@ackplus/nest-auth 2.0.0-beta.9 → 2.0.1

package/dist/lib/tenant/tenant-context/services/base-tenant-context.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-tenant-context.service.d.ts","sourceRoot":"","sources":["../../../../../src/lib/tenant/tenant-context/services/base-tenant-context.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAS9D,8BAAsB,wBAAyB,YAAW,qBAAqB;IAC/D,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;gBAA5B,aAAa,EAAE,aAAa;IAE3D,SAAS,IAAI,OAAO;IAId,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK5C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAKlD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAG/D"}
+{"version":3,"file":"base-tenant-context.service.d.ts","sourceRoot":"","sources":["../../../../../src/lib/tenant/tenant-context/services/base-tenant-context.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAS9D,8BAAsB,wBAAyB,YAAW,qBAAqB;IAC/D,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;gBAA5B,aAAa,EAAE,aAAa;IAE3D,SAAS,IAAI,OAAO;IAId,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK5C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAKlD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAG/D"}

package/dist/lib/tenant/tenant-context/services/disabled-tenant-context.service.d.ts

@@ -1,6 +1,6 @@
 import { ITenantContextService } from '../tenant-context.interface';
 import { NestAuthTenant } from '../../entities/tenant.entity';
-import { NestAuthUserAccess } from '../../entities/user-access.entity';
+import { NestAuthUserAccess } from '../../../user/entities/user-access.entity';
 export declare class DisabledTenantContextService implements ITenantContextService {
     isEnabled(): boolean;
     getCurrentTenantId(): Promise<string | null>;

package/dist/lib/tenant/tenant-context/services/disabled-tenant-context.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"disabled-tenant-context.service.d.ts","sourceRoot":"","sources":["../../../../../src/lib/tenant/tenant-context/services/disabled-tenant-context.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAMvE,qBACa,4BAA6B,YAAW,qBAAqB;IACtE,SAAS,IAAI,OAAO;IAId,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI5C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIlD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAI/D"}
+{"version":3,"file":"disabled-tenant-context.service.d.ts","sourceRoot":"","sources":["../../../../../src/lib/tenant/tenant-context/services/disabled-tenant-context.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAM/E,qBACa,4BAA6B,YAAW,qBAAqB;IACtE,SAAS,IAAI,OAAO;IAId,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI5C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIlD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAI/D"}

package/dist/lib/tenant/tenant-context/tenant-context.interface.d.ts

@@ -1,5 +1,5 @@
 import { NestAuthTenant } from '../entities/tenant.entity';
-import { NestAuthUserAccess } from '../entities/user-access.entity';
+import { NestAuthUserAccess } from '../../user/entities/user-access.entity';
 export interface ITenantContextService {
     isEnabled(): boolean;
     getCurrentTenantId(): Promise<string | null>;

package/dist/lib/tenant/tenant-context/tenant-context.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-context.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/tenant/tenant-context/tenant-context.interface.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,MAAM,WAAW,qBAAqB;IAClC,SAAS,IAAI,OAAO,CAAC;IACrB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAEnD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;CAC1D"}
+{"version":3,"file":"tenant-context.interface.d.ts","sourceRoot":"","sources":["../../../../src/lib/tenant/tenant-context/tenant-context.interface.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAE5E,MAAM,WAAW,qBAAqB;IAClC,SAAS,IAAI,OAAO,CAAC;IACrB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,gBAAgB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAEnD,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;CAC1D"}

package/dist/lib/user/entities/platform-access.entity.d.ts

@@ -0,0 +1,16 @@
+import { BaseEntity, EntityManager } from 'typeorm';
+import { NestAuthUser } from './user.entity';
+import { NestAuthRole } from '../../role/entities/role.entity';
+export declare class NestAuthPlatformAccess extends BaseEntity {
+    id: string;
+    userId: string;
+    user: NestAuthUser;
+    roles: NestAuthRole[];
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    getPermissions(): Promise<string[]>;
+    getRoles(withPermissions?: boolean): Promise<NestAuthRole[]>;
+    assignRoles(roleIds: string | string[], manager?: EntityManager): Promise<void>;
+}
+//# sourceMappingURL=platform-access.entity.d.ts.map

package/dist/lib/user/entities/platform-access.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-access.entity.d.ts","sourceRoot":"","sources":["../../../../src/lib/user/entities/platform-access.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAUH,UAAU,EAIV,aAAa,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAI/D,qBACa,sBAAuB,SAAQ,UAAU;IAElD,EAAE,EAAE,MAAM,CAAC;IAIX,MAAM,EAAE,MAAM,CAAC;IAIf,IAAI,EAAE,YAAY,CAAC;IASnB,KAAK,EAAE,YAAY,EAAE,CAAC;IAGtB,QAAQ,EAAE,OAAO,CAAC;IAGlB,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;IAGV,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IASnC,QAAQ,CAAC,eAAe,UAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAa1D,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBxF"}

package/dist/lib/user/entities/platform-access.entity.js

@@ -0,0 +1,95 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var NestAuthPlatformAccess_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestAuthPlatformAccess = void 0;
+const typeorm_1 = require("typeorm");
+const user_entity_1 = require("./user.entity");
+const role_entity_1 = require("../../role/entities/role.entity");
+const lodash_1 = require("lodash");
+const role_mapper_util_1 = require("../../role/utils/role-mapper.util");
+let NestAuthPlatformAccess = NestAuthPlatformAccess_1 = class NestAuthPlatformAccess extends typeorm_1.BaseEntity {
+    id;
+    userId;
+    user;
+    roles;
+    isActive;
+    createdAt;
+    updatedAt;
+    async getPermissions() {
+        const roles = await this.getRoles(true);
+        return (0, lodash_1.chain)(roles)
+            .map((role) => (0, role_mapper_util_1.getRolePermissionNames)(role))
+            .flatten()
+            .uniq()
+            .value();
+    }
+    async getRoles(withPermissions = false) {
+        const access = await NestAuthPlatformAccess_1.findOne({
+            where: { userId: this.userId, isActive: true },
+            relations: ['roles', ...(withPermissions ? ['roles.rolePermissions', 'roles.rolePermissions.permission'] : [])],
+        });
+        return access?.roles?.length ? access.roles : [];
+    }
+    async assignRoles(roleIds, manager) {
+        const ids = Array.isArray(roleIds) ? roleIds : [roleIds];
+        const roleRepo = manager
+            ? manager.getRepository(role_entity_1.NestAuthRole)
+            : role_entity_1.NestAuthRole.getRepository();
+        const accessRepo = manager
+            ? manager.getRepository(NestAuthPlatformAccess_1)
+            : NestAuthPlatformAccess_1.getRepository();
+        this.roles = ids.length
+            ? await roleRepo.find({ where: { id: (0, typeorm_1.In)(ids) } })
+            : [];
+        await accessRepo.save(this);
+    }
+};
+exports.NestAuthPlatformAccess = NestAuthPlatformAccess;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], NestAuthPlatformAccess.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: false, unique: true }),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", String)
+], NestAuthPlatformAccess.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.OneToOne)(() => user_entity_1.NestAuthUser, user => user.platformAccess, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'userId' }),
+    __metadata("design:type", user_entity_1.NestAuthUser)
+], NestAuthPlatformAccess.prototype, "user", void 0);
+__decorate([
+    (0, typeorm_1.ManyToMany)(() => role_entity_1.NestAuthRole, role => role.platformAccesses, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinTable)({
+        name: 'nest_auth_platform_access_roles',
+        joinColumn: { name: 'nestAuthPlatformAccessId', referencedColumnName: 'id' },
+        inverseJoinColumn: { name: 'nestAuthRolesId', referencedColumnName: 'id' },
+    }),
+    __metadata("design:type", Array)
+], NestAuthPlatformAccess.prototype, "roles", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ default: true }),
+    __metadata("design:type", Boolean)
+], NestAuthPlatformAccess.prototype, "isActive", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], NestAuthPlatformAccess.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    __metadata("design:type", Date)
+], NestAuthPlatformAccess.prototype, "updatedAt", void 0);
+exports.NestAuthPlatformAccess = NestAuthPlatformAccess = NestAuthPlatformAccess_1 = __decorate([
+    (0, typeorm_1.Entity)('nest_auth_platform_accesses')
+], NestAuthPlatformAccess);
+//# sourceMappingURL=platform-access.entity.js.map

package/dist/lib/user/entities/platform-access.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-access.entity.js","sourceRoot":"","sources":["../../../../src/lib/user/entities/platform-access.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qCAeiB;AACjB,+CAA6C;AAC7C,iEAA+D;AAC/D,mCAA+B;AAC/B,wEAA2E;AAGpE,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,oBAAU;IAElD,EAAE,CAAS;IAIX,MAAM,CAAS;IAIf,IAAI,CAAe;IASnB,KAAK,CAAiB;IAGtB,QAAQ,CAAU;IAGlB,SAAS,CAAO;IAGhB,SAAS,CAAO;IAGhB,KAAK,CAAC,cAAc;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,IAAA,cAAK,EAAC,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,yCAAsB,EAAC,IAAI,CAAC,CAAC;aAC3C,OAAO,EAAE;aACT,IAAI,EAAE;aACN,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,eAAe,GAAG,KAAK;QAClC,MAAM,MAAM,GAAG,MAAM,wBAAsB,CAAC,OAAO,CAAC;YAChD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9C,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,kCAAkC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClH,CAAC,CAAC;QAEH,OAAO,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAMD,KAAK,CAAC,WAAW,CAAC,OAA0B,EAAE,OAAuB;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,OAAO;YACpB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,0BAAY,CAAC;YACrC,CAAC,CAAC,0BAAY,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,OAAO;YACtB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,wBAAsB,CAAC;YAC/C,CAAC,CAAC,wBAAsB,CAAC,aAAa,EAAE,CAAC;QAE7C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM;YACnB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CACJ,CAAA;AArEY,wDAAsB;AAE/B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDACpB;AAIX;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzC,IAAA,eAAK,GAAE;;sDACO;AAIf;IAFC,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,0BAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClF,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;8BACzB,0BAAY;oDAAC;AASnB;IANC,IAAA,oBAAU,EAAC,GAAG,EAAE,CAAC,0BAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtF,IAAA,mBAAS,EAAC;QACP,IAAI,EAAE,iCAAiC;QACvC,UAAU,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,IAAI,EAAE;QAC5E,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE;KAC7E,CAAC;;qDACoB;AAGtB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;wDACR;AAGlB;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;yDAAC;AAGhB;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;yDAAC;iCA5BP,sBAAsB;IADlC,IAAA,gBAAM,EAAC,6BAA6B,CAAC;GACzB,sBAAsB,CAqElC"}

package/dist/lib/user/entities/user-access.entity.d.ts

@@ -0,0 +1,22 @@
+import { BaseEntity, EntityManager } from 'typeorm';
+import { NestAuthTenant } from '../../tenant/entities/tenant.entity';
+import { NestAuthUser } from './user.entity';
+import { NestAuthRole } from '../../role/entities/role.entity';
+export declare class NestAuthUserAccess extends BaseEntity {
+    id: string;
+    userId: string;
+    tenantId: string;
+    user: NestAuthUser;
+    tenant: NestAuthTenant;
+    roles: NestAuthRole[];
+    isActive: boolean;
+    isDefault: boolean;
+    status: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    updatedAt: Date;
+    getPermissions(tenantId: string | null): Promise<string[]>;
+    getRoles(tenantId?: string | null, withPermissions?: boolean): Promise<NestAuthRole[]>;
+    assignRoles(roleIds: string | string[], manager?: EntityManager): Promise<void>;
+}
+//# sourceMappingURL=user-access.entity.d.ts.map

package/dist/lib/user/entities/user-access.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-access.entity.d.ts","sourceRoot":"","sources":["../../../../src/lib/user/entities/user-access.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAWH,UAAU,EAIV,aAAa,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAI/D,qBASa,kBAAmB,SAAQ,UAAU;IAE9C,EAAE,EAAE,MAAM,CAAC;IAKX,MAAM,EAAE,MAAM,CAAC;IAKf,QAAQ,EAAE,MAAM,CAAC;IAGjB,IAAI,EAAE,YAAY,CAAC;IAGnB,MAAM,EAAE,cAAc,CAAC;IASvB,KAAK,EAAE,YAAY,EAAE,CAAC;IAGtB,QAAQ,EAAE,OAAO,CAAC;IAGlB,SAAS,EAAE,OAAO,CAAC;IAGnB,MAAM,EAAE,MAAM,CAAC;IAGf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAG/B,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;IAEV,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,eAAe,UAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAapF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBxF"}

package/dist/lib/{tenant → user}/entities/user-access.entity.js

@@ -8,13 +8,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var NestAuthUserAccess_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NestAuthUserAccess = void 0;
 const typeorm_1 = require("typeorm");
-const tenant_entity_1 = require("./tenant.entity");
-const user_entity_1 = require("../../user/entities/user.entity");
+const tenant_entity_1 = require("../../tenant/entities/tenant.entity");
+const user_entity_1 = require("./user.entity");
 const role_entity_1 = require("../../role/entities/role.entity");
-let NestAuthUserAccess = class NestAuthUserAccess extends typeorm_1.BaseEntity {
+const lodash_1 = require("lodash");
+const role_mapper_util_1 = require("../../role/utils/role-mapper.util");
+let NestAuthUserAccess = NestAuthUserAccess_1 = class NestAuthUserAccess extends typeorm_1.BaseEntity {
     id;
     userId;
     tenantId;
@@ -27,6 +30,34 @@ let NestAuthUserAccess = class NestAuthUserAccess extends typeorm_1.BaseEntity {
     metadata;
     createdAt;
     updatedAt;
+    async getPermissions(tenantId) {
+        const roles = await this.getRoles(tenantId, true);
+        return (0, lodash_1.chain)(roles)
+            .map((role) => (0, role_mapper_util_1.getRolePermissionNames)(role))
+            .flatten()
+            .uniq()
+            .value();
+    }
+    async getRoles(tenantId, withPermissions = false) {
+        const access = await NestAuthUserAccess_1.findOne({
+            where: { userId: this.userId, tenantId: tenantId ? (0, typeorm_1.Equal)(tenantId) : (0, typeorm_1.IsNull)() },
+            relations: ['roles', ...(withPermissions ? ['roles.rolePermissions', 'roles.rolePermissions.permission'] : [])],
+        });
+        return access?.roles?.length ? access.roles : [];
+    }
+    async assignRoles(roleIds, manager) {
+        const ids = Array.isArray(roleIds) ? roleIds : [roleIds];
+        const roleRepo = manager
+            ? manager.getRepository(role_entity_1.NestAuthRole)
+            : role_entity_1.NestAuthRole.getRepository();
+        const accessRepo = manager
+            ? manager.getRepository(NestAuthUserAccess_1)
+            : NestAuthUserAccess_1.getRepository();
+        this.roles = ids.length
+            ? await roleRepo.find({ where: { id: (0, typeorm_1.In)(ids) } })
+            : [];
+        await accessRepo.save(this);
+    }
 };
 exports.NestAuthUserAccess = NestAuthUserAccess;
 __decorate([
@@ -86,7 +117,7 @@ __decorate([
     (0, typeorm_1.UpdateDateColumn)(),
     __metadata("design:type", Date)
 ], NestAuthUserAccess.prototype, "updatedAt", void 0);
-exports.NestAuthUserAccess = NestAuthUserAccess = __decorate([
+exports.NestAuthUserAccess = NestAuthUserAccess = NestAuthUserAccess_1 = __decorate([
     (0, typeorm_1.Entity)('nest_auth_user_accesses'),
     (0, typeorm_1.Index)('UQ_user_tenant_not_null', ['userId', 'tenantId'], {
         unique: true,

package/dist/lib/user/entities/user-access.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-access.entity.js","sourceRoot":"","sources":["../../../../src/lib/user/entities/user-access.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qCAgBiB;AACjB,uEAAqE;AACrE,+CAA6C;AAC7C,iEAA+D;AAC/D,mCAA+B;AAC/B,wEAA2E;AAWpE,IAAM,kBAAkB,0BAAxB,MAAM,kBAAmB,SAAQ,oBAAU;IAE9C,EAAE,CAAS;IAKX,MAAM,CAAS;IAKf,QAAQ,CAAS;IAGjB,IAAI,CAAe;IAGnB,MAAM,CAAiB;IASvB,KAAK,CAAiB;IAGtB,QAAQ,CAAU;IAGlB,SAAS,CAAU;IAGnB,MAAM,CAAS;IAGf,QAAQ,CAAuB;IAG/B,SAAS,CAAO;IAGhB,SAAS,CAAO;IAEhB,KAAK,CAAC,cAAc,CAAC,QAAuB;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,IAAA,cAAK,EAAC,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,yCAAsB,EAAC,IAAI,CAAC,CAAC;aAC3C,OAAO,EAAE;aACT,IAAI,EAAE;aACN,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAwB,EAAE,eAAe,GAAG,KAAK;QAC5D,MAAM,MAAM,GAAG,MAAM,oBAAkB,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAA,eAAK,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAM,GAAE,EAAE;YAC/E,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,kCAAkC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClH,CAAC,CAAC;QAEH,OAAO,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAMD,KAAK,CAAC,WAAW,CAAC,OAA0B,EAAE,OAAuB;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,OAAO;YACpB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,0BAAY,CAAC;YACrC,CAAC,CAAC,0BAAY,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,OAAO;YACtB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,oBAAkB,CAAC;YAC3C,CAAC,CAAC,oBAAkB,CAAC,aAAa,EAAE,CAAC;QAEzC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM;YACnB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CAEJ,CAAA;AAtFY,gDAAkB;AAE3B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;8CACpB;AAKX;IAHC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3B,IAAA,eAAK,GAAE;IACP,IAAA,oBAAU,EAAC,CAAC,MAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;;kDACzC;AAKf;IAHC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,eAAK,GAAE;IACP,IAAA,oBAAU,EAAC,CAAC,MAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;;oDACzC;AAGjB;IADC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,0BAAY,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;8BACjD,0BAAY;gDAAC;AAGnB;IADC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,8BAAc,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACjE,8BAAc;kDAAC;AASvB;IANC,IAAA,oBAAU,EAAC,GAAG,EAAE,CAAC,0BAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClF,IAAA,mBAAS,EAAC;QACP,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACxE,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE;KAC7E,CAAC;;iDACoB;AAGtB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;oDACR;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;qDACR;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;;kDACf;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;oDAChC;AAG/B;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;qDAAC;AAGhB;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;qDAAC;6BA7CP,kBAAkB;IAT9B,IAAA,gBAAM,EAAC,yBAAyB,CAAC;IACjC,IAAA,eAAK,EAAC,yBAAyB,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;QACtD,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,eAAK,EAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,EAAE;QACtC,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC9B,CAAC;GACW,kBAAkB,CAsF9B"}

package/dist/lib/user/entities/user.entity.d.ts

@@ -1,10 +1,10 @@
-import { BaseEntity } from "typeorm";
+import { BaseEntity, EntityManager } from "typeorm";
 import { NestAuthIdentity } from "./identity.entity";
 import { NestAuthSession } from "../../session/entities/session.entity";
 import { NestAuthOTP } from "../../auth/entities/otp.entity";
 import { NestAuthMFASecret } from "../../auth/entities/mfa-secret.entity";
-import { NestAuthRole } from "../../role/entities/role.entity";
-import { NestAuthUserAccess } from "../../tenant/entities/user-access.entity";
+import { NestAuthUserAccess } from "./user-access.entity";
+import { NestAuthPlatformAccess } from "./platform-access.entity";
 export declare class NestAuthUser extends BaseEntity {
     id: string;
     email: string;
@@ -12,7 +12,6 @@ export declare class NestAuthUser extends BaseEntity {
     phone: string;
     phoneVerifiedAt: Date;
     passwordHash: string;
-    isVerified: boolean;
     isActive: boolean;
     metadata?: Record<string, any>;
     isMfaEnabled: boolean;
@@ -22,17 +21,16 @@ export declare class NestAuthUser extends BaseEntity {
     sessions: NestAuthSession[];
     otps: NestAuthOTP[];
     userAccesses: NestAuthUserAccess[];
+    platformAccess: NestAuthPlatformAccess;
     createdAt: Date;
     updatedAt: Date;
     updateTenantFields(): void;
-    getPermissions(tenantId: string): Promise<string[]>;
-    getRoles(tenantId?: string | null, withPermissions?: boolean): Promise<NestAuthRole[]>;
-    assignRoles(roleIds: string | string[], tenantId?: string | null): Promise<void>;
-    private getOrCreateUserAccess;
-    findOrCreateIdentity(provider: string, providerId: string): Promise<NestAuthIdentity>;
-    updateOrCreateIdentity(provider: string, data: Partial<NestAuthIdentity>): Promise<NestAuthIdentity>;
-    updateEmail(newEmail: string): Promise<void>;
-    updatePhone(newPhone: string | null | undefined): Promise<void>;
+    getUserAccess(tenantId?: string, createIfNotExists?: boolean, manager?: EntityManager): Promise<NestAuthUserAccess>;
+    getPlatformAccess(createIfNotExists?: boolean, manager?: EntityManager): Promise<NestAuthPlatformAccess>;
+    findOrCreateIdentity(provider: string, providerId: string, manager?: EntityManager): Promise<NestAuthIdentity>;
+    updateOrCreateIdentity(provider: string, data: Partial<NestAuthIdentity>, manager?: EntityManager): Promise<NestAuthIdentity>;
+    updateEmail(newEmail: string, manager?: EntityManager): Promise<void>;
+    updatePhone(newPhone: string | null | undefined, manager?: EntityManager): Promise<void>;
     validatePassword(password: string): Promise<boolean>;
     setPassword(password: string): Promise<void>;
 }

package/dist/lib/user/entities/user.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../../../src/lib/user/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAOH,UAAU,EAMb,MAAM,SAAS,CAAC;AAIjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAK9E,qBACa,YAAa,SAAQ,UAAU;IAExC,EAAE,EAAE,MAAM,CAAC;IAIX,KAAK,EAAE,MAAM,CAAC;IAId,eAAe,EAAE,IAAI,CAAC;IAItB,KAAK,EAAE,MAAM,CAAC;IAId,eAAe,EAAE,IAAI,CAAC;IAGtB,YAAY,EAAE,MAAM,CAAC;IAGrB,UAAU,EAAE,OAAO,CAAC;IAGpB,QAAQ,EAAE,OAAO,CAAC;IAGlB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAG/B,YAAY,EAAE,OAAO,CAAC;IAGtB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAG/B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAGhC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAG5B,IAAI,EAAE,WAAW,EAAE,CAAC;IAGpB,YAAY,EAAE,kBAAkB,EAAE,CAAC;IAGnC,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;IAIhB,kBAAkB;IAMZ,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IASnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,eAAe,UAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAYpF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YASxE,qBAAqB;IAgB7B,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAiBzD,sBAAsB,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAChC,OAAO,CAAC,gBAAgB,CAAC;IAwBtB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5C,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB/D,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBpD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAqBrD"}
+{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../../../src/lib/user/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAOH,UAAU,EAMV,aAAa,EAEhB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,qBACa,YAAa,SAAQ,UAAU;IAExC,EAAE,EAAE,MAAM,CAAC;IAIX,KAAK,EAAE,MAAM,CAAC;IAId,eAAe,EAAE,IAAI,CAAC;IAItB,KAAK,EAAE,MAAM,CAAC;IAId,eAAe,EAAE,IAAI,CAAC;IAGtB,YAAY,EAAE,MAAM,CAAC;IAGrB,QAAQ,EAAE,OAAO,CAAC;IAGlB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAG/B,YAAY,EAAE,OAAO,CAAC;IAGtB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAG/B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAGhC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAG5B,IAAI,EAAE,WAAW,EAAE,CAAC;IAGpB,YAAY,EAAE,kBAAkB,EAAE,CAAC;IAGnC,cAAc,EAAE,sBAAsB,CAAC;IAGvC,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,CAAC;IAIhB,kBAAkB;IAUZ,aAAa,CACf,QAAQ,GAAE,MAAa,EACvB,iBAAiB,GAAE,OAAe,EAClC,OAAO,CAAC,EAAE,aAAa;IAwBrB,iBAAiB,CAAC,iBAAiB,GAAE,OAAe,EAAE,OAAO,CAAC,EAAE,aAAa;IAuB7E,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa;IA0BlF,sBAAsB,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAC/B,OAAO,CAAC,EAAE,aAAa,GACxB,OAAO,CAAC,gBAAgB,CAAC;IA8BtB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCrE,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BxF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BpD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAqBrD"}

package/dist/lib/user/entities/user.entity.js

@@ -8,30 +8,27 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var NestAuthUser_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NestAuthUser = void 0;
 const typeorm_1 = require("typeorm");
-const typeorm_2 = require("typeorm");
 const argon2_1 = require("@node-rs/argon2");
 const auth_config_service_1 = require("../../core/services/auth-config.service");
 const identity_entity_1 = require("./identity.entity");
 const session_entity_1 = require("../../session/entities/session.entity");
-const lodash_1 = require("lodash");
 const otp_entity_1 = require("../../auth/entities/otp.entity");
 const mfa_secret_entity_1 = require("../../auth/entities/mfa-secret.entity");
-const role_entity_1 = require("../../role/entities/role.entity");
-const user_access_entity_1 = require("../../tenant/entities/user-access.entity");
+const user_access_entity_1 = require("./user-access.entity");
 const auth_constants_1 = require("../../auth.constants");
 const utils_1 = require("../../utils");
-const role_mapper_util_1 = require("../../role/utils/role-mapper.util");
-let NestAuthUser = class NestAuthUser extends typeorm_1.BaseEntity {
+const platform_access_entity_1 = require("./platform-access.entity");
+let NestAuthUser = NestAuthUser_1 = class NestAuthUser extends typeorm_1.BaseEntity {
     id;
     email;
     emailVerifiedAt;
     phone;
     phoneVerifiedAt;
     passwordHash;
-    isVerified;
     isActive;
     metadata;
     isMfaEnabled;
@@ -41,6 +38,7 @@ let NestAuthUser = class NestAuthUser extends typeorm_1.BaseEntity {
     sessions;
     otps;
     userAccesses;
+    platformAccess;
     createdAt;
     updatedAt;
     updateTenantFields() {
@@ -48,117 +46,137 @@ let NestAuthUser = class NestAuthUser extends typeorm_1.BaseEntity {
             this.email = this.email.toLowerCase().trim();
         }
     }
-    async getPermissions(tenantId) {
-        const roles = await this.getRoles(tenantId, true);
-        return (0, lodash_1.chain)(roles)
-            .map((role) => (0, role_mapper_util_1.getRolePermissionNames)(role))
-            .flatten()
-            .uniq()
-            .value();
-    }
-    async getRoles(tenantId, withPermissions = false) {
-        const access = await user_access_entity_1.NestAuthUserAccess.findOne({
-            where: { userId: this.id, tenantId: tenantId || (0, typeorm_1.IsNull)() },
-            relations: ['roles', ...(withPermissions ? ['roles.rolePermissions', 'roles.rolePermissions.permission'] : [])],
+    async getUserAccess(tenantId = null, createIfNotExists = false, manager) {
+        const repo = manager
+            ? manager.getRepository(user_access_entity_1.NestAuthUserAccess)
+            : user_access_entity_1.NestAuthUserAccess.getRepository();
+        const existingUserAccess = await repo.findOne({
+            where: { userId: this.id, tenantId: tenantId ? (0, typeorm_1.Equal)(tenantId) : (0, typeorm_1.IsNull)() }
         });
-        if (access?.roles?.length) {
-            return access.roles;
+        if (existingUserAccess) {
+            return existingUserAccess;
         }
-        return [];
-    }
-    async assignRoles(roleIds, tenantId) {
-        const access = await this.getOrCreateUserAccess(tenantId);
-        const ids = Array.isArray(roleIds) ? roleIds : [roleIds];
-        access.roles = ids.length
-            ? await role_entity_1.NestAuthRole.find({ where: { id: (0, typeorm_2.In)(ids) } })
-            : [];
-        await access.save();
+        if (createIfNotExists) {
+            const userAccess = repo.create({ userId: this.id, tenantId });
+            await repo.save(userAccess);
+            return userAccess;
+        }
+        return null;
     }
-    async getOrCreateUserAccess(tenantId) {
-        const config = auth_config_service_1.AuthConfigService.getOptions();
-        const tenantRequired = (0, utils_1.requiredTenant)(config?.tenant ?? {}, tenantId);
-        let access = await user_access_entity_1.NestAuthUserAccess.findOne({
-            where: { userId: this.id, ...tenantRequired ? { tenantId } : {} },
-            relations: ['roles'],
+    async getPlatformAccess(createIfNotExists = false, manager) {
+        const repo = manager
+            ? manager.getRepository(platform_access_entity_1.NestAuthPlatformAccess)
+            : platform_access_entity_1.NestAuthPlatformAccess.getRepository();
+        const existingPlatformAccess = await repo.findOne({
+            where: { userId: this.id }
         });
-        if (!access) {
-            access = user_access_entity_1.NestAuthUserAccess.create({ userId: this.id, ...tenantId ? { tenantId } : {} });
-            await access.save();
-            access.roles = [];
+        if (existingPlatformAccess) {
+            return existingPlatformAccess;
+        }
+        if (createIfNotExists) {
+            const platformAccess = repo.create({ userId: this.id });
+            await repo.save(platformAccess);
+            return platformAccess;
         }
-        return access;
+        return null;
     }
-    async findOrCreateIdentity(provider, providerId) {
-        const existingIdentity = await identity_entity_1.NestAuthIdentity.findOne({
+    async findOrCreateIdentity(provider, providerId, manager) {
+        const repo = manager
+            ? manager.getRepository(identity_entity_1.NestAuthIdentity)
+            : identity_entity_1.NestAuthIdentity.getRepository();
+        const existingIdentity = await repo.findOne({
             where: { provider, providerId, userId: this.id }
         });
         if (existingIdentity) {
             return existingIdentity;
         }
-        const identity = new identity_entity_1.NestAuthIdentity();
-        identity.provider = provider;
-        identity.providerId = providerId;
-        identity.user = this;
-        return identity.save();
+        const identity = repo.create({
+            provider,
+            providerId,
+            userId: this.id,
+        });
+        return repo.save(identity);
     }
-    async updateOrCreateIdentity(provider, data) {
-        const existingIdentity = await identity_entity_1.NestAuthIdentity.findOne({
+    async updateOrCreateIdentity(provider, data, manager) {
+        const repo = manager
+            ? manager.getRepository(identity_entity_1.NestAuthIdentity)
+            : identity_entity_1.NestAuthIdentity.getRepository();
+        const existingIdentity = await repo.findOne({
             where: { provider, userId: this.id },
         });
         if (existingIdentity) {
             Object.assign(existingIdentity, data);
-            return existingIdentity.save();
+            return repo.save(existingIdentity);
         }
-        const newIdentity = identity_entity_1.NestAuthIdentity.create({
+        const newIdentity = repo.create({
             provider,
             userId: this.id,
             ...data,
         });
-        return newIdentity.save();
+        return repo.save(newIdentity);
     }
-    async updateEmail(newEmail) {
+    async updateEmail(newEmail, manager) {
         const normalized = newEmail ? newEmail.toLowerCase().trim() : null;
         const previousEmail = this.email?.toLowerCase().trim() ?? null;
         this.email = normalized ?? undefined;
         if (previousEmail !== normalized) {
             this.emailVerifiedAt = null;
         }
+        const identityRepo = manager
+            ? manager.getRepository(identity_entity_1.NestAuthIdentity)
+            : identity_entity_1.NestAuthIdentity.getRepository();
+        const userRepo = manager
+            ? manager.getRepository(NestAuthUser_1)
+            : NestAuthUser_1.getRepository();
         if (normalized) {
-            await this.updateOrCreateIdentity(auth_constants_1.EMAIL_AUTH_PROVIDER, { providerId: normalized });
+            await this.updateOrCreateIdentity(auth_constants_1.EMAIL_AUTH_PROVIDER, { providerId: normalized }, manager);
         }
         else {
-            const identity = await identity_entity_1.NestAuthIdentity.findOne({
+            const identity = await identityRepo.findOne({
                 where: { userId: this.id, provider: auth_constants_1.EMAIL_AUTH_PROVIDER },
             });
             if (identity) {
-                await identity.remove();
+                await identityRepo.remove(identity);
             }
         }
-        await this.save();
+        await userRepo.save(this);
     }
-    async updatePhone(newPhone) {
+    async updatePhone(newPhone, manager) {
         const value = (0, utils_1.normalizedPhone)(newPhone);
         const previousPhone = (0, utils_1.normalizedPhone)(this.phone) ?? null;
         this.phone = value ?? undefined;
         if (previousPhone !== value) {
             this.phoneVerifiedAt = null;
         }
+        const identityRepo = manager
+            ? manager.getRepository(identity_entity_1.NestAuthIdentity)
+            : identity_entity_1.NestAuthIdentity.getRepository();
+        const userRepo = manager
+            ? manager.getRepository(NestAuthUser_1)
+            : NestAuthUser_1.getRepository();
         if (value) {
-            await this.updateOrCreateIdentity(auth_constants_1.PHONE_AUTH_PROVIDER, { providerId: value });
+            await this.updateOrCreateIdentity(auth_constants_1.PHONE_AUTH_PROVIDER, { providerId: value }, manager);
         }
         else {
-            const identity = await identity_entity_1.NestAuthIdentity.findOne({
+            const identity = await identityRepo.findOne({
                 where: { userId: this.id, provider: auth_constants_1.PHONE_AUTH_PROVIDER },
             });
             if (identity) {
-                await identity.remove();
+                await identityRepo.remove(identity);
             }
         }
-        await this.save();
+        await userRepo.save(this);
     }
     async validatePassword(password) {
-        if (!this.passwordHash)
-            return false;
+        let passwordHash = this.passwordHash;
+        if (!this.passwordHash) {
+            const user = await NestAuthUser_1.createQueryBuilder('user').select('user.passwordHash').where('user.id = :id', { id: this.id }).getOne();
+            if (!user?.passwordHash) {
+                return false;
+            }
+            passwordHash = user.passwordHash;
+        }
+        ;
         const options = auth_config_service_1.AuthConfigService.getOptions();
         const hasCustomHash = !!options.password?.hash;
         const hasCustomVerify = !!options.password?.verify;
@@ -166,10 +184,10 @@ let NestAuthUser = class NestAuthUser extends typeorm_1.BaseEntity {
             throw new Error('password.hash and password.verify must be provided together');
         }
         if (hasCustomVerify) {
-            return await options.password.verify(password, this.passwordHash);
+            return await options.password.verify(password, passwordHash);
         }
         try {
-            return await (0, argon2_1.verify)(this.passwordHash, password);
+            return await (0, argon2_1.verify)(passwordHash, password);
         }
         catch (error) {
             return false;
@@ -220,13 +238,9 @@ __decorate([
     __metadata("design:type", Date)
 ], NestAuthUser.prototype, "phoneVerifiedAt", void 0);
 __decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
+    (0, typeorm_1.Column)({ nullable: true, select: false }),
     __metadata("design:type", String)
 ], NestAuthUser.prototype, "passwordHash", void 0);
-__decorate([
-    (0, typeorm_1.Column)({ default: false }),
-    __metadata("design:type", Boolean)
-], NestAuthUser.prototype, "isVerified", void 0);
 __decorate([
     (0, typeorm_1.Column)({ default: true }),
     __metadata("design:type", Boolean)
@@ -263,6 +277,10 @@ __decorate([
     (0, typeorm_1.OneToMany)(() => user_access_entity_1.NestAuthUserAccess, access => access.user),
     __metadata("design:type", Array)
 ], NestAuthUser.prototype, "userAccesses", void 0);
+__decorate([
+    (0, typeorm_1.OneToOne)(() => platform_access_entity_1.NestAuthPlatformAccess, access => access.user),
+    __metadata("design:type", platform_access_entity_1.NestAuthPlatformAccess)
+], NestAuthUser.prototype, "platformAccess", void 0);
 __decorate([
     (0, typeorm_1.CreateDateColumn)(),
     __metadata("design:type", Date)
@@ -278,7 +296,7 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", void 0)
 ], NestAuthUser.prototype, "updateTenantFields", null);
-exports.NestAuthUser = NestAuthUser = __decorate([
+exports.NestAuthUser = NestAuthUser = NestAuthUser_1 = __decorate([
     (0, typeorm_1.Entity)('nest_auth_users')
 ], NestAuthUser);
 //# sourceMappingURL=user.entity.js.map