@udhuong/admin-core 0.1.1 → 0.1.2

package/dist/server/auth/infrastructure/database/postgresql/migrations/1733400000000-CreateOAuthSystem.js

@@ -0,0 +1,1386 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateOAuthSystem1733400000000 = void 0;
+const typeorm_1 = require("typeorm");
+class CreateOAuthSystem1733400000000 {
+    async up(queryRunner) {
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'auth_users',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'email',
+                    type: 'varchar',
+                    length: '100',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Email người dùng',
+                },
+                {
+                    name: 'username',
+                    type: 'varchar',
+                    length: '50',
+                    isUnique: true,
+                    isNullable: true,
+                    comment: 'Tên đăng nhập',
+                },
+                {
+                    name: 'displayName',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Tên hiển thị',
+                },
+                {
+                    name: 'avatar',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'URL avatar',
+                },
+                {
+                    name: 'passwordHash',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Mật khẩu đã hash (bcrypt)',
+                },
+                {
+                    name: 'emailVerifiedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm xác thực email',
+                },
+                {
+                    name: 'status',
+                    type: 'smallint',
+                    default: 1,
+                    comment: '0: Default, 1: Active, 2: Inactive, 3: Suspended, 4: Locked',
+                },
+                {
+                    name: 'failedLoginAttempts',
+                    type: 'integer',
+                    default: 0,
+                    comment: 'Số lần đăng nhập thất bại liên tiếp',
+                },
+                {
+                    name: 'lockedUntil',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm khóa tài khoản đến',
+                },
+                {
+                    name: 'lastLoginAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Lần đăng nhập gần nhất',
+                },
+                {
+                    name: 'lastLoginIp',
+                    type: 'varchar',
+                    length: '45',
+                    isNullable: true,
+                    comment: 'IP đăng nhập gần nhất',
+                },
+                {
+                    name: 'passwordChangedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Lần đổi mật khẩu gần nhất',
+                },
+                {
+                    name: 'passwordResetToken',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Token để reset mật khẩu',
+                },
+                {
+                    name: 'passwordResetTokenExpiry',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời gian hết hạn token reset mật khẩu',
+                },
+                {
+                    name: 'twoFactorEnabled',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Bật xác thực 2 yếu tố',
+                },
+                {
+                    name: 'twoFactorMethod',
+                    type: 'smallint',
+                    default: 0,
+                    isNullable: true,
+                    comment: '0: Default, 1: TOTP, 2: Email',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createIndex('auth_users', new typeorm_1.TableIndex({
+            name: 'IDX_AUTH_USERS_EMAIL',
+            columnNames: ['email'],
+        }));
+        await queryRunner.createIndex('auth_users', new typeorm_1.TableIndex({
+            name: 'IDX_AUTH_USERS_STATUS',
+            columnNames: ['status'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'roles',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'name',
+                    type: 'varchar',
+                    length: '50',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Tên role (slug)',
+                },
+                {
+                    name: 'description',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Mô tả role',
+                },
+                {
+                    name: 'isSystem',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'RoleKey hệ thống (không thể xóa)',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'permissions',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'name',
+                    type: 'varchar',
+                    length: '100',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Tên permission (slug)',
+                },
+                {
+                    name: 'description',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Mô tả permission',
+                },
+                {
+                    name: 'resource',
+                    type: 'varchar',
+                    length: '50',
+                    isNullable: false,
+                    comment: 'Tài nguyên (blog, user, comment...)',
+                },
+                {
+                    name: 'action',
+                    type: 'varchar',
+                    length: '50',
+                    isNullable: false,
+                    comment: 'Hành động (read, write, delete...)',
+                },
+                {
+                    name: 'isSystem',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'PermissionKey hệ thống (không thể xóa)',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'user_roles',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'roleId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID role',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('user_roles', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('user_roles', new typeorm_1.TableForeignKey({
+            columnNames: ['roleId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'roles',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('user_roles', new typeorm_1.TableIndex({
+            name: 'IDX_USER_ROLES_UNIQUE',
+            columnNames: ['userId', 'roleId'],
+            isUnique: true,
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'role_permissions',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'roleId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID role',
+                },
+                {
+                    name: 'permissionId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID permission',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('role_permissions', new typeorm_1.TableForeignKey({
+            columnNames: ['roleId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'roles',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('role_permissions', new typeorm_1.TableForeignKey({
+            columnNames: ['permissionId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'permissions',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('role_permissions', new typeorm_1.TableIndex({
+            name: 'IDX_ROLE_PERMISSIONS_UNIQUE',
+            columnNames: ['roleId', 'permissionId'],
+            isUnique: true,
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_clients',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'clientCode',
+                    type: 'varchar',
+                    length: '100',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Client code duy nhất (web-admin, web-public...)',
+                },
+                {
+                    name: 'clientSecret',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Client secret đã hash',
+                },
+                {
+                    name: 'name',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: false,
+                    comment: 'Tên ứng dụng',
+                },
+                {
+                    name: 'description',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Mô tả ứng dụng',
+                },
+                {
+                    name: 'type',
+                    type: 'smallint',
+                    default: 1,
+                    comment: '0: Default, 1: First Party, 2: Third Party',
+                },
+                {
+                    name: 'confidential',
+                    type: 'boolean',
+                    default: true,
+                    comment: 'Client bảo mật (yêu cầu secret)',
+                },
+                {
+                    name: 'redirectUris',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Danh sách URI chuyển hướng được phép',
+                },
+                {
+                    name: 'allowedGrants',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Các loại grant được phép',
+                },
+                {
+                    name: 'allowedScopes',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Các scope được phép',
+                },
+                {
+                    name: 'accessTokenLifetime',
+                    type: 'integer',
+                    default: 3600,
+                    comment: 'Thời gian sống access token (giây)',
+                },
+                {
+                    name: 'refreshTokenLifetime',
+                    type: 'integer',
+                    default: 2592000,
+                    comment: 'Thời gian sống refresh token (giây)',
+                },
+                {
+                    name: 'logoUrl',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'URL logo ứng dụng',
+                },
+                {
+                    name: 'websiteUrl',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'URL website',
+                },
+                {
+                    name: 'privacyPolicyUrl',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'URL chính sách bảo mật',
+                },
+                {
+                    name: 'termsUrl',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'URL điều khoản sử dụng',
+                },
+                {
+                    name: 'isActive',
+                    type: 'boolean',
+                    default: true,
+                    comment: 'Trạng thái hoạt động',
+                },
+                {
+                    name: 'createdBy',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID người tạo',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createIndex('oauth_clients', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_CLIENTS_CLIENT_CODE',
+            columnNames: ['clientCode'],
+        }));
+        await queryRunner.createIndex('oauth_clients', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_CLIENTS_TYPE',
+            columnNames: ['type'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_scopes',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'name',
+                    type: 'varchar',
+                    length: '100',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Tên scope (slug)',
+                },
+                {
+                    name: 'description',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Mô tả scope',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_authorization_codes',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'code',
+                    type: 'varchar',
+                    length: '255',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Mã authorization code',
+                },
+                {
+                    name: 'clientId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID client',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'redirectUri',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: false,
+                    comment: 'URI chuyển hướng',
+                },
+                {
+                    name: 'scopes',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Danh sách scope',
+                },
+                {
+                    name: 'codeChallenge',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'PKCE code challenge',
+                },
+                {
+                    name: 'codeChallengeMethod',
+                    type: 'varchar',
+                    length: '10',
+                    isNullable: true,
+                    comment: 'plain or S256',
+                },
+                {
+                    name: 'expiresAt',
+                    type: 'timestamp',
+                    isNullable: false,
+                },
+                {
+                    name: 'usedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('oauth_authorization_codes', new typeorm_1.TableForeignKey({
+            columnNames: ['clientId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'oauth_clients',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('oauth_authorization_codes', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('oauth_authorization_codes', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_AUTH_CODES_CODE',
+            columnNames: ['code'],
+        }));
+        await queryRunner.createIndex('oauth_authorization_codes', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_AUTH_CODES_EXPIRES',
+            columnNames: ['expiresAt'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_tokens',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'tokenType',
+                    type: 'smallint',
+                    isNullable: false,
+                    comment: '0: Default, 1: Access Token, 2: Refresh Token',
+                },
+                {
+                    name: 'token',
+                    type: 'text',
+                    isNullable: false,
+                    comment: 'Token JWT',
+                },
+                {
+                    name: 'clientId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID client',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'sessionId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID session',
+                },
+                {
+                    name: 'scopes',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Danh sách scope',
+                },
+                {
+                    name: 'expiresAt',
+                    type: 'timestamp',
+                    isNullable: false,
+                    comment: 'Thời điểm hết hạn',
+                },
+                {
+                    name: 'revokedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm thu hồi',
+                },
+                {
+                    name: 'parentRefreshTokenId',
+                    type: 'bigint',
+                    isNullable: true,
+                    comment: 'ID refresh token gốc',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('oauth_tokens', new typeorm_1.TableForeignKey({
+            columnNames: ['clientId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'oauth_clients',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('oauth_tokens', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('oauth_tokens', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_TOKENS_CLIENT_ID',
+            columnNames: ['clientId'],
+        }));
+        await queryRunner.createIndex('oauth_tokens', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_TOKENS_USER_ID',
+            columnNames: ['userId'],
+        }));
+        await queryRunner.createIndex('oauth_tokens', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_TOKENS_EXPIRES',
+            columnNames: ['expiresAt'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_client_consents',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'clientId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID client',
+                },
+                {
+                    name: 'scopes',
+                    type: 'json',
+                    isNullable: false,
+                    comment: 'Danh sách scope đã đồng ý',
+                },
+                {
+                    name: 'consentedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                    comment: 'Thời điểm đồng ý',
+                },
+                {
+                    name: 'revokedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm thu hồi',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('oauth_client_consents', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('oauth_client_consents', new typeorm_1.TableForeignKey({
+            columnNames: ['clientId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'oauth_clients',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('oauth_client_consents', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_CONSENTS_UNIQUE',
+            columnNames: ['userId', 'clientId'],
+            isUnique: true,
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'user_sessions',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'sessionToken',
+                    type: 'varchar',
+                    length: '255',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Token session duy nhất',
+                },
+                {
+                    name: 'clientId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID client',
+                },
+                {
+                    name: 'deviceName',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Tên thiết bị',
+                },
+                {
+                    name: 'deviceFingerprint',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Vân tay thiết bị',
+                },
+                {
+                    name: 'ipAddress',
+                    type: 'varchar',
+                    length: '45',
+                    isNullable: true,
+                    comment: 'Địa chỉ IP',
+                },
+                {
+                    name: 'userAgent',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Thông tin trình duyệt',
+                },
+                {
+                    name: 'country',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: true,
+                    comment: 'Quốc gia',
+                },
+                {
+                    name: 'city',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: true,
+                    comment: 'Thành phố',
+                },
+                {
+                    name: 'latitude',
+                    type: 'decimal',
+                    precision: 10,
+                    scale: 8,
+                    isNullable: true,
+                    comment: 'Vĩ độ',
+                },
+                {
+                    name: 'longitude',
+                    type: 'decimal',
+                    precision: 11,
+                    scale: 8,
+                    isNullable: true,
+                    comment: 'Kinh độ',
+                },
+                {
+                    name: 'isCurrent',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Session hiện tại',
+                },
+                {
+                    name: 'requiresVerification',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Yêu cầu xác thực',
+                },
+                {
+                    name: 'verifiedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm xác thực',
+                },
+                {
+                    name: 'lastActiveAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                    comment: 'Hoạt động gần nhất',
+                },
+                {
+                    name: 'expiresAt',
+                    type: 'timestamp',
+                    isNullable: false,
+                    comment: 'Thời điểm hết hạn',
+                },
+                {
+                    name: 'revokedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm thu hồi',
+                },
+                {
+                    name: 'revokedReason',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Lý do thu hồi',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('user_sessions', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createForeignKey('user_sessions', new typeorm_1.TableForeignKey({
+            columnNames: ['clientId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'oauth_clients',
+            onDelete: 'SET NULL',
+        }));
+        await queryRunner.createIndex('user_sessions', new typeorm_1.TableIndex({
+            name: 'IDX_USER_SESSIONS_USER_ID',
+            columnNames: ['userId'],
+        }));
+        await queryRunner.createIndex('user_sessions', new typeorm_1.TableIndex({
+            name: 'IDX_USER_SESSIONS_TOKEN',
+            columnNames: ['sessionToken'],
+        }));
+        await queryRunner.createIndex('user_sessions', new typeorm_1.TableIndex({
+            name: 'IDX_USER_SESSIONS_DEVICE_FP',
+            columnNames: ['deviceFingerprint'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'login_histories',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'email',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: false,
+                    comment: 'Email đăng nhập',
+                },
+                {
+                    name: 'status',
+                    type: 'smallint',
+                    isNullable: false,
+                    comment: '0: Default, 1: Success, 2: Failed, 3: Blocked',
+                },
+                {
+                    name: 'failureReason',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Lý do thất bại',
+                },
+                {
+                    name: 'ipAddress',
+                    type: 'varchar',
+                    length: '45',
+                    isNullable: true,
+                    comment: 'Địa chỉ IP',
+                },
+                {
+                    name: 'userAgent',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Thông tin trình duyệt',
+                },
+                {
+                    name: 'deviceFingerprint',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Vân tay thiết bị',
+                },
+                {
+                    name: 'country',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: true,
+                    comment: 'Quốc gia',
+                },
+                {
+                    name: 'city',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: true,
+                    comment: 'Thành phố',
+                },
+                {
+                    name: 'isNewDevice',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Thiết bị mới',
+                },
+                {
+                    name: 'isUnusualLocation',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Vị trí bất thường',
+                },
+                {
+                    name: 'isSuspicious',
+                    type: 'boolean',
+                    default: false,
+                    comment: 'Đăng nhập đáng ngờ',
+                },
+                {
+                    name: 'sessionId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID session',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('login_histories', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'SET NULL',
+        }));
+        await queryRunner.createIndex('login_histories', new typeorm_1.TableIndex({
+            name: 'IDX_LOGIN_HISTORY_USER_ID',
+            columnNames: ['userId'],
+        }));
+        await queryRunner.createIndex('login_histories', new typeorm_1.TableIndex({
+            name: 'IDX_LOGIN_HISTORY_EMAIL',
+            columnNames: ['email'],
+        }));
+        await queryRunner.createIndex('login_histories', new typeorm_1.TableIndex({
+            name: 'IDX_LOGIN_HISTORY_STATUS',
+            columnNames: ['status'],
+        }));
+        await queryRunner.createIndex('login_histories', new typeorm_1.TableIndex({
+            name: 'IDX_LOGIN_HISTORY_CREATED',
+            columnNames: ['createdAt'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'user_two_factors',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'method',
+                    type: 'smallint',
+                    isNullable: false,
+                    comment: '0: Default, 1: TOTP, 2: Email',
+                },
+                {
+                    name: 'totpSecret',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Secret TOTP (Google Authenticator)',
+                },
+                {
+                    name: 'totpBackupCodes',
+                    type: 'json',
+                    isNullable: true,
+                    comment: 'Mã dự phòng TOTP',
+                },
+                {
+                    name: 'emailOtpCode',
+                    type: 'varchar',
+                    length: '10',
+                    isNullable: true,
+                    comment: 'Mã OTP qua email',
+                },
+                {
+                    name: 'emailOtpExpiresAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Hết hạn OTP email',
+                },
+                {
+                    name: 'verifiedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm xác thực',
+                },
+                {
+                    name: 'lastUsedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Sử dụng gần nhất',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('user_two_factors', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'email_verification_tokens',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'token',
+                    type: 'varchar',
+                    length: '255',
+                    isUnique: true,
+                    isNullable: false,
+                    comment: 'Token xác thực email',
+                },
+                {
+                    name: 'expiresAt',
+                    type: 'timestamp',
+                    isNullable: false,
+                    comment: 'Thời điểm hết hạn',
+                },
+                {
+                    name: 'usedAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Thời điểm sử dụng',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('email_verification_tokens', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('email_verification_tokens', new typeorm_1.TableIndex({
+            name: 'IDX_EMAIL_VERIFICATION_TOKEN',
+            columnNames: ['token'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'social_accounts',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'integer',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: false,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'provider',
+                    type: 'smallint',
+                    isNullable: false,
+                    comment: '0: Default, 1: Google, 2: Facebook, 3: GitHub',
+                },
+                {
+                    name: 'providerUserId',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: false,
+                    comment: 'ID người dùng tại provider',
+                },
+                {
+                    name: 'email',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: true,
+                    comment: 'Email',
+                },
+                {
+                    name: 'displayName',
+                    type: 'varchar',
+                    length: '255',
+                    isNullable: true,
+                    comment: 'Tên hiển thị',
+                },
+                {
+                    name: 'avatar',
+                    type: 'varchar',
+                    length: '500',
+                    isNullable: true,
+                    comment: 'Avatar URL',
+                },
+                {
+                    name: 'accessToken',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Access token của provider',
+                },
+                {
+                    name: 'refreshToken',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Refresh token của provider',
+                },
+                {
+                    name: 'tokenExpiresAt',
+                    type: 'timestamp',
+                    isNullable: true,
+                    comment: 'Hết hạn token provider',
+                },
+                {
+                    name: 'profileData',
+                    type: 'json',
+                    isNullable: true,
+                    comment: 'Raw profile data từ provider',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+                {
+                    name: 'updatedAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('social_accounts', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'CASCADE',
+        }));
+        await queryRunner.createIndex('social_accounts', new typeorm_1.TableIndex({
+            name: 'IDX_SOCIAL_ACCOUNTS_UNIQUE',
+            columnNames: ['provider', 'providerUserId'],
+            isUnique: true,
+        }));
+        await queryRunner.createIndex('social_accounts', new typeorm_1.TableIndex({
+            name: 'IDX_SOCIAL_ACCOUNTS_USER_ID',
+            columnNames: ['userId'],
+        }));
+        await queryRunner.createTable(new typeorm_1.Table({
+            name: 'oauth_audit_logs',
+            columns: [
+                {
+                    name: 'id',
+                    type: 'bigint',
+                    isPrimary: true,
+                    isGenerated: true,
+                    generationStrategy: 'increment',
+                },
+                {
+                    name: 'eventType',
+                    type: 'varchar',
+                    length: '100',
+                    isNullable: false,
+                    comment: 'Loại sự kiện',
+                },
+                {
+                    name: 'userId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID người dùng',
+                },
+                {
+                    name: 'clientId',
+                    type: 'integer',
+                    isNullable: true,
+                    comment: 'ID client',
+                },
+                {
+                    name: 'ipAddress',
+                    type: 'varchar',
+                    length: '45',
+                    isNullable: true,
+                    comment: 'Địa chỉ IP',
+                },
+                {
+                    name: 'userAgent',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Thông tin trình duyệt',
+                },
+                {
+                    name: 'metadata',
+                    type: 'json',
+                    isNullable: true,
+                    comment: 'Dữ liệu bổ sung',
+                },
+                {
+                    name: 'status',
+                    type: 'smallint',
+                    default: 1,
+                    comment: '0: Default, 1: Success, 2: Failure',
+                },
+                {
+                    name: 'errorMessage',
+                    type: 'text',
+                    isNullable: true,
+                    comment: 'Thông điệp lỗi',
+                },
+                {
+                    name: 'createdAt',
+                    type: 'timestamp',
+                    default: 'CURRENT_TIMESTAMP',
+                },
+            ],
+        }), true);
+        await queryRunner.createForeignKey('oauth_audit_logs', new typeorm_1.TableForeignKey({
+            columnNames: ['userId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'auth_users',
+            onDelete: 'SET NULL',
+        }));
+        await queryRunner.createForeignKey('oauth_audit_logs', new typeorm_1.TableForeignKey({
+            columnNames: ['clientId'],
+            referencedColumnNames: ['id'],
+            referencedTableName: 'oauth_clients',
+            onDelete: 'SET NULL',
+        }));
+        await queryRunner.createIndex('oauth_audit_logs', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_AUDIT_EVENT_TYPE',
+            columnNames: ['eventType'],
+        }));
+        await queryRunner.createIndex('oauth_audit_logs', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_AUDIT_USER_ID',
+            columnNames: ['userId'],
+        }));
+        await queryRunner.createIndex('oauth_audit_logs', new typeorm_1.TableIndex({
+            name: 'IDX_OAUTH_AUDIT_CREATED',
+            columnNames: ['createdAt'],
+        }));
+    }
+    async down(queryRunner) {
+        await queryRunner.dropTable('oauth_audit_logs', true);
+        await queryRunner.dropTable('social_accounts', true);
+        await queryRunner.dropTable('email_verification_tokens', true);
+        await queryRunner.dropTable('user_two_factors', true);
+        await queryRunner.dropTable('login_histories', true);
+        await queryRunner.dropTable('user_sessions', true);
+        await queryRunner.dropTable('oauth_client_consents', true);
+        await queryRunner.dropTable('oauth_tokens', true);
+        await queryRunner.dropTable('oauth_authorization_codes', true);
+        await queryRunner.dropTable('oauth_scopes', true);
+        await queryRunner.dropTable('oauth_clients', true);
+        await queryRunner.dropTable('role_permissions', true);
+        await queryRunner.dropTable('user_roles', true);
+        await queryRunner.dropTable('permissions', true);
+        await queryRunner.dropTable('roles', true);
+        await queryRunner.dropTable('auth_users', true);
+    }
+}
+exports.CreateOAuthSystem1733400000000 = CreateOAuthSystem1733400000000;
+//# sourceMappingURL=1733400000000-CreateOAuthSystem.js.map