@flusys/nestjs-auth 9.1.0-rc.1 → 9.1.1

package/fesm/index.js

@@ -1,5 +1,3 @@
-import { ExtractJwt, Strategy } from "passport-jwt";
-import * as __rspack_external__nestjs_passport_18907953 from "@nestjs/passport";
 export const __rspack_esm_id = 410;
 export const __rspack_esm_ids = [410];
 export const __webpack_modules__ = {
@@ -127,7 +125,10 @@ const COMPANY_SCHEMA_EXCLUSIONS = [
             'id',
             'name',
             'slug',
-            'logoId'
+            'logoId',
+            'parentId',
+            'serial',
+            'displayParentId'
         ]
     },
     {
@@ -277,7 +278,10 @@ const COMPANY_SCHEMA_EXCLUSIONS = [
             'branchId',
             'branchName',
             'branchSlug',
-            'companyId'
+            'companyId',
+            'parentId',
+            'serial',
+            'displayParentId'
         ]
     },
     {
@@ -573,70 +577,6 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
-},
-5180(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _app_user_entity_js__rspack_import_0 = __webpack_require__(4758);
-/* import */ var _company_branch_entity_js__rspack_import_1 = __webpack_require__(1923);
-/* import */ var _company_entity_js__rspack_import_2 = __webpack_require__(8538);
-/* import */ var _pending_registration_entity_js__rspack_import_3 = __webpack_require__(9388);
-/* import */ var _social_auth_config_entity_js__rspack_import_4 = __webpack_require__(2020);
-/* import */ var _user_company_permission_entity_js__rspack_import_5 = __webpack_require__(2377);
-/* import */ var _user_token_entity_js__rspack_import_6 = __webpack_require__(9696);
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-const BaseEntities = [
-    _app_user_entity_js__rspack_import_0/* .AppUser */.$,
-    _user_token_entity_js__rspack_import_6/* .UserToken */.L,
-    _social_auth_config_entity_js__rspack_import_4/* .SocialAuthConfig */.G
-];
-const EmailEntities = [
-    _pending_registration_entity_js__rspack_import_3/* .PendingRegistration */.N
-];
-const CompanyEntities = [
-    _company_entity_js__rspack_import_2/* .Company */.C,
-    _company_branch_entity_js__rspack_import_1/* .CompanyBranch */.A,
-    _user_company_permission_entity_js__rspack_import_5/* .UserCompanyPermission */.I
-];
-function getAuthEntitiesByConfig(config) {
-    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
-    const entities = [
-        ...BaseEntities
-    ];
-    if (enableEmailVerification) {
-        entities.push(...EmailEntities);
-    }
-    if (enableCompanyFeature) {
-        entities.push(...CompanyEntities);
-    }
-    return entities;
-}
-
-__webpack_require__.d(__webpack_exports__, {
-  $u: () => (/* reexport safe */ _app_user_entity_js__rspack_import_0.$),
-  At: () => (/* reexport safe */ _company_branch_entity_js__rspack_import_1.A),
-  CC: () => (/* reexport safe */ _company_entity_js__rspack_import_2.C),
-  GB: () => (/* reexport safe */ _social_auth_config_entity_js__rspack_import_4.G),
-  Iq: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.I),
-  Li: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.L),
-  Ni: () => (/* reexport safe */ _pending_registration_entity_js__rspack_import_3.N),
-  eZ: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.e),
-  getAuthEntitiesByConfig: () => (getAuthEntitiesByConfig),
-  ks: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.k)
-});
-
-
 },
 8351(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _social_provider_type_enum_js__rspack_import_0 = __webpack_require__(5142);
@@ -650,23 +590,6 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
-},
-892(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _auth_response_mapper_js__rspack_import_0 = __webpack_require__(2295);
-/* import */ var _token_helper_js__rspack_import_1 = __webpack_require__(1379);
-
-
-
-__webpack_require__.d(__webpack_exports__, {
-  $C: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.$C),
-  FV: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.FV),
-  QH: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.QH),
-  Vg: () => (/* reexport safe */ _token_helper_js__rspack_import_1.Vg),
-  e: () => (/* reexport safe */ _token_helper_js__rspack_import_1.e),
-  om: () => (/* reexport safe */ _token_helper_js__rspack_import_1.om)
-});
-
-
 },
 3716(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
@@ -690,6 +613,7 @@ __webpack_require__.d(__webpack_exports__, {
   aK: () => (/* reexport */ config/* .BCRYPT_SALT_ROUNDS */.aK),
   W1: () => (/* reexport */ config/* .BRANCH_MESSAGES */.W1),
   zF: () => (/* reexport */ controllers/* .BranchController */.zF),
+  XR: () => (/* reexport */ services/* .BranchHierarchyResolverAdapter */.XR),
   UQ: () => (/* reexport */ dtos/* .BranchInfoDto */.UQ),
   tu: () => (/* reexport */ dtos/* .BranchPermittedUserDto */.tu),
   bK: () => (/* reexport */ dtos/* .BranchPermittedUsersResponseDto */.bK),
@@ -699,6 +623,7 @@ __webpack_require__.d(__webpack_exports__, {
   $h: () => (/* reexport */ dtos/* .ChangePasswordDto */.$h),
   t7: () => (/* reexport */ interceptors/* .ClearToken */.t),
   CC: () => (/* reexport */ entities/* .Company */.CC),
+  ht: () => (/* reexport */ services/* .CompanyAccessResolverAdapter */.ht),
   At: () => (/* reexport */ entities/* .CompanyBranch */.At),
   ET: () => (/* reexport */ dtos/* .CompanyBranchResponseDto */.ET),
   wD: () => (/* reexport */ controllers/* .CompanyController */.wD),
@@ -783,7 +708,10 @@ __webpack_require__.d(__webpack_exports__, {
   e: () => (/* reexport */ helpers/* .generateTokens */.e),
   QB: () => (/* reexport */ entities.getAuthEntitiesByConfig),
   V8: () => (/* reexport */ social_provider_registry/* .getSocialProvider */.V),
+  vR: () => (/* reexport */ helpers/* .loadCompanyBranchNodes */.vR),
+  xu: () => (/* reexport */ helpers/* .loadDisplayParentIds */.xu),
   om: () => (/* reexport */ helpers/* .parseExpiryToMs */.om),
+  XP: () => (/* reexport */ helpers/* .revokeUserSessions */.XP),
   QH: () => (/* reexport */ helpers/* .toBranchInfo */.QH),
   $C: () => (/* reexport */ helpers/* .toCompanyInfo */.$C),
   FV: () => (/* reexport */ helpers/* .toUserInfo */.FV)
@@ -801,8 +729,8 @@ var dtos = __webpack_require__(9029);
 var entities = __webpack_require__(5180);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/enums/index.ts
 var enums = __webpack_require__(8351);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/helpers/index.ts
-var helpers = __webpack_require__(892);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/helpers/index.ts + 2 modules
+var helpers = __webpack_require__(334);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/index.ts
 var interceptors = __webpack_require__(1867);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/interfaces/index.ts
@@ -814,8 +742,8 @@ var social_provider_registry = __webpack_require__(6928);
 ;// CONCATENATED MODULE: ./projects/nestjs-auth/src/providers/index.ts
 
 
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts + 2 modules
+var services = __webpack_require__(8230);
 // EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
 var jwt_strategy = __webpack_require__(5389);
 ;// CONCATENATED MODULE: ./projects/nestjs-auth/src/index.ts
@@ -864,465 +792,6 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
-},
-7579(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  r: () => (/* reexport */ AuthModule)
-});
-
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
-var modules_ = __webpack_require__(1236);
-// EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(6157);
-// EXTERNAL MODULE: external "@nestjs/jwt"
-var jwt_ = __webpack_require__(2125);
-// EXTERNAL MODULE: external "@nestjs/passport"
-var passport_ = __webpack_require__(3794);
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/guards"
-var guards_ = __webpack_require__(3513);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
-var auth_constants = __webpack_require__(5588);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/controllers/index.ts + 11 modules
-var src_controllers = __webpack_require__(1003);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/index.ts
-var entities = __webpack_require__(5180);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/clear-token.interceptor.ts
-var clear_token_interceptor = __webpack_require__(5207);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
-var set_token_interceptor = __webpack_require__(8359);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
-var auth_config_service = __webpack_require__(6514);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
-var auth_datasource_provider = __webpack_require__(2732);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
-var jwt_strategy = __webpack_require__(5389);
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/auth.module.ts
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-        r = Reflect.decorate(decorators, target, key, desc);
-    } else {
-        for(var i = decorators.length - 1; i >= 0; i--){
-            if (d = decorators[i]) {
-                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-            }
-        }
-    }
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-class AuthModule {
-    static forRoot(options) {
-        const optionsProvider = {
-            provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-            useValue: options
-        };
-        return this.buildModule(options, [
-            optionsProvider,
-            ...options.providers ?? []
-        ]);
-    }
-    static forRootAsync(options) {
-        const asyncProviders = this.createAsyncProviders(options);
-        return this.buildModule(options, [
-            ...asyncProviders,
-            ...options.providers ?? []
-        ], options.imports);
-    }
-    static buildModule(options, providers, externalImports = []) {
-        const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
-        return {
-            module: AuthModule,
-            global,
-            imports: [
-                ...externalImports,
-                ...this.buildImports()
-            ],
-            controllers: this.buildControllers(includeController, featureFlags),
-            providers: [
-                ...providers,
-                ...this.buildProviders(featureFlags)
-            ],
-            exports: this.buildExports(featureFlags)
-        };
-    }
-    static getFeatureFlags(bootstrapAppConfig) {
-        return {
-            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
-            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
-        };
-    }
-    static buildImports() {
-        return [
-            passport_.PassportModule.register({
-                defaultStrategy: 'jwt'
-            }),
-            jwt_.JwtModule.register({}),
-            modules_.CacheModule,
-            modules_.UtilsModule
-        ];
-    }
-    static buildControllers(includeController, flags) {
-        if (!includeController) return [];
-        const controllers = [
-            src_controllers/* .AuthenticationController */.$3,
-            src_controllers/* .SocialAuthController */.eA,
-            src_controllers/* .SocialAuthConfigController */.O3,
-            src_controllers/* .UserController */.SZ
-        ];
-        if (flags.enableEmailVerification) {
-            controllers.push(src_controllers/* .EmailVerificationController */.Q1);
-        }
-        if (flags.enableCompanyFeature) {
-            controllers.push(src_controllers/* .CompanySelectionController */.Qg, src_controllers/* .CompanyController */.wD, src_controllers/* .BranchController */.zF, src_controllers/* .UserPermissionController */.rl);
-        }
-        return controllers;
-    }
-    static buildProviders(flags) {
-        const providers = [
-            auth_config_service/* .AuthConfigService */.W,
-            auth_datasource_provider/* .AuthDataSourceProvider */.v,
-            jwt_strategy/* .JwtStrategy */.P,
-            guards_.JwtAuthGuard,
-            services/* .AuthenticationService */.kX,
-            services/* .SocialAuthService */.Jn,
-            services/* .SocialAuthConfigService */.t_,
-            set_token_interceptor/* .SetToken */.A,
-            clear_token_interceptor/* .ClearToken */.t,
-            services/* .UserService */.DL,
-            (0,modules_.createModuleEventsProvider)('auth', auth_constants/* .AUTH_MODULE_OPTIONS */.xe)
-        ];
-        if (flags.enableEmailVerification) {
-            providers.push(services/* .AuthEmailService */.Gw);
-        }
-        if (flags.enableCompanyFeature) {
-            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
-        }
-        return providers;
-    }
-    static buildExports(flags) {
-        const exports = [
-            passport_.PassportModule,
-            auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-            auth_config_service/* .AuthConfigService */.W,
-            auth_datasource_provider/* .AuthDataSourceProvider */.v,
-            jwt_strategy/* .JwtStrategy */.P,
-            guards_.JwtAuthGuard,
-            services/* .AuthenticationService */.kX,
-            services/* .SocialAuthService */.Jn,
-            services/* .SocialAuthConfigService */.t_,
-            services/* .UserService */.DL
-        ];
-        if (flags.enableEmailVerification) {
-            exports.push(services/* .AuthEmailService */.Gw);
-        }
-        if (flags.enableCompanyFeature) {
-            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
-        }
-        return exports;
-    }
-    static createAsyncProviders(options) {
-        const staticOptions = {
-            global: options.global,
-            includeController: options.includeController,
-            bootstrapAppConfig: options.bootstrapAppConfig
-        };
-        if (options.useFactory) {
-            return [
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (...args)=>({
-                            ...staticOptions,
-                            config: await options.useFactory(...args)
-                        }),
-                    inject: options.inject || []
-                }
-            ];
-        }
-        if (options.useClass) {
-            return [
-                {
-                    provide: options.useClass,
-                    useClass: options.useClass
-                },
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useClass
-                    ]
-                }
-            ];
-        }
-        if (options.useExisting) {
-            return [
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useExisting
-                    ]
-                }
-            ];
-        }
-        return [
-            {
-                provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                useValue: staticOptions
-            }
-        ];
-    }
-    static getEntities(config) {
-        return (0,entities.getAuthEntitiesByConfig)({
-            enableCompanyFeature: config.enableCompanyFeature ?? false,
-            enableEmailVerification: config.enableEmailVerification ?? true
-        });
-    }
-}
-AuthModule = _ts_decorate([
-    (0,common_.Module)({})
-], AuthModule);
-
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/index.ts
-
-
-
-},
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
-
-
-
-
-
-
-
-
-
-
-
-
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
-
-
-},
-5389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  P: () => (/* binding */ JwtStrategy)
-});
-
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/constants"
-var constants_ = __webpack_require__(9140);
-// EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(6157);
-// EXTERNAL MODULE: external "@nestjs/core"
-var core_ = __webpack_require__(3075);
-// EXTERNAL MODULE: external "@nestjs/passport"
-var passport_ = __webpack_require__(3794);
-;// CONCATENATED MODULE: external "passport-jwt"
-
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
-var message_keys = __webpack_require__(5363);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/app-user.entity.ts
-var app_user_entity = __webpack_require__(4758);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
-var auth_config_service = __webpack_require__(6514);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
-var auth_datasource_provider = __webpack_require__(2732);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
-var authentication_service = __webpack_require__(4722);
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-        r = Reflect.decorate(decorators, target, key, desc);
-    } else {
-        for(var i = decorators.length - 1; i >= 0; i--){
-            if (d = decorators[i]) {
-                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-            }
-        }
-    }
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(metadataKey, metadataValue) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
-        return Reflect.metadata(metadataKey, metadataValue);
-    }
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-
-
-
-
-
-
-
-
-
-
-function hasCompanyContext(payload) {
-    return 'companyId' in payload && payload.companyId != null;
-}
-class JwtStrategy extends (0,passport_.PassportStrategy)(Strategy, 'jwt') {
-    authConfig;
-    moduleRef;
-    constructor(authConfig, moduleRef){
-        super({
-            jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
-            ignoreExpiration: false,
-            secretOrKeyProvider: (_req, _token, done)=>{
-                done(null, this.authConfig.getJwtSecret());
-            },
-            passReqToCallback: true
-        }), this.authConfig = authConfig, this.moduleRef = moduleRef;
-    }
-    async validate(_req, payload) {
-        const userRepo = await this.resolveUserRepository();
-        await this.checkTokenRevocation(payload);
-        const user = await userRepo.findOne({
-            where: {
-                id: payload.id,
-                isActive: true
-            }
-        });
-        if (!user) {
-            throw new common_.UnauthorizedException({
-                message: 'User not found or inactive',
-                messageKey: message_keys/* .USER_MESSAGES.NOT_FOUND */.ny.NOT_FOUND
-            });
-        }
-        return this.buildUserInfo(payload);
-    }
-    async resolveUserRepository() {
-        try {
-            const provider = await this.moduleRef.resolve(auth_datasource_provider/* .AuthDataSourceProvider */.v, undefined, {
-                strict: false
-            });
-            if (provider) {
-                return provider.getRepository(app_user_entity/* .AppUser */.$);
-            }
-        } catch  {
-            throw new common_.UnauthorizedException({
-                message: 'Unable to access user data',
-                messageKey: constants_.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE,
-                messageVariables: {
-                    provider: 'DataSourceProvider',
-                    available: ''
-                }
-            });
-        }
-        throw new common_.UnauthorizedException({
-            message: 'User repository not available',
-            messageKey: constants_.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
-            messageVariables: {
-                entity: 'User'
-            }
-        });
-    }
-    async checkTokenRevocation(payload) {
-        if (!payload.iat) return;
-        try {
-            const authService = await this.moduleRef.resolve(authentication_service/* .AuthenticationService */.k, undefined, {
-                strict: false
-            });
-            if (authService && await authService.isTokenRevoked(payload.id, payload.iat)) {
-                throw new common_.UnauthorizedException({
-                    message: 'Token has been revoked',
-                    messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_REVOKED */.mK.TOKEN_REVOKED
-                });
-            }
-        } catch (err) {
-            if (err instanceof common_.UnauthorizedException) throw err;
-        }
-    }
-    buildUserInfo(payload) {
-        const base = {
-            id: payload.id,
-            email: payload.email
-        };
-        if (!hasCompanyContext(payload)) {
-            return base;
-        }
-        return {
-            ...base,
-            companyId: payload.companyId,
-            ...payload.branchId && {
-                branchId: payload.branchId
-            }
-        };
-    }
-}
-JwtStrategy = _ts_decorate([
-    (0,common_.Injectable)(),
-    _ts_param(0, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
-    _ts_param(1, (0,common_.Inject)(core_.ModuleRef)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W,
-        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
-    ])
-], JwtStrategy);
-
-
-},
-3794(module) {
-
-module.exports = __rspack_external__nestjs_passport_18907953;
-
-
 },
 
 };
@@ -1338,8 +807,10 @@ import * as __rspack_chunk_4 from './118.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from './120.js';
 __webpack_require__.C(__rspack_chunk_5);
-import * as __rspack_chunk_6 from './index.js';
+import * as __rspack_chunk_6 from './360.js';
 __webpack_require__.C(__rspack_chunk_6);
+import * as __rspack_chunk_7 from './index.js';
+__webpack_require__.C(__rspack_chunk_7);
 var __webpack_exports__ = __webpack_exec__(3716);var __webpack_exports__AUTH_EMAIL_PROVIDER = __webpack_exports__.C8;
 var __webpack_exports__AUTH_EVENT_ACTIONS = __webpack_exports__.ov;
 var __webpack_exports__AUTH_EVENT_ENTITIES = __webpack_exports__.gm;
@@ -1358,6 +829,7 @@ var __webpack_exports__AuthenticationService = __webpack_exports__.kX;
 var __webpack_exports__BCRYPT_SALT_ROUNDS = __webpack_exports__.aK;
 var __webpack_exports__BRANCH_MESSAGES = __webpack_exports__.W1;
 var __webpack_exports__BranchController = __webpack_exports__.zF;
+var __webpack_exports__BranchHierarchyResolverAdapter = __webpack_exports__.XR;
 var __webpack_exports__BranchInfoDto = __webpack_exports__.UQ;
 var __webpack_exports__BranchPermittedUserDto = __webpack_exports__.tu;
 var __webpack_exports__BranchPermittedUsersResponseDto = __webpack_exports__.bK;
@@ -1367,6 +839,7 @@ var __webpack_exports__COMPANY_MESSAGES = __webpack_exports__.hg;
 var __webpack_exports__ChangePasswordDto = __webpack_exports__.$h;
 var __webpack_exports__ClearToken = __webpack_exports__.t7;
 var __webpack_exports__Company = __webpack_exports__.CC;
+var __webpack_exports__CompanyAccessResolverAdapter = __webpack_exports__.ht;
 var __webpack_exports__CompanyBranch = __webpack_exports__.At;
 var __webpack_exports__CompanyBranchResponseDto = __webpack_exports__.ET;
 var __webpack_exports__CompanyController = __webpack_exports__.wD;
@@ -1451,8 +924,11 @@ var __webpack_exports__generateAccessToken = __webpack_exports__.Vg;
 var __webpack_exports__generateTokens = __webpack_exports__.e;
 var __webpack_exports__getAuthEntitiesByConfig = __webpack_exports__.QB;
 var __webpack_exports__getSocialProvider = __webpack_exports__.V8;
+var __webpack_exports__loadCompanyBranchNodes = __webpack_exports__.vR;
+var __webpack_exports__loadDisplayParentIds = __webpack_exports__.xu;
 var __webpack_exports__parseExpiryToMs = __webpack_exports__.om;
+var __webpack_exports__revokeUserSessions = __webpack_exports__.XP;
 var __webpack_exports__toBranchInfo = __webpack_exports__.QH;
 var __webpack_exports__toCompanyInfo = __webpack_exports__.$C;
 var __webpack_exports__toUserInfo = __webpack_exports__.FV;
-export { __webpack_exports__AUTH_EMAIL_PROVIDER as AUTH_EMAIL_PROVIDER, __webpack_exports__AUTH_EVENT_ACTIONS as AUTH_EVENT_ACTIONS, __webpack_exports__AUTH_EVENT_ENTITIES as AUTH_EVENT_ENTITIES, __webpack_exports__AUTH_EVENT_MODULE as AUTH_EVENT_MODULE, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__AUTH_MODULE_OPTIONS as AUTH_MODULE_OPTIONS, __webpack_exports__AppUser as AppUser, __webpack_exports__AssignUserBranchDto as AssignUserBranchDto, __webpack_exports__AssignUserCompanyDto as AssignUserCompanyDto, __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthModule as AuthModule, __webpack_exports__AuthenticationController as AuthenticationController, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BCRYPT_SALT_ROUNDS as BCRYPT_SALT_ROUNDS, __webpack_exports__BRANCH_MESSAGES as BRANCH_MESSAGES, __webpack_exports__BranchController as BranchController, __webpack_exports__BranchInfoDto as BranchInfoDto, __webpack_exports__BranchPermittedUserDto as BranchPermittedUserDto, __webpack_exports__BranchPermittedUsersResponseDto as BranchPermittedUsersResponseDto, __webpack_exports__BranchSelectionInfoDto as BranchSelectionInfoDto, __webpack_exports__BranchService as BranchService, __webpack_exports__COMPANY_MESSAGES as COMPANY_MESSAGES, __webpack_exports__ChangePasswordDto as ChangePasswordDto, __webpack_exports__ClearToken as ClearToken, __webpack_exports__Company as Company, __webpack_exports__CompanyBranch as CompanyBranch, __webpack_exports__CompanyBranchResponseDto as CompanyBranchResponseDto, __webpack_exports__CompanyController as CompanyController, __webpack_exports__CompanyInfoDto as CompanyInfoDto, __webpack_exports__CompanyPermittedUserDto as CompanyPermittedUserDto, __webpack_exports__CompanyPermittedUsersResponseDto as CompanyPermittedUsersResponseDto, __webpack_exports__CompanyResponseDto as CompanyResponseDto, __webpack_exports__CompanySelectionController as CompanySelectionController, __webpack_exports__CompanySelectionResponseDto as CompanySelectionResponseDto, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__CompanyWithBranchesDto as CompanyWithBranchesDto, __webpack_exports__CreateCompanyBranchDto as CreateCompanyBranchDto, __webpack_exports__CreateCompanyDto as CreateCompanyDto, __webpack_exports__CreateSocialAuthConfigDto as CreateSocialAuthConfigDto, __webpack_exports__CreateUserDto as CreateUserDto, __webpack_exports__DEFAULT_COOKIE_NAME as DEFAULT_COOKIE_NAME, __webpack_exports__EMAIL_VERIFICATION_MESSAGES as EMAIL_VERIFICATION_MESSAGES, __webpack_exports__EmailVerificationController as EmailVerificationController, __webpack_exports__ForgotPasswordDto as ForgotPasswordDto, __webpack_exports__GetBranchUsersDto as GetBranchUsersDto, __webpack_exports__GetCompanyUsersDto as GetCompanyUsersDto, __webpack_exports__JwtStrategy as JwtStrategy, __webpack_exports__LoginDto as LoginDto, __webpack_exports__LoginResponseDto as LoginResponseDto, __webpack_exports__LoginResponseRequiresEmailVerificationDto as LoginResponseRequiresEmailVerificationDto, __webpack_exports__MAX_COOKIE_BYTES as MAX_COOKIE_BYTES, __webpack_exports__MeResponseDto as MeResponseDto, __webpack_exports__PendingRegistration as PendingRegistration, __webpack_exports__PermissionItemDto as PermissionItemDto, __webpack_exports__PermissionType as PermissionType, __webpack_exports__RefreshTokenDto as RefreshTokenDto, __webpack_exports__RegistrationDto as RegistrationDto, __webpack_exports__RegistrationResponseDto as RegistrationResponseDto, __webpack_exports__ResendVerificationDto as ResendVerificationDto, __webpack_exports__ResetPasswordDto as ResetPasswordDto, __webpack_exports__SESSION_CACHE_PREFIX as SESSION_CACHE_PREFIX, __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES as SOCIAL_AUTH_CONFIG_MESSAGES, __webpack_exports__SOCIAL_AUTH_MESSAGES as SOCIAL_AUTH_MESSAGES, __webpack_exports__SOCIAL_STATE_PREFIX as SOCIAL_STATE_PREFIX, __webpack_exports__SOCIAL_STATE_TTL_MS as SOCIAL_STATE_TTL_MS, __webpack_exports__SelectDto as SelectDto, __webpack_exports__SetToken as SetToken, __webpack_exports__SocialAuthConfig as SocialAuthConfig, __webpack_exports__SocialAuthConfigController as SocialAuthConfigController, __webpack_exports__SocialAuthConfigResponseDto as SocialAuthConfigResponseDto, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthController as SocialAuthController, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__SocialAuthorizeDto as SocialAuthorizeDto, __webpack_exports__SocialAuthorizeResponseDto as SocialAuthorizeResponseDto, __webpack_exports__SocialCallbackDto as SocialCallbackDto, __webpack_exports__SocialProviderInfoDto as SocialProviderInfoDto, __webpack_exports__SocialProviderTypeEnum as SocialProviderTypeEnum, __webpack_exports__SocialProvidersDto as SocialProvidersDto, __webpack_exports__SwitchCompanyDto as SwitchCompanyDto, __webpack_exports__TOKEN_REVOKED_PREFIX as TOKEN_REVOKED_PREFIX, __webpack_exports__TokenType as TokenType, __webpack_exports__USER_ENRICHER as USER_ENRICHER, __webpack_exports__USER_MESSAGES as USER_MESSAGES, __webpack_exports__USER_PERMISSION_MESSAGES as USER_PERMISSION_MESSAGES, __webpack_exports__UpdateCompanyBranchDto as UpdateCompanyBranchDto, __webpack_exports__UpdateCompanyDto as UpdateCompanyDto, __webpack_exports__UpdateSocialAuthConfigDto as UpdateSocialAuthConfigDto, __webpack_exports__UpdateUserDto as UpdateUserDto, __webpack_exports__UserBranchPermissionDto as UserBranchPermissionDto, __webpack_exports__UserBranchesResponseDto as UserBranchesResponseDto, __webpack_exports__UserCompaniesResponseDto as UserCompaniesResponseDto, __webpack_exports__UserCompanyPermission as UserCompanyPermission, __webpack_exports__UserCompanyPermissionDto as UserCompanyPermissionDto, __webpack_exports__UserController as UserController, __webpack_exports__UserInfoDto as UserInfoDto, __webpack_exports__UserLookupResponseDto as UserLookupResponseDto, __webpack_exports__UserPermissionController as UserPermissionController, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserResponseDto as UserResponseDto, __webpack_exports__UserService as UserService, __webpack_exports__UserToken as UserToken, __webpack_exports__VerifyEmailDto as VerifyEmailDto, __webpack_exports__authSwaggerConfig as authSwaggerConfig, __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__getAuthEntitiesByConfig as getAuthEntitiesByConfig, __webpack_exports__getSocialProvider as getSocialProvider, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };
+export { __webpack_exports__AUTH_EMAIL_PROVIDER as AUTH_EMAIL_PROVIDER, __webpack_exports__AUTH_EVENT_ACTIONS as AUTH_EVENT_ACTIONS, __webpack_exports__AUTH_EVENT_ENTITIES as AUTH_EVENT_ENTITIES, __webpack_exports__AUTH_EVENT_MODULE as AUTH_EVENT_MODULE, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__AUTH_MODULE_OPTIONS as AUTH_MODULE_OPTIONS, __webpack_exports__AppUser as AppUser, __webpack_exports__AssignUserBranchDto as AssignUserBranchDto, __webpack_exports__AssignUserCompanyDto as AssignUserCompanyDto, __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthModule as AuthModule, __webpack_exports__AuthenticationController as AuthenticationController, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BCRYPT_SALT_ROUNDS as BCRYPT_SALT_ROUNDS, __webpack_exports__BRANCH_MESSAGES as BRANCH_MESSAGES, __webpack_exports__BranchController as BranchController, __webpack_exports__BranchHierarchyResolverAdapter as BranchHierarchyResolverAdapter, __webpack_exports__BranchInfoDto as BranchInfoDto, __webpack_exports__BranchPermittedUserDto as BranchPermittedUserDto, __webpack_exports__BranchPermittedUsersResponseDto as BranchPermittedUsersResponseDto, __webpack_exports__BranchSelectionInfoDto as BranchSelectionInfoDto, __webpack_exports__BranchService as BranchService, __webpack_exports__COMPANY_MESSAGES as COMPANY_MESSAGES, __webpack_exports__ChangePasswordDto as ChangePasswordDto, __webpack_exports__ClearToken as ClearToken, __webpack_exports__Company as Company, __webpack_exports__CompanyAccessResolverAdapter as CompanyAccessResolverAdapter, __webpack_exports__CompanyBranch as CompanyBranch, __webpack_exports__CompanyBranchResponseDto as CompanyBranchResponseDto, __webpack_exports__CompanyController as CompanyController, __webpack_exports__CompanyInfoDto as CompanyInfoDto, __webpack_exports__CompanyPermittedUserDto as CompanyPermittedUserDto, __webpack_exports__CompanyPermittedUsersResponseDto as CompanyPermittedUsersResponseDto, __webpack_exports__CompanyResponseDto as CompanyResponseDto, __webpack_exports__CompanySelectionController as CompanySelectionController, __webpack_exports__CompanySelectionResponseDto as CompanySelectionResponseDto, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__CompanyWithBranchesDto as CompanyWithBranchesDto, __webpack_exports__CreateCompanyBranchDto as CreateCompanyBranchDto, __webpack_exports__CreateCompanyDto as CreateCompanyDto, __webpack_exports__CreateSocialAuthConfigDto as CreateSocialAuthConfigDto, __webpack_exports__CreateUserDto as CreateUserDto, __webpack_exports__DEFAULT_COOKIE_NAME as DEFAULT_COOKIE_NAME, __webpack_exports__EMAIL_VERIFICATION_MESSAGES as EMAIL_VERIFICATION_MESSAGES, __webpack_exports__EmailVerificationController as EmailVerificationController, __webpack_exports__ForgotPasswordDto as ForgotPasswordDto, __webpack_exports__GetBranchUsersDto as GetBranchUsersDto, __webpack_exports__GetCompanyUsersDto as GetCompanyUsersDto, __webpack_exports__JwtStrategy as JwtStrategy, __webpack_exports__LoginDto as LoginDto, __webpack_exports__LoginResponseDto as LoginResponseDto, __webpack_exports__LoginResponseRequiresEmailVerificationDto as LoginResponseRequiresEmailVerificationDto, __webpack_exports__MAX_COOKIE_BYTES as MAX_COOKIE_BYTES, __webpack_exports__MeResponseDto as MeResponseDto, __webpack_exports__PendingRegistration as PendingRegistration, __webpack_exports__PermissionItemDto as PermissionItemDto, __webpack_exports__PermissionType as PermissionType, __webpack_exports__RefreshTokenDto as RefreshTokenDto, __webpack_exports__RegistrationDto as RegistrationDto, __webpack_exports__RegistrationResponseDto as RegistrationResponseDto, __webpack_exports__ResendVerificationDto as ResendVerificationDto, __webpack_exports__ResetPasswordDto as ResetPasswordDto, __webpack_exports__SESSION_CACHE_PREFIX as SESSION_CACHE_PREFIX, __webpack_exports__SOCIAL_AUTH_CONFIG_MESSAGES as SOCIAL_AUTH_CONFIG_MESSAGES, __webpack_exports__SOCIAL_AUTH_MESSAGES as SOCIAL_AUTH_MESSAGES, __webpack_exports__SOCIAL_STATE_PREFIX as SOCIAL_STATE_PREFIX, __webpack_exports__SOCIAL_STATE_TTL_MS as SOCIAL_STATE_TTL_MS, __webpack_exports__SelectDto as SelectDto, __webpack_exports__SetToken as SetToken, __webpack_exports__SocialAuthConfig as SocialAuthConfig, __webpack_exports__SocialAuthConfigController as SocialAuthConfigController, __webpack_exports__SocialAuthConfigResponseDto as SocialAuthConfigResponseDto, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthController as SocialAuthController, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__SocialAuthorizeDto as SocialAuthorizeDto, __webpack_exports__SocialAuthorizeResponseDto as SocialAuthorizeResponseDto, __webpack_exports__SocialCallbackDto as SocialCallbackDto, __webpack_exports__SocialProviderInfoDto as SocialProviderInfoDto, __webpack_exports__SocialProviderTypeEnum as SocialProviderTypeEnum, __webpack_exports__SocialProvidersDto as SocialProvidersDto, __webpack_exports__SwitchCompanyDto as SwitchCompanyDto, __webpack_exports__TOKEN_REVOKED_PREFIX as TOKEN_REVOKED_PREFIX, __webpack_exports__TokenType as TokenType, __webpack_exports__USER_ENRICHER as USER_ENRICHER, __webpack_exports__USER_MESSAGES as USER_MESSAGES, __webpack_exports__USER_PERMISSION_MESSAGES as USER_PERMISSION_MESSAGES, __webpack_exports__UpdateCompanyBranchDto as UpdateCompanyBranchDto, __webpack_exports__UpdateCompanyDto as UpdateCompanyDto, __webpack_exports__UpdateSocialAuthConfigDto as UpdateSocialAuthConfigDto, __webpack_exports__UpdateUserDto as UpdateUserDto, __webpack_exports__UserBranchPermissionDto as UserBranchPermissionDto, __webpack_exports__UserBranchesResponseDto as UserBranchesResponseDto, __webpack_exports__UserCompaniesResponseDto as UserCompaniesResponseDto, __webpack_exports__UserCompanyPermission as UserCompanyPermission, __webpack_exports__UserCompanyPermissionDto as UserCompanyPermissionDto, __webpack_exports__UserController as UserController, __webpack_exports__UserInfoDto as UserInfoDto, __webpack_exports__UserLookupResponseDto as UserLookupResponseDto, __webpack_exports__UserPermissionController as UserPermissionController, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserResponseDto as UserResponseDto, __webpack_exports__UserService as UserService, __webpack_exports__UserToken as UserToken, __webpack_exports__VerifyEmailDto as VerifyEmailDto, __webpack_exports__authSwaggerConfig as authSwaggerConfig, __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__getAuthEntitiesByConfig as getAuthEntitiesByConfig, __webpack_exports__getSocialProvider as getSocialProvider, __webpack_exports__loadCompanyBranchNodes as loadCompanyBranchNodes, __webpack_exports__loadDisplayParentIds as loadDisplayParentIds, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__revokeUserSessions as revokeUserSessions, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };