[BE-79] Build the users module

[yusuftomilola]

Overview

Users are the foundation for authentication, ownership, and RBAC. The frontend already has a users page and calls these endpoints.

API contract: the frontend already calls these endpoints — see frontend/lib/api/ and frontend/lib/query/keys.ts. Match the paths exactly so the existing UI works without changes.

GET   /users            list (paginated, searchable)
GET   /users/me         current user profile
PATCH /users/${id}/role     change a user's role

Tasks

• Create the User entity: id, email (unique), passwordHash, firstName, lastName, role, departmentId, avatarUrl, isActive, lastLoginAt, timestamps.
• Build module, service, and controller with full CRUD plus the endpoints above.
• Hash passwords with bcrypt; never return passwordHash in any response (use a serializer or explicit select).
• Add search and filtering by name, email, role, department, and active status.
• Add deactivate/reactivate rather than hard delete, so historical asset assignments stay intact.
• Generate a migration and write unit tests.

Acceptance Criteria

• All three endpoints above work and match the frontend's expectations.
• Password hashes never appear in a response (asserted by a test).
• A user cannot change their own role through the profile update path.

Dependencies

Foundation from [BE-75]; RBAC roles from [BE-81].

Notes for Contributors

The backend is being rebuilt from a clean NestJS skeleton — backend/src/ currently contains only app.module.ts, app.controller.ts, app.service.ts, and main.ts. Follow standard NestJS module structure (module / controller / service / dto / entities) and register your module in app.module.ts. Comment below to be assigned.

[kike-alt]

@kike-alt has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi, I'd like to work on this issue.

I've worked on blockchain and Web3 projects, including Stellar and Soroban smart contracts, alongside traditional full-stack web development. I'm comfortable moving between frontend, backend, and on-chain work.

I've looked into this issue closely and I'm confident in my ability to deliver a high-quality implementation here.

I'd appreciate being assigned to this issue and look forward to contributing.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @kike-alt to this issue.

[Codekill33]

@Codekill33 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi, I'd like to work on this issue. I have experience with NestJS, TypeScript, REST APIs, and authentication systems, and I'll build the users module with secure password handling, RBAC-aware role updates, search/filtering, soft deactivation, migrations, and comprehensive tests while keeping the existing frontend API contract intact. Kindly assign me to this issue.

Thank you!
ETA ~ 5 hours

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Codekill33 to this issue.

[drips-wave]

Congratulations, @kike-alt! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @kike-alt: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been completed by @kike-alt as part of the Stellar Wave Program's 7th Wave 🥳

😎 @kike-alt: You earned 200 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign | FWC26 campaign!

@kike-alt's PR #1239 was approved and merged by @yusuftomilola.

🏆 @kike-alt: You earned 40 FoxPoints for this contribution! Your current tier: Builder (1,132 total points). Track your full progress on GrantFox.

👏 Great work, @kike-alt! Keep contributing to DistinctCodes.