feat: implement identity and security features

- Added account types and privileged account types constants.
- Created admin user controller for updating user security fields.
- Developed role assignment controller for managing user roles.
- Implemented validation middleware for request schemas.
- Defined user role and auth session models for database interactions.
- Created services for authentication, email notifications, and OTP handling.
- Developed OAuth service for Google and Apple authentication.
- Added JWT utility functions for token generation and verification.
- Implemented comprehensive tests for authentication, session management, and password policies.
- Created migration for updating user schema and adding new tables for auth sessions and user identities.

app/models/permission/role.model.js

@@ -19,7 +19,8 @@ module.exports = (sequelize, DataTypes) => {
       },
       roleName: {
         type: DataTypes.STRING,
-        allowNull: false
+        allowNull: false,
+        unique: true
       },
       roleDescription: {
         type: DataTypes.TEXT,
@@ -37,6 +38,7 @@ module.exports = (sequelize, DataTypes) => {
       foreignKey: "role_id",
       as: "rolePermissions"
     });
+    roles.hasMany(db.UserRole, { foreignKey: "role_id", as: "userRoles" });
   };
 
   return roles;

app/models/permission/rolePermission.model.js

@@ -28,7 +28,27 @@ module.exports = (sequelize, DataTypes) => {
     },
     {
       tableName: "rolePermission",
-      timestamps: true
+      timestamps: true,
+      indexes: [{ unique: true, fields: ["role_id", "permission_id"] }],
+      hooks: {
+        afterCreate: async (record) => {
+          const users = await sequelize.models.UserRole.findAll({ where: { role_id: record.role_id } });
+          await Promise.all(users.map((item) => require("../../utils/cache.util").clearPermissionCache(item.user_id)));
+        },
+        afterDestroy: async (record) => {
+          const users = await sequelize.models.UserRole.findAll({ where: { role_id: record.role_id } });
+          await Promise.all(users.map((item) => require("../../utils/cache.util").clearPermissionCache(item.user_id)));
+        },
+        afterUpdate: async (record) => {
+          const users = await sequelize.models.UserRole.findAll({ where: { role_id: record.role_id } });
+          await Promise.all(users.map((item) => require("../../utils/cache.util").clearPermissionCache(item.user_id)));
+        },
+        afterBulkCreate: async (records) => {
+          const roleIds = [...new Set(records.map((record) => record.role_id))];
+          const users = await sequelize.models.UserRole.findAll({ where: { role_id: roleIds } });
+          await Promise.all(users.map((item) => require("../../utils/cache.util").clearPermissionCache(item.user_id)));
+        }
+      }
     }
   );
 

app/models/permission/userPermission.model.js

@@ -29,7 +29,14 @@ module.exports = (sequelize, DataTypes) => {
     },
     {
       tableName: "userPermission",
-      timestamps: true
+      timestamps: true,
+      indexes: [{ unique: true, fields: ["user_id", "permission_id"] }],
+      hooks: {
+        afterCreate: (record) => require("../../utils/cache.util").clearPermissionCache(record.user_id),
+        afterUpdate: (record) => require("../../utils/cache.util").clearPermissionCache(record.user_id),
+        afterDestroy: (record) => require("../../utils/cache.util").clearPermissionCache(record.user_id)
+        ,afterBulkCreate: (records) => Promise.all(records.map((record) => require("../../utils/cache.util").clearPermissionCache(record.user_id)))
+      }
     }
   );
 

app/models/permission/userRole.model.js

@@ -0,0 +1,15 @@
+module.exports = (sequelize, DataTypes) => {
+  const UserRole = sequelize.define("UserRole", {
+    id: { type: DataTypes.INTEGER, primaryKey: true, autoIncrement: true },
+    user_id: { type: DataTypes.STRING, allowNull: false },
+    role_id: { type: DataTypes.STRING, allowNull: false },
+  }, { tableName: "user_roles", timestamps: true, indexes: [{ unique: true, fields: ["user_id", "role_id"] }], hooks: {
+    afterCreate: (record) => require("../../utils/cache.util").clearPermissionCache(record.user_id),
+    afterDestroy: (record) => require("../../utils/cache.util").clearPermissionCache(record.user_id),
+  } });
+  UserRole.associate = (db) => {
+    UserRole.belongsTo(db.User, { foreignKey: "user_id", as: "user" });
+    UserRole.belongsTo(db.roles, { foreignKey: "role_id", as: "role" });
+  };
+  return UserRole;
+};