@flusys/nestjs-auth 8.1.5 → 9.0.0

package/fesm/24.js

@@ -3913,9 +3913,7 @@ class UserService extends _flusys_nestjs_shared_classes__rspack_import_1.ApiServ
             if (key === 'actionCode' || key === 'isActive') {
                 continue; // real continue
             }
-            query.andWhere(`${this.entityName}.${key} = :value`, {
-                value
-            });
+            this.applyEqualsFilter(query, key, value);
         }
         return {
             query,

package/fesm/index.js

@@ -699,6 +699,7 @@ __webpack_require__.d(__webpack_exports__, {
   $h: () => (/* reexport */ dtos/* .ChangePasswordDto */.$h),
   t7: () => (/* reexport */ interceptors/* .ClearToken */.t),
   CC: () => (/* reexport */ entities/* .Company */.CC),
+  ht: () => (/* reexport */ services/* .CompanyAccessResolverAdapter */.ht),
   At: () => (/* reexport */ entities/* .CompanyBranch */.At),
   ET: () => (/* reexport */ dtos/* .CompanyBranchResponseDto */.ET),
   wD: () => (/* reexport */ controllers/* .CompanyController */.wD),
@@ -814,8 +815,8 @@ var social_provider_registry = __webpack_require__(6928);
 ;// CONCATENATED MODULE: ./projects/nestjs-auth/src/providers/index.ts
 
 
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts + 1 modules
+var services = __webpack_require__(2991);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
 var jwt_strategy = __webpack_require__(5389);
 ;// CONCATENATED MODULE: ./projects/nestjs-auth/src/index.ts
@@ -872,6 +873,8 @@ __webpack_require__.d(__webpack_exports__, {
   r: () => (/* reexport */ AuthModule)
 });
 
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/interfaces"
+var interfaces_ = __webpack_require__(5103);
 // EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
 var modules_ = __webpack_require__(1236);
 // EXTERNAL MODULE: external "@nestjs/common"
@@ -892,8 +895,8 @@ var entities = __webpack_require__(5180);
 var clear_token_interceptor = __webpack_require__(5207);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
 var set_token_interceptor = __webpack_require__(8359);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts + 1 modules
+var services = __webpack_require__(2991);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
 var auth_config_service = __webpack_require__(6514);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
@@ -928,6 +931,7 @@ function _ts_decorate(decorators, target, key, desc) {
 
 
 
+
 class AuthModule {
     static forRoot(options) {
         const optionsProvider = {
@@ -1014,7 +1018,10 @@ class AuthModule {
             providers.push(services/* .AuthEmailService */.Gw);
         }
         if (flags.enableCompanyFeature) {
-            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, {
+                provide: interfaces_.COMPANY_ACCESS_RESOLVER,
+                useClass: services/* .CompanyAccessResolverAdapter */.ht
+            });
         }
         return providers;
     }
@@ -1035,7 +1042,7 @@ class AuthModule {
             exports.push(services/* .AuthEmailService */.Gw);
         }
         if (flags.enableCompanyFeature) {
-            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, interfaces_.COMPANY_ACCESS_RESOLVER);
         }
         return exports;
     }
@@ -1112,18 +1119,131 @@ AuthModule = _ts_decorate([
 
 
 },
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
+2991(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  WE: () => (/* reexport */ auth_config_service/* .AuthConfigService */.W),
+  vS: () => (/* reexport */ auth_datasource_provider/* .AuthDataSourceProvider */.v),
+  Gw: () => (/* reexport */ auth_email_service/* .AuthEmailService */.G),
+  kX: () => (/* reexport */ authentication_service/* .AuthenticationService */.k),
+  O_: () => (/* reexport */ branch_service/* .BranchService */.O),
+  ht: () => (/* reexport */ CompanyAccessResolverAdapter),
+  vB: () => (/* reexport */ company_selection_session_service/* .CompanySelectionSessionService */.v),
+  Bl: () => (/* reexport */ company_service/* .CompanyService */.B),
+  t_: () => (/* reexport */ social_auth_config_service/* .SocialAuthConfigService */.t),
+  Jn: () => (/* reexport */ social_auth_service/* .SocialAuthService */.J),
+  OE: () => (/* reexport */ user_permission_service/* .UserPermissionService */.O),
+  DL: () => (/* reexport */ user_service/* .UserService */.D)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company-selection-session.service.ts
+var company_selection_session_service = __webpack_require__(5811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/company-access-resolver.adapter.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+const byName = (a, b)=>a.name.localeCompare(b.name);
+/** Users of grants that still count: the grant is active and its user is active and not deleted. */ const activeUserIds = (grants)=>grants.filter((grant)=>grant.isActive && grant.user?.isActive && !grant.user.deletedAt).map((grant)=>grant.userId);
+class CompanyAccessResolverAdapter {
+    moduleRef;
+    constructor(moduleRef){
+        this.moduleRef = moduleRef;
+    }
+    async getUserAccess(userId) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const [companyGrants, branchGrants] = await Promise.all([
+            permissions.findUserCompanies(userId),
+            permissions.findUserBranches(userId)
+        ]);
+        const companies = companyGrants.map((grant)=>grant.company).filter((company)=>!!company?.isActive).sort(byName);
+        const companyIds = new Set(companies.map((company)=>company.id));
+        const branches = branchGrants.map((grant)=>grant.branch).filter((branch)=>!!branch?.isActive && companyIds.has(branch.companyId)).sort((a, b)=>(a.serial ?? 0) - (b.serial ?? 0) || byName(a, b));
+        return {
+            companies: companies.map(({ id, name })=>({
+                    id,
+                    name
+                })),
+            branches: branches.map(({ id, companyId, name })=>({
+                    id,
+                    companyId,
+                    name
+                }))
+        };
+    }
+    async getCompanyMembers(companyId, branchIds = []) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const members = activeUserIds(await permissions.findUsersForCompany(companyId));
+        if (!branchIds.length) return [
+            ...new Set(members)
+        ];
+        const inBranches = new Set(activeUserIds((await Promise.all(branchIds.map((branchId)=>permissions.findUsersForBranch(branchId)))).flat()));
+        return [
+            ...new Set(members.filter((userId)=>inBranches.has(userId)))
+        ];
+    }
+}
+CompanyAccessResolverAdapter = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], CompanyAccessResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/index.ts
 
 
 
@@ -1136,19 +1256,6 @@ AuthModule = _ts_decorate([
 
 
 
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
 
 
 },
@@ -1367,6 +1474,7 @@ var __webpack_exports__COMPANY_MESSAGES = __webpack_exports__.hg;
 var __webpack_exports__ChangePasswordDto = __webpack_exports__.$h;
 var __webpack_exports__ClearToken = __webpack_exports__.t7;
 var __webpack_exports__Company = __webpack_exports__.CC;
+var __webpack_exports__CompanyAccessResolverAdapter = __webpack_exports__.ht;
 var __webpack_exports__CompanyBranch = __webpack_exports__.At;
 var __webpack_exports__CompanyBranchResponseDto = __webpack_exports__.ET;
 var __webpack_exports__CompanyController = __webpack_exports__.wD;
@@ -1455,4 +1563,4 @@ var __webpack_exports__parseExpiryToMs = __webpack_exports__.om;
 var __webpack_exports__toBranchInfo = __webpack_exports__.QH;
 var __webpack_exports__toCompanyInfo = __webpack_exports__.$C;
 var __webpack_exports__toUserInfo = __webpack_exports__.FV;
-export { __webpack_exports__AUTH_EMAIL_PROVIDER as AUTH_EMAIL_PROVIDER, __webpack_exports__AUTH_EVENT_ACTIONS as AUTH_EVENT_ACTIONS, __webpack_exports__AUTH_EVENT_ENTITIES as AUTH_EVENT_ENTITIES, __webpack_exports__AUTH_EVENT_MODULE as AUTH_EVENT_MODULE, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__AUTH_MODULE_OPTIONS as AUTH_MODULE_OPTIONS, __webpack_exports__AppUser as AppUser, __webpack_exports__AssignUserBranchDto as AssignUserBranchDto, __webpack_exports__AssignUserCompanyDto as AssignUserCompanyDto, __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthModule as AuthModule, __webpack_exports__AuthenticationController as AuthenticationController, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BCRYPT_SALT_ROUNDS as BCRYPT_SALT_ROUNDS, __webpack_exports__BRANCH_MESSAGES as BRANCH_MESSAGES, __webpack_exports__BranchController as BranchController, __webpack_exports__BranchInfoDto as BranchInfoDto, __webpack_exports__BranchPermittedUserDto as BranchPermittedUserDto, __webpack_exports__BranchPermittedUsersResponseDto as BranchPermittedUsersResponseDto, __webpack_exports__BranchSelectionInfoDto as BranchSelectionInfoDto, __webpack_exports__BranchService as BranchService, __webpack_exports__COMPANY_MESSAGES as COMPANY_MESSAGES, __webpack_exports__ChangePasswordDto as ChangePasswordDto, __webpack_exports__ClearToken as ClearToken, __webpack_exports__Company as Company, __webpack_exports__CompanyBranch as CompanyBranch, __webpack_exports__CompanyBranchResponseDto as CompanyBranchResponseDto, __webpack_exports__CompanyController as CompanyController, __webpack_exports__CompanyInfoDto as CompanyInfoDto, __webpack_exports__CompanyPermittedUserDto as CompanyPermittedUserDto, __webpack_exports__CompanyPermittedUsersResponseDto as CompanyPermittedUsersResponseDto, __webpack_exports__CompanyResponseDto as CompanyResponseDto, __webpack_exports__CompanySelectionController as CompanySelectionController, __webpack_exports__CompanySelectionResponseDto as CompanySelectionResponseDto, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__CompanyWithBranchesDto as CompanyWithBranchesDto, __webpack_exports__CreateCompanyBranchDto as CreateCompanyBranchDto, __webpack_exports__CreateCompanyDto as CreateCompanyDto, __webpack_exports__CreateSocialAuthConfigDto as CreateSocialAuthConfigDto, __webpack_exports__CreateUserDto as CreateUserDto, __webpack_exports__DEFAULT_COOKIE_NAME as DEFAULT_COOKIE_NAME, __webpack_exports__EMAIL_VERIFICATION_MESSAGES as EMAIL_VERIFICATION_MESSAGES, __webpack_exports__EmailVerificationController as EmailVerificationController, __webpack_exports__ForgotPasswordDto as ForgotPasswordDto, __webpack_exports__GetBranchUsersDto as GetBranchUsersDto, __webpack_exports__GetCompanyUsersDto as GetCompanyUsersDto, __webpack_exports__JwtStrategy as JwtStrategy, __webpack_exports__LoginDto as LoginDto, __webpack_exports__LoginResponseDto as LoginResponseDto, __webpack_exports__LoginResponseRequiresEmailVerificationDto as LoginResponseRequiresEmailVerificationDto, __webpack_exports__MAX_COOKIE_BYTES as MAX_COOKIE_BYTES, __webpack_exports__MeResponseDto as MeResponseDto, __webpack_exports__PendingRegistration as PendingRegistration, __webpack_exports__PermissionItemDto as PermissionItemDto, __webpack_exports__PermissionType as PermissionType, __webpack_exports__RefreshTokenDto as RefreshTokenDto, __webpack_exports__RegistrationDto as RegistrationDto, __webpack_exports__RegistrationResponseDto as RegistrationResponseDto, __webpack_exports__ResendVerificationDto as ResendVerificationDto, __webpack_exports__ResetPasswordDto as ResetPasswordDto, __webpack_exports__SESSION_CACHE_PREFIX as SESSION_CACHE_PREFIX, __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES as SOCIAL_AUTH_CONFIG_MESSAGES, __webpack_exports__SOCIAL_AUTH_MESSAGES as SOCIAL_AUTH_MESSAGES, __webpack_exports__SOCIAL_STATE_PREFIX as SOCIAL_STATE_PREFIX, __webpack_exports__SOCIAL_STATE_TTL_MS as SOCIAL_STATE_TTL_MS, __webpack_exports__SelectDto as SelectDto, __webpack_exports__SetToken as SetToken, __webpack_exports__SocialAuthConfig as SocialAuthConfig, __webpack_exports__SocialAuthConfigController as SocialAuthConfigController, __webpack_exports__SocialAuthConfigResponseDto as SocialAuthConfigResponseDto, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthController as SocialAuthController, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__SocialAuthorizeDto as SocialAuthorizeDto, __webpack_exports__SocialAuthorizeResponseDto as SocialAuthorizeResponseDto, __webpack_exports__SocialCallbackDto as SocialCallbackDto, __webpack_exports__SocialProviderInfoDto as SocialProviderInfoDto, __webpack_exports__SocialProviderTypeEnum as SocialProviderTypeEnum, __webpack_exports__SocialProvidersDto as SocialProvidersDto, __webpack_exports__SwitchCompanyDto as SwitchCompanyDto, __webpack_exports__TOKEN_REVOKED_PREFIX as TOKEN_REVOKED_PREFIX, __webpack_exports__TokenType as TokenType, __webpack_exports__USER_ENRICHER as USER_ENRICHER, __webpack_exports__USER_MESSAGES as USER_MESSAGES, __webpack_exports__USER_PERMISSION_MESSAGES as USER_PERMISSION_MESSAGES, __webpack_exports__UpdateCompanyBranchDto as UpdateCompanyBranchDto, __webpack_exports__UpdateCompanyDto as UpdateCompanyDto, __webpack_exports__UpdateSocialAuthConfigDto as UpdateSocialAuthConfigDto, __webpack_exports__UpdateUserDto as UpdateUserDto, __webpack_exports__UserBranchPermissionDto as UserBranchPermissionDto, __webpack_exports__UserBranchesResponseDto as UserBranchesResponseDto, __webpack_exports__UserCompaniesResponseDto as UserCompaniesResponseDto, __webpack_exports__UserCompanyPermission as UserCompanyPermission, __webpack_exports__UserCompanyPermissionDto as UserCompanyPermissionDto, __webpack_exports__UserController as UserController, __webpack_exports__UserInfoDto as UserInfoDto, __webpack_exports__UserLookupResponseDto as UserLookupResponseDto, __webpack_exports__UserPermissionController as UserPermissionController, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserResponseDto as UserResponseDto, __webpack_exports__UserService as UserService, __webpack_exports__UserToken as UserToken, __webpack_exports__VerifyEmailDto as VerifyEmailDto, __webpack_exports__authSwaggerConfig as authSwaggerConfig, __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__getAuthEntitiesByConfig as getAuthEntitiesByConfig, __webpack_exports__getSocialProvider as getSocialProvider, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };
+export { __webpack_exports__AUTH_EMAIL_PROVIDER as AUTH_EMAIL_PROVIDER, __webpack_exports__AUTH_EVENT_ACTIONS as AUTH_EVENT_ACTIONS, __webpack_exports__AUTH_EVENT_ENTITIES as AUTH_EVENT_ENTITIES, __webpack_exports__AUTH_EVENT_MODULE as AUTH_EVENT_MODULE, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__AUTH_MODULE_OPTIONS as AUTH_MODULE_OPTIONS, __webpack_exports__AppUser as AppUser, __webpack_exports__AssignUserBranchDto as AssignUserBranchDto, __webpack_exports__AssignUserCompanyDto as AssignUserCompanyDto, __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthModule as AuthModule, __webpack_exports__AuthenticationController as AuthenticationController, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BCRYPT_SALT_ROUNDS as BCRYPT_SALT_ROUNDS, __webpack_exports__BRANCH_MESSAGES as BRANCH_MESSAGES, __webpack_exports__BranchController as BranchController, __webpack_exports__BranchInfoDto as BranchInfoDto, __webpack_exports__BranchPermittedUserDto as BranchPermittedUserDto, __webpack_exports__BranchPermittedUsersResponseDto as BranchPermittedUsersResponseDto, __webpack_exports__BranchSelectionInfoDto as BranchSelectionInfoDto, __webpack_exports__BranchService as BranchService, __webpack_exports__COMPANY_MESSAGES as COMPANY_MESSAGES, __webpack_exports__ChangePasswordDto as ChangePasswordDto, __webpack_exports__ClearToken as ClearToken, __webpack_exports__Company as Company, __webpack_exports__CompanyAccessResolverAdapter as CompanyAccessResolverAdapter, __webpack_exports__CompanyBranch as CompanyBranch, __webpack_exports__CompanyBranchResponseDto as CompanyBranchResponseDto, __webpack_exports__CompanyController as CompanyController, __webpack_exports__CompanyInfoDto as CompanyInfoDto, __webpack_exports__CompanyPermittedUserDto as CompanyPermittedUserDto, __webpack_exports__CompanyPermittedUsersResponseDto as CompanyPermittedUsersResponseDto, __webpack_exports__CompanyResponseDto as CompanyResponseDto, __webpack_exports__CompanySelectionController as CompanySelectionController, __webpack_exports__CompanySelectionResponseDto as CompanySelectionResponseDto, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__CompanyWithBranchesDto as CompanyWithBranchesDto, __webpack_exports__CreateCompanyBranchDto as CreateCompanyBranchDto, __webpack_exports__CreateCompanyDto as CreateCompanyDto, __webpack_exports__CreateSocialAuthConfigDto as CreateSocialAuthConfigDto, __webpack_exports__CreateUserDto as CreateUserDto, __webpack_exports__DEFAULT_COOKIE_NAME as DEFAULT_COOKIE_NAME, __webpack_exports__EMAIL_VERIFICATION_MESSAGES as EMAIL_VERIFICATION_MESSAGES, __webpack_exports__EmailVerificationController as EmailVerificationController, __webpack_exports__ForgotPasswordDto as ForgotPasswordDto, __webpack_exports__GetBranchUsersDto as GetBranchUsersDto, __webpack_exports__GetCompanyUsersDto as GetCompanyUsersDto, __webpack_exports__JwtStrategy as JwtStrategy, __webpack_exports__LoginDto as LoginDto, __webpack_exports__LoginResponseDto as LoginResponseDto, __webpack_exports__LoginResponseRequiresEmailVerificationDto as LoginResponseRequiresEmailVerificationDto, __webpack_exports__MAX_COOKIE_BYTES as MAX_COOKIE_BYTES, __webpack_exports__MeResponseDto as MeResponseDto, __webpack_exports__PendingRegistration as PendingRegistration, __webpack_exports__PermissionItemDto as PermissionItemDto, __webpack_exports__PermissionType as PermissionType, __webpack_exports__RefreshTokenDto as RefreshTokenDto, __webpack_exports__RegistrationDto as RegistrationDto, __webpack_exports__RegistrationResponseDto as RegistrationResponseDto, __webpack_exports__ResendVerificationDto as ResendVerificationDto, __webpack_exports__ResetPasswordDto as ResetPasswordDto, __webpack_exports__SESSION_CACHE_PREFIX as SESSION_CACHE_PREFIX, __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES as SOCIAL_AUTH_CONFIG_MESSAGES, __webpack_exports__SOCIAL_AUTH_MESSAGES as SOCIAL_AUTH_MESSAGES, __webpack_exports__SOCIAL_STATE_PREFIX as SOCIAL_STATE_PREFIX, __webpack_exports__SOCIAL_STATE_TTL_MS as SOCIAL_STATE_TTL_MS, __webpack_exports__SelectDto as SelectDto, __webpack_exports__SetToken as SetToken, __webpack_exports__SocialAuthConfig as SocialAuthConfig, __webpack_exports__SocialAuthConfigController as SocialAuthConfigController, __webpack_exports__SocialAuthConfigResponseDto as SocialAuthConfigResponseDto, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthController as SocialAuthController, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__SocialAuthorizeDto as SocialAuthorizeDto, __webpack_exports__SocialAuthorizeResponseDto as SocialAuthorizeResponseDto, __webpack_exports__SocialCallbackDto as SocialCallbackDto, __webpack_exports__SocialProviderInfoDto as SocialProviderInfoDto, __webpack_exports__SocialProviderTypeEnum as SocialProviderTypeEnum, __webpack_exports__SocialProvidersDto as SocialProvidersDto, __webpack_exports__SwitchCompanyDto as SwitchCompanyDto, __webpack_exports__TOKEN_REVOKED_PREFIX as TOKEN_REVOKED_PREFIX, __webpack_exports__TokenType as TokenType, __webpack_exports__USER_ENRICHER as USER_ENRICHER, __webpack_exports__USER_MESSAGES as USER_MESSAGES, __webpack_exports__USER_PERMISSION_MESSAGES as USER_PERMISSION_MESSAGES, __webpack_exports__UpdateCompanyBranchDto as UpdateCompanyBranchDto, __webpack_exports__UpdateCompanyDto as UpdateCompanyDto, __webpack_exports__UpdateSocialAuthConfigDto as UpdateSocialAuthConfigDto, __webpack_exports__UpdateUserDto as UpdateUserDto, __webpack_exports__UserBranchPermissionDto as UserBranchPermissionDto, __webpack_exports__UserBranchesResponseDto as UserBranchesResponseDto, __webpack_exports__UserCompaniesResponseDto as UserCompaniesResponseDto, __webpack_exports__UserCompanyPermission as UserCompanyPermission, __webpack_exports__UserCompanyPermissionDto as UserCompanyPermissionDto, __webpack_exports__UserController as UserController, __webpack_exports__UserInfoDto as UserInfoDto, __webpack_exports__UserLookupResponseDto as UserLookupResponseDto, __webpack_exports__UserPermissionController as UserPermissionController, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserResponseDto as UserResponseDto, __webpack_exports__UserService as UserService, __webpack_exports__UserToken as UserToken, __webpack_exports__VerifyEmailDto as VerifyEmailDto, __webpack_exports__authSwaggerConfig as authSwaggerConfig, __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__getAuthEntitiesByConfig as getAuthEntitiesByConfig, __webpack_exports__getSocialProvider as getSocialProvider, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };

package/fesm/modules/index.js

@@ -74,6 +74,8 @@ __webpack_require__.d(__webpack_exports__, {
   r: () => (/* reexport */ AuthModule)
 });
 
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/interfaces"
+var interfaces_ = __webpack_require__(5103);
 // EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
 var modules_ = __webpack_require__(1236);
 // EXTERNAL MODULE: external "@nestjs/common"
@@ -94,8 +96,8 @@ var entities = __webpack_require__(5180);
 var clear_token_interceptor = __webpack_require__(5207);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
 var set_token_interceptor = __webpack_require__(8359);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts + 1 modules
+var services = __webpack_require__(2991);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
 var auth_config_service = __webpack_require__(6514);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
@@ -130,6 +132,7 @@ function _ts_decorate(decorators, target, key, desc) {
 
 
 
+
 class AuthModule {
     static forRoot(options) {
         const optionsProvider = {
@@ -216,7 +219,10 @@ class AuthModule {
             providers.push(services/* .AuthEmailService */.Gw);
         }
         if (flags.enableCompanyFeature) {
-            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, {
+                provide: interfaces_.COMPANY_ACCESS_RESOLVER,
+                useClass: services/* .CompanyAccessResolverAdapter */.ht
+            });
         }
         return providers;
     }
@@ -237,7 +243,7 @@ class AuthModule {
             exports.push(services/* .AuthEmailService */.Gw);
         }
         if (flags.enableCompanyFeature) {
-            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
+            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE, interfaces_.COMPANY_ACCESS_RESOLVER);
         }
         return exports;
     }
@@ -314,18 +320,131 @@ AuthModule = _ts_decorate([
 
 
 },
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
+2991(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  WE: () => (/* reexport */ auth_config_service/* .AuthConfigService */.W),
+  vS: () => (/* reexport */ auth_datasource_provider/* .AuthDataSourceProvider */.v),
+  Gw: () => (/* reexport */ auth_email_service/* .AuthEmailService */.G),
+  kX: () => (/* reexport */ authentication_service/* .AuthenticationService */.k),
+  O_: () => (/* reexport */ branch_service/* .BranchService */.O),
+  ht: () => (/* reexport */ CompanyAccessResolverAdapter),
+  vB: () => (/* reexport */ company_selection_session_service/* .CompanySelectionSessionService */.v),
+  Bl: () => (/* reexport */ company_service/* .CompanyService */.B),
+  t_: () => (/* reexport */ social_auth_config_service/* .SocialAuthConfigService */.t),
+  Jn: () => (/* reexport */ social_auth_service/* .SocialAuthService */.J),
+  OE: () => (/* reexport */ user_permission_service/* .UserPermissionService */.O),
+  DL: () => (/* reexport */ user_service/* .UserService */.D)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company-selection-session.service.ts
+var company_selection_session_service = __webpack_require__(5811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/company-access-resolver.adapter.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+const byName = (a, b)=>a.name.localeCompare(b.name);
+/** Users of grants that still count: the grant is active and its user is active and not deleted. */ const activeUserIds = (grants)=>grants.filter((grant)=>grant.isActive && grant.user?.isActive && !grant.user.deletedAt).map((grant)=>grant.userId);
+class CompanyAccessResolverAdapter {
+    moduleRef;
+    constructor(moduleRef){
+        this.moduleRef = moduleRef;
+    }
+    async getUserAccess(userId) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const [companyGrants, branchGrants] = await Promise.all([
+            permissions.findUserCompanies(userId),
+            permissions.findUserBranches(userId)
+        ]);
+        const companies = companyGrants.map((grant)=>grant.company).filter((company)=>!!company?.isActive).sort(byName);
+        const companyIds = new Set(companies.map((company)=>company.id));
+        const branches = branchGrants.map((grant)=>grant.branch).filter((branch)=>!!branch?.isActive && companyIds.has(branch.companyId)).sort((a, b)=>(a.serial ?? 0) - (b.serial ?? 0) || byName(a, b));
+        return {
+            companies: companies.map(({ id, name })=>({
+                    id,
+                    name
+                })),
+            branches: branches.map(({ id, companyId, name })=>({
+                    id,
+                    companyId,
+                    name
+                }))
+        };
+    }
+    async getCompanyMembers(companyId, branchIds = []) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const members = activeUserIds(await permissions.findUsersForCompany(companyId));
+        if (!branchIds.length) return [
+            ...new Set(members)
+        ];
+        const inBranches = new Set(activeUserIds((await Promise.all(branchIds.map((branchId)=>permissions.findUsersForBranch(branchId)))).flat()));
+        return [
+            ...new Set(members.filter((userId)=>inBranches.has(userId)))
+        ];
+    }
+}
+CompanyAccessResolverAdapter = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], CompanyAccessResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/index.ts
 
 
 
@@ -338,19 +457,6 @@ AuthModule = _ts_decorate([
 
 
 
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
 
 
 },

package/fesm/services/index.js

@@ -1,18 +1,131 @@
 export const __rspack_esm_id = 995;
 export const __rspack_esm_ids = [995];
 export const __webpack_modules__ = {
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
+2991(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  WE: () => (/* reexport */ auth_config_service/* .AuthConfigService */.W),
+  vS: () => (/* reexport */ auth_datasource_provider/* .AuthDataSourceProvider */.v),
+  Gw: () => (/* reexport */ auth_email_service/* .AuthEmailService */.G),
+  kX: () => (/* reexport */ authentication_service/* .AuthenticationService */.k),
+  O_: () => (/* reexport */ branch_service/* .BranchService */.O),
+  ht: () => (/* reexport */ CompanyAccessResolverAdapter),
+  vB: () => (/* reexport */ company_selection_session_service/* .CompanySelectionSessionService */.v),
+  Bl: () => (/* reexport */ company_service/* .CompanyService */.B),
+  t_: () => (/* reexport */ social_auth_config_service/* .SocialAuthConfigService */.t),
+  Jn: () => (/* reexport */ social_auth_service/* .SocialAuthService */.J),
+  OE: () => (/* reexport */ user_permission_service/* .UserPermissionService */.O),
+  DL: () => (/* reexport */ user_service/* .UserService */.D)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company-selection-session.service.ts
+var company_selection_session_service = __webpack_require__(5811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/company-access-resolver.adapter.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+const byName = (a, b)=>a.name.localeCompare(b.name);
+/** Users of grants that still count: the grant is active and its user is active and not deleted. */ const activeUserIds = (grants)=>grants.filter((grant)=>grant.isActive && grant.user?.isActive && !grant.user.deletedAt).map((grant)=>grant.userId);
+class CompanyAccessResolverAdapter {
+    moduleRef;
+    constructor(moduleRef){
+        this.moduleRef = moduleRef;
+    }
+    async getUserAccess(userId) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const [companyGrants, branchGrants] = await Promise.all([
+            permissions.findUserCompanies(userId),
+            permissions.findUserBranches(userId)
+        ]);
+        const companies = companyGrants.map((grant)=>grant.company).filter((company)=>!!company?.isActive).sort(byName);
+        const companyIds = new Set(companies.map((company)=>company.id));
+        const branches = branchGrants.map((grant)=>grant.branch).filter((branch)=>!!branch?.isActive && companyIds.has(branch.companyId)).sort((a, b)=>(a.serial ?? 0) - (b.serial ?? 0) || byName(a, b));
+        return {
+            companies: companies.map(({ id, name })=>({
+                    id,
+                    name
+                })),
+            branches: branches.map(({ id, companyId, name })=>({
+                    id,
+                    companyId,
+                    name
+                }))
+        };
+    }
+    async getCompanyMembers(companyId, branchIds = []) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const members = activeUserIds(await permissions.findUsersForCompany(companyId));
+        if (!branchIds.length) return [
+            ...new Set(members)
+        ];
+        const inBranches = new Set(activeUserIds((await Promise.all(branchIds.map((branchId)=>permissions.findUsersForBranch(branchId)))).flat()));
+        return [
+            ...new Set(members.filter((userId)=>inBranches.has(userId)))
+        ];
+    }
+}
+CompanyAccessResolverAdapter = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], CompanyAccessResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/index.ts
 
 
 
@@ -25,19 +138,6 @@ export const __webpack_modules__ = {
 
 
 
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
 
 
 },
@@ -53,15 +153,16 @@ import * as __rspack_chunk_3 from '../24.js';
 __webpack_require__.C(__rspack_chunk_3);
 import * as __rspack_chunk_4 from './index.js';
 __webpack_require__.C(__rspack_chunk_4);
-var __webpack_exports__ = __webpack_exec__(8811);var __webpack_exports__AuthConfigService = __webpack_exports__.WE;
+var __webpack_exports__ = __webpack_exec__(2991);var __webpack_exports__AuthConfigService = __webpack_exports__.WE;
 var __webpack_exports__AuthDataSourceProvider = __webpack_exports__.vS;
 var __webpack_exports__AuthEmailService = __webpack_exports__.Gw;
 var __webpack_exports__AuthenticationService = __webpack_exports__.kX;
 var __webpack_exports__BranchService = __webpack_exports__.O_;
+var __webpack_exports__CompanyAccessResolverAdapter = __webpack_exports__.ht;
 var __webpack_exports__CompanySelectionSessionService = __webpack_exports__.vB;
 var __webpack_exports__CompanyService = __webpack_exports__.Bl;
 var __webpack_exports__SocialAuthConfigService = __webpack_exports__.t_;
 var __webpack_exports__SocialAuthService = __webpack_exports__.Jn;
 var __webpack_exports__UserPermissionService = __webpack_exports__.OE;
 var __webpack_exports__UserService = __webpack_exports__.DL;
-export { __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BranchService as BranchService, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserService as UserService };
+export { __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BranchService as BranchService, __webpack_exports__CompanyAccessResolverAdapter as CompanyAccessResolverAdapter, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserService as UserService };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/nestjs-auth",
-  "version": "8.1.5",
+  "version": "9.0.0",
   "description": "Authentication and authorization infrastructure for NestJS applications",
   "type": "module",
   "main": "./fesm/index.js",
@@ -78,6 +78,7 @@
     "@nestjs/jwt": "^12.0.0",
     "@nestjs/passport": "^12.0.0",
     "@nestjs/swagger": "^12.0.0",
+    "@nestjs/throttler": "^6.5.0",
     "@nestjs/typeorm": "^12.0.0",
     "bcrypt": "^6.0.0",
     "class-transformer": "^0.5.1",
@@ -91,7 +92,7 @@
     "rxjs": "^7.8.0"
   },
   "dependencies": {
-    "@flusys/nestjs-core": "8.1.5",
-    "@flusys/nestjs-shared": "8.1.5"
+    "@flusys/nestjs-core": "9.0.0",
+    "@flusys/nestjs-shared": "9.0.0"
   }
 }

package/services/company-access-resolver.adapter.d.ts

@@ -0,0 +1,8 @@
+import { type ICompanyAccessResolver, type IUserCompanyAccess } from '@flusys/nestjs-shared/interfaces';
+import { ModuleRef } from '@nestjs/core';
+export declare class CompanyAccessResolverAdapter implements ICompanyAccessResolver {
+    private readonly moduleRef;
+    constructor(moduleRef: ModuleRef);
+    getUserAccess(userId: string): Promise<IUserCompanyAccess>;
+    getCompanyMembers(companyId: string, branchIds?: string[]): Promise<string[]>;
+}

package/services/index.d.ts

@@ -9,3 +9,4 @@ export * from './branch.service.js';
 export * from './user-permission.service.js';
 export * from './auth-config.service.js';
 export * from './auth-datasource.provider.js';
+export * from './company-access-resolver.adapter.js';