@neohm/nestend 4.0.2 → 4.1.0

package/dist/auth/es6.classes.js

@@ -4,6 +4,10 @@ exports.es6Classes = void 0;
 const auth_controller_1 = require("./controllers/auth.controller");
 const admin_auth_controller_1 = require("./controllers/admin.auth.controller");
 const impersonation_controller_1 = require("./controllers/impersonation.controller");
+const tenant_invitation_controller_1 = require("./controllers/tenant.invitation.controller");
+const tenant_member_controller_1 = require("./controllers/tenant.member.controller");
+const user_invitation_controller_1 = require("./controllers/user.invitation.controller");
+const user_organization_controller_1 = require("./controllers/user.organization.controller");
 const api_key_service_1 = require("./services/api.key.service");
 const scope_service_1 = require("./services/scope.service");
 const role_service_1 = require("./services/role.service");
@@ -11,15 +15,33 @@ const auth_service_1 = require("./services/auth.service");
 const admin_auth_service_1 = require("./services/admin.auth.service");
 const google_auth_service_1 = require("./services/google.auth.service");
 const impersonation_service_1 = require("./services/impersonation.service");
+const tenant_invitation_service_1 = require("./services/tenant.invitation.service");
+const tenant_membership_service_1 = require("./services/tenant.membership.service");
+const tenant_invitation_data_processor_1 = require("./processors/tenant.invitation.data.processor");
+const tenant_invitation_list_processor_1 = require("./processors/tenant.invitation.list.processor");
+const tenant_member_list_processor_1 = require("./processors/tenant.member.list.processor");
 const admin_login_dto_1 = require("./dtos/admin.login.dto");
 const change_password_dto_1 = require("./dtos/change.password.dto");
 const google_login_dto_1 = require("./dtos/google.login.dto");
 const impersonation_login_dto_1 = require("./dtos/impersonation.login.dto");
+const invite_tenant_user_dto_1 = require("./dtos/invite.tenant.user.dto");
 const login_dto_1 = require("./dtos/login.dto");
+const member_roles_dto_1 = require("./dtos/member.roles.dto");
 const refresh_token_dto_1 = require("./dtos/refresh.token.dto");
 const register_dto_1 = require("./dtos/register.dto");
+const switch_organization_dto_1 = require("./dtos/switch.organization.dto");
+const tenant_invitation_list_dto_1 = require("./dtos/tenant.invitation.list.dto");
+const tenant_member_list_dto_1 = require("./dtos/tenant.member.list.dto");
 exports.es6Classes = {
-    controllers: [auth_controller_1.AuthController, admin_auth_controller_1.AdminAuthController, impersonation_controller_1.ImpersonationController],
+    controllers: [
+        auth_controller_1.AuthController,
+        admin_auth_controller_1.AdminAuthController,
+        impersonation_controller_1.ImpersonationController,
+        tenant_invitation_controller_1.TenantInvitationController,
+        tenant_member_controller_1.TenantMemberController,
+        user_invitation_controller_1.UserInvitationController,
+        user_organization_controller_1.UserOrganizationController,
+    ],
     services: [
         api_key_service_1.ApiKeyService,
         scope_service_1.ScopeService,
@@ -28,16 +50,27 @@ exports.es6Classes = {
         google_auth_service_1.GoogleAuthService,
         role_service_1.RoleService,
         impersonation_service_1.ImpersonationService,
+        tenant_membership_service_1.TenantMembershipService,
+        tenant_invitation_service_1.TenantInvitationService,
+    ],
+    libraries: [
+        tenant_invitation_data_processor_1.TenantInvitationDataProcessor,
+        tenant_invitation_list_processor_1.TenantInvitationListProcessor,
+        tenant_member_list_processor_1.TenantMemberListProcessor,
     ],
-    libraries: [],
     dtos: [
         admin_login_dto_1.AdminLoginDto,
         change_password_dto_1.ChangePasswordDto,
         google_login_dto_1.GoogleLoginDto,
         impersonation_login_dto_1.ImpersonationLoginDto,
+        invite_tenant_user_dto_1.InviteTenantUserDto,
         login_dto_1.LoginDto,
+        member_roles_dto_1.MemberRolesDto,
         refresh_token_dto_1.RefreshTokenDto,
         register_dto_1.RegisterDto,
+        switch_organization_dto_1.SwitchOrganizationDto,
+        tenant_invitation_list_dto_1.TenantInvitationListDto,
+        tenant_member_list_dto_1.TenantMemberListDto,
     ],
     jobs: [],
     subscribers: [],

package/dist/auth/es6.classes.js.map

@@ -1 +1 @@
-{"version":3,"file":"es6.classes.js","sourceRoot":"","sources":["../../src/auth/es6.classes.ts"],"names":[],"mappings":";;;AAAA,mEAA+D;AAC/D,+EAA0E;AAC1E,qFAAiF;AACjF,gEAA2D;AAC3D,4DAAwD;AACxD,0DAAsD;AACtD,0DAAsD;AACtD,sEAAiE;AACjE,wEAAmE;AACnE,4EAAwE;AACxE,4DAAuD;AACvD,oEAA+D;AAC/D,8DAAyD;AACzD,4EAAuE;AACvE,gDAA4C;AAC5C,gEAA2D;AAC3D,sDAAkD;AAErC,QAAA,UAAU,GAAG;IACxB,WAAW,EAAE,CAAC,gCAAc,EAAE,2CAAmB,EAAE,kDAAuB,CAAC;IAC3E,QAAQ,EAAE;QACR,+BAAa;QACb,4BAAY;QACZ,0BAAW;QACX,qCAAgB;QAChB,uCAAiB;QACjB,0BAAW;QACX,4CAAoB;KACZ;IACV,SAAS,EAAE,EAAE;IACb,IAAI,EAAE;QACJ,+BAAa;QACb,uCAAiB;QACjB,iCAAc;QACd,+CAAqB;QACrB,oBAAQ;QACR,mCAAe;QACf,0BAAW;KACZ;IACD,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;CAChB,CAAC"}
+{"version":3,"file":"es6.classes.js","sourceRoot":"","sources":["../../src/auth/es6.classes.ts"],"names":[],"mappings":";;;AAAA,mEAA+D;AAC/D,+EAA0E;AAC1E,qFAAiF;AACjF,6FAAwF;AACxF,qFAAgF;AAChF,yFAAoF;AACpF,6FAAwF;AACxF,gEAA2D;AAC3D,4DAAwD;AACxD,0DAAsD;AACtD,0DAAsD;AACtD,sEAAiE;AACjE,wEAAmE;AACnE,4EAAwE;AACxE,oFAA+E;AAC/E,oFAA+E;AAC/E,oGAA8F;AAC9F,oGAA8F;AAC9F,4FAAsF;AACtF,4DAAuD;AACvD,oEAA+D;AAC/D,8DAAyD;AACzD,4EAAuE;AACvE,0EAAoE;AACpE,gDAA4C;AAC5C,8DAAyD;AACzD,gEAA2D;AAC3D,sDAAkD;AAClD,4EAAuE;AACvE,kFAA4E;AAC5E,0EAAoE;AAEvD,QAAA,UAAU,GAAG;IACxB,WAAW,EAAE;QACX,gCAAc;QACd,2CAAmB;QACnB,kDAAuB;QACvB,yDAA0B;QAC1B,iDAAsB;QACtB,qDAAwB;QACxB,yDAA0B;KAC3B;IACD,QAAQ,EAAE;QACR,+BAAa;QACb,4BAAY;QACZ,0BAAW;QACX,qCAAgB;QAChB,uCAAiB;QACjB,0BAAW;QACX,4CAAoB;QACpB,mDAAuB;QACvB,mDAAuB;KACf;IACV,SAAS,EAAE;QACT,gEAA6B;QAC7B,gEAA6B;QAC7B,wDAAyB;KAC1B;IACD,IAAI,EAAE;QACJ,+BAAa;QACb,uCAAiB;QACjB,iCAAc;QACd,+CAAqB;QACrB,4CAAmB;QACnB,oBAAQ;QACR,iCAAc;QACd,mCAAe;QACf,0BAAW;QACX,+CAAqB;QACrB,oDAAuB;QACvB,4CAAmB;KACpB;IACD,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;CAChB,CAAC"}

package/dist/auth/helpers/auth.d.ts

@@ -1,6 +1,6 @@
 import type { AuthContextValue } from '../types/auth.types';
 export declare class Auth {
-    static loadUserContext(userId: string, sessionIdentifier?: string, impersonatedTenantId?: string): Promise<AuthContextValue | null>;
+    static loadUserContext(userId: string, sessionIdentifier?: string, tenantId?: string): Promise<AuthContextValue | null>;
     static runWithContext<T>(context: AuthContextValue, callback: () => T): T;
     static enterContext(context: AuthContextValue): void;
     static user(): Record<string, any> | undefined;

package/dist/auth/helpers/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/helpers/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAW5D,qBAAa,IAAI;WAMF,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,EAC1B,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA0BnC,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;IASzE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAIpD,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS;IAI9C,MAAM,CAAC,OAAO,IAAI,MAAM,GAAG,SAAS;IAKpC,MAAM,CAAC,kBAAkB,IAAI,MAAM,GAAG,SAAS;IAI/C,MAAM,CAAC,eAAe,IAAI,OAAO;CAGlC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/helpers/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAW5D,qBAAa,IAAI;WAMF,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,EAC1B,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAiCnC,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;IASzE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAIpD,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS;IAI9C,MAAM,CAAC,OAAO,IAAI,MAAM,GAAG,SAAS;IAKpC,MAAM,CAAC,kBAAkB,IAAI,MAAM,GAAG,SAAS;IAI/C,MAAM,CAAC,eAAe,IAAI,OAAO;CAGlC"}

package/dist/auth/helpers/auth.js

@@ -3,19 +3,22 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Auth = void 0;
 const async_hooks_1 = require("async_hooks");
 const user_entity_1 = require("../entities/user.entity");
+const user_type_enum_1 = require("../enums/user.type.enum");
 const storage = new async_hooks_1.AsyncLocalStorage();
 class Auth {
-    static async loadUserContext(userId, sessionIdentifier, impersonatedTenantId) {
+    static async loadUserContext(userId, sessionIdentifier, tenantId) {
         const user = await user_entity_1.UserEntity.findOne({ where: { id: userId } });
-        if (!user)
+        if (!user?.active)
             return null;
         const userObject = { ...user };
         delete userObject.password;
         delete userObject.created_at;
         delete userObject.updated_at;
         delete userObject.deleted_at;
-        if (impersonatedTenantId)
-            userObject.organization_id = impersonatedTenantId;
+        userObject.organization_id = tenantId ?? null;
+        const impersonatedTenantId = tenantId && user.user_type === user_type_enum_1.UserType.SYSTEM_USER
+            ? tenantId
+            : undefined;
         return { user: userObject, sessionIdentifier, impersonatedTenantId };
     }
     static runWithContext(context, callback) {

package/dist/auth/helpers/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/auth/helpers/auth.ts"],"names":[],"mappings":";;;AAAA,6CAAgD;AAChD,yDAAqD;AAGrD,MAAM,OAAO,GAAG,IAAI,+BAAiB,EAAoB,CAAC;AAS1D,MAAa,IAAI;IAMf,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,MAAc,EACd,iBAA0B,EAC1B,oBAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,UAAU,GAAwB,EAAE,GAAG,IAAI,EAAE,CAAC;QACpD,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC3B,OAAO,UAAU,CAAC,UAAU,CAAC;QAC7B,OAAO,UAAU,CAAC,UAAU,CAAC;QAC7B,OAAO,UAAU,CAAC,UAAU,CAAC;QAI7B,IAAI,oBAAoB;YAAE,UAAU,CAAC,eAAe,GAAG,oBAAoB,CAAC;QAE5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;IACvE,CAAC;IAWD,MAAM,CAAC,cAAc,CAAI,OAAyB,EAAE,QAAiB;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAOD,MAAM,CAAC,YAAY,CAAC,OAAyB;QAC3C,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,IAAI;QACT,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,OAAO;QACZ,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC;IAC/C,CAAC;IAGD,MAAM,CAAC,kBAAkB;QACvB,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,eAAe;QACpB,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC;IACpD,CAAC;CACF;AAjED,oBAiEC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/auth/helpers/auth.ts"],"names":[],"mappings":";;;AAAA,6CAAgD;AAChD,yDAAqD;AACrD,4DAAmD;AAGnD,MAAM,OAAO,GAAG,IAAI,+BAAiB,EAAoB,CAAC;AAS1D,MAAa,IAAI;IAMf,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,MAAc,EACd,iBAA0B,EAC1B,QAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,EAAE,MAAM;YAAE,OAAO,IAAI,CAAC;QAE/B,MAAM,UAAU,GAAwB,EAAE,GAAG,IAAI,EAAE,CAAC;QACpD,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC3B,OAAO,UAAU,CAAC,UAAU,CAAC;QAC7B,OAAO,UAAU,CAAC,UAAU,CAAC;QAC7B,OAAO,UAAU,CAAC,UAAU,CAAC;QAI7B,UAAU,CAAC,eAAe,GAAG,QAAQ,IAAI,IAAI,CAAC;QAG9C,MAAM,oBAAoB,GACxB,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,yBAAQ,CAAC,WAAW;YACjD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;IACvE,CAAC;IAWD,MAAM,CAAC,cAAc,CAAI,OAAyB,EAAE,QAAiB;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAOD,MAAM,CAAC,YAAY,CAAC,OAAyB;QAC3C,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,IAAI;QACT,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,OAAO;QACZ,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC;IAC/C,CAAC;IAGD,MAAM,CAAC,kBAAkB;QACvB,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,eAAe;QACpB,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC;IACpD,CAAC;CACF;AAxED,oBAwEC"}

package/dist/auth/processors/change.password.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"change.password.data.processor.d.ts","sourceRoot":"","sources":["../../../src/auth/processors/change.password.data.processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAQhE,qBAAa,2BAA4B,SAAQ,mBAAmB;IAItD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACrC,OAAO,CAAC,IAAI,CAA2B;gBAEV,MAAM,EAAE,MAAM;IAIrC,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,QAAQ;YA+BR,MAAM;CAOrB"}
+{"version":3,"file":"change.password.data.processor.d.ts","sourceRoot":"","sources":["../../../src/auth/processors/change.password.data.processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAQhE,qBAAa,2BAA4B,SAAQ,mBAAmB;IAItD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACrC,OAAO,CAAC,IAAI,CAA2B;gBAEV,MAAM,EAAE,MAAM;IAIrC,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,QAAQ;YA+BR,MAAM;CAQrB"}

package/dist/auth/processors/change.password.data.processor.js

@@ -40,6 +40,7 @@ class ChangePasswordDataProcessor extends common_data_processor_1.CommonDataProc
         if (!this.user)
             return;
         this.user.password = await auth_utilities_1.AuthUtility.hashPassword(this.payload.new_password);
+        this.user.password_change_required = false;
         await this.user.save();
     }
 }

package/dist/auth/processors/change.password.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"change.password.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/change.password.data.processor.ts"],"names":[],"mappings":";;;AAAA,wFAAmF;AACnF,yDAAqD;AAErD,gEAA0D;AAO1D,MAAa,2BAA4B,SAAQ,2CAAmB;IAIlE,YAA6B,MAAc;QACzC,KAAK,EAAE,CAAC;QADmB,WAAM,GAAN,MAAM,CAAQ;QAFnC,SAAI,GAAsB,IAAI,CAAC;IAIvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,aAAa,EAAE;aAC1C,kBAAkB,CAAC,MAAM,CAAC;aAC1B,SAAS,CAAC,eAAe,CAAC;aAC1B,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3C,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;YACjE,IAAI,CAAC,iCAAiC,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,4BAAW,CAAC,eAAe,CAC/C,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAC7B,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAChE,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,+CAA+C,CAChD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,4BAAW,CAAC,YAAY,CACjD,IAAI,CAAC,OAAO,CAAC,YAAY,CAC1B,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;CACF;AApDD,kEAoDC"}
+{"version":3,"file":"change.password.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/change.password.data.processor.ts"],"names":[],"mappings":";;;AAAA,wFAAmF;AACnF,yDAAqD;AAErD,gEAA0D;AAO1D,MAAa,2BAA4B,SAAQ,2CAAmB;IAIlE,YAA6B,MAAc;QACzC,KAAK,EAAE,CAAC;QADmB,WAAM,GAAN,MAAM,CAAQ;QAFnC,SAAI,GAAsB,IAAI,CAAC;IAIvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,aAAa,EAAE;aAC1C,kBAAkB,CAAC,MAAM,CAAC;aAC1B,SAAS,CAAC,eAAe,CAAC;aAC1B,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3C,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;YACjE,IAAI,CAAC,iCAAiC,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,4BAAW,CAAC,eAAe,CAC/C,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAC7B,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAChE,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,+CAA+C,CAChD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,4BAAW,CAAC,YAAY,CACjD,IAAI,CAAC,OAAO,CAAC,YAAY,CAC1B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;CACF;AArDD,kEAqDC"}

package/dist/auth/processors/google.user.data.processor.js

@@ -10,7 +10,7 @@ class GoogleUserDataProcessor extends common_data_processor_1.CommonDataProcesso
     async process(payload) {
         this.payload = payload;
         const existing = await user_entity_1.UserEntity.findOne({
-            where: { email: payload.email },
+            where: { email: user_entity_1.UserEntity.emailMatching(payload.email) },
         });
         if (existing)
             return this.reuse(existing);

package/dist/auth/processors/google.user.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"google.user.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/google.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,2CAAuD;AACvD,wFAAmF;AACnF,yDAAqD;AACrD,gFAAwE;AACxE,4DAAmD;AASnD,MAAa,uBAAwB,SAAQ,2CAAmB;IAG9D,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,QAAQ,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAChC,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,IAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM;YACd,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,yBAAQ,CAAC,WAAW;YAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,IAAI,IAAI,EAAE;YAC7B,UAAU,EAAE;gBACV,CAAC,8CAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG;gBACnC,CAAC,8CAAmB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO;aAC5C;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;CACF;AApCD,0DAoCC"}
+{"version":3,"file":"google.user.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/google.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,2CAAuD;AACvD,wFAAmF;AACnF,yDAAqD;AACrD,gFAAwE;AACxE,4DAAmD;AASnD,MAAa,uBAAwB,SAAQ,2CAAmB;IAG9D,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,QAAQ,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE,wBAAU,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;SAC1D,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,IAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM;YACd,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,yBAAQ,CAAC,WAAW;YAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,IAAI,IAAI,EAAE;YAC7B,UAAU,EAAE;gBACV,CAAC,8CAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG;gBACnC,CAAC,8CAAmB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO;aAC5C;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;CACF;AApCD,0DAoCC"}

package/dist/auth/processors/register.user.data.processor.js

@@ -13,7 +13,7 @@ class RegisterUserDataProcessor extends common_data_processor_1.CommonDataProces
     }
     async validate() {
         const existing = await user_entity_1.UserEntity.findOne({
-            where: { email: this.payload.email },
+            where: { email: user_entity_1.UserEntity.emailMatching(this.payload.email) },
         });
         if (existing)
             this.setColumnError('email', 'Email is already registered');

package/dist/auth/processors/register.user.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.user.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/register.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,wFAAmF;AACnF,yDAAqD;AACrD,4DAAmD;AAEnD,gEAA0D;AAG1D,MAAa,yBAA0B,SAAQ,2CAAmB;IAGhE,KAAK,CAAC,OAAO,CAAC,OAAoB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,QAAQ,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;SACrC,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAE1E,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,yBAAQ,CAAC,WAAW;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,MAAM,4BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,OAAQ,IAA8B,CAAC,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AArCD,8DAqCC"}
+{"version":3,"file":"register.user.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/register.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,wFAAmF;AACnF,yDAAqD;AACrD,4DAAmD;AAEnD,gEAA0D;AAG1D,MAAa,yBAA0B,SAAQ,2CAAmB;IAGhE,KAAK,CAAC,OAAO,CAAC,OAAoB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,QAAQ,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE,wBAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;SAC/D,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAE1E,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,yBAAQ,CAAC,WAAW;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,MAAM,4BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,OAAQ,IAA8B,CAAC,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AArCD,8DAqCC"}

package/dist/auth/processors/tenant.invitation.data.processor.d.ts

@@ -0,0 +1,20 @@
+import { CommonDataProcessor } from '../../common/libraries/common.data.processor';
+import { InviteTenantUserDto } from '../dtos/invite.tenant.user.dto';
+import { TenantInvitationEntity } from '../entities/tenant.invitation.entity';
+import { UserEntity } from '../entities/user.entity';
+import { TenantInvitationService } from '../services/tenant.invitation.service';
+export declare class TenantInvitationDataProcessor extends CommonDataProcessor {
+    private readonly inviter;
+    private readonly tenantInvitationService;
+    protected payload: InviteTenantUserDto;
+    private invitee;
+    constructor(inviter: UserEntity, tenantInvitationService: TenantInvitationService);
+    process(payload: InviteTenantUserDto): Promise<TenantInvitationEntity>;
+    private get tenantId();
+    private validate;
+    private validateInvitee;
+    private validatePending;
+    private validateRoles;
+    private create;
+}
+//# sourceMappingURL=tenant.invitation.data.processor.d.ts.map

package/dist/auth/processors/tenant.invitation.data.processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.invitation.data.processor.d.ts","sourceRoot":"","sources":["../../../src/auth/processors/tenant.invitation.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAQhF,qBAAa,6BAA8B,SAAQ,mBAAmB;IAKlE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAL1C,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACvC,OAAO,CAAC,OAAO,CAA2B;gBAGvB,OAAO,EAAE,UAAU,EACnB,uBAAuB,EAAE,uBAAuB;IAK7D,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAU5E,OAAO,KAAK,QAAQ,GAEnB;YAEa,QAAQ;YAaR,eAAe;YAiBf,eAAe;YAcf,aAAa;YAgBb,MAAM;CAkDrB"}

package/dist/auth/processors/tenant.invitation.data.processor.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantInvitationDataProcessor = void 0;
+const typeorm_1 = require("typeorm");
+const common_data_processor_1 = require("../../common/libraries/common.data.processor");
+const access_exception_1 = require("../../global/exceptions/access.exception");
+const system_role_entity_1 = require("../entities/system.role.entity");
+const tenant_invitation_entity_1 = require("../entities/tenant.invitation.entity");
+const tenant_user_entity_1 = require("../entities/tenant.user.entity");
+const user_entity_1 = require("../entities/user.entity");
+const tenant_invitation_status_enum_1 = require("../enums/tenant.invitation.status.enum");
+const user_type_enum_1 = require("../enums/user.type.enum");
+const tenant_invitation_service_1 = require("../services/tenant.invitation.service");
+const auth_utilities_1 = require("../utilities/auth.utilities");
+class TenantInvitationDataProcessor extends common_data_processor_1.CommonDataProcessor {
+    constructor(inviter, tenantInvitationService) {
+        super();
+        this.inviter = inviter;
+        this.tenantInvitationService = tenantInvitationService;
+        this.invitee = null;
+    }
+    async process(payload) {
+        this.payload = {
+            ...payload,
+            email: payload.email.trim().toLowerCase(),
+            full_name: payload.full_name?.trim(),
+        };
+        await this.validate();
+        return this.create();
+    }
+    get tenantId() {
+        return this.inviter.organization_id;
+    }
+    async validate() {
+        if (!this.tenantId)
+            throw new access_exception_1.AccessException('This session is not working in an organization.');
+        await this.validateInvitee();
+        await this.validatePending();
+        await this.validateRoles();
+        this.raiseExceptionOnValidationFailure();
+    }
+    async validateInvitee() {
+        this.invitee = await user_entity_1.UserEntity.findOne({
+            where: { email: user_entity_1.UserEntity.emailMatching(this.payload.email) },
+        });
+        if (!this.invitee)
+            return;
+        if (this.invitee.user_type === user_type_enum_1.UserType.SYSTEM_USER)
+            this.setColumnError('email', 'This account cannot join an organization');
+        else if (await tenant_user_entity_1.TenantUserEntity.existsBy({
+            user_id: this.invitee.id,
+            tenant_id: this.tenantId,
+        }))
+            this.setColumnError('email', 'Already a member of this organization');
+    }
+    async validatePending() {
+        const pending = await tenant_invitation_entity_1.TenantInvitationEntity.existsBy({
+            tenant_id: this.tenantId,
+            email: this.payload.email,
+            status: tenant_invitation_status_enum_1.TenantInvitationStatus.PENDING,
+            expires_at: (0, typeorm_1.MoreThan)(new Date()),
+        });
+        if (pending)
+            this.setColumnError('email', 'This email already has a pending invitation');
+    }
+    async validateRoles() {
+        const roleIds = [...new Set(this.payload.role_ids)];
+        const roles = await system_role_entity_1.SystemRoleEntity.findBy({
+            id: (0, typeorm_1.In)(roleIds),
+            is_active: true,
+        });
+        const found = new Set(roles.map((role) => role.id));
+        for (const roleId of roleIds)
+            if (!found.has(roleId))
+                this.setColumnError('role_ids', `Role '${roleId}' not found or inactive`);
+    }
+    async create() {
+        const oneTimePassword = this.invitee
+            ? null
+            : auth_utilities_1.AuthUtility.generateOneTimePassword();
+        const passwordHash = oneTimePassword
+            ? await auth_utilities_1.AuthUtility.hashPassword(oneTimePassword)
+            : null;
+        const { invitation, created } = await tenant_invitation_entity_1.TenantInvitationEntity.getRepository().manager.transaction(async (trx) => {
+            const account = passwordHash
+                ? await trx.save(trx.create(user_entity_1.UserEntity, {
+                    user_type: user_type_enum_1.UserType.TENANT_USER,
+                    email: this.payload.email,
+                    full_name: this.payload.full_name || this.payload.email.split('@')[0],
+                    password: passwordHash,
+                    password_change_required: true,
+                    active: true,
+                    attributes: {},
+                }))
+                : null;
+            const saved = await trx.save(trx.create(tenant_invitation_entity_1.TenantInvitationEntity, {
+                tenant_id: this.tenantId,
+                email: this.payload.email,
+                role_ids: [...new Set(this.payload.role_ids)],
+                status: tenant_invitation_status_enum_1.TenantInvitationStatus.PENDING,
+                expires_at: tenant_invitation_service_1.TenantInvitationService.expiresAt(),
+                created_by: this.inviter.id,
+            }));
+            return { invitation: saved, created: account };
+        });
+        if (created && oneTimePassword)
+            await this.tenantInvitationService.mailOneTimePassword(created, invitation, oneTimePassword);
+        return invitation;
+    }
+}
+exports.TenantInvitationDataProcessor = TenantInvitationDataProcessor;
+//# sourceMappingURL=tenant.invitation.data.processor.js.map

package/dist/auth/processors/tenant.invitation.data.processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.invitation.data.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/tenant.invitation.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,wFAAmF;AACnF,+EAA2E;AAE3E,uEAAkE;AAClE,mFAA8E;AAC9E,uEAAkE;AAClE,yDAAqD;AACrD,0FAAgF;AAChF,4DAAmD;AACnD,qFAAgF;AAChF,gEAA0D;AAO1D,MAAa,6BAA8B,SAAQ,2CAAmB;IAIpE,YACmB,OAAmB,EACnB,uBAAgD;QAEjE,KAAK,EAAE,CAAC;QAHS,YAAO,GAAP,OAAO,CAAY;QACnB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAJ3D,YAAO,GAAsB,IAAI,CAAC;IAO1C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA4B;QACxC,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,OAAO;YACV,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE;SACrC,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChB,MAAM,IAAI,kCAAe,CACvB,iDAAiD,CAClD,CAAC;QAEJ,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACtC,KAAK,EAAE,EAAE,KAAK,EAAE,wBAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;SAC/D,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,yBAAQ,CAAC,WAAW;YACjD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;aACtE,IACH,MAAM,qCAAgB,CAAC,QAAQ,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,uCAAuC,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,OAAO,GAAG,MAAM,iDAAsB,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,MAAM,EAAE,sDAAsB,CAAC,OAAO;YACtC,UAAU,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,OAAO;YACT,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,6CAA6C,CAC9C,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,qCAAgB,CAAC,MAAM,CAAC;YAC1C,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpD,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBACpB,IAAI,CAAC,cAAc,CACjB,UAAU,EACV,SAAS,MAAM,yBAAyB,CACzC,CAAC;IACR,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO;YAClC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,4BAAW,CAAC,uBAAuB,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,eAAe;YAClC,CAAC,CAAC,MAAM,4BAAW,CAAC,YAAY,CAAC,eAAe,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC;QAGT,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAC3B,MAAM,iDAAsB,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,WAAW,CAC9D,KAAK,EAAE,GAAG,EAAE,EAAE;YACZ,MAAM,OAAO,GAAG,YAAY;gBAC1B,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CACZ,GAAG,CAAC,MAAM,CAAC,wBAAU,EAAE;oBACrB,SAAS,EAAE,yBAAQ,CAAC,WAAW;oBAC/B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,SAAS,EACP,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC5D,QAAQ,EAAE,YAAY;oBACtB,wBAAwB,EAAE,IAAI;oBAC9B,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,EAAE;iBACf,CAAC,CACH;gBACH,CAAC,CAAC,IAAI,CAAC;YAET,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAC1B,GAAG,CAAC,MAAM,CAAC,iDAAsB,EAAE;gBACjC,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM,EAAE,sDAAsB,CAAC,OAAO;gBACtC,UAAU,EAAE,mDAAuB,CAAC,SAAS,EAAE;gBAC/C,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;aAC5B,CAAC,CACH,CAAC;YACF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACjD,CAAC,CACF,CAAC;QAEJ,IAAI,OAAO,IAAI,eAAe;YAC5B,MAAM,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CACpD,OAAO,EACP,UAAU,EACV,eAAe,CAChB,CAAC;QAEJ,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAvID,sEAuIC"}

package/dist/auth/processors/tenant.invitation.list.processor.d.ts

@@ -0,0 +1,13 @@
+import { CommonListProcessor } from '../../common/libraries/common.list.processor';
+import { CommonListFilterConfig } from '../../common/types/list.types';
+import { ListFilterService } from '../../common/services/list.filter.service';
+import { TenantInvitationListDto } from '../dtos/tenant.invitation.list.dto';
+export declare class TenantInvitationListProcessor extends CommonListProcessor {
+    protected readonly listFilterService: ListFilterService;
+    protected payload: TenantInvitationListDto;
+    protected config: CommonListFilterConfig;
+    constructor(listFilterService: ListFilterService);
+    process(payload: TenantInvitationListDto): Promise<import("../../common/types/list.types").CommonListResult>;
+    protected applyCustomPredicates(): void;
+}
+//# sourceMappingURL=tenant.invitation.list.processor.d.ts.map

package/dist/auth/processors/tenant.invitation.list.processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.invitation.list.processor.d.ts","sourceRoot":"","sources":["../../../src/auth/processors/tenant.invitation.list.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAO7E,qBAAa,6BAA8B,SAAQ,mBAAmB;IAkDxD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;IAjDnE,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAE3C,SAAS,CAAC,MAAM,EAAE,sBAAsB,CA6CtC;gBAE6B,iBAAiB,EAAE,iBAAiB;IAI7D,OAAO,CAAC,OAAO,EAAE,uBAAuB;IAK9C,SAAS,CAAC,qBAAqB;CAGhC"}

package/dist/auth/processors/tenant.invitation.list.processor.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantInvitationListProcessor = void 0;
+const sort_direction_enum_1 = require("../../common/enums/sort.direction.enum");
+const filter_value_type_enum_1 = require("../../common/enums/filter.value.type.enum");
+const common_list_processor_1 = require("../../common/libraries/common.list.processor");
+class TenantInvitationListProcessor extends common_list_processor_1.CommonListProcessor {
+    constructor(listFilterService) {
+        super();
+        this.listFilterService = listFilterService;
+        this.config = {
+            query: `sys_tenant_invitations i
+      left join sys_users c on c.id = i.created_by
+      left join sys_users r on r.id = i.user_id
+      left join lateral (
+        select coalesce(
+          json_agg(
+            json_build_object('id', ro.id, 'identifier', ro.identifier, 'name', ro.name)
+            order by ro.name
+          ),
+          '[]'::json
+        ) granted
+        from sys_roles ro
+        where ro.id::text in (select jsonb_array_elements_text(i.role_ids))
+          and ro.deleted_at is null
+      ) rl on true`,
+            columns: [
+                { key: 'i.id', identifier: 'id', type: filter_value_type_enum_1.FilterValueTypeEnum.UUID },
+                { key: 'i.email', identifier: 'email', searchable: true },
+                { key: 'i.status', identifier: 'status' },
+                {
+                    key: 'rl.granted',
+                    identifier: 'roles',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.JSON,
+                },
+                { key: 'c.full_name', identifier: 'invited_by_name', searchable: true },
+                { key: 'r.full_name', identifier: 'responded_by_name' },
+                {
+                    key: 'i.expires_at',
+                    identifier: 'expires_at',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.DATETIME,
+                },
+                {
+                    key: 'i.responded_at',
+                    identifier: 'responded_at',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.DATETIME,
+                },
+                {
+                    key: 'i.created_at',
+                    identifier: 'created_at',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.DATETIME,
+                },
+            ],
+            predicates: ['i.deleted_at is null'],
+            defaultSort: { field: 'created_at', direction: sort_direction_enum_1.SortDirection.DESC },
+        };
+    }
+    async process(payload) {
+        this.payload = payload;
+        return this.handle();
+    }
+    applyCustomPredicates() {
+        this.predicates.add('i.tenant_id = :value', this.payload.tenant_id ?? null);
+    }
+}
+exports.TenantInvitationListProcessor = TenantInvitationListProcessor;
+//# sourceMappingURL=tenant.invitation.list.processor.js.map

package/dist/auth/processors/tenant.invitation.list.processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.invitation.list.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/tenant.invitation.list.processor.ts"],"names":[],"mappings":";;;AAAA,gFAAuE;AACvE,sFAAgF;AAChF,wFAAmF;AAUnF,MAAa,6BAA8B,SAAQ,2CAAmB;IAkDpE,YAA+B,iBAAoC;QACjE,KAAK,EAAE,CAAC;QADqB,sBAAiB,GAAjB,iBAAiB,CAAmB;QA/CzD,WAAM,GAA2B;YACzC,KAAK,EAAE;;;;;;;;;;;;;;mBAcQ;YACf,OAAO,EAAE;gBACP,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,4CAAmB,CAAC,IAAI,EAAE;gBACjE,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;gBACzD,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;gBACzC;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,OAAO;oBACnB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE;gBACvE,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE;gBACvD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,gBAAgB;oBACrB,UAAU,EAAE,cAAc;oBAC1B,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;aACF;YACD,UAAU,EAAE,CAAC,sBAAsB,CAAC;YACpC,WAAW,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,mCAAa,CAAC,IAAI,EAAE;SACpE,CAAC;IAIF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAgC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAES,qBAAqB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC9E,CAAC;CACF;AA9DD,sEA8DC"}

package/dist/auth/processors/tenant.member.list.processor.d.ts

@@ -0,0 +1,13 @@
+import { CommonListProcessor } from '../../common/libraries/common.list.processor';
+import { CommonListFilterConfig } from '../../common/types/list.types';
+import { ListFilterService } from '../../common/services/list.filter.service';
+import { TenantMemberListDto } from '../dtos/tenant.member.list.dto';
+export declare class TenantMemberListProcessor extends CommonListProcessor {
+    protected readonly listFilterService: ListFilterService;
+    protected payload: TenantMemberListDto;
+    protected config: CommonListFilterConfig;
+    constructor(listFilterService: ListFilterService);
+    process(payload: TenantMemberListDto): Promise<import("../../common/types/list.types").CommonListResult>;
+    protected applyCustomPredicates(): void;
+}
+//# sourceMappingURL=tenant.member.list.processor.d.ts.map

package/dist/auth/processors/tenant.member.list.processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.member.list.processor.d.ts","sourceRoot":"","sources":["../../../src/auth/processors/tenant.member.list.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAMrE,qBAAa,yBAA0B,SAAQ,mBAAmB;IAiDpD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;IAhDnE,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;IAEvC,SAAS,CAAC,MAAM,EAAE,sBAAsB,CA4CtC;gBAE6B,iBAAiB,EAAE,iBAAiB;IAI7D,OAAO,CAAC,OAAO,EAAE,mBAAmB;IAK1C,SAAS,CAAC,qBAAqB;CAMhC"}

package/dist/auth/processors/tenant.member.list.processor.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantMemberListProcessor = void 0;
+const sort_direction_enum_1 = require("../../common/enums/sort.direction.enum");
+const filter_value_type_enum_1 = require("../../common/enums/filter.value.type.enum");
+const common_list_processor_1 = require("../../common/libraries/common.list.processor");
+class TenantMemberListProcessor extends common_list_processor_1.CommonListProcessor {
+    constructor(listFilterService) {
+        super();
+        this.listFilterService = listFilterService;
+        this.config = {
+            query: `sys_tenant_users tu
+      join sys_users u on u.id = tu.user_id and u.deleted_at is null
+      left join lateral (
+        select coalesce(
+          json_agg(
+            json_build_object('id', ro.id, 'identifier', ro.identifier, 'name', ro.name)
+            order by ro.name
+          ),
+          '[]'::json
+        ) granted
+        from sys_user_roles ur
+        join sys_roles ro on ro.id = ur.role_id and ro.deleted_at is null
+        where ur.user_id = tu.user_id
+          and ur.tenant_id = tu.tenant_id
+          and ur.deleted_at is null
+      ) rl on true`,
+            columns: [
+                { key: 'u.id', identifier: 'user_id', type: filter_value_type_enum_1.FilterValueTypeEnum.UUID },
+                { key: 'u.full_name', identifier: 'full_name', searchable: true },
+                { key: 'u.email', identifier: 'email', searchable: true },
+                {
+                    key: 'u.active',
+                    identifier: 'active',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.BOOLEAN,
+                },
+                {
+                    key: 'tu.is_active',
+                    identifier: 'membership_active',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.BOOLEAN,
+                },
+                {
+                    key: 'rl.granted',
+                    identifier: 'roles',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.JSON,
+                },
+                {
+                    key: 'tu.created_at',
+                    identifier: 'joined_at',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.DATETIME,
+                },
+            ],
+            predicates: ['tu.deleted_at is null'],
+            defaultSort: { field: 'full_name', direction: sort_direction_enum_1.SortDirection.ASC },
+        };
+    }
+    async process(payload) {
+        this.payload = payload;
+        return this.handle();
+    }
+    applyCustomPredicates() {
+        this.predicates.add('tu.tenant_id = :value', this.payload.tenant_id ?? null);
+    }
+}
+exports.TenantMemberListProcessor = TenantMemberListProcessor;
+//# sourceMappingURL=tenant.member.list.processor.js.map

package/dist/auth/processors/tenant.member.list.processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.member.list.processor.js","sourceRoot":"","sources":["../../../src/auth/processors/tenant.member.list.processor.ts"],"names":[],"mappings":";;;AAAA,gFAAuE;AACvE,sFAAgF;AAChF,wFAAmF;AASnF,MAAa,yBAA0B,SAAQ,2CAAmB;IAiDhE,YAA+B,iBAAoC;QACjE,KAAK,EAAE,CAAC;QADqB,sBAAiB,GAAjB,iBAAiB,CAAmB;QA9CzD,WAAM,GAA2B;YACzC,KAAK,EAAE;;;;;;;;;;;;;;;mBAeQ;YACf,OAAO,EAAE;gBACP,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,4CAAmB,CAAC,IAAI,EAAE;gBACtE,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE;gBACjE,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;gBACzD;oBACE,GAAG,EAAE,UAAU;oBACf,UAAU,EAAE,QAAQ;oBACpB,IAAI,EAAE,4CAAmB,CAAC,OAAO;iBAClC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,mBAAmB;oBAC/B,IAAI,EAAE,4CAAmB,CAAC,OAAO;iBAClC;gBACD;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,OAAO;oBACnB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD;oBACE,GAAG,EAAE,eAAe;oBACpB,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;aACF;YACD,UAAU,EAAE,CAAC,uBAAuB,CAAC;YACrC,WAAW,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,mCAAa,CAAC,GAAG,EAAE;SAClE,CAAC;IAIF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA4B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAES,qBAAqB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,uBAAuB,EACvB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAC/B,CAAC;IACJ,CAAC;CACF;AAhED,8DAgEC"}

package/dist/auth/services/admin.auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.auth.service.d.ts","sourceRoot":"","sources":["../../../src/auth/services/admin.auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAkB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAsB,MAAM,SAAS,CAAC;AAIzD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAI7B,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU;IASnC,YAAY,CAChB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,wBAAwB,CAAC;IA6B9B,mBAAmB,CACvB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC;IAuBrB,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,aAAa,CAAC;IAuDnB,OAAO,CACX,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,aAAa,CAAC;IAiCnB,SAAS,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAajD,MAAM,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpD,OAAO,CAAC,SAAS;IAIjB,OAAO,KAAK,gBAAgB,GAE3B;IAED,OAAO,KAAK,WAAW,GAEtB;CACF"}
+{"version":3,"file":"admin.auth.service.d.ts","sourceRoot":"","sources":["../../../src/auth/services/admin.auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAkB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAsB,MAAM,SAAS,CAAC;AAIzD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAI7B,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU;IASnC,YAAY,CAChB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,wBAAwB,CAAC;IA6B9B,mBAAmB,CACvB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC;IAuBrB,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,aAAa,CAAC;IAyDnB,OAAO,CACX,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,aAAa,CAAC;IAiCnB,SAAS,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAajD,MAAM,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpD,OAAO,CAAC,SAAS;IAIjB,OAAO,KAAK,gBAAgB,GAE3B;IAED,OAAO,KAAK,WAAW,GAEtB;CACF"}

package/dist/auth/services/admin.auth.service.js

@@ -67,7 +67,7 @@ let AdminAuthService = class AdminAuthService {
         const jti = (0, crypto_1.randomUUID)();
         const accessExpiry = process.env.ACCESS_TOKEN_EXPIRY;
         const refreshExpiry = process.env.REFRESH_TOKEN_EXPIRY;
-        const sessionIdentifier = this.hashToken(`${Date.now()}:${user.id}`);
+        const sessionIdentifier = this.hashToken(`${(0, crypto_1.randomUUID)()}:${user.id}`);
         const sessionExpiresAt = new Date(Date.now() + auth_utilities_1.AuthUtility.parseExpiryMs(accessExpiry));
         await this.sessionRepo.save(this.sessionRepo.create({
             user_id: user.id,
@@ -80,7 +80,7 @@ let AdminAuthService = class AdminAuthService {
             secret: process.env.ACCESS_TOKEN_SECRET,
             expiresIn: accessExpiry,
         });
-        const refreshToken = await this.jwtService.signAsync({ sub: user.id, email: user.email }, {
+        const refreshToken = await this.jwtService.signAsync({ sub: user.id, email: user.email, jti: (0, crypto_1.randomUUID)() }, {
             secret: process.env.REFRESH_TOKEN_SECRET,
             expiresIn: refreshExpiry,
         });

package/dist/auth/services/admin.auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.auth.service.js","sourceRoot":"","sources":["../../../src/auth/services/admin.auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmE;AACnE,qCAAyD;AACzD,qCAAyD;AACzD,mCAAgD;AAChD,yFAAmF;AACnF,uFAAiF;AACjF,qEAAgE;AAChE,6FAAsF;AACtF,+EAA2E;AAO3E,sDAAkD;AAClD,gEAA0D;AAGnD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YACmB,UAAsB,EACtB,UAAsB;QADtB,eAAU,GAAV,UAAU,CAAY;QACtB,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAQJ,KAAK,CAAC,YAAY,CAChB,cAAuB;QAEvB,MAAM,IAAI,GAAG,sBAAS,CAAC,SAAS,EAAiC,CAAC;QAClE,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,kCAAe,CAAC,6CAA6C,CAAC,CAAC;QAE3E,MAAM,cAAc,GAAG,MAAM,yDAAyB,CAAC,IAAI,CAAC;YAC1D,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;YACjC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,cAAc;aACzB,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE9D,IACE,cAAc;YACd,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,kCAAe,CACvB,6BAA6B,cAAc,SAAS,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAMD,KAAK,CAAC,mBAAmB,CACvB,eAAuB,EACvB,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU;aAC/B,aAAa,CAAC,mCAAe,CAAC;aAC9B,kBAAkB,CAAC,YAAY,CAAC;aAChC,SAAS,CAAC,qBAAqB,CAAC;aAChC,KAAK,CAAC,2DAA2D,EAAE;YAClE,KAAK,EAAE,eAAe;SACvB,CAAC;aACD,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,4BAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,4BAAW,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,OAAQ,IAA8B,CAAC,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,OAA2B;QAE3B,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACrD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAEvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAC/B,IAAI,CAAC,GAAG,EAAE,GAAG,4BAAW,CAAC,aAAa,CAAC,YAAY,CAAC,CACrD,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,iBAAiB;YACrC,UAAU,EAAE,gBAAgB;YAC5B,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CACjD,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAChE;YACE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACvC,SAAS,EAAE,YAA2C;SACvD,CACF,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAClD,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACnC;YACE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACxC,SAAS,EAAE,aAA4C;SACxD,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,4BAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CACtD,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;YACvC,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;SACxC,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,eAAuB,EACvB,OAA2B;QAE3B,IAAI,OAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,eAAe,EAAE;gBAC3D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE;gBACL,OAAO,EAAE,OAAO,CAAC,GAAG;gBACpB,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAA,gBAAM,GAAE;aACrB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;YACT,MAAM,IAAI,8BAAqB,CAC7B,4CAA4C,CAC7C,CAAC;QACJ,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE;YAChC,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAE/D,MAAM,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,eAAuB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,gBAAgB;aACxB,kBAAkB,EAAE;aACpB,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/B,KAAK,CAAC,+DAA+D,EAAE;YACtE,IAAI,EAAE,SAAS;SAChB,CAAC;aACD,OAAO,EAAE,CAAC;IACf,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,eAAuB;QAClC,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAEtC,MAAM,iBAAiB,GAAG,sBAAS,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAC3B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,EACzD,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,sDAAwB,CAAC,CAAC;IACjE,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,oDAAuB,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AAvMY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAGoB,gBAAU;QACV,oBAAU;GAH9B,gBAAgB,CAuM5B"}
+{"version":3,"file":"admin.auth.service.js","sourceRoot":"","sources":["../../../src/auth/services/admin.auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmE;AACnE,qCAAyD;AACzD,qCAAyD;AACzD,mCAAgD;AAChD,yFAAmF;AACnF,uFAAiF;AACjF,qEAAgE;AAChE,6FAAsF;AACtF,+EAA2E;AAO3E,sDAAkD;AAClD,gEAA0D;AAGnD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YACmB,UAAsB,EACtB,UAAsB;QADtB,eAAU,GAAV,UAAU,CAAY;QACtB,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAQJ,KAAK,CAAC,YAAY,CAChB,cAAuB;QAEvB,MAAM,IAAI,GAAG,sBAAS,CAAC,SAAS,EAAiC,CAAC;QAClE,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,kCAAe,CAAC,6CAA6C,CAAC,CAAC;QAE3E,MAAM,cAAc,GAAG,MAAM,yDAAyB,CAAC,IAAI,CAAC;YAC1D,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;YACjC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,cAAc;aACzB,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE9D,IACE,cAAc;YACd,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,kCAAe,CACvB,6BAA6B,cAAc,SAAS,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAMD,KAAK,CAAC,mBAAmB,CACvB,eAAuB,EACvB,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU;aAC/B,aAAa,CAAC,mCAAe,CAAC;aAC9B,kBAAkB,CAAC,YAAY,CAAC;aAChC,SAAS,CAAC,qBAAqB,CAAC;aAChC,KAAK,CAAC,2DAA2D,EAAE;YAClE,KAAK,EAAE,eAAe;SACvB,CAAC;aACD,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,4BAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,4BAAW,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,OAAQ,IAA8B,CAAC,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,OAA2B;QAE3B,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACrD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAGvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAA,mBAAU,GAAE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAC/B,IAAI,CAAC,GAAG,EAAE,GAAG,4BAAW,CAAC,aAAa,CAAC,YAAY,CAAC,CACrD,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,iBAAiB;YACrC,UAAU,EAAE,gBAAgB;YAC5B,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CACjD,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAChE;YACE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACvC,SAAS,EAAE,YAA2C;SACvD,CACF,CAAC;QAGF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAClD,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAA,mBAAU,GAAE,EAAE,EACtD;YACE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACxC,SAAS,EAAE,aAA4C;SACxD,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,4BAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CACtD,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;YACvC,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;SACxC,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,eAAuB,EACvB,OAA2B;QAE3B,IAAI,OAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,eAAe,EAAE;gBAC3D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE;gBACL,OAAO,EAAE,OAAO,CAAC,GAAG;gBACpB,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAA,gBAAM,GAAE;aACrB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;YACT,MAAM,IAAI,8BAAqB,CAC7B,4CAA4C,CAC7C,CAAC;QACJ,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE;YAChC,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAE/D,MAAM,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,eAAuB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,gBAAgB;aACxB,kBAAkB,EAAE;aACpB,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/B,KAAK,CAAC,+DAA+D,EAAE;YACtE,IAAI,EAAE,SAAS;SAChB,CAAC;aACD,OAAO,EAAE,CAAC;IACf,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,eAAuB;QAClC,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAEtC,MAAM,iBAAiB,GAAG,sBAAS,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAC3B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,EACzD,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,sDAAwB,CAAC,CAAC;IACjE,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,oDAAuB,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AAzMY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAGoB,gBAAU;QACV,oBAAU;GAH9B,gBAAgB,CAyM5B"}

package/dist/auth/services/auth.service.d.ts

@@ -1,6 +1,7 @@
 import { JwtService } from '@nestjs/jwt';
 import { DataSource } from 'typeorm';
 import { UserEntity } from '../entities/user.entity';
+import { SystemRoleEntity } from '../entities/system.role.entity';
 import { CacheService } from '../../common/services/cache.service';
 import { ScopeService } from './scope.service';
 import { AuthenticatedAccess, AuthTokenPair, IssueTokensUser, TokenIssueContext } from '../types/auth.types';
@@ -11,6 +12,9 @@ export declare class AuthService {
     private readonly scopeService;
     constructor(jwtService: JwtService, cacheService: CacheService, dataSource: DataSource, scopeService: ScopeService);
     validateRole(roleIdentifier?: string): Promise<AuthenticatedAccess>;
+    validateIdentity(): Promise<AuthenticatedAccess>;
+    private resolveAccess;
+    tenantRoles(userId: string, tenantId: string | null | undefined): Promise<SystemRoleEntity[]>;
     private satisfiesRole;
     private holdsGlobalAdmin;
     private tierOf;
@@ -22,6 +26,7 @@ export declare class AuthService {
     validateCredentials(email: string, password: string): Promise<UserEntity>;
     issueTokens(user: IssueTokensUser, context?: TokenIssueContext): Promise<AuthTokenPair>;
     refresh(rawRefreshToken: string, context?: TokenIssueContext): Promise<AuthTokenPair>;
+    private refreshedTenant;
     revokeAllForUser(userUuid: string): Promise<void>;
     revokeOne(rawRefreshToken: string): Promise<void>;
     revokeAccessToken(jti: string, ttlSeconds: number): Promise<void>;