feat: user data server routes

[AasmundN]

Changes

• user server middleware. Fetches the users data from the db and merges it with the decodedToken on the h3 event context. The user generated user object is placed on the event context.
• Server plugin auth.server.ts to populate authStore on initial server render. Runs after the auth and user server middlewares and only on the initial server render. The plugin has access to both the event context and the nuxtApp instance, which means it can populate the Pinia store. The global auth route middleware has been updated accordingly.
• Add db export from firebase util.
• hasAccessLevel server util to check a users accessLevel.

API endoints

POST /api/user endpoint creates or updates a user in the firebase realtime database. A user object in the database has the following format.

{
  accessLevel?: string[]
  studyProgram: string
  updated: number
}

The user entries use the firebase token subject scope decodedToken.sub as their object keys. The currently available accessLevels are 'admin'. A default user has no accesslevel array defined. The updated field holds the date of the last time the user object was updated. The endpoint accepts a request body of the following format.

{
   sub: string
   accessLevel: string[]
   studyProgram: string
}

These specify how the data of the user with uid sub is to be updated. Only admins can update other users than their own.

GET /api/user/ endpoint returns the users data object, stored on the event context (see user middleware). If the query paramter scope is present and has the value 'all', all users will be fetched. Only admins can fetch all users.

DELETE /api/user/ endpoint deletes the users data from the database. The sub field of the request body specifies which user to remove. Only admins can remove other users than their own.

Further work

This PR only adds the endpoints to modify the data in the database. The firebase auth composable needs to be updated to use these endpoints, as well as update the users in firebase auth accordingly.

Resources

• Firebase admin SDK realtime database reference.

[ipeglin]

LGTM