5 Commits

Author	SHA1	Message	Date
jubnl	d82395d0ae	refactor(oauth): OAuth server tables through repositories ... OauthClientsRepository/OauthTokensRepository/OauthConsentsRepository replace OauthService's raw SQL (OA1-OA33). revokeChain's recursive CTE and the oauth_clients join (its FK actually targets client_id, not the row id the generated relation assumes) go through em.getKysely(); OA19's chain revoke is one nativeUpdate($in); OA12's consent grant is em.upsert on the (client, user) unique key. revokeAllForUser built now for Task 5. Every row-out read is disableIdentityMap: true; inserts go through em.insert.	2026-09-22 21:18:08 +02:00
jubnl	57f4e29b9a	refactor(auth): users table through UsersRepository; JWT and MFA lookups repository-backed	2026-09-22 19:39:01 +02:00
jubnl	7453c7dafa	feat(server): pre-init photo route and WS handshake run in a request context; InviteTokensRepository	2026-09-22 18:48:24 +02:00
jubnl	f4fe27a3f8	fix(db): dialect helpers dispatch on the platform; lint gate for the repository layer	2026-09-21 18:12:07 +02:00
jubnl	5691f966af	feat(db): dialect helper is the one place SQL functions are spelled	2026-09-21 09:19:47 +02:00