chore: tweak user api definition

proto/api/v2/memo_service.proto

@@ -131,30 +131,28 @@ message Memo {
   RowStatus row_status = 3;
 
   // The name of the creator.
-  // Format: users/{username}
+  // Format: users/{uid}
   string creator = 4;
 
-  int32 creator_id = 5;
-
-  google.protobuf.Timestamp create_time = 6;
+  google.protobuf.Timestamp create_time = 5;
 
-  google.protobuf.Timestamp update_time = 7;
+  google.protobuf.Timestamp update_time = 6;
 
-  google.protobuf.Timestamp display_time = 8;
+  google.protobuf.Timestamp display_time = 78;
 
-  string content = 9;
+  string content = 8;
 
-  Visibility visibility = 10;
+  Visibility visibility = 9;
 
-  bool pinned = 11;
+  bool pinned = 10;
 
-  optional int32 parent_id = 12 [(google.api.field_behavior) = OUTPUT_ONLY];
+  optional int32 parent_id = 11 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  repeated Resource resources = 13 [(google.api.field_behavior) = OUTPUT_ONLY];
+  repeated Resource resources = 12 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  repeated MemoRelation relations = 14 [(google.api.field_behavior) = OUTPUT_ONLY];
+  repeated MemoRelation relations = 13 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  repeated Reaction reactions = 15 [(google.api.field_behavior) = OUTPUT_ONLY];
+  repeated Reaction reactions = 14 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 message CreateMemoRequest {
@@ -176,7 +174,7 @@ message ListMemosRequest {
   string page_token = 2;
 
   // Filter is used to filter memos returned in the list.
-  // Format: "creator == users/{username} && visibilities == ['PUBLIC', 'PROTECTED']"
+  // Format: "creator == users/{uid} && visibilities == ['PUBLIC', 'PROTECTED']"
   string filter = 3;
 }
 

proto/api/v2/reaction_service.proto

@@ -7,6 +7,8 @@ option go_package = "gen/api/v2";
 message Reaction {
   int32 id = 1;
 
+  // The name of the creator.
+  // Format: users/{uid}
   string creator = 2;
 
   string content_id = 3;

proto/api/v2/tag_service.proto

@@ -37,7 +37,7 @@ service TagService {
 message Tag {
   string name = 1;
   // The creator of tags.
-  // Format: users/{username}
+  // Format: users/{uid}
   string creator = 2;
 }
 
@@ -57,7 +57,7 @@ message BatchUpsertTagResponse {}
 
 message ListTagsRequest {
   // The creator of tags.
-  // Format: users/{username}
+  // Format: users/{uid}
   string user = 1;
 }
 
@@ -67,7 +67,7 @@ message ListTagsResponse {
 
 message RenameTagRequest {
   // The creator of tags.
-  // Format: users/{username}
+  // Format: users/{uid}
   string user = 1;
   string old_name = 2;
   string new_name = 3;
@@ -85,7 +85,7 @@ message DeleteTagResponse {}
 
 message GetTagSuggestionsRequest {
   // The creator of tags.
-  // Format: users/{username}
+  // Format: users/{uid}
   string user = 1;
 }
 

proto/api/v2/user_service.proto

@@ -17,6 +17,11 @@ service UserService {
     option (google.api.http) = {get: "/api/v2/users"};
   }
 
+  // SearchUsers searches users by filter.
+  rpc SearchUsers(SearchUsersRequest) returns (SearchUsersResponse) {
+    option (google.api.http) = {get: "/api/v2/users/search"};
+  }
+
   // GetUser gets a user by name.
   rpc GetUser(GetUserRequest) returns (GetUserResponse) {
     option (google.api.http) = {get: "/api/v2/{name=users/*}"};
@@ -86,9 +91,10 @@ service UserService {
 
 message User {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 
+  // The system generated uid of the user.
   int32 id = 2;
 
   enum Role {
@@ -124,9 +130,17 @@ message ListUsersResponse {
   repeated User users = 1;
 }
 
+message SearchUsersRequest {
+  string filter = 1;
+}
+
+message SearchUsersResponse {
+  repeated User users = 1;
+}
+
 message GetUserRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 }
 
@@ -154,7 +168,7 @@ message UpdateUserResponse {
 
 message DeleteUserRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 }
 
@@ -162,7 +176,7 @@ message DeleteUserResponse {}
 
 message UserSetting {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
   // The preferred locale of the user.
   string locale = 2;
@@ -176,7 +190,7 @@ message UserSetting {
 
 message GetUserSettingRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 }
 
@@ -203,7 +217,7 @@ message UserAccessToken {
 
 message ListUserAccessTokensRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 }
 
@@ -213,7 +227,7 @@ message ListUserAccessTokensResponse {
 
 message CreateUserAccessTokenRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
 
   string description = 2;
@@ -227,7 +241,7 @@ message CreateUserAccessTokenResponse {
 
 message DeleteUserAccessTokenRequest {
   // The name of the user.
-  // Format: users/{username}
+  // Format: users/{uid}
   string name = 1;
   // access_token is the access token to delete.
   string access_token = 2;

proto/gen/api/v2/README.md

@@ -35,6 +35,8 @@
     - [ListUserAccessTokensResponse](#memos-api-v2-ListUserAccessTokensResponse)
     - [ListUsersRequest](#memos-api-v2-ListUsersRequest)
     - [ListUsersResponse](#memos-api-v2-ListUsersResponse)
+    - [SearchUsersRequest](#memos-api-v2-SearchUsersRequest)
+    - [SearchUsersResponse](#memos-api-v2-SearchUsersResponse)
     - [UpdateUserRequest](#memos-api-v2-UpdateUserRequest)
     - [UpdateUserResponse](#memos-api-v2-UpdateUserResponse)
     - [UpdateUserSettingRequest](#memos-api-v2-UpdateUserSettingRequest)
@@ -387,7 +389,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 | description | [string](#string) |  |  |
 | expires_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) | optional |  |
 
@@ -449,7 +451,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 | access_token | [string](#string) |  | access_token is the access token to delete. |
 
 
@@ -475,7 +477,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 
 
 
@@ -500,7 +502,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 
 
 
@@ -530,7 +532,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 
 
 
@@ -560,7 +562,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 
 
 
@@ -607,6 +609,36 @@ Used internally for obfuscating the page token.
 
 
 
+<a name="memos-api-v2-SearchUsersRequest"></a>
+
+### SearchUsersRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| filter | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="memos-api-v2-SearchUsersResponse"></a>
+
+### SearchUsersResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| users | [User](#memos-api-v2-User) | repeated |  |
+
+
+
+
+
+
 <a name="memos-api-v2-UpdateUserRequest"></a>
 
 ### UpdateUserRequest
@@ -677,8 +709,8 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
-| id | [int32](#int32) |  |  |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
+| id | [int32](#int32) |  | The system generated uid of the user. |
 | role | [User.Role](#memos-api-v2-User-Role) |  |  |
 | username | [string](#string) |  |  |
 | email | [string](#string) |  |  |
@@ -721,7 +753,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| name | [string](#string) |  | The name of the user. Format: users/{username} |
+| name | [string](#string) |  | The name of the user. Format: users/{uid} |
 | locale | [string](#string) |  | The preferred locale of the user. |
 | appearance | [string](#string) |  | The preferred appearance of the user. |
 | memo_visibility | [string](#string) |  | The default visibility of the memo. |
@@ -760,6 +792,7 @@ Used internally for obfuscating the page token.
 | Method Name | Request Type | Response Type | Description |
 | ----------- | ------------ | ------------- | ------------|
 | ListUsers | [ListUsersRequest](#memos-api-v2-ListUsersRequest) | [ListUsersResponse](#memos-api-v2-ListUsersResponse) | ListUsers returns a list of users. |
+| SearchUsers | [SearchUsersRequest](#memos-api-v2-SearchUsersRequest) | [SearchUsersResponse](#memos-api-v2-SearchUsersResponse) | SearchUsers searches users by filter. |
 | GetUser | [GetUserRequest](#memos-api-v2-GetUserRequest) | [GetUserResponse](#memos-api-v2-GetUserResponse) | GetUser gets a user by name. |
 | CreateUser | [CreateUserRequest](#memos-api-v2-CreateUserRequest) | [CreateUserResponse](#memos-api-v2-CreateUserResponse) | CreateUser creates a new user. |
 | UpdateUser | [UpdateUserRequest](#memos-api-v2-UpdateUserRequest) | [UpdateUserResponse](#memos-api-v2-UpdateUserResponse) | UpdateUser updates a user. |
@@ -1240,7 +1273,7 @@ Used internally for obfuscating the page token.
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
 | id | [int32](#int32) |  |  |
-| creator | [string](#string) |  |  |
+| creator | [string](#string) |  | The name of the creator. Format: users/{uid} |
 | content_id | [string](#string) |  |  |
 | reaction_type | [Reaction.Type](#memos-api-v2-Reaction-Type) |  |  |
 
@@ -1896,7 +1929,7 @@ Used internally for obfuscating the page token.
 | ----- | ---- | ----- | ----------- |
 | page_size | [int32](#int32) |  | The maximum number of memos to return. |
 | page_token | [string](#string) |  | A page token, received from a previous `ListMemos` call. Provide this to retrieve the subsequent page. |
-| filter | [string](#string) |  | Filter is used to filter memos returned in the list. Format: &#34;creator == users/{username} &amp;&amp; visibilities == [&#39;PUBLIC&#39;, &#39;PROTECTED&#39;]&#34; |
+| filter | [string](#string) |  | Filter is used to filter memos returned in the list. Format: &#34;creator == users/{uid} &amp;&amp; visibilities == [&#39;PUBLIC&#39;, &#39;PROTECTED&#39;]&#34; |
 
 
 
@@ -1930,8 +1963,7 @@ Used internally for obfuscating the page token.
 | id | [int32](#int32) |  | id is the system generated unique identifier. |
 | name | [string](#string) |  | name is the user provided name. |
 | row_status | [RowStatus](#memos-api-v2-RowStatus) |  |  |
-| creator | [string](#string) |  | The name of the creator. Format: users/{username} |
-| creator_id | [int32](#int32) |  |  |
+| creator | [string](#string) |  | The name of the creator. Format: users/{uid} |
 | create_time | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  |  |
 | update_time | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  |  |
 | display_time | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  |  |
@@ -2176,7 +2208,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| user | [string](#string) |  | The creator of tags. Format: users/{username} |
+| user | [string](#string) |  | The creator of tags. Format: users/{uid} |
 
 
 
@@ -2206,7 +2238,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| user | [string](#string) |  | The creator of tags. Format: users/{username} |
+| user | [string](#string) |  | The creator of tags. Format: users/{uid} |
 
 
 
@@ -2236,7 +2268,7 @@ Used internally for obfuscating the page token.
 
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
-| user | [string](#string) |  | The creator of tags. Format: users/{username} |
+| user | [string](#string) |  | The creator of tags. Format: users/{uid} |
 | old_name | [string](#string) |  |  |
 | new_name | [string](#string) |  |  |
 
@@ -2269,7 +2301,7 @@ Used internally for obfuscating the page token.
 | Field | Type | Label | Description |
 | ----- | ---- | ----- | ----------- |
 | name | [string](#string) |  |  |
-| creator | [string](#string) |  | The creator of tags. Format: users/{username} |
+| creator | [string](#string) |  | The creator of tags. Format: users/{uid} |
 
 
 

proto/gen/api/v2/reaction_service.pb.go

@@ -104,7 +104,9 @@ type Reaction struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Id           int32         `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	Id int32 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	// The name of the creator.
+	// Format: users/{uid}
 	Creator      string        `protobuf:"bytes,2,opt,name=creator,proto3" json:"creator,omitempty"`
 	ContentId    string        `protobuf:"bytes,3,opt,name=content_id,json=contentId,proto3" json:"content_id,omitempty"`
 	ReactionType Reaction_Type `protobuf:"varint,4,opt,name=reaction_type,json=reactionType,proto3,enum=memos.api.v2.Reaction_Type" json:"reaction_type,omitempty"`

proto/gen/api/v2/tag_service.pb.go

@@ -28,7 +28,7 @@ type Tag struct {
 
 	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
 	// The creator of tags.
-	// Format: users/{username}
+	// Format: users/{uid}
 	Creator string `protobuf:"bytes,2,opt,name=creator,proto3" json:"creator,omitempty"`
 }
 
@@ -263,7 +263,7 @@ type ListTagsRequest struct {
 	unknownFields protoimpl.UnknownFields
 
 	// The creator of tags.
-	// Format: users/{username}
+	// Format: users/{uid}
 	User string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
 }
 
@@ -359,7 +359,7 @@ type RenameTagRequest struct {
 	unknownFields protoimpl.UnknownFields
 
 	// The creator of tags.
-	// Format: users/{username}
+	// Format: users/{uid}
 	User    string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
 	OldName string `protobuf:"bytes,2,opt,name=old_name,json=oldName,proto3" json:"old_name,omitempty"`
 	NewName string `protobuf:"bytes,3,opt,name=new_name,json=newName,proto3" json:"new_name,omitempty"`
@@ -556,7 +556,7 @@ type GetTagSuggestionsRequest struct {
 	unknownFields protoimpl.UnknownFields
 
 	// The creator of tags.
-	// Format: users/{username}
+	// Format: users/{uid}
 	User string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
 }
 

proto/gen/api/v2/user_service.pb.gw.go

@@ -49,6 +49,42 @@ func local_request_UserService_ListUsers_0(ctx context.Context, marshaler runtim
 
 }
 
+var (
+	filter_UserService_SearchUsers_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+)
+
+func request_UserService_SearchUsers_0(ctx context.Context, marshaler runtime.Marshaler, client UserServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SearchUsersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_UserService_SearchUsers_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.SearchUsers(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func local_request_UserService_SearchUsers_0(ctx context.Context, marshaler runtime.Marshaler, server UserServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SearchUsersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_UserService_SearchUsers_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := server.SearchUsers(ctx, &protoReq)
+	return msg, metadata, err
+
+}
+
 func request_UserService_GetUser_0(ctx context.Context, marshaler runtime.Marshaler, client UserServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
 	var protoReq GetUserRequest
 	var metadata runtime.ServerMetadata
@@ -662,6 +698,31 @@ func RegisterUserServiceHandlerServer(ctx context.Context, mux *runtime.ServeMux
 
 	})
 
+	mux.Handle("GET", pattern_UserService_SearchUsers_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		var err error
+		var annotatedContext context.Context
+		annotatedContext, err = runtime.AnnotateIncomingContext(ctx, mux, req, "/memos.api.v2.UserService/SearchUsers", runtime.WithHTTPPathPattern("/api/v2/users/search"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_UserService_SearchUsers_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_UserService_SearchUsers_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
 	mux.Handle("GET", pattern_UserService_GetUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
 		ctx, cancel := context.WithCancel(req.Context())
 		defer cancel()
@@ -950,6 +1011,28 @@ func RegisterUserServiceHandlerClient(ctx context.Context, mux *runtime.ServeMux
 
 	})
 
+	mux.Handle("GET", pattern_UserService_SearchUsers_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		var err error
+		var annotatedContext context.Context
+		annotatedContext, err = runtime.AnnotateContext(ctx, mux, req, "/memos.api.v2.UserService/SearchUsers", runtime.WithHTTPPathPattern("/api/v2/users/search"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_UserService_SearchUsers_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_UserService_SearchUsers_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
 	mux.Handle("GET", pattern_UserService_GetUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
 		ctx, cancel := context.WithCancel(req.Context())
 		defer cancel()
@@ -1154,6 +1237,8 @@ func RegisterUserServiceHandlerClient(ctx context.Context, mux *runtime.ServeMux
 var (
 	pattern_UserService_ListUsers_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v2", "users"}, ""))
 
+	pattern_UserService_SearchUsers_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v2", "users", "search"}, ""))
+
 	pattern_UserService_GetUser_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 2, 5, 3}, []string{"api", "v2", "users", "name"}, ""))
 
 	pattern_UserService_CreateUser_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v2", "users"}, ""))
@@ -1176,6 +1261,8 @@ var (
 var (
 	forward_UserService_ListUsers_0 = runtime.ForwardResponseMessage
 
+	forward_UserService_SearchUsers_0 = runtime.ForwardResponseMessage
+
 	forward_UserService_GetUser_0 = runtime.ForwardResponseMessage
 
 	forward_UserService_CreateUser_0 = runtime.ForwardResponseMessage

proto/gen/api/v2/user_service_grpc.pb.go

@@ -20,6 +20,7 @@ const _ = grpc.SupportPackageIsVersion7
 
 const (
 	UserService_ListUsers_FullMethodName             = "/memos.api.v2.UserService/ListUsers"
+	UserService_SearchUsers_FullMethodName           = "/memos.api.v2.UserService/SearchUsers"
 	UserService_GetUser_FullMethodName               = "/memos.api.v2.UserService/GetUser"
 	UserService_CreateUser_FullMethodName            = "/memos.api.v2.UserService/CreateUser"
 	UserService_UpdateUser_FullMethodName            = "/memos.api.v2.UserService/UpdateUser"
@@ -37,6 +38,8 @@ const (
 type UserServiceClient interface {
 	// ListUsers returns a list of users.
 	ListUsers(ctx context.Context, in *ListUsersRequest, opts ...grpc.CallOption) (*ListUsersResponse, error)
+	// SearchUsers searches users by filter.
+	SearchUsers(ctx context.Context, in *SearchUsersRequest, opts ...grpc.CallOption) (*SearchUsersResponse, error)
 	// GetUser gets a user by name.
 	GetUser(ctx context.Context, in *GetUserRequest, opts ...grpc.CallOption) (*GetUserResponse, error)
 	// CreateUser creates a new user.
@@ -74,6 +77,15 @@ func (c *userServiceClient) ListUsers(ctx context.Context, in *ListUsersRequest,
 	return out, nil
 }
 
+func (c *userServiceClient) SearchUsers(ctx context.Context, in *SearchUsersRequest, opts ...grpc.CallOption) (*SearchUsersResponse, error) {
+	out := new(SearchUsersResponse)
+	err := c.cc.Invoke(ctx, UserService_SearchUsers_FullMethodName, in, out, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 func (c *userServiceClient) GetUser(ctx context.Context, in *GetUserRequest, opts ...grpc.CallOption) (*GetUserResponse, error) {
 	out := new(GetUserResponse)
 	err := c.cc.Invoke(ctx, UserService_GetUser_FullMethodName, in, out, opts...)
@@ -161,6 +173,8 @@ func (c *userServiceClient) DeleteUserAccessToken(ctx context.Context, in *Delet
 type UserServiceServer interface {
 	// ListUsers returns a list of users.
 	ListUsers(context.Context, *ListUsersRequest) (*ListUsersResponse, error)
+	// SearchUsers searches users by filter.
+	SearchUsers(context.Context, *SearchUsersRequest) (*SearchUsersResponse, error)
 	// GetUser gets a user by name.
 	GetUser(context.Context, *GetUserRequest) (*GetUserResponse, error)
 	// CreateUser creates a new user.
@@ -189,6 +203,9 @@ type UnimplementedUserServiceServer struct {
 func (UnimplementedUserServiceServer) ListUsers(context.Context, *ListUsersRequest) (*ListUsersResponse, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method ListUsers not implemented")
 }
+func (UnimplementedUserServiceServer) SearchUsers(context.Context, *SearchUsersRequest) (*SearchUsersResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method SearchUsers not implemented")
+}
 func (UnimplementedUserServiceServer) GetUser(context.Context, *GetUserRequest) (*GetUserResponse, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method GetUser not implemented")
 }
@@ -247,6 +264,24 @@ func _UserService_ListUsers_Handler(srv interface{}, ctx context.Context, dec fu
 	return interceptor(ctx, in, info, handler)
 }
 
+func _UserService_SearchUsers_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SearchUsersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(UserServiceServer).SearchUsers(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: UserService_SearchUsers_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(UserServiceServer).SearchUsers(ctx, req.(*SearchUsersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 func _UserService_GetUser_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(GetUserRequest)
 	if err := dec(in); err != nil {
@@ -420,6 +455,10 @@ var UserService_ServiceDesc = grpc.ServiceDesc{
 			MethodName: "ListUsers",
 			Handler:    _UserService_ListUsers_Handler,
 		},
+		{
+			MethodName: "SearchUsers",
+			Handler:    _UserService_SearchUsers_Handler,
+		},
 		{
 			MethodName: "GetUser",
 			Handler:    _UserService_GetUser_Handler,

server/route/api/v2/apidocs.swagger.yaml

@@ -200,7 +200,7 @@ paths:
         - name: filter
           description: |-
             Filter is used to filter memos returned in the list.
-            Format: "creator == users/{username} && visibilities == ['PUBLIC', 'PROTECTED']"
+            Format: "creator == users/{uid} && visibilities == ['PUBLIC', 'PROTECTED']"
           in: query
           required: false
           type: string
@@ -424,6 +424,9 @@ paths:
           type: integer
           format: int32
         - name: reaction.creator
+          description: |-
+            The name of the creator.
+            Format: users/{uid}
           in: query
           required: false
           type: string
@@ -605,10 +608,7 @@ paths:
                 type: string
                 title: |-
                   The name of the creator.
-                  Format: users/{username}
-              creatorId:
-                type: integer
-                format: int32
+                  Format: users/{uid}
               createTime:
                 type: string
                 format: date-time
@@ -840,7 +840,7 @@ paths:
         - name: user
           description: |-
             The creator of tags.
-            Format: users/{username}
+            Format: users/{uid}
           in: query
           required: false
           type: string
@@ -866,7 +866,7 @@ paths:
         - name: tag.creator
           description: |-
             The creator of tags.
-            Format: users/{username}
+            Format: users/{uid}
           in: query
           required: false
           type: string
@@ -908,7 +908,7 @@ paths:
         - name: user
           description: |-
             The creator of tags.
-            Format: users/{username}
+            Format: users/{uid}
           in: query
           required: false
           type: string
@@ -948,7 +948,7 @@ paths:
         - name: user
           description: |-
             The creator of tags.
-            Format: users/{username}
+            Format: users/{uid}
           in: query
           required: false
           type: string
@@ -997,6 +997,26 @@ paths:
             $ref: '#/definitions/v2User'
       tags:
         - UserService
+  /api/v2/users/search:
+    get:
+      summary: SearchUsers searches users by filter.
+      operationId: UserService_SearchUsers
+      responses:
+        "200":
+          description: A successful response.
+          schema:
+            $ref: '#/definitions/v2SearchUsersResponse'
+        default:
+          description: An unexpected error response.
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+      parameters:
+        - name: filter
+          in: query
+          required: false
+          type: string
+      tags:
+        - UserService
   /api/v2/webhooks:
     get:
       summary: ListWebhooks returns a list of webhooks.
@@ -1282,7 +1302,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1305,7 +1325,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1329,7 +1349,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1352,7 +1372,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1381,7 +1401,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1410,7 +1430,7 @@ paths:
         - name: name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1434,7 +1454,7 @@ paths:
         - name: setting.name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1476,7 +1496,7 @@ paths:
         - name: user.name
           description: |-
             The name of the user.
-            Format: users/{username}
+            Format: users/{uid}
           in: path
           required: true
           type: string
@@ -1490,6 +1510,7 @@ paths:
               id:
                 type: integer
                 format: int32
+                description: The system generated uid of the user.
               role:
                 $ref: '#/definitions/UserRole'
               username:
@@ -1597,6 +1618,9 @@ definitions:
         format: int32
       creator:
         type: string
+        title: |-
+          The name of the creator.
+          Format: users/{uid}
       contentId:
         type: string
       reactionType:
@@ -1632,7 +1656,7 @@ definitions:
         type: string
         title: |-
           The name of the user.
-          Format: users/{username}
+          Format: users/{uid}
       locale:
         type: string
         description: The preferred locale of the user.
@@ -2034,10 +2058,7 @@ definitions:
         type: string
         title: |-
           The name of the creator.
-          Format: users/{username}
-      creatorId:
-        type: integer
-        format: int32
+          Format: users/{uid}
       createTime:
         type: string
         format: date-time
@@ -2123,6 +2144,14 @@ definitions:
       memoId:
         type: integer
         format: int32
+  v2SearchUsersResponse:
+    type: object
+    properties:
+      users:
+        type: array
+        items:
+          type: object
+          $ref: '#/definitions/v2User'
   v2SetMemoRelationsResponse:
     type: object
   v2SetMemoResourcesResponse:
@@ -2158,7 +2187,7 @@ definitions:
         type: string
         title: |-
           The creator of tags.
-          Format: users/{username}
+          Format: users/{uid}
   v2UpdateInboxResponse:
     type: object
     properties:
@@ -2211,10 +2240,11 @@ definitions:
         type: string
         title: |-
           The name of the user.
-          Format: users/{username}
+          Format: users/{uid}
       id:
         type: integer
         format: int32
+        description: The system generated uid of the user.
       role:
         $ref: '#/definitions/UserRole'
       username:

server/route/api/v2/memo_service.go

@@ -341,9 +341,13 @@ func (s *APIV2Service) CreateMemoComment(ctx context.Context, request *apiv2pb.C
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to create memo relation")
 	}
-	if memo.Visibility != apiv2pb.Visibility_PRIVATE && memo.CreatorId != relatedMemo.CreatorID {
+	creatorID, err := ExtractUserIDFromName(memo.Creator)
+	if err != nil {
+		return nil, status.Errorf(codes.InvalidArgument, "invalid memo creator")
+	}
+	if memo.Visibility != apiv2pb.Visibility_PRIVATE && creatorID != relatedMemo.CreatorID {
 		activity, err := s.Store.CreateActivity(ctx, &store.Activity{
-			CreatorID: memo.CreatorId,
+			CreatorID: creatorID,
 			Type:      store.ActivityTypeMemoComment,
 			Level:     store.ActivityLevelInfo,
 			Payload: &storepb.ActivityPayload{
@@ -357,7 +361,7 @@ func (s *APIV2Service) CreateMemoComment(ctx context.Context, request *apiv2pb.C
 			return nil, status.Errorf(codes.Internal, "failed to create activity")
 		}
 		if _, err := s.Store.CreateInbox(ctx, &store.Inbox{
-			SenderID:   memo.CreatorId,
+			SenderID:   creatorID,
 			ReceiverID: relatedMemo.CreatorID,
 			Status:     store.UNREAD,
 			Message: &storepb.InboxMessage{
@@ -409,12 +413,12 @@ func (s *APIV2Service) ListMemoComments(ctx context.Context, request *apiv2pb.Li
 }
 
 func (s *APIV2Service) GetUserMemosStats(ctx context.Context, request *apiv2pb.GetUserMemosStatsRequest) (*apiv2pb.GetUserMemosStatsResponse, error) {
-	username, err := ExtractUsernameFromName(request.Name)
+	userID, err := ExtractUserIDFromName(request.Name)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username")
+		return nil, errors.Wrap(err, "invalid user name")
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user")
@@ -534,8 +538,7 @@ func (s *APIV2Service) convertMemoFromStore(ctx context.Context, memo *store.Mem
 		Id:          int32(memo.ID),
 		Name:        memo.ResourceName,
 		RowStatus:   convertRowStatusFromStore(memo.RowStatus),
-		Creator:     fmt.Sprintf("%s%s", UserNamePrefix, creator.Username),
-		CreatorId:   int32(memo.CreatorID),
+		Creator:     fmt.Sprintf("%s%d", UserNamePrefix, creator.ID),
 		CreateTime:  timestamppb.New(time.Unix(memo.CreatedTs, 0)),
 		UpdateTime:  timestamppb.New(time.Unix(memo.UpdatedTs, 0)),
 		DisplayTime: timestamppb.New(time.Unix(displayTs, 0)),
@@ -653,12 +656,12 @@ func (s *APIV2Service) buildMemoFindWithFilter(ctx context.Context, find *store.
 			}
 		}
 		if filter.Creator != nil {
-			username, err := ExtractUsernameFromName(*filter.Creator)
+			userID, err := ExtractUserIDFromName(*filter.Creator)
 			if err != nil {
-				return status.Errorf(codes.InvalidArgument, "invalid creator name")
+				return errors.Wrap(err, "invalid user name")
 			}
 			user, err := s.Store.GetUser(ctx, &store.FindUser{
-				Username: &username,
+				ID: &userID,
 			})
 			if err != nil {
 				return status.Errorf(codes.Internal, "failed to get user")
@@ -731,11 +734,11 @@ func parseListMemosFilter(expression string) (*ListMemosFilter, error) {
 		return nil, err
 	}
 	callExpr := expr.GetExpr().GetCallExpr()
-	findField(callExpr, filter)
+	findListMemosField(callExpr, filter)
 	return filter, nil
 }
 
-func findField(callExpr *expr.Expr_Call, filter *ListMemosFilter) {
+func findListMemosField(callExpr *expr.Expr_Call, filter *ListMemosFilter) {
 	if len(callExpr.Args) == 2 {
 		idExpr := callExpr.Args[0].GetIdentExpr()
 		if idExpr != nil {
@@ -775,7 +778,7 @@ func findField(callExpr *expr.Expr_Call, filter *ListMemosFilter) {
 	for _, arg := range callExpr.Args {
 		callExpr := arg.GetCallExpr()
 		if callExpr != nil {
-			findField(callExpr, filter)
+			findListMemosField(callExpr, filter)
 		}
 	}
 }
@@ -796,31 +799,41 @@ func (s *APIV2Service) DispatchMemoDeletedWebhook(ctx context.Context, memo *api
 }
 
 func (s *APIV2Service) dispatchMemoRelatedWebhook(ctx context.Context, memo *apiv2pb.Memo, activityType string) error {
+	creatorID, err := ExtractUserIDFromName(memo.Creator)
+	if err != nil {
+		return status.Errorf(codes.InvalidArgument, "invalid memo creator")
+	}
 	webhooks, err := s.Store.ListWebhooks(ctx, &store.FindWebhook{
-		CreatorID: &memo.CreatorId,
+		CreatorID: &creatorID,
 	})
 	if err != nil {
 		return err
 	}
 	for _, hook := range webhooks {
-		payload := convertMemoToWebhookPayload(memo)
+		payload, err := convertMemoToWebhookPayload(memo)
+		if err != nil {
+			return errors.Wrap(err, "failed to convert memo to webhook payload")
+		}
 		payload.ActivityType = activityType
 		payload.URL = hook.Url
-		err := webhook.Post(*payload)
-		if err != nil {
+		if err := webhook.Post(*payload); err != nil {
 			return errors.Wrap(err, "failed to post webhook")
 		}
 	}
 	return nil
 }
 
-func convertMemoToWebhookPayload(memo *apiv2pb.Memo) *webhook.WebhookPayload {
+func convertMemoToWebhookPayload(memo *apiv2pb.Memo) (*webhook.WebhookPayload, error) {
+	creatorID, err := ExtractUserIDFromName(memo.Creator)
+	if err != nil {
+		return nil, errors.Wrap(err, "invalid memo creator")
+	}
 	return &webhook.WebhookPayload{
-		CreatorID: memo.CreatorId,
+		CreatorID: creatorID,
 		CreatedTs: time.Now().Unix(),
 		Memo: &webhook.Memo{
 			ID:         memo.Id,
-			CreatorID:  memo.CreatorId,
+			CreatorID:  creatorID,
 			CreatedTs:  memo.CreateTime.Seconds,
 			UpdatedTs:  memo.UpdateTime.Seconds,
 			Content:    memo.Content,
@@ -851,5 +864,5 @@ func convertMemoToWebhookPayload(memo *apiv2pb.Memo) *webhook.WebhookPayload {
 				return relations
 			}(),
 		},
-	}
+	}, nil
 }

server/route/api/v2/resource_name.go

@@ -43,13 +43,17 @@ func ExtractWorkspaceSettingKeyFromName(name string) (string, error) {
 	return tokens[0], nil
 }
 
-// ExtractUsernameFromName returns the username from a resource name.
-func ExtractUsernameFromName(name string) (string, error) {
+// ExtractUserIDFromName returns the uid from a resource name.
+func ExtractUserIDFromName(name string) (int32, error) {
 	tokens, err := GetNameParentTokens(name, UserNamePrefix)
 	if err != nil {
-		return "", err
+		return 0, err
 	}
-	return tokens[0], nil
+	id, err := util.ConvertStringToInt32(tokens[0])
+	if err != nil {
+		return 0, errors.Errorf("invalid user ID %q", tokens[0])
+	}
+	return id, nil
 }
 
 // ExtractInboxIDFromName returns the inbox ID from a resource name.

server/route/api/v2/tag_service.go

@@ -51,12 +51,12 @@ func (s *APIV2Service) BatchUpsertTag(ctx context.Context, request *apiv2pb.Batc
 }
 
 func (s *APIV2Service) ListTags(ctx context.Context, request *apiv2pb.ListTagsRequest) (*apiv2pb.ListTagsResponse, error) {
-	username, err := ExtractUsernameFromName(request.User)
+	userID, err := ExtractUserIDFromName(request.User)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %v", err)
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
@@ -83,12 +83,12 @@ func (s *APIV2Service) ListTags(ctx context.Context, request *apiv2pb.ListTagsRe
 }
 
 func (s *APIV2Service) RenameTag(ctx context.Context, request *apiv2pb.RenameTagRequest) (*apiv2pb.RenameTagResponse, error) {
-	username, err := ExtractUsernameFromName(request.User)
+	userID, err := ExtractUserIDFromName(request.User)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %v", err)
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
@@ -148,12 +148,12 @@ func (s *APIV2Service) RenameTag(ctx context.Context, request *apiv2pb.RenameTag
 }
 
 func (s *APIV2Service) DeleteTag(ctx context.Context, request *apiv2pb.DeleteTagRequest) (*apiv2pb.DeleteTagResponse, error) {
-	username, err := ExtractUsernameFromName(request.Tag.Creator)
+	userID, err := ExtractUserIDFromName(request.Tag.Creator)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %v", err)
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
@@ -172,12 +172,12 @@ func (s *APIV2Service) DeleteTag(ctx context.Context, request *apiv2pb.DeleteTag
 }
 
 func (s *APIV2Service) GetTagSuggestions(ctx context.Context, request *apiv2pb.GetTagSuggestionsRequest) (*apiv2pb.GetTagSuggestionsResponse, error) {
-	username, err := ExtractUsernameFromName(request.User)
+	userID, err := ExtractUserIDFromName(request.User)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %v", err)
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)

server/route/api/v2/user_service.go

@@ -8,10 +8,12 @@ import (
 	"time"
 
 	"github.com/golang-jwt/jwt/v5"
+	"github.com/google/cel-go/cel"
 	"github.com/labstack/echo/v4"
 	"github.com/pkg/errors"
 	"golang.org/x/crypto/bcrypt"
 	"golang.org/x/exp/slices"
+	expr "google.golang.org/genproto/googleapis/api/expr/v1alpha1"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 	"google.golang.org/protobuf/types/known/timestamppb"
@@ -46,13 +48,40 @@ func (s *APIV2Service) ListUsers(ctx context.Context, _ *apiv2pb.ListUsersReques
 	return response, nil
 }
 
+func (s *APIV2Service) SearchUsers(ctx context.Context, request *apiv2pb.SearchUsersRequest) (*apiv2pb.SearchUsersResponse, error) {
+	if request.Filter == "" {
+		return nil, status.Errorf(codes.InvalidArgument, "filter is empty")
+	}
+	filter, err := parseSearchUsersFilter(request.Filter)
+	if err != nil {
+		return nil, status.Errorf(codes.InvalidArgument, "failed to parse filter: %v", err)
+	}
+	userFind := &store.FindUser{}
+	if filter.Username != nil {
+		userFind.Username = filter.Username
+	}
+
+	users, err := s.Store.ListUsers(ctx, userFind)
+	if err != nil {
+		return nil, status.Errorf(codes.Internal, "failed to search users: %v", err)
+	}
+
+	response := &apiv2pb.SearchUsersResponse{
+		Users: []*apiv2pb.User{},
+	}
+	for _, user := range users {
+		response.Users = append(response.Users, convertUserFromStore(user))
+	}
+	return response, nil
+}
+
 func (s *APIV2Service) GetUser(ctx context.Context, request *apiv2pb.GetUserRequest) (*apiv2pb.GetUserResponse, error) {
-	username, err := ExtractUsernameFromName(request.Name)
+	userID, err := ExtractUserIDFromName(request.Name)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "name is required")
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	user, err := s.Store.GetUser(ctx, &store.FindUser{
-		Username: &username,
+		ID: &userID,
 	})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
@@ -76,13 +105,8 @@ func (s *APIV2Service) CreateUser(ctx context.Context, request *apiv2pb.CreateUs
 	if currentUser.Role != store.RoleHost {
 		return nil, status.Errorf(codes.PermissionDenied, "permission denied")
 	}
-
-	username, err := ExtractUsernameFromName(request.User.Name)
-	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "name is required")
-	}
-	if !util.ResourceNameMatcher.MatchString(strings.ToLower(username)) {
-		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %s", username)
+	if !util.ResourceNameMatcher.MatchString(strings.ToLower(request.User.Username)) {
+		return nil, status.Errorf(codes.InvalidArgument, "invalid username: %s", request.User.Username)
 	}
 	passwordHash, err := bcrypt.GenerateFromPassword([]byte(request.User.Password), bcrypt.DefaultCost)
 	if err != nil {
@@ -90,7 +114,7 @@ func (s *APIV2Service) CreateUser(ctx context.Context, request *apiv2pb.CreateUs
 	}
 
 	user, err := s.Store.CreateUser(ctx, &store.User{
-		Username:     username,
+		Username:     request.User.Username,
 		Role:         convertUserRoleToStore(request.User.Role),
 		Email:        request.User.Email,
 		Nickname:     request.User.Nickname,
@@ -107,22 +131,22 @@ func (s *APIV2Service) CreateUser(ctx context.Context, request *apiv2pb.CreateUs
 }
 
 func (s *APIV2Service) UpdateUser(ctx context.Context, request *apiv2pb.UpdateUserRequest) (*apiv2pb.UpdateUserResponse, error) {
-	username, err := ExtractUsernameFromName(request.User.Name)
+	userID, err := ExtractUserIDFromName(request.User.Name)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "name is required")
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	currentUser, err := getCurrentUser(ctx, s.Store)
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
 	}
-	if currentUser.Username != username && currentUser.Role != store.RoleAdmin && currentUser.Role != store.RoleHost {
+	if currentUser.ID != userID && currentUser.Role != store.RoleAdmin && currentUser.Role != store.RoleHost {
 		return nil, status.Errorf(codes.PermissionDenied, "permission denied")
 	}
 	if request.UpdateMask == nil || len(request.UpdateMask.Paths) == 0 {
 		return nil, status.Errorf(codes.InvalidArgument, "update mask is empty")
 	}
 
-	user, err := s.Store.GetUser(ctx, &store.FindUser{Username: &username})
+	user, err := s.Store.GetUser(ctx, &store.FindUser{ID: &userID})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
 	}
@@ -179,19 +203,19 @@ func (s *APIV2Service) UpdateUser(ctx context.Context, request *apiv2pb.UpdateUs
 }
 
 func (s *APIV2Service) DeleteUser(ctx context.Context, request *apiv2pb.DeleteUserRequest) (*apiv2pb.DeleteUserResponse, error) {
-	username, err := ExtractUsernameFromName(request.Name)
+	userID, err := ExtractUserIDFromName(request.Name)
 	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "name is required")
+		return nil, status.Errorf(codes.InvalidArgument, "invalid user name: %v", err)
 	}
 	currentUser, err := getCurrentUser(ctx, s.Store)
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
 	}
-	if currentUser.Username != username && currentUser.Role != store.RoleAdmin && currentUser.Role != store.RoleHost {
+	if currentUser.ID != userID && currentUser.Role != store.RoleAdmin && currentUser.Role != store.RoleHost {
 		return nil, status.Errorf(codes.PermissionDenied, "permission denied")
 	}
 
-	user, err := s.Store.GetUser(ctx, &store.FindUser{Username: &username})
+	user, err := s.Store.GetUser(ctx, &store.FindUser{ID: &userID})
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get user: %v", err)
 	}
@@ -311,35 +335,15 @@ func (s *APIV2Service) UpdateUserSetting(ctx context.Context, request *apiv2pb.U
 }
 
 func (s *APIV2Service) ListUserAccessTokens(ctx context.Context, request *apiv2pb.ListUserAccessTokensRequest) (*apiv2pb.ListUserAccessTokensResponse, error) {
-	user, err := getCurrentUser(ctx, s.Store)
+	currentUser, err := getCurrentUser(ctx, s.Store)
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to get current user: %v", err)
 	}
-	if user == nil {
+	if currentUser == nil {
 		return nil, status.Errorf(codes.PermissionDenied, "permission denied")
 	}
 
-	userID := user.ID
-	username, err := ExtractUsernameFromName(request.Name)
-	if err != nil {
-		return nil, status.Errorf(codes.InvalidArgument, "name is required")
-	}
-	// List access token for other users need to be verified.
-	if user.Username != username {
-		// Normal users can only list their access tokens.
-		if user.Role == store.RoleUser {
-			return nil, status.Errorf(codes.PermissionDenied, "permission denied")
-		}
-
-		// The request user must be exist.
-		requestUser, err := s.Store.GetUser(ctx, &store.FindUser{Username: &username})
-		if requestUser == nil || err != nil {
-			return nil, status.Errorf(codes.NotFound, "fail to find user %s", username)
-		}
-		userID = requestUser.ID
-	}
-
-	userAccessTokens, err := s.Store.GetUserAccessTokens(ctx, userID)
+	userAccessTokens, err := s.Store.GetUserAccessTokens(ctx, currentUser.ID)
 	if err != nil {
 		return nil, status.Errorf(codes.Internal, "failed to list access tokens: %v", err)
 	}
@@ -493,7 +497,7 @@ func (s *APIV2Service) UpsertAccessTokenToStore(ctx context.Context, user *store
 
 func convertUserFromStore(user *store.User) *apiv2pb.User {
 	return &apiv2pb.User{
-		Name:        fmt.Sprintf("%s%s", UserNamePrefix, user.Username),
+		Name:        fmt.Sprintf("%s%d", UserNamePrefix, user.ID),
 		Id:          user.ID,
 		RowStatus:   convertRowStatusFromStore(user.RowStatus),
 		CreateTime:  timestamppb.New(time.Unix(user.CreatedTs, 0)),
@@ -532,3 +536,50 @@ func convertUserRoleToStore(role apiv2pb.User_Role) store.Role {
 		return store.RoleUser
 	}
 }
+
+// SearchUsersFilterCELAttributes are the CEL attributes for SearchUsersFilter.
+var SearchUsersFilterCELAttributes = []cel.EnvOption{
+	cel.Variable("username", cel.StringType),
+}
+
+type SearchUsersFilter struct {
+	Username *string
+}
+
+func parseSearchUsersFilter(expression string) (*SearchUsersFilter, error) {
+	e, err := cel.NewEnv(SearchUsersFilterCELAttributes...)
+	if err != nil {
+		return nil, err
+	}
+	ast, issues := e.Compile(expression)
+	if issues != nil {
+		return nil, errors.Errorf("found issue %v", issues)
+	}
+	filter := &SearchUsersFilter{}
+	expr, err := cel.AstToParsedExpr(ast)
+	if err != nil {
+		return nil, err
+	}
+	callExpr := expr.GetExpr().GetCallExpr()
+	findSearchUsersField(callExpr, filter)
+	return filter, nil
+}
+
+func findSearchUsersField(callExpr *expr.Expr_Call, filter *SearchUsersFilter) {
+	if len(callExpr.Args) == 2 {
+		idExpr := callExpr.Args[0].GetIdentExpr()
+		if idExpr != nil {
+			if idExpr.Name == "username" {
+				username := callExpr.Args[1].GetConstExpr().GetStringValue()
+				filter.Username = &username
+			}
+			return
+		}
+	}
+	for _, arg := range callExpr.Args {
+		callExpr := arg.GetCallExpr()
+		if callExpr != nil {
+			findSearchUsersField(callExpr, filter)
+		}
+	}
+}

web/src/components/Inbox/MemoCommentMessage.tsx

@@ -4,7 +4,7 @@ import { useEffect, useState } from "react";
 import toast from "react-hot-toast";
 import { activityServiceClient } from "@/grpcweb";
 import useNavigateTo from "@/hooks/useNavigateTo";
-import { useInboxStore, extractUsernameFromName, useMemoStore } from "@/store/v1";
+import { useInboxStore, useMemoStore } from "@/store/v1";
 import { Inbox, Inbox_Status } from "@/types/proto/api/v2/inbox_service";
 import { Memo } from "@/types/proto/api/v2/memo_service";
 import { useTranslate } from "@/utils/i18n";
@@ -104,7 +104,7 @@ const MemoCommentMessage = ({ inbox }: Props) => {
           onClick={handleNavigateToMemo}
         >
           {t("inbox.memo-comment", {
-            user: extractUsernameFromName(inbox.sender),
+            user: inbox.sender,
             memo: `memos#${relatedMemo?.name}`,
           })}
         </p>

web/src/components/MemoContent/index.tsx

@@ -32,7 +32,7 @@ const MemoContent: React.FC<Props> = (props: Props) => {
   const [showCompactMode, setShowCompactMode] = useState<boolean>(false);
   const memo = memoId ? memoStore.getMemoById(memoId) : null;
   const nodes = window.parse(content);
-  const allowEdit = !props.readonly && memo && currentUser?.id === memo.creatorId;
+  const allowEdit = !props.readonly && memo && currentUser?.name === memo.creator;
 
   // Initial compact mode.
   useEffect(() => {

web/src/components/MemoReactionListView.tsx

 import { uniq } from "lodash-es";
 import { memo, useEffect, useState } from "react";
 import useCurrentUser from "@/hooks/useCurrentUser";
-import { extractUsernameFromName, useUserStore } from "@/store/v1";
+import { useUserStore } from "@/store/v1";
 import { Memo } from "@/types/proto/api/v2/memo_service";
 import { Reaction, Reaction_Type } from "@/types/proto/api/v2/reaction_service";
 import { User } from "@/types/proto/api/v2/user_service";
@@ -23,7 +23,7 @@ const MemoReactionListView = (props: Props) => {
     (async () => {
       const reactionGroup = new Map<Reaction_Type, User[]>();
       for (const reaction of reactions) {
-        const user = await userStore.getOrFetchUserByUsername(extractUsernameFromName(reaction.creator));
+        const user = await userStore.getOrFetchUserByName(reaction.creator);
         const users = reactionGroup.get(reaction.reactionType) || [];
         users.push(user);
         reactionGroup.set(reaction.reactionType, uniq(users));

web/src/components/MemoView.tsx

@@ -4,7 +4,7 @@ import { memo, useCallback, useEffect, useRef, useState } from "react";
 import { Link, useLocation } from "react-router-dom";
 import useCurrentUser from "@/hooks/useCurrentUser";
 import useNavigateTo from "@/hooks/useNavigateTo";
-import { useUserStore, extractUsernameFromName } from "@/store/v1";
+import { useUserStore } from "@/store/v1";
 import { MemoRelation_Type } from "@/types/proto/api/v2/memo_relation_service";
 import { Memo, Visibility } from "@/types/proto/api/v2/memo_service";
 import { useTranslate } from "@/utils/i18n";
@@ -37,7 +37,7 @@ const MemoView: React.FC<Props> = (props: Props) => {
   const currentUser = useCurrentUser();
   const userStore = useUserStore();
   const user = useCurrentUser();
-  const [creator, setCreator] = useState(userStore.getUserByUsername(extractUsernameFromName(memo.creator)));
+  const [creator, setCreator] = useState(userStore.getUserByName(memo.creator));
   const memoContainerRef = useRef<HTMLDivElement>(null);
   const referencedMemos = memo.relations.filter((relation) => relation.type === MemoRelation_Type.REFERENCE);
   const commentAmount = memo.relations.filter(
@@ -49,7 +49,7 @@ const MemoView: React.FC<Props> = (props: Props) => {
   // Initial related data: creator.
   useEffect(() => {
     (async () => {
-      const user = await userStore.getOrFetchUserByUsername(extractUsernameFromName(memo.creator));
+      const user = await userStore.getOrFetchUserByName(memo.creator);
       setCreator(user);
     })();
   }, []);
@@ -87,17 +87,13 @@ const MemoView: React.FC<Props> = (props: Props) => {
         <div className="w-auto max-w-[calc(100%-8rem)] grow flex flex-row justify-start items-center">
           {creator && (
             <div className="w-full flex flex-row justify-start items-center">
-              <Link
-                className="w-auto hover:opacity-80"
-                to={`/u/${encodeURIComponent(extractUsernameFromName(memo.creator))}`}
-                unstable_viewTransition
-              >
+              <Link className="w-auto hover:opacity-80" to={`/u/${encodeURIComponent(creator.username)}`} unstable_viewTransition>
                 <UserAvatar className="mr-2 shrink-0" avatarUrl={creator.avatarUrl} />
               </Link>
               <div className="w-full flex flex-col justify-center items-start">
                 <Link
                   className="w-auto leading-none hover:opacity-80"
-                  to={`/u/${encodeURIComponent(extractUsernameFromName(memo.creator))}`}
+                  to={`/u/${encodeURIComponent(creator.username)}`}
                   unstable_viewTransition
                 >
                   <span className="text-gray-600 text-lg leading-none max-w-[80%] truncate dark:text-gray-400">

web/src/components/ShareMemoDialog.tsx

@@ -7,7 +7,7 @@ import { downloadFileFromUrl } from "@/helpers/utils";
 import useCurrentUser from "@/hooks/useCurrentUser";
 import useLoading from "@/hooks/useLoading";
 import toImage from "@/labs/html2image";
-import { useUserStore, extractUsernameFromName, useMemoStore } from "@/store/v1";
+import { useUserStore, useMemoStore } from "@/store/v1";
 import { Visibility } from "@/types/proto/api/v2/memo_service";
 import { useTranslate } from "@/utils/i18n";
 import { convertVisibilityToString } from "@/utils/memo";
@@ -33,12 +33,12 @@ const ShareMemoDialog: React.FC<Props> = (props: Props) => {
   const loadingState = useLoading();
   const memoContainerRef = useRef<HTMLDivElement>(null);
   const memo = memoStore.getMemoById(memoId);
-  const user = userStore.getUserByUsername(extractUsernameFromName(memo.creator));
-  const readonly = memo?.creatorId !== currentUser?.id;
+  const user = userStore.getUserByName(memo.creator);
+  const readonly = memo?.creator !== currentUser?.name;
 
   useEffect(() => {
     (async () => {
-      await userStore.getOrFetchUserByUsername(extractUsernameFromName(memo.creator));
+      await userStore.getOrFetchUserByName(memo.creator);
       loadingState.setFinish();
     })();
   }, []);

web/src/hooks/useCurrentUser.ts

-import { extractUsernameFromName, useUserStore } from "@/store/v1";
+import { useUserStore } from "@/store/v1";
 
 const useCurrentUser = () => {
   const userStore = useUserStore();
-  return userStore.getUserByUsername(extractUsernameFromName(userStore.currentUser) || "");
+  return userStore.getUserByName(userStore.currentUser || "");
 };
 
 export default useCurrentUser;

web/src/pages/SignIn.tsx

@@ -33,8 +33,6 @@ const SignIn = () => {
     workspaceSettingStore.getWorkspaceSettingByKey(WorkspaceSettingKey.WORKSPACE_SETTING_GENERAL).generalSetting ||
     WorkspaceGeneralSetting.fromPartial({});
 
-  console.log("workspaceGeneralSetting", workspaceGeneralSetting);
-
   useEffect(() => {
     const fetchIdentityProviderList = async () => {
       const { data: identityProviderList } = await api.getIdentityProviderList();

web/src/pages/UserProfile.tsx

@@ -39,8 +39,12 @@ const UserProfile = () => {
     }
 
     userStore
-      .getOrFetchUserByUsername(username)
-      .then((user) => {
+      .searchUsers(`username == "${username}"`)
+      .then((users) => {
+        if (users.length !== 1) {
+          throw new Error("User not found");
+        }
+        const user = users[0];
         setUser(user);
         loadingState.setFinish();
       })

web/src/store/v1/resourceName.ts

 export const WorkspaceSettingPrefix = "settings/";
 export const UserNamePrefix = "users/";
 export const MemoNamePrefix = "memos/";
-
-export const extractUsernameFromName = (name: string = "") => {
-  return name.slice(UserNamePrefix.length);
-};

web/src/store/v1/user.ts

@@ -2,17 +2,16 @@ import { create } from "zustand";
 import { combine } from "zustand/middleware";
 import { authServiceClient, userServiceClient } from "@/grpcweb";
 import { User, UserSetting, User_Role } from "@/types/proto/api/v2/user_service";
-import { UserNamePrefix, extractUsernameFromName } from "./resourceName";
 
 interface State {
-  userMapByUsername: Record<string, User>;
-  // The name of current user. Format: `users/${username}`
+  userMapByName: Record<string, User>;
+  // The name of current user. Format: `users/${uid}`
   currentUser?: string;
   userSetting?: UserSetting;
 }
 
 const getDefaultState = (): State => ({
-  userMapByUsername: {},
+  userMapByName: {},
   currentUser: undefined,
   userSetting: undefined,
 });
@@ -32,40 +31,51 @@ export const useUserStore = create(
   combine(getDefaultState(), (set, get) => ({
     fetchUsers: async () => {
       const { users } = await userServiceClient.listUsers({});
-      const userMap = get().userMapByUsername;
+      const userMap = get().userMapByName;
       for (const user of users) {
-        userMap[user.username] = user;
+        userMap[user.name] = user;
       }
-      set({ userMapByUsername: userMap });
+      set({ userMapByName: userMap });
       return users;
     },
-    getOrFetchUserByUsername: async (username: string) => {
-      const userMap = get().userMapByUsername;
-      if (userMap[username]) {
-        return userMap[username] as User;
+    getOrFetchUserByName: async (name: string) => {
+      const userMap = get().userMapByName;
+      if (userMap[name]) {
+        return userMap[name] as User;
       }
-      if (requestCache.has(username)) {
-        return await requestCache.get(username);
+      if (requestCache.has(name)) {
+        return await requestCache.get(name);
       }
 
       const promisedUser = userServiceClient
         .getUser({
-          name: `${UserNamePrefix}${username}`,
+          name: name,
         })
         .then(({ user }) => user);
-      requestCache.set(username, promisedUser);
+      requestCache.set(name, promisedUser);
       const user = await promisedUser;
       if (!user) {
         throw new Error("User not found");
       }
-      requestCache.delete(username);
-      userMap[username] = user;
-      set({ userMapByUsername: userMap });
+      requestCache.delete(name);
+      userMap[name] = user;
+      set({ userMapByName: userMap });
       return user;
     },
-    getUserByUsername: (username: string) => {
-      const userMap = get().userMapByUsername;
-      return userMap[username];
+    searchUsers: async (filter: string) => {
+      const { users } = await userServiceClient.searchUsers({
+        filter,
+      });
+      const userMap = get().userMapByName;
+      for (const user of users) {
+        userMap[user.name] = user;
+      }
+      set({ userMapByName: userMap });
+      return users;
+    },
+    getUserByName: (name: string) => {
+      const userMap = get().userMapByName;
+      return userMap[name];
     },
     updateUser: async (user: Partial<User>, updateMask: string[]) => {
       const { user: updatedUser } = await userServiceClient.updateUser({
@@ -75,12 +85,12 @@ export const useUserStore = create(
       if (!updatedUser) {
         throw new Error("User not found");
       }
-      const userMap = get().userMapByUsername;
-      if (user.name !== updatedUser.name) {
-        delete userMap[extractUsernameFromName(user.name)];
+      const userMap = get().userMapByName;
+      if (user.name && user.name !== updatedUser.name) {
+        delete userMap[user.name];
       }
-      userMap[updatedUser.username] = updatedUser;
-      set({ userMapByUsername: userMap });
+      userMap[updatedUser.name] = updatedUser;
+      set({ userMapByName: userMap });
       if (user.name === get().currentUser) {
         set({ currentUser: updatedUser.name });
       }
@@ -90,19 +100,18 @@ export const useUserStore = create(
       await userServiceClient.deleteUser({
         name,
       });
-      const username = extractUsernameFromName(name);
-      const userMap = get().userMapByUsername;
-      delete userMap[username];
-      set({ userMapByUsername: userMap });
+      const userMap = get().userMapByName;
+      delete userMap[name];
+      set({ userMapByName: userMap });
     },
     fetchCurrentUser: async () => {
       const { user } = await authServiceClient.getAuthStatus({});
       if (!user) {
         throw new Error("User not found");
       }
-      const userMap = get().userMapByUsername;
-      userMap[user.username] = user;
-      set({ currentUser: user.name, userMapByUsername: userMap });
+      const userMap = get().userMapByName;
+      userMap[user.name] = user;
+      set({ currentUser: user.name, userMapByName: userMap });
       const { setting } = await userServiceClient.getUserSetting({});
       set({
         userSetting: UserSetting.fromPartial({

web/src/types/modules/user.d.ts

-type UserId = number;
 type UserRole = "HOST" | "USER";
 
 interface User {
-  id: UserId;
+  id: number;
 
   createdTs: number;
   updatedTs: number;
@@ -18,23 +17,3 @@ interface User {
   setting: Setting;
   localSetting: LocalSetting;
 }
-
-interface UserCreate {
-  username: string;
-  password: string;
-  role: UserRole;
-}
-
-interface UserPatch {
-  id: UserId;
-  rowStatus?: RowStatus;
-  username?: string;
-  email?: string;
-  nickname?: string;
-  avatarUrl?: string;
-  password?: string;
-}
-
-interface UserDelete {
-  id: UserId;
-}