model User { id String @id @default(cuid()) name String? email String? @unique emailVerified DateTime? password String? image String? role String? @default("user") accounts Account[] sessions Session[] // Custom fields firstName String? lastName String? birthDate DateTime? phoneNumber String? address Address? preferences Json? createdAt DateTime @default(now()) updatedAt DateTime @updatedAt } model Address { id String @id @default(cuid()) street String city String state String? country String zipCode String userId String @unique user User @relation(fields: [userId], references: [id], onDelete: Cascade) }

npx prisma migrate dev --name add_user_profile_fields

interface ExtendedUser { _id: string; name?: string; email?: string; emailVerified?: Date; image?: string; role?: string; // Custom fields firstName?: string; lastName?: string; birthDate?: Date; phoneNumber?: string; address?: { street: string; city: string; state?: string; country: string; zipCode: string; }; preferences?: Record; createdAt: Date; updatedAt: Date; }

// src/routes/profile/+page.server.ts import type { PageServerLoad } from './$types'; import { prisma } from '$lib/database'; export const load: PageServerLoad = async ({ locals }) => { const session = await locals.getSession(); if (!session?.user) { return { user: null }; } // Fetch extended user data from database const userData = await prisma.user.findUnique({ where: { id: session.user.id }, include: { address: true } }); return { user: { ...session.user, ...userData, // Don't expose sensitive data password: undefined } }; };

{#if user} {:else}

Please sign in to view your profile.

{/if}

// src/routes/profile/edit/+page.server.ts import { fail, redirect } from '@sveltejs/kit'; import type { Actions, PageServerLoad } from './$types'; import { prisma } from '$lib/database'; export const load: PageServerLoad = async ({ locals }) => { const session = await locals.getSession(); if (!session?.user) { redirect(302, '/signin'); } // Fetch user data with address const user = await prisma.user.findUnique({ where: { id: session.user.id }, include: { address: true } }); return { user }; }; export const actions = { default: async ({ request, locals }) => { const session = await locals.getSession(); if (!session?.user) { return fail(401, { error: 'Unauthorized' }); } const formData = await request.formData(); const firstName = formData.get('firstName')?.toString() || ''; const lastName = formData.get('lastName')?.toString() || ''; const phoneNumber = formData.get('phoneNumber')?.toString() || ''; const birthDate = formData.get('birthDate')?.toString() || ''; const street = formData.get('street')?.toString() || ''; const city = formData.get('city')?.toString() || ''; const state = formData.get('state')?.toString() || ''; const country = formData.get('country')?.toString() || ''; const zipCode = formData.get('zipCode')?.toString() || ''; try { // Update user data await prisma.user.update({ where: { id: session.user.id }, data: { firstName, lastName, phoneNumber, birthDate: birthDate ? new Date(birthDate) : null, name: `${firstName} ${lastName}`.trim() || undefined, // Upsert address - create if doesn't exist, update if it does address: { upsert: { create: { street, city, state, country, zipCode }, update: { street, city, state, country, zipCode } } } } }); return { success: true }; } catch (error) { console.error('Error updating profile:', error); return fail(500, { error: 'Failed to update profile' }); } } } satisfies Actions;

// src/routes/profile/avatar/+page.server.ts import { fail, redirect } from '@sveltejs/kit'; import type { Actions, PageServerLoad } from './$types'; import { prisma } from '$lib/database'; import { uploadImage } from '$lib/storage'; // Implement this based on your storage solution export const load: PageServerLoad = async ({ locals }) => { const session = await locals.getSession(); if (!session?.user) { redirect(302, '/signin'); } return { user: session.user }; }; export const actions = { default: async ({ request, locals }) => { const session = await locals.getSession(); if (!session?.user) { return fail(401, { error: 'Unauthorized' }); } const formData = await request.formData(); const avatarFile = formData.get('avatar'); if (!avatarFile || !(avatarFile instanceof File)) { return fail(400, { error: 'No valid file uploaded' }); } if (avatarFile.size > 2 * 1024 * 1024) { return fail(400, { error: 'File size exceeds 2MB limit' }); } try { // Upload image to storage (implement this based on your storage solution) const imageUrl = await uploadImage( avatarFile, `users/${session.user.id}/avatar`, { width: 500, height: 500 } ); // Update user record with new image URL await prisma.user.update({ where: { id: session.user.id }, data: { image: imageUrl } }); return { success: true }; } catch (error) { console.error('Error uploading avatar:', error); return fail(500, { error: 'Failed to upload image' }); } } } satisfies Actions;

// src/routes/profile/change-password/+page.server.ts import { fail, redirect } from '@sveltejs/kit'; import type { Actions, PageServerLoad } from './$types'; import { changePassword } from '$lib/auth'; export const load: PageServerLoad = async ({ locals }) => { const session = await locals.getSession(); if (!session?.user) { redirect(302, '/signin'); } return {}; }; export const actions = { default: async ({ request, locals }) => { const session = await locals.getSession(); if (!session?.user) { return fail(401, { error: 'Unauthorized' }); } const formData = await request.formData(); const currentPassword = formData.get('currentPassword')?.toString() || ''; const newPassword = formData.get('newPassword')?.toString() || ''; const confirmPassword = formData.get('confirmPassword')?.toString() || ''; if (newPassword !== confirmPassword) { return fail(400, { error: 'New passwords do not match' }); } if (newPassword.length < 8) { return fail(400, { error: 'New password must be at least 8 characters long' }); } try { // Use the Svelte Guardian utility to change password await changePassword({ userId: session.user.id, currentPassword, newPassword }); return { success: true }; } catch (error) { console.error('Error changing password:', error); if (error.code === 'INVALID_PASSWORD') { return fail(400, { error: 'Current password is incorrect' }); } return fail(500, { error: 'Failed to change password' }); } } } satisfies Actions;