cabloy 5.1.136 → 5.1.138

package/vona/src/suite-vendor/a-auth/modules/a-auth/src/.metadata/index.ts

@@ -9,16 +9,16 @@ import type { IEntityOptionsAuth } from '../entity/auth.ts';
 import type { IEntityOptionsAuthProvider } from '../entity/authProvider.ts';
 import 'vona-module-a-orm';
 declare module 'vona-module-a-orm' {
-  
+
     export interface IEntityRecord {
       'a-auth:auth': IEntityOptionsAuth;
 'a-auth:authProvider': IEntityOptionsAuthProvider;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-   
+
 }
 /** entity: end */
 /** entity: begin */
@@ -41,7 +41,7 @@ declare module 'vona-module-a-orm' {
   }
 }
 declare module 'vona-module-a-auth' {
-  
+
     export interface IEntityOptionsAuth {
       fields?: TypeEntityOptionsFields<EntityAuth, IEntityOptionsAuth[TypeSymbolKeyFieldsMore]>;
     }
@@ -58,16 +58,16 @@ import type { IModelOptionsAuth } from '../model/auth.ts';
 import type { IModelOptionsAuthProvider } from '../model/authProvider.ts';
 import 'vona-module-a-orm';
 declare module 'vona-module-a-orm' {
-  
+
     export interface IModelRecord {
       'a-auth:auth': IModelOptionsAuth;
 'a-auth:authProvider': IModelOptionsAuthProvider;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface ModelAuth {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -88,7 +88,7 @@ declare module 'vona-module-a-auth' {
             get $beanFullName(): 'a-auth.model.authProvider';
             get $onionName(): 'a-auth:authProvider';
             get $onionOptions(): IModelOptionsAuthProvider;
-          } 
+          }
 }
 /** model: end */
 /** model: begin */
@@ -123,7 +123,17 @@ declare module 'vona-module-a-auth' {
       [SymbolKeyEntityMeta]: EntityAuthMeta;
       [SymbolKeyModelOptions]: IModelOptionsAuth;
       get<T extends IModelGetOptions<EntityAuth,ModelAuth>>(where: TypeModelWhere<EntityAuth>, options?: T): Promise<TypeModelRelationResult<EntityAuth, ModelAuth, T> | undefined>;
+      /**
+       * Retrieves one matching primary row with a pessimistic FOR UPDATE lock.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getForUpdate<T extends IModelGetOptions<EntityAuth,ModelAuth>>(where: TypeModelWhere<EntityAuth>, options?: T): Promise<TypeModelRelationResult<EntityAuth, ModelAuth, T> | undefined>;
+      /**
+       * Retrieves a primary row by ID with the same pessimistic FOR UPDATE lock semantics.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getByIdForUpdate<T extends IModelGetOptions<EntityAuth,ModelAuth>>(id: TableIdentity, options?: T): Promise<TypeModelRelationResult<EntityAuth, ModelAuth, T> | undefined>;
       mget<T extends IModelGetOptions<EntityAuth,ModelAuth>>(ids: TableIdentity[], options?: T): Promise<TypeModelRelationResult<EntityAuth, ModelAuth, T>[]>;
       selectAndCount<T extends IModelSelectParams<EntityAuth,ModelAuth,ModelJoins>, ModelJoins extends TypeModelsClassLikeGeneral | undefined = undefined>(params?: T, options?: IModelMethodOptions, modelJoins?: ModelJoins): Promise<TypeModelSelectAndCount<EntityAuth, ModelAuth, T>>;
@@ -150,7 +160,17 @@ export interface ModelAuthProvider {
       [SymbolKeyEntityMeta]: EntityAuthProviderMeta;
       [SymbolKeyModelOptions]: IModelOptionsAuthProvider;
       get<T extends IModelGetOptions<EntityAuthProvider,ModelAuthProvider>>(where: TypeModelWhere<EntityAuthProvider>, options?: T): Promise<TypeModelRelationResult<EntityAuthProvider, ModelAuthProvider, T> | undefined>;
+      /**
+       * Retrieves one matching primary row with a pessimistic FOR UPDATE lock.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getForUpdate<T extends IModelGetOptions<EntityAuthProvider,ModelAuthProvider>>(where: TypeModelWhere<EntityAuthProvider>, options?: T): Promise<TypeModelRelationResult<EntityAuthProvider, ModelAuthProvider, T> | undefined>;
+      /**
+       * Retrieves a primary row by ID with the same pessimistic FOR UPDATE lock semantics.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getByIdForUpdate<T extends IModelGetOptions<EntityAuthProvider,ModelAuthProvider>>(id: TableIdentity, options?: T): Promise<TypeModelRelationResult<EntityAuthProvider, ModelAuthProvider, T> | undefined>;
       mget<T extends IModelGetOptions<EntityAuthProvider,ModelAuthProvider>>(ids: TableIdentity[], options?: T): Promise<TypeModelRelationResult<EntityAuthProvider, ModelAuthProvider, T>[]>;
       selectAndCount<T extends IModelSelectParams<EntityAuthProvider,ModelAuthProvider,ModelJoins>, ModelJoins extends TypeModelsClassLikeGeneral | undefined = undefined>(params?: T, options?: IModelMethodOptions, modelJoins?: ModelJoins): Promise<TypeModelSelectAndCount<EntityAuthProvider, ModelAuthProvider, T>>;
@@ -188,11 +208,11 @@ export * from '../bean/bean.authProvider.ts';
 
 import 'vona';
 declare module 'vona' {
-  
-  
+
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface BeanAuth {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -201,7 +221,7 @@ declare module 'vona-module-a-auth' {
         export interface BeanAuthProvider {
           /** @internal */
           get scope(): ScopeModuleAAuth;
-        } 
+        }
 }
 /** bean: end */
 /** bean: begin */
@@ -220,15 +240,15 @@ export * from '../service/auth.ts';
 
 import 'vona-module-a-bean';
 declare module 'vona-module-a-bean' {
-  
+
     export interface IServiceRecord {
       'a-auth:auth': never;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface ServiceAuth {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -237,8 +257,7 @@ declare module 'vona-module-a-auth' {
           export interface ServiceAuth {
             get $beanFullName(): 'a-auth.service.auth';
             get $onionName(): 'a-auth:auth';
-            
-          } 
+          }
 }
 /** service: end */
 /** service: begin */
@@ -262,11 +281,11 @@ export * from '../bean/event.issuePassport.ts';
 
 import 'vona';
 declare module 'vona' {
-  
-  
+
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface EventAccountMigration {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -275,7 +294,6 @@ declare module 'vona-module-a-auth' {
           export interface EventAccountMigration {
             get $beanFullName(): 'a-auth.event.accountMigration';
             get $onionName(): 'a-auth:accountMigration';
-            
           }
 
         export interface EventIssuePassport {
@@ -286,8 +304,7 @@ declare module 'vona-module-a-auth' {
           export interface EventIssuePassport {
             get $beanFullName(): 'a-auth.event.issuePassport';
             get $onionName(): 'a-auth:issuePassport';
-            
-          } 
+          }
 }
 /** event: end */
 /** event: begin */
@@ -301,7 +318,7 @@ export interface IModuleEvent {
 /** event: begin */
 import type { TypeEventAccountMigrationData, TypeEventAccountMigrationResult } from '../bean/event.accountMigration.ts';
 import type { TypeEventIssuePassportData, TypeEventIssuePassportResult } from '../bean/event.issuePassport.ts';
-import type { EventOn } from 'vona-module-a-event'; 
+import type { EventOn } from 'vona-module-a-event';
 declare module 'vona-module-a-event' {
   export interface IEventRecord {
     'a-auth:accountMigration': EventOn<TypeEventAccountMigrationData, TypeEventAccountMigrationResult>;
@@ -316,17 +333,17 @@ export * from '../bean/meta.version.ts';
 
 import 'vona-module-a-meta';
 declare module 'vona-module-a-meta' {
-  
+
     export interface IMetaRecord {
       'a-auth:printTip': never;
 'a-auth:redlock': never;
 'a-auth:version': never;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface MetaPrintTip {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -335,7 +352,6 @@ declare module 'vona-module-a-auth' {
           export interface MetaPrintTip {
             get $beanFullName(): 'a-auth.meta.printTip';
             get $onionName(): 'a-auth:printTip';
-            
           }
 
         export interface MetaRedlock {
@@ -346,7 +362,6 @@ declare module 'vona-module-a-auth' {
           export interface MetaRedlock {
             get $beanFullName(): 'a-auth.meta.redlock';
             get $onionName(): 'a-auth:redlock';
-            
           }
 
         export interface MetaVersion {
@@ -357,8 +372,7 @@ declare module 'vona-module-a-auth' {
           export interface MetaVersion {
             get $beanFullName(): 'a-auth.meta.version';
             get $onionName(): 'a-auth:version';
-            
-          } 
+          }
 }
 /** meta: end */
 /** meta redlock: begin */
@@ -369,21 +383,21 @@ export * from '../dto/auth.ts';
 import type { IDtoOptionsAuth } from '../dto/auth.ts';
 import 'vona-module-a-web';
 declare module 'vona-module-a-web' {
-  
+
     export interface IDtoRecord {
       'a-auth:auth': IDtoOptionsAuth;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-   
+
 }
 /** dto: end */
 /** dto: begin */
 import type { DtoAuth } from '../dto/auth.ts';
 declare module 'vona-module-a-auth' {
-  
+
     export interface IDtoOptionsAuth {
       fields?: TypeEntityOptionsFields<DtoAuth, IDtoOptionsAuth[TypeSymbolKeyFieldsMore]>;
     }
@@ -396,16 +410,16 @@ import type { IControllerOptionsMock } from '../controller/mock.ts';
 import type { IControllerOptionsPassport } from '../controller/passport.ts';
 import 'vona-module-a-web';
 declare module 'vona-module-a-web' {
-  
+
     export interface IControllerRecord {
       'a-auth:mock': IControllerOptionsMock;
 'a-auth:passport': IControllerOptionsPassport;
     }
 
-  
+
 }
 declare module 'vona-module-a-auth' {
-  
+
         export interface ControllerMock {
           /** @internal */
           get scope(): ScopeModuleAAuth;
@@ -426,7 +440,7 @@ declare module 'vona-module-a-auth' {
             get $beanFullName(): 'a-auth.controller.passport';
             get $onionName(): 'a-auth:passport';
             get $onionOptions(): IControllerOptionsPassport;
-          } 
+          }
 }
 /** controller: end */
 /** controller: begin */
@@ -435,7 +449,7 @@ import type { ControllerMock } from '../controller/mock.ts';
 // @ts-ignore ignore
 import type { ControllerPassport } from '../controller/passport.ts';
 declare module 'vona-module-a-auth' {
-  
+
     export interface IControllerOptionsMock {
       actions?: TypeControllerOptionsActions<ControllerMock>;
     }
@@ -495,7 +509,7 @@ declare module 'vona' {
   export interface IBeanScopeContainer {
     auth: ScopeModuleAAuth;
   }
-  
+
   export interface IBeanScopeConfig {
     'a-auth': ReturnType<typeof config>;
   }

package/vona/src/suite-vendor/a-auth/modules/auth-oauth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-auth-oauth",
-  "version": "5.0.9",
+  "version": "5.0.10",
   "description": "",
   "keywords": [
     "Vona Module"

package/vona/src/suite-vendor/a-auth/modules/auth-oauth/src/.metadata/index.ts

@@ -4,15 +4,15 @@ export * from '../bean/authProvider.oauth.ts';
 import type { IAuthProviderOptionsOauth } from '../bean/authProvider.oauth.ts';
 import 'vona-module-a-auth';
 declare module 'vona-module-a-auth' {
-  
+
     export interface IAuthProviderRecord {
       'auth-oauth:oauth': IAuthProviderOptionsOauth;
     }
 
-  
+
 }
 declare module 'vona-module-auth-oauth' {
-  
+
         export interface AuthProviderOauth {
           /** @internal */
           get scope(): ScopeModuleAuthOauth;
@@ -22,7 +22,7 @@ declare module 'vona-module-auth-oauth' {
             get $beanFullName(): 'auth-oauth.authProvider.oauth';
             get $onionName(): 'auth-oauth:oauth';
             get $onionOptions(): IAuthProviderOptionsOauth;
-          } 
+          }
 }
 /** authProvider: end */
 /** authProvider: begin */
@@ -52,11 +52,11 @@ declare module 'vona' {
   export interface IBeanScopeContainer {
     authOauth: ScopeModuleAuthOauth;
   }
-  
-  
 
-  
 
-  
+
+
+
+
 }
 /** scope: end */

package/vona/src/suite-vendor/a-auth/modules/auth-simple/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-auth-simple",
-  "version": "5.1.14",
+  "version": "5.1.15",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "keywords": [
@@ -49,7 +49,9 @@
   "vonaModule": {
     "fileVersion": 1,
     "dependencies": {
-      "a-auth": "5.0.0"
+      "a-auth": "5.0.0",
+      "a-core": "5.0.0",
+      "a-redlock": "5.0.0"
     }
   }
 }

package/vona/src/suite-vendor/a-auth/modules/auth-simple/src/.metadata/index.ts

@@ -7,15 +7,15 @@ export * from '../entity/authSimple.ts';
 import type { IEntityOptionsAuthSimple } from '../entity/authSimple.ts';
 import 'vona-module-a-orm';
 declare module 'vona-module-a-orm' {
-  
+
     export interface IEntityRecord {
       'auth-simple:authSimple': IEntityOptionsAuthSimple;
     }
 
-  
+
 }
 declare module 'vona-module-auth-simple' {
-   
+
 }
 /** entity: end */
 /** entity: begin */
@@ -33,7 +33,7 @@ declare module 'vona-module-a-orm' {
   }
 }
 declare module 'vona-module-auth-simple' {
-  
+
     export interface IEntityOptionsAuthSimple {
       fields?: TypeEntityOptionsFields<EntityAuthSimple, IEntityOptionsAuthSimple[TypeSymbolKeyFieldsMore]>;
     }
@@ -44,15 +44,15 @@ export * from '../model/authSimple.ts';
 import type { IModelOptionsAuthSimple } from '../model/authSimple.ts';
 import 'vona-module-a-orm';
 declare module 'vona-module-a-orm' {
-  
+
     export interface IModelRecord {
       'auth-simple:authSimple': IModelOptionsAuthSimple;
     }
 
-  
+
 }
 declare module 'vona-module-auth-simple' {
-  
+
         export interface ModelAuthSimple {
           /** @internal */
           get scope(): ScopeModuleAuthSimple;
@@ -62,7 +62,7 @@ declare module 'vona-module-auth-simple' {
             get $beanFullName(): 'auth-simple.model.authSimple';
             get $onionName(): 'auth-simple:authSimple';
             get $onionOptions(): IModelOptionsAuthSimple;
-          } 
+          }
 }
 /** model: end */
 /** model: begin */
@@ -84,13 +84,23 @@ declare module 'vona' {
 import type { IModelGetOptions, IModelMethodOptions, IModelSelectParams, TypeModelSelectAndCount, TypeModelRelationResult, TypeModelWhere, IModelInsertOptions, TypeModelMutateRelationData, IModelDeleteOptions, IModelUpdateOptions, IModelMutateOptions, IModelSelectCountParams, IModelIncrementParams, IModelSelectAggrParams, TypeModelAggrRelationResult, IModelSelectGroupParams, TypeModelGroupRelationResult } from 'vona-module-a-orm';
 import { SymbolKeyEntity, SymbolKeyEntityMeta, SymbolKeyModelOptions } from 'vona-module-a-orm';
 declare module 'vona-module-auth-simple' {
-  
+
   export interface ModelAuthSimple {
       [SymbolKeyEntity]: EntityAuthSimple;
       [SymbolKeyEntityMeta]: EntityAuthSimpleMeta;
       [SymbolKeyModelOptions]: IModelOptionsAuthSimple;
       get<T extends IModelGetOptions<EntityAuthSimple,ModelAuthSimple>>(where: TypeModelWhere<EntityAuthSimple>, options?: T): Promise<TypeModelRelationResult<EntityAuthSimple, ModelAuthSimple, T> | undefined>;
+      /**
+       * Retrieves one matching primary row with a pessimistic FOR UPDATE lock.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getForUpdate<T extends IModelGetOptions<EntityAuthSimple,ModelAuthSimple>>(where: TypeModelWhere<EntityAuthSimple>, options?: T): Promise<TypeModelRelationResult<EntityAuthSimple, ModelAuthSimple, T> | undefined>;
+      /**
+       * Retrieves a primary row by ID with the same pessimistic FOR UPDATE lock semantics.
+       * Requires an active transaction. The lock is released when that transaction completes.
+       * Entity and query caches are bypassed.
+       */
       getByIdForUpdate<T extends IModelGetOptions<EntityAuthSimple,ModelAuthSimple>>(id: TableIdentity, options?: T): Promise<TypeModelRelationResult<EntityAuthSimple, ModelAuthSimple, T> | undefined>;
       mget<T extends IModelGetOptions<EntityAuthSimple,ModelAuthSimple>>(ids: TableIdentity[], options?: T): Promise<TypeModelRelationResult<EntityAuthSimple, ModelAuthSimple, T>[]>;
       selectAndCount<T extends IModelSelectParams<EntityAuthSimple,ModelAuthSimple,ModelJoins>, ModelJoins extends TypeModelsClassLikeGeneral | undefined = undefined>(params?: T, options?: IModelMethodOptions, modelJoins?: ModelJoins): Promise<TypeModelSelectAndCount<EntityAuthSimple, ModelAuthSimple, T>>;
@@ -124,15 +134,15 @@ export * from '../bean/authProvider.simple.ts';
 import type { IAuthProviderOptionsSimple } from '../bean/authProvider.simple.ts';
 import 'vona-module-a-auth';
 declare module 'vona-module-a-auth' {
-  
+
     export interface IAuthProviderRecord {
       'auth-simple:simple': IAuthProviderOptionsSimple;
     }
 
-  
+
 }
 declare module 'vona-module-auth-simple' {
-  
+
         export interface AuthProviderSimple {
           /** @internal */
           get scope(): ScopeModuleAuthSimple;
@@ -142,7 +152,7 @@ declare module 'vona-module-auth-simple' {
             get $beanFullName(): 'auth-simple.authProvider.simple';
             get $onionName(): 'auth-simple:simple';
             get $onionOptions(): IAuthProviderOptionsSimple;
-          } 
+          }
 }
 /** authProvider: end */
 /** authProvider: begin */
@@ -156,15 +166,15 @@ export * from '../service/authSimple.ts';
 
 import 'vona-module-a-bean';
 declare module 'vona-module-a-bean' {
-  
+
     export interface IServiceRecord {
       'auth-simple:authSimple': never;
     }
 
-  
+
 }
 declare module 'vona-module-auth-simple' {
-  
+
         export interface ServiceAuthSimple {
           /** @internal */
           get scope(): ScopeModuleAuthSimple;
@@ -173,8 +183,7 @@ declare module 'vona-module-auth-simple' {
           export interface ServiceAuthSimple {
             get $beanFullName(): 'auth-simple.service.authSimple';
             get $onionName(): 'auth-simple:authSimple';
-            
-          } 
+          }
 }
 /** service: end */
 /** service: begin */
@@ -193,19 +202,31 @@ declare module 'vona' {
 }
 /** service: end */
 /** meta: begin */
+export * from '../bean/meta.redlock.ts';
 export * from '../bean/meta.version.ts';
 
 import 'vona-module-a-meta';
 declare module 'vona-module-a-meta' {
-  
+
     export interface IMetaRecord {
-      'auth-simple:version': never;
+      'auth-simple:redlock': never;
+'auth-simple:version': never;
     }
 
-  
+
 }
 declare module 'vona-module-auth-simple' {
-  
+
+        export interface MetaRedlock {
+          /** @internal */
+          get scope(): ScopeModuleAuthSimple;
+        }
+
+          export interface MetaRedlock {
+            get $beanFullName(): 'auth-simple.meta.redlock';
+            get $onionName(): 'auth-simple:redlock';
+          }
+
         export interface MetaVersion {
           /** @internal */
           get scope(): ScopeModuleAuthSimple;
@@ -214,10 +235,12 @@ declare module 'vona-module-auth-simple' {
           export interface MetaVersion {
             get $beanFullName(): 'auth-simple.meta.version';
             get $onionName(): 'auth-simple:version';
-            
-          } 
+          }
 }
 /** meta: end */
+/** meta redlock: begin */
+import type { MetaRedlock } from '../bean/meta.redlock.ts';
+/** meta redlock: end */
 /** config: begin */
 export * from '../config/config.ts';
 import type { config } from '../config/config.ts';
@@ -236,6 +259,7 @@ entity: IModuleEntity;
 model: IModuleModel;
 authProvider: IModuleAuthProvider;
 service: IModuleService;
+redlock: MetaRedlock;
 }
 
 import 'vona';
@@ -247,13 +271,13 @@ declare module 'vona' {
   export interface IBeanScopeContainer {
     authSimple: ScopeModuleAuthSimple;
   }
-  
+
   export interface IBeanScopeConfig {
     'auth-simple': ReturnType<typeof config>;
   }
 
-  
 
-  
+
+
 }
 /** scope: end */

package/vona/src/suite-vendor/a-auth/modules/auth-simple/src/bean/meta.redlock.ts

@@ -0,0 +1,11 @@
+import { Meta } from 'vona-module-a-meta';
+import { BeanRedlockBase } from 'vona-module-a-redlock';
+
+export type TypeRedlockLockResource = `authSimple.createForUser.${string}`;
+export type TypeRedlockLockIsolateResource = never;
+
+@Meta()
+export class MetaRedlock extends BeanRedlockBase<
+  TypeRedlockLockResource,
+  TypeRedlockLockIsolateResource
+> {}

package/vona/src/suite-vendor/a-auth/modules/auth-simple/src/service/authSimple.ts

@@ -3,6 +3,7 @@ import type { TableIdentity } from 'table-identity';
 import * as passwordHash from 'password-hash-salt';
 import { BeanBase } from 'vona';
 import { Service } from 'vona-module-a-bean';
+import { Core } from 'vona-module-a-core';
 
 @Service()
 export class ServiceAuthSimple extends BeanBase {
@@ -15,9 +16,21 @@ export class ServiceAuthSimple extends BeanBase {
   }
 
   async getByUserId(userId: TableIdentity) {
-    const auth = await this.$scope.auth.model.auth.get({ userId });
+    const authProvider = await this._getSimpleAuthProvider();
+    const auth = await this.$scope.auth.model.auth.get({
+      userId,
+      authProviderId: authProvider.id,
+    });
     if (!auth) return;
-    return await this.scope.model.authSimple.get({ id: auth.profileId });
+    const authSimple = await this.scope.model.authSimple.get({ id: auth.profileId });
+    if (!authSimple) {
+      throw new Error(`auth-simple profile missing for user: ${userId}`);
+    }
+    return authSimple;
+  }
+
+  async hasByUserId(userId: TableIdentity): Promise<boolean> {
+    return !!(await this.getByUserId(userId));
   }
 
   async verifyPassword(
@@ -36,6 +49,44 @@ export class ServiceAuthSimple extends BeanBase {
     return authSimple.id;
   }
 
+  async replacePassword(userId: TableIdentity, password: string): Promise<boolean> {
+    if (!password) return false;
+    const authSimple = await this.getByUserId(userId);
+    if (!authSimple) return false;
+    await this.scope.model.authSimple.updateById(authSimple.id, {
+      hash: await this.calcPasswordHash(password),
+    });
+    return true;
+  }
+
+  @Core.transaction()
+  async createForUser(userId: TableIdentity, password: string) {
+    if (!password) this.app.throw(403);
+    return await this.scope.redlock.lock(`authSimple.createForUser.${userId}`, async () => {
+      const authProvider = await this._getSimpleAuthProvider();
+      const auth = await this.$scope.auth.model.auth.get({
+        userId,
+        authProviderId: authProvider.id,
+      });
+      if (auth) return;
+      const authSimple = await this.create(password);
+      await this.$scope.auth.model.auth.insert({
+        userId,
+        authProviderId: authProvider.id,
+        profileId: authSimple.id.toString(),
+        profile: JSON.stringify({ id: authSimple.id.toString() }),
+      });
+      return authSimple;
+    });
+  }
+
+  private async _getSimpleAuthProvider() {
+    return await this.bean.authProvider.get({
+      providerName: 'auth-simple:simple',
+      clientName: 'default',
+    });
+  }
+
   async verifyPasswordHash(password: string, hash: string) {
     return await passwordHash.verify(password, hash);
   }