Merge pull request #2474 from automatisch/aut-1562

feat(api): GET /users responds with active and non-deleted users only

packages/backend/src/controllers/api/v1/users/get-users.ee.js

@@ -4,6 +4,7 @@ import User from '../../../../models/user.js';
 
 export default async (request, response) => {
   const usersQuery = User.query()
+    .where({ status: 'active' })
     .withGraphFetched({
       role: true,
     })

packages/backend/src/controllers/api/v1/users/get-users.ee.test.js

@@ -29,6 +29,11 @@ describe('GET /api/v1/users', () => {
       fullName: 'User 2',
     });
 
+    await createUser({
+      fullName: 'User 3',
+      status: 'invited',
+    });
+
     token = (await createApiToken()).token;
   });
 
@@ -45,4 +50,24 @@ describe('GET /api/v1/users', () => {
 
     expect(response.body).toStrictEqual(expectedResponsePayload);
   });
+
+  it('should return users data without soft deleted users', async () => {
+    const user = await createUser({
+      fullName: 'User 3',
+    });
+
+    await user.$query().delete();
+
+    const response = await request(app)
+      .get('/api/v1/users')
+      .set('x-api-token', token)
+      .expect(200);
+
+    const expectedResponsePayload = await getUsersMock(
+      [userOne, userTwo],
+      [userOneRole, userTwoRole]
+    );
+
+    expect(response.body).toStrictEqual(expectedResponsePayload);
+  });
 });