Maurice b872bb48a6 refactor(auth): check sessions through SessionsService, not its repository ...

The sessions domain owns user_sessions, yet AuthService injected
UserSessionsRepository next to SessionsService and AuthModule registered
the entity in its own forFeature, only so verifyJwtToken could hand the
repository to verifyJwtAndLoadUser.

verifyJwtAndLoadUser now takes a SessionLookup, the two repository
methods the session check uses (findActive, touchLastSeen).
SessionsService answers both, so AuthService passes itself through the
sessions domain's API and drops the repository and the forFeature entry.
The guards keep handing in the repository from their own entity
manager, which satisfies the same type. auth.service.ts lost lines, so
its size baseline goes down with it.

2026-10-08 18:43:50 +02:00

..

e2e

fix(auth): keep demo visitors out of each other's sessions

2026-10-08 18:43:42 +02:00

fixtures

test(db): boot a v4.3.3 install with real rows on this release

2026-10-08 13:02:57 +02:00

helpers

refactor(auth): check sessions through SessionsService, not its repository

2026-10-08 18:43:50 +02:00

integration

fix(server): run the remaining multi-statement service writes in one transaction

2026-10-08 18:41:32 +02:00

unit

refactor(auth): check sessions through SessionsService, not its repository

2026-10-08 18:43:50 +02:00

websocket

refactor(server): make the state ports async and route every reader through the provided store

2026-10-08 18:41:01 +02:00

build-schema-snapshot.ts

refactor(db): open the database through a DatabaseLifecycle provider

2026-10-08 18:38:28 +02:00

global-setup.ts

refactor(db): open the database through a DatabaseLifecycle provider

2026-10-08 18:38:28 +02:00

setup.console-noise.ts

refactor(server): fold airports and distance, drop the boot-time backfill cycle (#1834)

2026-08-07 21:07:14 +02:00

setup.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00