feat: implement identity and security features

- Added account types and privileged account types constants.
- Created admin user controller for updating user security fields.
- Developed role assignment controller for managing user roles.
- Implemented validation middleware for request schemas.
- Defined user role and auth session models for database interactions.
- Created services for authentication, email notifications, and OTP handling.
- Developed OAuth service for Google and Apple authentication.
- Added JWT utility functions for token generation and verification.
- Implemented comprehensive tests for authentication, session management, and password policies.
- Created migration for updating user schema and adding new tables for auth sessions and user identities.

app/controllers/roleAssignment.controller.js

@@ -0,0 +1,21 @@
+const db = require("../models");
+const { clearPermissionCache } = require("../utils/cache.util");
+const { logActivity } = require("../services/activity.service");
+
+exports.assignRole = async (req, res, next) => {
+  try {
+    const [assignment] = await db.UserRole.findOrCreate({ where: { user_id: req.params.userId, role_id: req.params.roleId } });
+    await clearPermissionCache(req.params.userId);
+    await logActivity({ user: req.user, description: `Role ${req.params.roleId} assigned to user ${req.params.userId}`, type: "ROLE_ASSIGNED", module: "Authorization" });
+    res.status(201).json({ success: true, data: { id: assignment.id, userId: assignment.user_id, roleId: assignment.role_id } });
+  } catch (error) { next(error); }
+};
+
+exports.removeRole = async (req, res, next) => {
+  try {
+    await db.UserRole.destroy({ where: { user_id: req.params.userId, role_id: req.params.roleId } });
+    await clearPermissionCache(req.params.userId);
+    await logActivity({ user: req.user, description: `Role ${req.params.roleId} removed from user ${req.params.userId}`, type: "ROLE_REMOVED", module: "Authorization" });
+    res.json({ success: true, message: "Role removed" });
+  } catch (error) { next(error); }
+};