z.string(),
+			sub: z.string(),
+		})
+		.parse(userData);
+
+	const existingUser = await collections.users.findOne({ hfUserId });
+	let userId = existingUser?._id;
+
+	if (existingUser) {
+		// update existing user if any
+		await collections.users.updateOne(
+			{ _id: existingUser._id },
+			{ $set: { username, name, avatarUrl } }
+		);
+		// refresh session cookie
+		refreshSessionCookie(cookies, existingUser.sessionId);
+	} else {
+		// user doesn't exist yet, create a new one
+		const { insertedId } = await collections.users.insertOne({
+			_id: new ObjectId(),
+			createdAt: new Date(),
+			updatedAt: new Date(),
+			username,
+			name,
+			avatarUrl,
+			hfUserId,
+			sessionId: locals.sessionId,
+		});
+
+		userId = insertedId;
+
+		// update pre-existing settings
+		const { matchedCount } = await collections.settings.updateOne(authCondition(locals), {
+			$set: { userId, updatedAt: new Date() },
+			$unset: { sessionId: "" },
+		});
+
+		if (!matchedCount) {
+			// create new default settings
+			await collections.settings.insertOne({
+				userId,
+				ethicsModalAcceptedAt: new Date(),
+				updatedAt: new Date(),
+				createdAt: new Date(),
+				...DEFAULT_SETTINGS,
+			});
+		}
+	}
+
+	// migrate pre-existing conversations
+	await collections.conversations.updateMany(authCondition(locals), {
+		$set: { userId },
+		$unset: { sessionId: "" },
+	});
+}