@carlonicora/nestjs-neo4jsonapi 1.115.0 → 1.116.0

package/dist/foundations/auth/entities/pending-auth.d.ts

@@ -0,0 +1,39 @@
+import { Entity } from "../../../common";
+/**
+ * PendingAuth Entity Type
+ *
+ * The response returned when a user with 2FA enabled successfully
+ * authenticates with a password but still has to complete 2FA verification.
+ *
+ * PendingAuth is NEVER persisted: no `:PendingAuth` node exists in Neo4j. The
+ * login flow hands a plain object straight to `JsonApiService.buildSingle`,
+ * so the descriptor exists only to describe the JSON:API shape.
+ *
+ * NAMING: the property names below are the ON-THE-WIRE attribute names of the
+ * deleted `PendingAuthSerialiser` (`pendingToken`, `expiresAt`,
+ * `availableMethods`, `preferredMethod`). The descriptor-based serialiser maps
+ * every attribute 1:1 from the field name (see DescriptorBasedSerialiser.create),
+ * so it has no way to rename `token` -> `pendingToken` the way the hand-written
+ * serialiser did. Keeping the entity properties on the wire names is what
+ * preserves the response byte-for-byte — do not "tidy" them back to
+ * `token` / `expiration`.
+ */
+export type PendingAuth = Entity & {
+    /** The pending JWT token (limited access until 2FA is completed) */
+    pendingToken: string;
+    /** When the pending session expires */
+    expiresAt: Date;
+    /** Available 2FA methods for this user */
+    availableMethods: string[];
+    /** The user's preferred 2FA method */
+    preferredMethod?: string;
+};
+/**
+ * PendingAuth Entity Descriptor
+ *
+ * SECURITY: like Auth, deliberately NOT registered with the
+ * GraphDescriptorRegistry — `pendingToken` is a live (if limited) credential.
+ */
+export declare const PendingAuthDescriptor: import("../../../common").EntityDescriptor<PendingAuth, {}>;
+export type PendingAuthDescriptorType = typeof PendingAuthDescriptor;
+//# sourceMappingURL=pending-auth.d.ts.map

package/dist/foundations/auth/entities/pending-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-auth.d.ts","sourceRoot":"","sources":["../../../../src/foundations/auth/entities/pending-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IACjC,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IAErB,uCAAuC;IACvC,SAAS,EAAE,IAAI,CAAC;IAEhB,0CAA0C;IAC1C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAE3B,sCAAsC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,6DAkChC,CAAC;AAGH,MAAM,MAAM,yBAAyB,GAAG,OAAO,qBAAqB,CAAC"}

package/dist/foundations/auth/entities/pending-auth.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PendingAuthDescriptor = void 0;
+const common_1 = require("../../../common");
+const pending_auth_meta_1 = require("./pending-auth.meta");
+/**
+ * PendingAuth Entity Descriptor
+ *
+ * SECURITY: like Auth, deliberately NOT registered with the
+ * GraphDescriptorRegistry — `pendingToken` is a live (if limited) credential.
+ */
+exports.PendingAuthDescriptor = (0, common_1.defineEntity)()({
+    ...pending_auth_meta_1.pendingAuthMeta,
+    // Not persisted, never joined to a Company; the 2FA challenge is issued
+    // before any company scope exists in CLS.
+    isCompanyScoped: false,
+    description: "A pending two-factor authentication challenge (sfida a due fattori): issued when the password check succeeds but 2FA verification is still required.",
+    fields: {
+        pendingToken: {
+            type: "string",
+            required: true,
+            description: "Short-lived JWT with limited access, valid only for completing the 2FA verification of this challenge.",
+        },
+        expiresAt: {
+            type: "datetime",
+            required: true,
+            description: "The instant this pending 2FA challenge expires and can no longer be completed.",
+        },
+        availableMethods: {
+            type: "string[]",
+            description: "The 2FA methods this user can verify with (e.g. totp, passkey, backup code).",
+        },
+        preferredMethod: {
+            type: "string",
+            description: "The 2FA method the user selected as preferred, so the client can pre-select it.",
+        },
+    },
+    // No relationships: the challenge carries no resource linkage.
+    relationships: {},
+});
+//# sourceMappingURL=pending-auth.js.map

package/dist/foundations/auth/entities/pending-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-auth.js","sourceRoot":"","sources":["../../../../src/foundations/auth/entities/pending-auth.ts"],"names":[],"mappings":";;;AAAA,4CAAuD;AACvD,2DAAsD;AAmCtD;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,IAAA,qBAAY,GAAe,CAAC;IAC/D,GAAG,mCAAe;IAElB,wEAAwE;IACxE,0CAA0C;IAC1C,eAAe,EAAE,KAAK;IAEtB,WAAW,EACT,sJAAsJ;IAExJ,MAAM,EAAE;QACN,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EACT,wGAAwG;SAC3G;QACD,SAAS,EAAE;YACT,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,gFAAgF;SAC9F;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,8EAA8E;SAC5F;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,iFAAiF;SAC/F;KACF;IAED,+DAA+D;IAC/D,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC"}

package/dist/foundations/auth/index.d.ts

@@ -1,8 +1,21 @@
 export { AuthModule } from "./auth.module";
 export { AuthCompanyController } from "./controllers/auth.company.controller";
 export { AuthController } from "./controllers/auth.controller";
+export { AuthGoogleController } from "./controllers/auth.google.controller";
+export { AuthPostForgotDTO } from "./dtos/auth.post.forgot.dto";
+export { AuthPostLoginAttributesDTO, AuthPostLoginDataDTO, AuthPostLoginDTO } from "./dtos/auth.post.login.dto";
+export { AuthPostRegisterAttributesDTO, AuthPostRegisterDataDTO, AuthPostRegisterDTO, } from "./dtos/auth.post.register.dto";
+export { AuthPostResetPasswordDTO } from "./dtos/auth.post.resetpassword.dto";
+export { Auth, AuthDescriptor } from "./entities/auth";
+export { AuthCode, AuthCodeDescriptor } from "./entities/auth.code";
+export { authCodeMeta } from "./entities/auth.code.meta";
 export { authMeta } from "./entities/auth.meta";
+export { PendingAuth, PendingAuthDescriptor } from "./entities/pending-auth";
+export { pendingAuthMeta } from "./entities/pending-auth.meta";
 export { REGISTRATION_HOOK, RegistrationHookInterface } from "./interfaces/registration-hook.interface";
+export { AuthRepository } from "./repositories/auth.repository";
+export { AuthGoogleService } from "./services/auth.google.service";
 export { AuthService } from "./services/auth.service";
+export { PendingRegistrationService } from "./services/pending-registration.service";
 export { TrialQueueService } from "./services/trial-queue.service";
 //# sourceMappingURL=index.d.ts.map

package/dist/foundations/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACxG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAChH,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/foundations/auth/index.js

@@ -1,18 +1,48 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TrialQueueService = exports.AuthService = exports.REGISTRATION_HOOK = exports.authMeta = exports.AuthController = exports.AuthCompanyController = exports.AuthModule = void 0;
+exports.TrialQueueService = exports.PendingRegistrationService = exports.AuthService = exports.AuthGoogleService = exports.AuthRepository = exports.REGISTRATION_HOOK = exports.pendingAuthMeta = exports.PendingAuthDescriptor = exports.authMeta = exports.authCodeMeta = exports.AuthCodeDescriptor = exports.AuthDescriptor = exports.AuthPostResetPasswordDTO = exports.AuthPostRegisterDTO = exports.AuthPostRegisterDataDTO = exports.AuthPostRegisterAttributesDTO = exports.AuthPostLoginDTO = exports.AuthPostLoginDataDTO = exports.AuthPostLoginAttributesDTO = exports.AuthPostForgotDTO = exports.AuthGoogleController = exports.AuthController = exports.AuthCompanyController = exports.AuthModule = void 0;
 var auth_module_1 = require("./auth.module");
 Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
 var auth_company_controller_1 = require("./controllers/auth.company.controller");
 Object.defineProperty(exports, "AuthCompanyController", { enumerable: true, get: function () { return auth_company_controller_1.AuthCompanyController; } });
 var auth_controller_1 = require("./controllers/auth.controller");
 Object.defineProperty(exports, "AuthController", { enumerable: true, get: function () { return auth_controller_1.AuthController; } });
+var auth_google_controller_1 = require("./controllers/auth.google.controller");
+Object.defineProperty(exports, "AuthGoogleController", { enumerable: true, get: function () { return auth_google_controller_1.AuthGoogleController; } });
+var auth_post_forgot_dto_1 = require("./dtos/auth.post.forgot.dto");
+Object.defineProperty(exports, "AuthPostForgotDTO", { enumerable: true, get: function () { return auth_post_forgot_dto_1.AuthPostForgotDTO; } });
+var auth_post_login_dto_1 = require("./dtos/auth.post.login.dto");
+Object.defineProperty(exports, "AuthPostLoginAttributesDTO", { enumerable: true, get: function () { return auth_post_login_dto_1.AuthPostLoginAttributesDTO; } });
+Object.defineProperty(exports, "AuthPostLoginDataDTO", { enumerable: true, get: function () { return auth_post_login_dto_1.AuthPostLoginDataDTO; } });
+Object.defineProperty(exports, "AuthPostLoginDTO", { enumerable: true, get: function () { return auth_post_login_dto_1.AuthPostLoginDTO; } });
+var auth_post_register_dto_1 = require("./dtos/auth.post.register.dto");
+Object.defineProperty(exports, "AuthPostRegisterAttributesDTO", { enumerable: true, get: function () { return auth_post_register_dto_1.AuthPostRegisterAttributesDTO; } });
+Object.defineProperty(exports, "AuthPostRegisterDataDTO", { enumerable: true, get: function () { return auth_post_register_dto_1.AuthPostRegisterDataDTO; } });
+Object.defineProperty(exports, "AuthPostRegisterDTO", { enumerable: true, get: function () { return auth_post_register_dto_1.AuthPostRegisterDTO; } });
+var auth_post_resetpassword_dto_1 = require("./dtos/auth.post.resetpassword.dto");
+Object.defineProperty(exports, "AuthPostResetPasswordDTO", { enumerable: true, get: function () { return auth_post_resetpassword_dto_1.AuthPostResetPasswordDTO; } });
+var auth_1 = require("./entities/auth");
+Object.defineProperty(exports, "AuthDescriptor", { enumerable: true, get: function () { return auth_1.AuthDescriptor; } });
+var auth_code_1 = require("./entities/auth.code");
+Object.defineProperty(exports, "AuthCodeDescriptor", { enumerable: true, get: function () { return auth_code_1.AuthCodeDescriptor; } });
+var auth_code_meta_1 = require("./entities/auth.code.meta");
+Object.defineProperty(exports, "authCodeMeta", { enumerable: true, get: function () { return auth_code_meta_1.authCodeMeta; } });
 var auth_meta_1 = require("./entities/auth.meta");
 Object.defineProperty(exports, "authMeta", { enumerable: true, get: function () { return auth_meta_1.authMeta; } });
+var pending_auth_1 = require("./entities/pending-auth");
+Object.defineProperty(exports, "PendingAuthDescriptor", { enumerable: true, get: function () { return pending_auth_1.PendingAuthDescriptor; } });
+var pending_auth_meta_1 = require("./entities/pending-auth.meta");
+Object.defineProperty(exports, "pendingAuthMeta", { enumerable: true, get: function () { return pending_auth_meta_1.pendingAuthMeta; } });
 var registration_hook_interface_1 = require("./interfaces/registration-hook.interface");
 Object.defineProperty(exports, "REGISTRATION_HOOK", { enumerable: true, get: function () { return registration_hook_interface_1.REGISTRATION_HOOK; } });
+var auth_repository_1 = require("./repositories/auth.repository");
+Object.defineProperty(exports, "AuthRepository", { enumerable: true, get: function () { return auth_repository_1.AuthRepository; } });
+var auth_google_service_1 = require("./services/auth.google.service");
+Object.defineProperty(exports, "AuthGoogleService", { enumerable: true, get: function () { return auth_google_service_1.AuthGoogleService; } });
 var auth_service_1 = require("./services/auth.service");
 Object.defineProperty(exports, "AuthService", { enumerable: true, get: function () { return auth_service_1.AuthService; } });
+var pending_registration_service_1 = require("./services/pending-registration.service");
+Object.defineProperty(exports, "PendingRegistrationService", { enumerable: true, get: function () { return pending_registration_service_1.PendingRegistrationService; } });
 var trial_queue_service_1 = require("./services/trial-queue.service");
 Object.defineProperty(exports, "TrialQueueService", { enumerable: true, get: function () { return trial_queue_service_1.TrialQueueService; } });
 //# sourceMappingURL=index.js.map

package/dist/foundations/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/auth/index.ts"],"names":[],"mappings":";;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,iFAA8E;AAArE,gIAAA,qBAAqB,OAAA;AAC9B,iEAA+D;AAAtD,iHAAA,cAAc,OAAA;AACvB,kDAAgD;AAAvC,qGAAA,QAAQ,OAAA;AACjB,wFAAwG;AAA/F,gIAAA,iBAAiB,OAAA;AAC1B,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,sEAAmE;AAA1D,wHAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/auth/index.ts"],"names":[],"mappings":";;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,iFAA8E;AAArE,gIAAA,qBAAqB,OAAA;AAC9B,iEAA+D;AAAtD,iHAAA,cAAc,OAAA;AACvB,+EAA4E;AAAnE,8HAAA,oBAAoB,OAAA;AAC7B,oEAAgE;AAAvD,yHAAA,iBAAiB,OAAA;AAC1B,kEAAgH;AAAvG,iIAAA,0BAA0B,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAAE,uHAAA,gBAAgB,OAAA;AAC3E,wEAIuC;AAHrC,uIAAA,6BAA6B,OAAA;AAC7B,iIAAA,uBAAuB,OAAA;AACvB,6HAAA,mBAAmB,OAAA;AAErB,kFAA8E;AAArE,uIAAA,wBAAwB,OAAA;AACjC,wCAAuD;AAAxC,sGAAA,cAAc,OAAA;AAC7B,kDAAoE;AAAjD,+GAAA,kBAAkB,OAAA;AACrC,4DAAyD;AAAhD,8GAAA,YAAY,OAAA;AACrB,kDAAgD;AAAvC,qGAAA,QAAQ,OAAA;AACjB,wDAA6E;AAAvD,qHAAA,qBAAqB,OAAA;AAC3C,kEAA+D;AAAtD,oHAAA,eAAe,OAAA;AACxB,wFAAwG;AAA/F,gIAAA,iBAAiB,OAAA;AAC1B,kEAAgE;AAAvD,iHAAA,cAAc,OAAA;AACvB,sEAAmE;AAA1D,wHAAA,iBAAiB,OAAA;AAC1B,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,wFAAqF;AAA5E,0IAAA,0BAA0B,OAAA;AACnC,sEAAmE;AAA1D,wHAAA,iBAAiB,OAAA"}

package/dist/foundations/auth/repositories/auth.repository.d.ts

@@ -1,14 +1,54 @@
-import { OnModuleInit } from "@nestjs/common";
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
 import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
 import { SecurityService } from "../../../core/security/services/security.service";
-import { AuthCode } from "../../auth/entities/auth.code.entity";
-import { Auth } from "../../auth/entities/auth.entity";
 import { Company } from "../../company";
 import { User } from "../../user/entities/user";
-export declare class AuthRepository implements OnModuleInit {
-    private readonly neo4j;
-    private readonly security;
-    constructor(neo4j: Neo4jService, security: SecurityService);
+import { AuthCode } from "../entities/auth.code";
+import { Auth, AuthDescriptor } from "../entities/auth";
+/**
+ * Auth is deliberately NOT company-scoped (see entities/auth.ts) and every
+ * method here is bespoke — JWT signing lives in AuthService, and reads
+ * enrich the user with role/company/feature/module permissions via a
+ * hand-written Cypher CASE cascade that doesn't map onto the generic
+ * descriptor CRUD (create/put/patch/find/findById). None of
+ * AbstractRepository's inherited generic methods are used; extending it
+ * here is for descriptor typing consistency only.
+ *
+ * Two methods collide by name with AbstractRepository's generic surface but
+ * have incompatible signatures/return types (this repo's `findById` takes
+ * `{ authId }` and does permission-enrichment; its `create` takes
+ * `{ authId, userId, token, expiration }` and returns the created Auth) —
+ * both were renamed (`findAuthById`, `createSession`) to resolve the
+ * TS2416 override collision. AuthRepository has no external callers other
+ * than AuthService, so these are internal-only renames.
+ */
+export declare class AuthRepository extends AbstractRepository<Auth, typeof AuthDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<Auth, {
+        user: {
+            model: import("../../../common/interfaces/datamodel.interface").DataMeta;
+            direction: "in";
+            relationship: string;
+            cardinality: "one";
+            description: string;
+        };
+    }>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    /**
+     * Models are resolved from the registry rather than referenced statically so
+     * that an application which registers an extended model (extra
+     * childrenTokens, extra relationships) is served ITS model here — mirrors
+     * ContentRepository.getContentModel().
+     */
+    private getAuthModel;
+    private getAuthCodeModel;
+    private getUserModel;
+    /**
+     * Bespoke constraint set: the inherited AbstractRepository.onModuleInit would
+     * also derive a FULLTEXT index over the descriptor's string fields — which
+     * here are the live session token and the company-selection token. Neither
+     * has any business being searchable text.
+     */
     onModuleInit(): Promise<void>;
     setLastLogin(params: {
         userId: string;
@@ -16,7 +56,7 @@ export declare class AuthRepository implements OnModuleInit {
     findByCode(params: {
         code: string;
     }): Promise<AuthCode>;
-    findById(params: {
+    findAuthById(params: {
         authId: string;
     }): Promise<Auth>;
     deleteByCode(params: {
@@ -69,7 +109,7 @@ export declare class AuthRepository implements OnModuleInit {
      * user who belongs to more than one company would get a session whose company
      * and roles disagree.
      */
-    create(params: {
+    createSession(params: {
         authId: string;
         userId: string;
         token: string;

package/dist/foundations/auth/repositories/auth.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/auth/repositories/auth.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAEhE,OAAO,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAEvD,OAAO,EAAE,OAAO,EAAkC,MAAM,eAAe,CAAC;AAOxE,OAAO,EAAE,IAAI,EAAkB,MAAM,0BAA0B,CAAC;AAEhE,qBACa,cAAe,YAAW,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe;IAGtC,YAAY;IAUZ,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvD,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAevD,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDnD,YAAY,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,aAAa,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAevD,UAAU,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3F,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtE,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAe7D,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB/D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3E,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBrE;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAiBvE;;;;;;OAMG;IACG,MAAM,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,IAAI,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0IX,WAAW,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCrD,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7D,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1E,gBAAgB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB7E,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1D,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBpE"}
+{"version":3,"file":"auth.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/auth/repositories/auth.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAIxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,OAAO,EAAkC,MAAM,eAAe,CAAC;AAOxE,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,cAAe,SAAQ,kBAAkB,CAAC,IAAI,EAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAC/F,SAAS,CAAC,QAAQ,CAAC,UAAU;;;;;;;;OAAkB;gBAEnC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAIzF;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,YAAY;IAQpB;;;;;OAKG;IACG,YAAY;IAUZ,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvD,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAevD,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDvD,YAAY,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,aAAa,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAevD,UAAU,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3F,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtE,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAe7D,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB/D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3E,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBrE;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAiBvE;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,IAAI,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0IX,WAAW,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCrD,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7D,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1E,gBAAgB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB7E,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1D,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBpE"}

package/dist/foundations/auth/repositories/auth.repository.js

@@ -12,23 +12,76 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthRepository = void 0;
 const common_1 = require("@nestjs/common");
 const crypto_1 = require("crypto");
+const nestjs_cls_1 = require("nestjs-cls");
 const system_roles_1 = require("../../../common/constants/system.roles");
+const registry_1 = require("../../../common/registries/registry");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
 const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
 const security_service_1 = require("../../../core/security/services/security.service");
-const auth_code_model_1 = require("../../auth/entities/auth.code.model");
-const auth_model_1 = require("../../auth/entities/auth.model");
 const company_1 = require("../../company");
 const feature_meta_1 = require("../../feature/entities/feature.meta");
 const membership_query_1 = require("../../membership/queries/membership.query");
 const module_model_1 = require("../../module/entities/module.model");
 const feature_module_query_1 = require("../../module/queries/feature.module.query");
 const user_1 = require("../../user");
-const user_2 = require("../../user/entities/user");
-let AuthRepository = class AuthRepository {
-    constructor(neo4j, security) {
-        this.neo4j = neo4j;
-        this.security = security;
+const auth_code_meta_1 = require("../entities/auth.code.meta");
+const auth_1 = require("../entities/auth");
+const auth_meta_1 = require("../entities/auth.meta");
+/**
+ * Auth is deliberately NOT company-scoped (see entities/auth.ts) and every
+ * method here is bespoke — JWT signing lives in AuthService, and reads
+ * enrich the user with role/company/feature/module permissions via a
+ * hand-written Cypher CASE cascade that doesn't map onto the generic
+ * descriptor CRUD (create/put/patch/find/findById). None of
+ * AbstractRepository's inherited generic methods are used; extending it
+ * here is for descriptor typing consistency only.
+ *
+ * Two methods collide by name with AbstractRepository's generic surface but
+ * have incompatible signatures/return types (this repo's `findById` takes
+ * `{ authId }` and does permission-enrichment; its `create` takes
+ * `{ authId, userId, token, expiration }` and returns the created Auth) —
+ * both were renamed (`findAuthById`, `createSession`) to resolve the
+ * TS2416 override collision. AuthRepository has no external callers other
+ * than AuthService, so these are internal-only renames.
+ */
+let AuthRepository = class AuthRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = auth_1.AuthDescriptor;
     }
+    /**
+     * Models are resolved from the registry rather than referenced statically so
+     * that an application which registers an extended model (extra
+     * childrenTokens, extra relationships) is served ITS model here — mirrors
+     * ContentRepository.getContentModel().
+     */
+    getAuthModel() {
+        const model = registry_1.modelRegistry.get(auth_meta_1.authMeta.nodeName);
+        if (!model) {
+            throw new Error(`AuthModel not found in registry for nodeName: ${auth_meta_1.authMeta.nodeName}`);
+        }
+        return model;
+    }
+    getAuthCodeModel() {
+        const model = registry_1.modelRegistry.get(auth_code_meta_1.authCodeMeta.nodeName);
+        if (!model) {
+            throw new Error(`AuthCodeModel not found in registry for nodeName: ${auth_code_meta_1.authCodeMeta.nodeName}`);
+        }
+        return model;
+    }
+    getUserModel() {
+        const model = registry_1.modelRegistry.get(user_1.userMeta.nodeName);
+        if (!model) {
+            throw new Error(`UserModel not found in registry for nodeName: ${user_1.userMeta.nodeName}`);
+        }
+        return model;
+    }
+    /**
+     * Bespoke constraint set: the inherited AbstractRepository.onModuleInit would
+     * also derive a FULLTEXT index over the descriptor's string fields — which
+     * here are the live session token and the company-selection token. Neither
+     * has any business being searchable text.
+     */
     async onModuleInit() {
         await this.neo4j.writeOne({
             query: `CREATE CONSTRAINT authcode_id IF NOT EXISTS FOR (authcode:AuthCode) REQUIRE authcode.id IS UNIQUE`,
@@ -48,7 +101,7 @@ let AuthRepository = class AuthRepository {
         await this.neo4j.writeOne(query);
     }
     async findByCode(params) {
-        const query = this.neo4j.initQuery({ serialiser: auth_code_model_1.AuthCodeModel });
+        const query = this.neo4j.initQuery({ serialiser: this.getAuthCodeModel() });
         query.queryParams = {
             authCodeId: params.code,
         };
@@ -58,8 +111,8 @@ let AuthRepository = class AuthRepository {
     `;
         return this.neo4j.readOne(query);
     }
-    async findById(params) {
-        let query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+    async findAuthById(params) {
+        let query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             ...query.queryParams,
             authId: params.authId,
@@ -134,9 +187,9 @@ let AuthRepository = class AuthRepository {
         query.query = `
       MATCH (auth:Auth {id: $authId})
       CREATE (authcode:AuthCode {
-        id: $authCodeId, 
-        expiration: datetime($expiration), 
-        createdAt: datetime(), 
+        id: $authCodeId,
+        expiration: datetime($expiration),
+        createdAt: datetime(),
         updatedAt: datetime()
       })
       WITH auth, authcode
@@ -145,22 +198,22 @@ let AuthRepository = class AuthRepository {
         await this.neo4j.writeOne(query);
     }
     async refreshToken(params) {
-        const query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+        const query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             authId: params.authId,
             token: params.token,
-            expiration: this.security.refreshTokenExpiration.toISOString(),
+            expiration: this.securityService.refreshTokenExpiration.toISOString(),
         };
         query.query = `
-      MATCH (auth:Auth {id: $authId}) 
-      SET auth.token = $token, 
+      MATCH (auth:Auth {id: $authId})
+      SET auth.token = $token,
       auth.expiration = datetime($expiration)
       RETURN auth
     `;
         return this.neo4j.writeOne(query);
     }
     async findByRefreshToken(params) {
-        const query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+        const query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             authId: params.authId,
         };
@@ -171,7 +224,7 @@ let AuthRepository = class AuthRepository {
         return this.neo4j.readOne(query);
     }
     async findValidToken(params) {
-        const query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+        const query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             userId: params.userId,
             expiration: {
@@ -179,7 +232,7 @@ let AuthRepository = class AuthRepository {
             },
         };
         query.query = `
-      MATCH (auth:Auth {userId: $userId, expiration: $expiration}) 
+      MATCH (auth:Auth {userId: $userId, expiration: $expiration})
       RETURN auth
     `;
         return this.neo4j.readOne(query);
@@ -193,7 +246,7 @@ let AuthRepository = class AuthRepository {
      * the CLS value injected by `initQuery()` — identical to the previous behaviour.
      */
     async findUserById(params) {
-        const query = this.neo4j.initQuery({ serialiser: user_2.UserDescriptor.model });
+        const query = this.neo4j.initQuery({ serialiser: this.getUserModel() });
         query.queryParams = {
             ...query.queryParams,
             userId: params.userId,
@@ -205,7 +258,7 @@ let AuthRepository = class AuthRepository {
       ${(0, membership_query_1.membershipRoleMatch)({ userAlias: "user", roleAlias: "user_role" })}
       OPTIONAL MATCH (user)-[:BELONGS_TO]->(user_company:Company${params.companyId ? ` {id: $companyId}` : ``})
       MATCH (${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}:${feature_meta_1.featureMeta.labelName})
-      WHERE ${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}.isCore = true 
+      WHERE ${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}.isCore = true
       OR EXISTS {((${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName})-[:HAS_FEATURE]->(${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}))}
 
       RETURN user, user_role, user_company, ${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}
@@ -254,9 +307,9 @@ let AuthRepository = class AuthRepository {
      * user who belongs to more than one company would get a session whose company
      * and roles disagree.
      */
-    async create(params) {
+    async createSession(params) {
         const user = await this.findUserById({ userId: params.userId, companyId: params.companyId });
-        let query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+        let query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             ...query.queryParams,
             authId: params.authId,
@@ -276,7 +329,7 @@ let AuthRepository = class AuthRepository {
         if (user.role?.some((role) => role.id === system_roles_1.RoleId.Administrator) && !user.company) {
             query.query = `
         MATCH (auth_user:User {id: $userId})
-        CREATE (auth:Auth {id: $authId, token: $token, expiration: $expiration, createdAt: datetime(), updatedAt: datetime()}) 
+        CREATE (auth:Auth {id: $authId, token: $token, expiration: datetime($expiration), createdAt: datetime(), updatedAt: datetime()})
         CREATE (auth_user)-[:HAS_AUTH]->(auth)
 
         WITH auth, auth_user
@@ -286,22 +339,22 @@ let AuthRepository = class AuthRepository {
 
 WITH auth, auth_user, auth_user_role, module, apoc.convert.fromJsonList(module.permissions) AS modPerms
 
-WITH auth, auth_user, auth_user_role, module, 
-CASE 
-    WHEN head([p IN modPerms WHERE p.type = "create"]) IS NULL THEN false 
-    ELSE head([p IN modPerms WHERE p.type = "create"]).value 
+WITH auth, auth_user, auth_user_role, module,
+CASE
+    WHEN head([p IN modPerms WHERE p.type = "create"]) IS NULL THEN false
+    ELSE head([p IN modPerms WHERE p.type = "create"]).value
   END AS defaultCreate,
-CASE 
-    WHEN head([p IN modPerms WHERE p.type = "read"]) IS NULL THEN false 
-    ELSE head([p IN modPerms WHERE p.type = "read"]).value 
+CASE
+    WHEN head([p IN modPerms WHERE p.type = "read"]) IS NULL THEN false
+    ELSE head([p IN modPerms WHERE p.type = "read"]).value
   END AS defaultRead,
-CASE 
-    WHEN head([p IN modPerms WHERE p.type = "update"]) IS NULL THEN false 
-    ELSE head([p IN modPerms WHERE p.type = "update"]).value 
+CASE
+    WHEN head([p IN modPerms WHERE p.type = "update"]) IS NULL THEN false
+    ELSE head([p IN modPerms WHERE p.type = "update"]).value
   END AS defaultUpdate,
-CASE 
-    WHEN head([p IN modPerms WHERE p.type = "delete"]) IS NULL THEN false 
-    ELSE head([p IN modPerms WHERE p.type = "delete"]).value 
+CASE
+    WHEN head([p IN modPerms WHERE p.type = "delete"]) IS NULL THEN false
+    ELSE head([p IN modPerms WHERE p.type = "delete"]).value
   END AS defaultDelete
 
 OPTIONAL MATCH (auth_user_role)-[perm:HAS_PERMISSIONS]->(module)
@@ -317,19 +370,19 @@ WITH auth, auth_user, auth_user_role, module,
      [defaultDelete] + [r IN rolePermsParsed WHERE r.type="delete" | r.value] AS deleteValues
 
 WITH auth, auth_user,  auth_user_role, module,
-     CASE 
+     CASE
        WHEN any(x IN createValues WHERE x = true) THEN true
        WHEN any(x IN createValues WHERE x <> true AND x <> false) THEN head([x IN createValues WHERE x <> true AND x <> false])
        WHEN any(x IN createValues WHERE x = false) THEN false ELSE false END AS effectiveCreate,
-     CASE 
+     CASE
        WHEN any(x IN readValues WHERE x = true) THEN true
        WHEN any(x IN readValues WHERE x <> true AND x <> false) THEN head([x IN readValues WHERE x <> true AND x <> false])
        WHEN any(x IN readValues WHERE x = false) THEN false ELSE false END AS effectiveRead,
-     CASE 
+     CASE
        WHEN any(x IN updateValues WHERE x = true) THEN true
        WHEN any(x IN updateValues WHERE x <> true AND x <> false) THEN head([x IN updateValues WHERE x <> true AND x <> false])
        WHEN any(x IN updateValues WHERE x = false) THEN false ELSE false END AS effectiveUpdate,
-     CASE 
+     CASE
        WHEN any(x IN deleteValues WHERE x = true) THEN true
        WHEN any(x IN deleteValues WHERE x <> true AND x <> false) THEN head([x IN deleteValues WHERE x <> true AND x <> false])
        WHEN any(x IN deleteValues WHERE x = false) THEN false ELSE false END AS effectiveDelete
@@ -354,7 +407,7 @@ WITH auth, auth_user,  auth_user_role, module,
         }
         query.query = `
       MATCH (auth_user:User {id: $userId})
-      CREATE (auth:Auth {id: $authId, token: $token, expiration: $expiration, createdAt: datetime(), updatedAt: datetime()}) 
+      CREATE (auth:Auth {id: $authId, token: $token, expiration: datetime($expiration), createdAt: datetime(), updatedAt: datetime()})
       CREATE (auth_user)-[:HAS_AUTH]->(auth)
 
       WITH auth, auth_user
@@ -362,9 +415,9 @@ WITH auth, auth_user,  auth_user_role, module,
       OPTIONAL MATCH (auth_user)-[:BELONGS_TO]->(auth_user_company:Company)
 
       MATCH (auth_${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}:${feature_meta_1.featureMeta.labelName})
-      WHERE auth_${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}.isCore = true 
+      WHERE auth_${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}.isCore = true
       OR EXISTS {((auth_${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName})-[:HAS_FEATURE]->(auth_${user_1.userMeta.nodeName}_${company_1.companyMeta.nodeName}_${feature_meta_1.featureMeta.nodeName}))}
-      
+
       OPTIONAL MATCH (auth_user_company)-[:HAS_CONFIGURATION]->(auth_user_company_configuration:Configuration)
       RETURN auth, auth_user, auth_user_role, auth_user_company, auth_user_company_feature, auth_user_company_configuration
     `;
@@ -383,7 +436,7 @@ WITH auth, auth_user,  auth_user_role, module,
         return auth;
     }
     async findByToken(params) {
-        let query = this.neo4j.initQuery({ serialiser: auth_model_1.AuthModel });
+        let query = this.neo4j.initQuery({ serialiser: this.getAuthModel() });
         query.queryParams = {
             ...query.queryParams,
             token: params.token,
@@ -424,15 +477,15 @@ WITH auth, auth_user,  auth_user_role, module,
         await this.neo4j.writeOne(query);
     }
     async startResetPassword(params) {
-        const query = this.neo4j.initQuery({ serialiser: user_2.UserDescriptor.model });
+        const query = this.neo4j.initQuery({ serialiser: this.getUserModel() });
         query.queryParams = {
             userId: params.userId,
             code: (0, crypto_1.randomUUID)(),
             codeExpiration: new Date(Date.now() + 3600000).toISOString(),
         };
         query.query = `
-      MATCH (user:User {id: $userId}) 
-      SET user.code = $code, 
+      MATCH (user:User {id: $userId})
+      SET user.code = $code,
         user.codeExpiration = datetime($codeExpiration)
       RETURN user
     `;
@@ -445,9 +498,9 @@ WITH auth, auth_user,  auth_user_role, module,
             password: params.password,
         };
         query.query = `
-      MATCH (user:User {id: $userId}) 
-      SET user.password = $password, 
-        user.code = null, 
+      MATCH (user:User {id: $userId})
+      SET user.password = $password,
+        user.code = null,
         user.codeExpiration = null
       RETURN user
     `;
@@ -460,12 +513,12 @@ WITH auth, auth_user,  auth_user_role, module,
             password: params.password,
         };
         query.query = `
-      MATCH (user:User {id: $userId}) 
-      SET user.password = $password, 
+      MATCH (user:User {id: $userId})
+      SET user.password = $password,
         user.isActive = true,
         user.isDeleted = false,
-        user.code = null, 
-        user.codeExpiration = null 
+        user.code = null,
+        user.codeExpiration = null
     `;
         await this.neo4j.writeOne(query);
     }
@@ -475,10 +528,10 @@ WITH auth, auth_user,  auth_user_role, module,
             userId: params.userId,
         };
         query.query = `
-      MATCH (user:User {id: $userId}) 
-      SET user.isActive = true, 
-        user.code = null, 
-        user.codeExpiration = null 
+      MATCH (user:User {id: $userId})
+      SET user.isActive = true,
+        user.code = null,
+        user.codeExpiration = null
     `;
         await this.neo4j.writeOne(query);
     }
@@ -490,7 +543,7 @@ WITH auth, auth_user,  auth_user_role, module,
         query.query = `
       MATCH (user:User {id: $userId})
       MATCH (user)-[:HAS_AUTH]->(auth:Auth)
-      WHERE auth.expiration < datetime() 
+      WHERE auth.expiration < datetime()
       DETACH DELETE auth
     `;
         await this.neo4j.writeOne(query);
@@ -499,7 +552,6 @@ WITH auth, auth_user,  auth_user_role, module,
 exports.AuthRepository = AuthRepository;
 exports.AuthRepository = AuthRepository = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService,
-        security_service_1.SecurityService])
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
 ], AuthRepository);
 //# sourceMappingURL=auth.repository.js.map