Add display name support for user management and update related components

server/routes/admin.js

@@ -8,12 +8,17 @@ const router = Router();
 // POST /api/admin/users - Create user (admin)
 router.post('/users', authenticateToken, requireAdmin, async (req, res) => {
   try {
-    const { name, email, password, role } = req.body;
+    const { name, display_name, email, password, role } = req.body;
 
-    if (!name || !email || !password) {
+    if (!name || !display_name || !email || !password) {
       return res.status(400).json({ error: 'All fields are required' });
     }
 
+    const usernameRegex = /^[a-zA-Z0-9_-]{3,30}$/;
+    if (!usernameRegex.test(name)) {
+      return res.status(400).json({ error: 'Username may only contain letters, numbers, _ and - (3–30 chars)' });
+    }
+
     if (password.length < 6) {
       return res.status(400).json({ error: 'Password must be at least 6 characters long' });
     }
@@ -26,13 +31,18 @@ router.post('/users', authenticateToken, requireAdmin, async (req, res) => {
       return res.status(409).json({ error: 'Email is already in use' });
     }
 
+    const existingUsername = await db.get('SELECT id FROM users WHERE LOWER(name) = LOWER(?)', [name]);
+    if (existingUsername) {
+      return res.status(409).json({ error: 'Username is already taken' });
+    }
+
     const hash = bcrypt.hashSync(password, 12);
     const result = await db.run(
-      'INSERT INTO users (name, email, password_hash, role) VALUES (?, ?, ?, ?)',
-      [name, email.toLowerCase(), hash, validRole]
+      'INSERT INTO users (name, display_name, email, password_hash, role, email_verified) VALUES (?, ?, ?, ?, ?, 1)',
+      [name, display_name, email.toLowerCase(), hash, validRole]
     );
 
-    const user = await db.get('SELECT id, name, email, role, created_at FROM users WHERE id = ?', [result.lastInsertRowid]);
+    const user = await db.get('SELECT id, name, display_name, email, role, created_at FROM users WHERE id = ?', [result.lastInsertRowid]);
     res.status(201).json({ user });
   } catch (err) {
     console.error('Create user error:', err);
@@ -45,7 +55,7 @@ router.get('/users', authenticateToken, requireAdmin, async (req, res) => {
   try {
     const db = getDb();
     const users = await db.all(`
-      SELECT id, name, email, role, language, theme, avatar_color, avatar_image, created_at,
+      SELECT id, name, display_name, email, role, language, theme, avatar_color, avatar_image, created_at,
         (SELECT COUNT(*) FROM rooms WHERE rooms.user_id = users.id) as room_count
       FROM users
       ORDER BY created_at DESC