chore: auto-generate protobuf files [skip ci]

.github/workflows/publish.yml

@@ -50,7 +50,7 @@ jobs:
           npm install -g ts-proto
           mkdir -p ./gen/go  # Создаем вложенную папку для Go
           protoc -I ./proto ./proto/*.proto \
-            --ts_proto_out=nestJs=true,package=omit:./gen \
+            --ts_proto_out=nestJs=true,addGrpcMetadata=true,package=omit:./gen \
             --go_out=paths=source_relative:./gen/go \
             --go-grpc_out=paths=source_relative:./gen/go
 

gen/go/identity.pb.go

@@ -4,7 +4,7 @@
 // 	protoc        v3.21.12
 // source: identity.proto
 
-package gen
+package pb
 
 import (
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
@@ -357,6 +357,246 @@ func (x *LogoutResponse) GetMessage() string {
 	return ""
 }
 
+type VerifyTokenRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Token         string                 `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *VerifyTokenRequest) Reset() {
+	*x = VerifyTokenRequest{}
+	mi := &file_identity_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *VerifyTokenRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*VerifyTokenRequest) ProtoMessage() {}
+
+func (x *VerifyTokenRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_identity_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use VerifyTokenRequest.ProtoReflect.Descriptor instead.
+func (*VerifyTokenRequest) Descriptor() ([]byte, []int) {
+	return file_identity_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *VerifyTokenRequest) GetToken() string {
+	if x != nil {
+		return x.Token
+	}
+	return ""
+}
+
+type VerifyTokenResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	IsValid       bool                   `protobuf:"varint,1,opt,name=is_valid,json=isValid,proto3" json:"is_valid,omitempty"`
+	ErrorMessage  *string                `protobuf:"bytes,2,opt,name=error_message,json=errorMessage,proto3,oneof" json:"error_message,omitempty"`
+	Id            *string                `protobuf:"bytes,3,opt,name=id,proto3,oneof" json:"id,omitempty"`
+	Username      *string                `protobuf:"bytes,4,opt,name=username,proto3,oneof" json:"username,omitempty"`
+	RoleLevel     *int32                 `protobuf:"varint,5,opt,name=role_level,json=roleLevel,proto3,oneof" json:"role_level,omitempty"`
+	Permissions   []string               `protobuf:"bytes,6,rep,name=permissions,proto3" json:"permissions,omitempty"`
+	SessionId     *string                `protobuf:"bytes,7,opt,name=session_id,json=sessionId,proto3,oneof" json:"session_id,omitempty"`
+	RequiresPin   *bool                  `protobuf:"varint,8,opt,name=requires_pin,json=requiresPin,proto3,oneof" json:"requires_pin,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *VerifyTokenResponse) Reset() {
+	*x = VerifyTokenResponse{}
+	mi := &file_identity_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *VerifyTokenResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*VerifyTokenResponse) ProtoMessage() {}
+
+func (x *VerifyTokenResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_identity_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use VerifyTokenResponse.ProtoReflect.Descriptor instead.
+func (*VerifyTokenResponse) Descriptor() ([]byte, []int) {
+	return file_identity_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *VerifyTokenResponse) GetIsValid() bool {
+	if x != nil {
+		return x.IsValid
+	}
+	return false
+}
+
+func (x *VerifyTokenResponse) GetErrorMessage() string {
+	if x != nil && x.ErrorMessage != nil {
+		return *x.ErrorMessage
+	}
+	return ""
+}
+
+func (x *VerifyTokenResponse) GetId() string {
+	if x != nil && x.Id != nil {
+		return *x.Id
+	}
+	return ""
+}
+
+func (x *VerifyTokenResponse) GetUsername() string {
+	if x != nil && x.Username != nil {
+		return *x.Username
+	}
+	return ""
+}
+
+func (x *VerifyTokenResponse) GetRoleLevel() int32 {
+	if x != nil && x.RoleLevel != nil {
+		return *x.RoleLevel
+	}
+	return 0
+}
+
+func (x *VerifyTokenResponse) GetPermissions() []string {
+	if x != nil {
+		return x.Permissions
+	}
+	return nil
+}
+
+func (x *VerifyTokenResponse) GetSessionId() string {
+	if x != nil && x.SessionId != nil {
+		return *x.SessionId
+	}
+	return ""
+}
+
+func (x *VerifyTokenResponse) GetRequiresPin() bool {
+	if x != nil && x.RequiresPin != nil {
+		return *x.RequiresPin
+	}
+	return false
+}
+
+type GetAccountRoleLevelRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	AccountId     string                 `protobuf:"bytes,1,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetAccountRoleLevelRequest) Reset() {
+	*x = GetAccountRoleLevelRequest{}
+	mi := &file_identity_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetAccountRoleLevelRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetAccountRoleLevelRequest) ProtoMessage() {}
+
+func (x *GetAccountRoleLevelRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_identity_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetAccountRoleLevelRequest.ProtoReflect.Descriptor instead.
+func (*GetAccountRoleLevelRequest) Descriptor() ([]byte, []int) {
+	return file_identity_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *GetAccountRoleLevelRequest) GetAccountId() string {
+	if x != nil {
+		return x.AccountId
+	}
+	return ""
+}
+
+type GetAccountRoleLevelResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Found         bool                   `protobuf:"varint,1,opt,name=found,proto3" json:"found,omitempty"`
+	RoleLevel     int32                  `protobuf:"varint,2,opt,name=role_level,json=roleLevel,proto3" json:"role_level,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetAccountRoleLevelResponse) Reset() {
+	*x = GetAccountRoleLevelResponse{}
+	mi := &file_identity_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetAccountRoleLevelResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetAccountRoleLevelResponse) ProtoMessage() {}
+
+func (x *GetAccountRoleLevelResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_identity_proto_msgTypes[9]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetAccountRoleLevelResponse.ProtoReflect.Descriptor instead.
+func (*GetAccountRoleLevelResponse) Descriptor() ([]byte, []int) {
+	return file_identity_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *GetAccountRoleLevelResponse) GetFound() bool {
+	if x != nil {
+		return x.Found
+	}
+	return false
+}
+
+func (x *GetAccountRoleLevelResponse) GetRoleLevel() int32 {
+	if x != nil {
+		return x.RoleLevel
+	}
+	return 0
+}
+
 type UnlockPinRequest struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	AccessToken   string                 `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
@@ -367,7 +607,7 @@ type UnlockPinRequest struct {
 
 func (x *UnlockPinRequest) Reset() {
 	*x = UnlockPinRequest{}
-	mi := &file_identity_proto_msgTypes[6]
+	mi := &file_identity_proto_msgTypes[10]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -379,7 +619,7 @@ func (x *UnlockPinRequest) String() string {
 func (*UnlockPinRequest) ProtoMessage() {}
 
 func (x *UnlockPinRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[6]
+	mi := &file_identity_proto_msgTypes[10]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -392,7 +632,7 @@ func (x *UnlockPinRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UnlockPinRequest.ProtoReflect.Descriptor instead.
 func (*UnlockPinRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{6}
+	return file_identity_proto_rawDescGZIP(), []int{10}
 }
 
 func (x *UnlockPinRequest) GetAccessToken() string {
@@ -419,7 +659,7 @@ type UnlockPinResponse struct {
 
 func (x *UnlockPinResponse) Reset() {
 	*x = UnlockPinResponse{}
-	mi := &file_identity_proto_msgTypes[7]
+	mi := &file_identity_proto_msgTypes[11]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -431,7 +671,7 @@ func (x *UnlockPinResponse) String() string {
 func (*UnlockPinResponse) ProtoMessage() {}
 
 func (x *UnlockPinResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[7]
+	mi := &file_identity_proto_msgTypes[11]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -444,7 +684,7 @@ func (x *UnlockPinResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UnlockPinResponse.ProtoReflect.Descriptor instead.
 func (*UnlockPinResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{7}
+	return file_identity_proto_rawDescGZIP(), []int{11}
 }
 
 func (x *UnlockPinResponse) GetSuccess() bool {
@@ -472,7 +712,7 @@ type Verify2FaRequest struct {
 
 func (x *Verify2FaRequest) Reset() {
 	*x = Verify2FaRequest{}
-	mi := &file_identity_proto_msgTypes[8]
+	mi := &file_identity_proto_msgTypes[12]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -484,7 +724,7 @@ func (x *Verify2FaRequest) String() string {
 func (*Verify2FaRequest) ProtoMessage() {}
 
 func (x *Verify2FaRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[8]
+	mi := &file_identity_proto_msgTypes[12]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -497,7 +737,7 @@ func (x *Verify2FaRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Verify2FaRequest.ProtoReflect.Descriptor instead.
 func (*Verify2FaRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{8}
+	return file_identity_proto_rawDescGZIP(), []int{12}
 }
 
 func (x *Verify2FaRequest) GetTempToken() string {
@@ -534,7 +774,7 @@ type Verify2FaResponse struct {
 
 func (x *Verify2FaResponse) Reset() {
 	*x = Verify2FaResponse{}
-	mi := &file_identity_proto_msgTypes[9]
+	mi := &file_identity_proto_msgTypes[13]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -546,7 +786,7 @@ func (x *Verify2FaResponse) String() string {
 func (*Verify2FaResponse) ProtoMessage() {}
 
 func (x *Verify2FaResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[9]
+	mi := &file_identity_proto_msgTypes[13]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -559,7 +799,7 @@ func (x *Verify2FaResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Verify2FaResponse.ProtoReflect.Descriptor instead.
 func (*Verify2FaResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{9}
+	return file_identity_proto_rawDescGZIP(), []int{13}
 }
 
 func (x *Verify2FaResponse) GetAccessToken() string {
@@ -606,7 +846,7 @@ type AuthenticatedAccessRequest struct {
 
 func (x *AuthenticatedAccessRequest) Reset() {
 	*x = AuthenticatedAccessRequest{}
-	mi := &file_identity_proto_msgTypes[10]
+	mi := &file_identity_proto_msgTypes[14]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -618,7 +858,7 @@ func (x *AuthenticatedAccessRequest) String() string {
 func (*AuthenticatedAccessRequest) ProtoMessage() {}
 
 func (x *AuthenticatedAccessRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[10]
+	mi := &file_identity_proto_msgTypes[14]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -631,7 +871,7 @@ func (x *AuthenticatedAccessRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AuthenticatedAccessRequest.ProtoReflect.Descriptor instead.
 func (*AuthenticatedAccessRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{10}
+	return file_identity_proto_rawDescGZIP(), []int{14}
 }
 
 func (x *AuthenticatedAccessRequest) GetAccessToken() string {
@@ -650,7 +890,7 @@ type GetTwoFaStatusRequest struct {
 
 func (x *GetTwoFaStatusRequest) Reset() {
 	*x = GetTwoFaStatusRequest{}
-	mi := &file_identity_proto_msgTypes[11]
+	mi := &file_identity_proto_msgTypes[15]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -662,7 +902,7 @@ func (x *GetTwoFaStatusRequest) String() string {
 func (*GetTwoFaStatusRequest) ProtoMessage() {}
 
 func (x *GetTwoFaStatusRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[11]
+	mi := &file_identity_proto_msgTypes[15]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -675,7 +915,7 @@ func (x *GetTwoFaStatusRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetTwoFaStatusRequest.ProtoReflect.Descriptor instead.
 func (*GetTwoFaStatusRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{11}
+	return file_identity_proto_rawDescGZIP(), []int{15}
 }
 
 func (x *GetTwoFaStatusRequest) GetAccessToken() string {
@@ -697,7 +937,7 @@ type GetTwoFaStatusResponse struct {
 
 func (x *GetTwoFaStatusResponse) Reset() {
 	*x = GetTwoFaStatusResponse{}
-	mi := &file_identity_proto_msgTypes[12]
+	mi := &file_identity_proto_msgTypes[16]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -709,7 +949,7 @@ func (x *GetTwoFaStatusResponse) String() string {
 func (*GetTwoFaStatusResponse) ProtoMessage() {}
 
 func (x *GetTwoFaStatusResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[12]
+	mi := &file_identity_proto_msgTypes[16]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -722,7 +962,7 @@ func (x *GetTwoFaStatusResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetTwoFaStatusResponse.ProtoReflect.Descriptor instead.
 func (*GetTwoFaStatusResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{12}
+	return file_identity_proto_rawDescGZIP(), []int{16}
 }
 
 func (x *GetTwoFaStatusResponse) GetTotpEnabled() bool {
@@ -765,7 +1005,7 @@ type StartTotpEnrollmentResponse struct {
 
 func (x *StartTotpEnrollmentResponse) Reset() {
 	*x = StartTotpEnrollmentResponse{}
-	mi := &file_identity_proto_msgTypes[13]
+	mi := &file_identity_proto_msgTypes[17]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -777,7 +1017,7 @@ func (x *StartTotpEnrollmentResponse) String() string {
 func (*StartTotpEnrollmentResponse) ProtoMessage() {}
 
 func (x *StartTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[13]
+	mi := &file_identity_proto_msgTypes[17]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -790,7 +1030,7 @@ func (x *StartTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartTotpEnrollmentResponse.ProtoReflect.Descriptor instead.
 func (*StartTotpEnrollmentResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{13}
+	return file_identity_proto_rawDescGZIP(), []int{17}
 }
 
 func (x *StartTotpEnrollmentResponse) GetSecretBase32() string {
@@ -831,7 +1071,7 @@ type ConfirmTotpEnrollmentRequest struct {
 
 func (x *ConfirmTotpEnrollmentRequest) Reset() {
 	*x = ConfirmTotpEnrollmentRequest{}
-	mi := &file_identity_proto_msgTypes[14]
+	mi := &file_identity_proto_msgTypes[18]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -843,7 +1083,7 @@ func (x *ConfirmTotpEnrollmentRequest) String() string {
 func (*ConfirmTotpEnrollmentRequest) ProtoMessage() {}
 
 func (x *ConfirmTotpEnrollmentRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[14]
+	mi := &file_identity_proto_msgTypes[18]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -856,7 +1096,7 @@ func (x *ConfirmTotpEnrollmentRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ConfirmTotpEnrollmentRequest.ProtoReflect.Descriptor instead.
 func (*ConfirmTotpEnrollmentRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{14}
+	return file_identity_proto_rawDescGZIP(), []int{18}
 }
 
 func (x *ConfirmTotpEnrollmentRequest) GetAccessToken() string {
@@ -884,7 +1124,7 @@ type ConfirmTotpEnrollmentResponse struct {
 
 func (x *ConfirmTotpEnrollmentResponse) Reset() {
 	*x = ConfirmTotpEnrollmentResponse{}
-	mi := &file_identity_proto_msgTypes[15]
+	mi := &file_identity_proto_msgTypes[19]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -896,7 +1136,7 @@ func (x *ConfirmTotpEnrollmentResponse) String() string {
 func (*ConfirmTotpEnrollmentResponse) ProtoMessage() {}
 
 func (x *ConfirmTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[15]
+	mi := &file_identity_proto_msgTypes[19]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -909,7 +1149,7 @@ func (x *ConfirmTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ConfirmTotpEnrollmentResponse.ProtoReflect.Descriptor instead.
 func (*ConfirmTotpEnrollmentResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{15}
+	return file_identity_proto_rawDescGZIP(), []int{19}
 }
 
 func (x *ConfirmTotpEnrollmentResponse) GetStatus() string {
@@ -943,7 +1183,7 @@ type CancelTotpEnrollmentResponse struct {
 
 func (x *CancelTotpEnrollmentResponse) Reset() {
 	*x = CancelTotpEnrollmentResponse{}
-	mi := &file_identity_proto_msgTypes[16]
+	mi := &file_identity_proto_msgTypes[20]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -955,7 +1195,7 @@ func (x *CancelTotpEnrollmentResponse) String() string {
 func (*CancelTotpEnrollmentResponse) ProtoMessage() {}
 
 func (x *CancelTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[16]
+	mi := &file_identity_proto_msgTypes[20]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -968,7 +1208,7 @@ func (x *CancelTotpEnrollmentResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CancelTotpEnrollmentResponse.ProtoReflect.Descriptor instead.
 func (*CancelTotpEnrollmentResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{16}
+	return file_identity_proto_rawDescGZIP(), []int{20}
 }
 
 func (x *CancelTotpEnrollmentResponse) GetStatus() string {
@@ -996,7 +1236,7 @@ type DisableTotpRequest struct {
 
 func (x *DisableTotpRequest) Reset() {
 	*x = DisableTotpRequest{}
-	mi := &file_identity_proto_msgTypes[17]
+	mi := &file_identity_proto_msgTypes[21]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1008,7 +1248,7 @@ func (x *DisableTotpRequest) String() string {
 func (*DisableTotpRequest) ProtoMessage() {}
 
 func (x *DisableTotpRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[17]
+	mi := &file_identity_proto_msgTypes[21]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1021,7 +1261,7 @@ func (x *DisableTotpRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisableTotpRequest.ProtoReflect.Descriptor instead.
 func (*DisableTotpRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{17}
+	return file_identity_proto_rawDescGZIP(), []int{21}
 }
 
 func (x *DisableTotpRequest) GetAccessToken() string {
@@ -1055,7 +1295,7 @@ type DisableTotpResponse struct {
 
 func (x *DisableTotpResponse) Reset() {
 	*x = DisableTotpResponse{}
-	mi := &file_identity_proto_msgTypes[18]
+	mi := &file_identity_proto_msgTypes[22]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1067,7 +1307,7 @@ func (x *DisableTotpResponse) String() string {
 func (*DisableTotpResponse) ProtoMessage() {}
 
 func (x *DisableTotpResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[18]
+	mi := &file_identity_proto_msgTypes[22]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1080,7 +1320,7 @@ func (x *DisableTotpResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisableTotpResponse.ProtoReflect.Descriptor instead.
 func (*DisableTotpResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{18}
+	return file_identity_proto_rawDescGZIP(), []int{22}
 }
 
 func (x *DisableTotpResponse) GetStatus() string {
@@ -1109,7 +1349,7 @@ type StartTelegramEnrollmentResponse struct {
 
 func (x *StartTelegramEnrollmentResponse) Reset() {
 	*x = StartTelegramEnrollmentResponse{}
-	mi := &file_identity_proto_msgTypes[19]
+	mi := &file_identity_proto_msgTypes[23]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1121,7 +1361,7 @@ func (x *StartTelegramEnrollmentResponse) String() string {
 func (*StartTelegramEnrollmentResponse) ProtoMessage() {}
 
 func (x *StartTelegramEnrollmentResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[19]
+	mi := &file_identity_proto_msgTypes[23]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1134,7 +1374,7 @@ func (x *StartTelegramEnrollmentResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartTelegramEnrollmentResponse.ProtoReflect.Descriptor instead.
 func (*StartTelegramEnrollmentResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{19}
+	return file_identity_proto_rawDescGZIP(), []int{23}
 }
 
 func (x *StartTelegramEnrollmentResponse) GetEnrollmentToken() string {
@@ -1176,7 +1416,7 @@ type ConfirmTelegramEnrollmentRequest struct {
 
 func (x *ConfirmTelegramEnrollmentRequest) Reset() {
 	*x = ConfirmTelegramEnrollmentRequest{}
-	mi := &file_identity_proto_msgTypes[20]
+	mi := &file_identity_proto_msgTypes[24]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1188,7 +1428,7 @@ func (x *ConfirmTelegramEnrollmentRequest) String() string {
 func (*ConfirmTelegramEnrollmentRequest) ProtoMessage() {}
 
 func (x *ConfirmTelegramEnrollmentRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[20]
+	mi := &file_identity_proto_msgTypes[24]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1201,7 +1441,7 @@ func (x *ConfirmTelegramEnrollmentRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ConfirmTelegramEnrollmentRequest.ProtoReflect.Descriptor instead.
 func (*ConfirmTelegramEnrollmentRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{20}
+	return file_identity_proto_rawDescGZIP(), []int{24}
 }
 
 func (x *ConfirmTelegramEnrollmentRequest) GetAccessToken() string {
@@ -1236,7 +1476,7 @@ type ConfirmTelegramEnrollmentResponse struct {
 
 func (x *ConfirmTelegramEnrollmentResponse) Reset() {
 	*x = ConfirmTelegramEnrollmentResponse{}
-	mi := &file_identity_proto_msgTypes[21]
+	mi := &file_identity_proto_msgTypes[25]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1248,7 +1488,7 @@ func (x *ConfirmTelegramEnrollmentResponse) String() string {
 func (*ConfirmTelegramEnrollmentResponse) ProtoMessage() {}
 
 func (x *ConfirmTelegramEnrollmentResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[21]
+	mi := &file_identity_proto_msgTypes[25]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1261,7 +1501,7 @@ func (x *ConfirmTelegramEnrollmentResponse) ProtoReflect() protoreflect.Message
 
 // Deprecated: Use ConfirmTelegramEnrollmentResponse.ProtoReflect.Descriptor instead.
 func (*ConfirmTelegramEnrollmentResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{21}
+	return file_identity_proto_rawDescGZIP(), []int{25}
 }
 
 func (x *ConfirmTelegramEnrollmentResponse) GetStatus() string {
@@ -1296,7 +1536,7 @@ type DisableTelegramRequest struct {
 
 func (x *DisableTelegramRequest) Reset() {
 	*x = DisableTelegramRequest{}
-	mi := &file_identity_proto_msgTypes[22]
+	mi := &file_identity_proto_msgTypes[26]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1308,7 +1548,7 @@ func (x *DisableTelegramRequest) String() string {
 func (*DisableTelegramRequest) ProtoMessage() {}
 
 func (x *DisableTelegramRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[22]
+	mi := &file_identity_proto_msgTypes[26]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1321,7 +1561,7 @@ func (x *DisableTelegramRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisableTelegramRequest.ProtoReflect.Descriptor instead.
 func (*DisableTelegramRequest) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{22}
+	return file_identity_proto_rawDescGZIP(), []int{26}
 }
 
 func (x *DisableTelegramRequest) GetAccessToken() string {
@@ -1355,7 +1595,7 @@ type DisableTelegramResponse struct {
 
 func (x *DisableTelegramResponse) Reset() {
 	*x = DisableTelegramResponse{}
-	mi := &file_identity_proto_msgTypes[23]
+	mi := &file_identity_proto_msgTypes[27]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1367,7 +1607,7 @@ func (x *DisableTelegramResponse) String() string {
 func (*DisableTelegramResponse) ProtoMessage() {}
 
 func (x *DisableTelegramResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_identity_proto_msgTypes[23]
+	mi := &file_identity_proto_msgTypes[27]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1380,7 +1620,7 @@ func (x *DisableTelegramResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisableTelegramResponse.ProtoReflect.Descriptor instead.
 func (*DisableTelegramResponse) Descriptor() ([]byte, []int) {
-	return file_identity_proto_rawDescGZIP(), []int{23}
+	return file_identity_proto_rawDescGZIP(), []int{27}
 }
 
 func (x *DisableTelegramResponse) GetStatus() string {
@@ -1428,7 +1668,33 @@ const file_identity_proto_rawDesc = "" +
 	"\faccess_token\x18\x01 \x01(\tR\vaccessToken\"D\n" +
 	"\x0eLogoutResponse\x12\x18\n" +
 	"\asuccess\x18\x01 \x01(\bR\asuccess\x12\x18\n" +
-	"\amessage\x18\x02 \x01(\tR\amessage\"P\n" +
+	"\amessage\x18\x02 \x01(\tR\amessage\"*\n" +
+	"\x12VerifyTokenRequest\x12\x14\n" +
+	"\x05token\x18\x01 \x01(\tR\x05token\"\xf7\x02\n" +
+	"\x13VerifyTokenResponse\x12\x19\n" +
+	"\bis_valid\x18\x01 \x01(\bR\aisValid\x12(\n" +
+	"\rerror_message\x18\x02 \x01(\tH\x00R\ferrorMessage\x88\x01\x01\x12\x13\n" +
+	"\x02id\x18\x03 \x01(\tH\x01R\x02id\x88\x01\x01\x12\x1f\n" +
+	"\busername\x18\x04 \x01(\tH\x02R\busername\x88\x01\x01\x12\"\n" +
+	"\n" +
+	"role_level\x18\x05 \x01(\x05H\x03R\troleLevel\x88\x01\x01\x12 \n" +
+	"\vpermissions\x18\x06 \x03(\tR\vpermissions\x12\"\n" +
+	"\n" +
+	"session_id\x18\a \x01(\tH\x04R\tsessionId\x88\x01\x01\x12&\n" +
+	"\frequires_pin\x18\b \x01(\bH\x05R\vrequiresPin\x88\x01\x01B\x10\n" +
+	"\x0e_error_messageB\x05\n" +
+	"\x03_idB\v\n" +
+	"\t_usernameB\r\n" +
+	"\v_role_levelB\r\n" +
+	"\v_session_idB\x0f\n" +
+	"\r_requires_pin\";\n" +
+	"\x1aGetAccountRoleLevelRequest\x12\x1d\n" +
+	"\n" +
+	"account_id\x18\x01 \x01(\tR\taccountId\"R\n" +
+	"\x1bGetAccountRoleLevelResponse\x12\x14\n" +
+	"\x05found\x18\x01 \x01(\bR\x05found\x12\x1d\n" +
+	"\n" +
+	"role_level\x18\x02 \x01(\x05R\troleLevel\"P\n" +
 	"\x10UnlockPinRequest\x12!\n" +
 	"\faccess_token\x18\x01 \x01(\tR\vaccessToken\x12\x19\n" +
 	"\bpin_code\x18\x02 \x01(\tR\apinCode\"G\n" +
@@ -1503,11 +1769,14 @@ const file_identity_proto_rawDesc = "" +
 	"\x12_telegram_otp_code\"K\n" +
 	"\x17DisableTelegramResponse\x12\x16\n" +
 	"\x06status\x18\x01 \x01(\tR\x06status\x12\x18\n" +
-	"\amessage\x18\x02 \x01(\tR\amessage2\xd0\x02\n" +
+	"\amessage\x18\x02 \x01(\tR\amessage2\xc0\x04\n" +
 	"\vAuthService\x128\n" +
 	"\x05Login\x12\x16.identity.LoginRequest\x1a\x17.identity.LoginResponse\x12>\n" +
-	"\aRefresh\x12\x18.identity.RefreshRequest\x1a\x19.identity.RefreshResponse\x12;\n" +
+	"\aRefresh\x12\x18.identity.RefreshRequest\x1a\x19.identity.RefreshResponse\x12J\n" +
-	"\x06Logout\x12\x17.identity.LogoutRequest\x1a\x18.identity.LogoutResponse\x12D\n" +
+	"\vVerifyToken\x12\x1c.identity.VerifyTokenRequest\x1a\x1d.identity.VerifyTokenResponse\x12b\n" +
+	"\x13GetAccountRoleLevel\x12$.identity.GetAccountRoleLevelRequest\x1a%.identity.GetAccountRoleLevelResponse\x12;\n" +
+	"\x06Logout\x12\x17.identity.LogoutRequest\x1a\x18.identity.LogoutResponse\x12>\n" +
+	"\tLogoutAll\x12\x17.identity.LogoutRequest\x1a\x18.identity.LogoutResponse\x12D\n" +
 	"\tUnlockPin\x12\x1a.identity.UnlockPinRequest\x1a\x1b.identity.UnlockPinResponse\x12D\n" +
 	"\tVerify2Fa\x12\x1a.identity.Verify2FaRequest\x1a\x1b.identity.Verify2FaResponse2\x9c\x06\n" +
 	"\fTwoFaService\x12S\n" +
@@ -1518,7 +1787,7 @@ const file_identity_proto_rawDesc = "" +
 	"\vDisableTotp\x12\x1c.identity.DisableTotpRequest\x1a\x1d.identity.DisableTotpResponse\x12j\n" +
 	"\x17StartTelegramEnrollment\x12$.identity.AuthenticatedAccessRequest\x1a).identity.StartTelegramEnrollmentResponse\x12t\n" +
 	"\x19ConfirmTelegramEnrollment\x12*.identity.ConfirmTelegramEnrollmentRequest\x1a+.identity.ConfirmTelegramEnrollmentResponse\x12V\n" +
-	"\x0fDisableTelegram\x12 .identity.DisableTelegramRequest\x1a!.identity.DisableTelegramResponseB\aZ\x05./genb\x06proto3"
+	"\x0fDisableTelegram\x12 .identity.DisableTelegramRequest\x1a!.identity.DisableTelegramResponseB*Z(git.lendry.ru/lendry-erp/proto.git/go;pbb\x06proto3"
 
 var (
 	file_identity_proto_rawDescOnce sync.Once
@@ -1532,7 +1801,7 @@ func file_identity_proto_rawDescGZIP() []byte {
 	return file_identity_proto_rawDescData
 }
 
-var file_identity_proto_msgTypes = make([]protoimpl.MessageInfo, 24)
+var file_identity_proto_msgTypes = make([]protoimpl.MessageInfo, 28)
 var file_identity_proto_goTypes = []any{
 	(*LoginRequest)(nil),                      // 0: identity.LoginRequest
 	(*LoginResponse)(nil),                     // 1: identity.LoginResponse
@@ -1540,54 +1809,64 @@ var file_identity_proto_goTypes = []any{
 	(*RefreshResponse)(nil),                   // 3: identity.RefreshResponse
 	(*LogoutRequest)(nil),                     // 4: identity.LogoutRequest
 	(*LogoutResponse)(nil),                    // 5: identity.LogoutResponse
-	(*UnlockPinRequest)(nil),                  // 6: identity.UnlockPinRequest
+	(*VerifyTokenRequest)(nil),                // 6: identity.VerifyTokenRequest
-	(*UnlockPinResponse)(nil),                 // 7: identity.UnlockPinResponse
+	(*VerifyTokenResponse)(nil),               // 7: identity.VerifyTokenResponse
-	(*Verify2FaRequest)(nil),                  // 8: identity.Verify2FaRequest
+	(*GetAccountRoleLevelRequest)(nil),        // 8: identity.GetAccountRoleLevelRequest
-	(*Verify2FaResponse)(nil),                 // 9: identity.Verify2FaResponse
+	(*GetAccountRoleLevelResponse)(nil),       // 9: identity.GetAccountRoleLevelResponse
-	(*AuthenticatedAccessRequest)(nil),        // 10: identity.AuthenticatedAccessRequest
+	(*UnlockPinRequest)(nil),                  // 10: identity.UnlockPinRequest
-	(*GetTwoFaStatusRequest)(nil),             // 11: identity.GetTwoFaStatusRequest
+	(*UnlockPinResponse)(nil),                 // 11: identity.UnlockPinResponse
-	(*GetTwoFaStatusResponse)(nil),            // 12: identity.GetTwoFaStatusResponse
+	(*Verify2FaRequest)(nil),                  // 12: identity.Verify2FaRequest
-	(*StartTotpEnrollmentResponse)(nil),       // 13: identity.StartTotpEnrollmentResponse
+	(*Verify2FaResponse)(nil),                 // 13: identity.Verify2FaResponse
-	(*ConfirmTotpEnrollmentRequest)(nil),      // 14: identity.ConfirmTotpEnrollmentRequest
+	(*AuthenticatedAccessRequest)(nil),        // 14: identity.AuthenticatedAccessRequest
-	(*ConfirmTotpEnrollmentResponse)(nil),     // 15: identity.ConfirmTotpEnrollmentResponse
+	(*GetTwoFaStatusRequest)(nil),             // 15: identity.GetTwoFaStatusRequest
-	(*CancelTotpEnrollmentResponse)(nil),      // 16: identity.CancelTotpEnrollmentResponse
+	(*GetTwoFaStatusResponse)(nil),            // 16: identity.GetTwoFaStatusResponse
-	(*DisableTotpRequest)(nil),                // 17: identity.DisableTotpRequest
+	(*StartTotpEnrollmentResponse)(nil),       // 17: identity.StartTotpEnrollmentResponse
-	(*DisableTotpResponse)(nil),               // 18: identity.DisableTotpResponse
+	(*ConfirmTotpEnrollmentRequest)(nil),      // 18: identity.ConfirmTotpEnrollmentRequest
-	(*StartTelegramEnrollmentResponse)(nil),   // 19: identity.StartTelegramEnrollmentResponse
+	(*ConfirmTotpEnrollmentResponse)(nil),     // 19: identity.ConfirmTotpEnrollmentResponse
-	(*ConfirmTelegramEnrollmentRequest)(nil),  // 20: identity.ConfirmTelegramEnrollmentRequest
+	(*CancelTotpEnrollmentResponse)(nil),      // 20: identity.CancelTotpEnrollmentResponse
-	(*ConfirmTelegramEnrollmentResponse)(nil), // 21: identity.ConfirmTelegramEnrollmentResponse
+	(*DisableTotpRequest)(nil),                // 21: identity.DisableTotpRequest
-	(*DisableTelegramRequest)(nil),            // 22: identity.DisableTelegramRequest
+	(*DisableTotpResponse)(nil),               // 22: identity.DisableTotpResponse
-	(*DisableTelegramResponse)(nil),           // 23: identity.DisableTelegramResponse
+	(*StartTelegramEnrollmentResponse)(nil),   // 23: identity.StartTelegramEnrollmentResponse
+	(*ConfirmTelegramEnrollmentRequest)(nil),  // 24: identity.ConfirmTelegramEnrollmentRequest
+	(*ConfirmTelegramEnrollmentResponse)(nil), // 25: identity.ConfirmTelegramEnrollmentResponse
+	(*DisableTelegramRequest)(nil),            // 26: identity.DisableTelegramRequest
+	(*DisableTelegramResponse)(nil),           // 27: identity.DisableTelegramResponse
 }
 var file_identity_proto_depIdxs = []int32{
 	0,  // 0: identity.AuthService.Login:input_type -> identity.LoginRequest
 	2,  // 1: identity.AuthService.Refresh:input_type -> identity.RefreshRequest
-	4,  // 2: identity.AuthService.Logout:input_type -> identity.LogoutRequest
+	6,  // 2: identity.AuthService.VerifyToken:input_type -> identity.VerifyTokenRequest
-	6,  // 3: identity.AuthService.UnlockPin:input_type -> identity.UnlockPinRequest
+	8,  // 3: identity.AuthService.GetAccountRoleLevel:input_type -> identity.GetAccountRoleLevelRequest
-	8,  // 4: identity.AuthService.Verify2Fa:input_type -> identity.Verify2FaRequest
+	4,  // 4: identity.AuthService.Logout:input_type -> identity.LogoutRequest
-	11, // 5: identity.TwoFaService.GetTwoFaStatus:input_type -> identity.GetTwoFaStatusRequest
+	4,  // 5: identity.AuthService.LogoutAll:input_type -> identity.LogoutRequest
-	10, // 6: identity.TwoFaService.StartTotpEnrollment:input_type -> identity.AuthenticatedAccessRequest
+	10, // 6: identity.AuthService.UnlockPin:input_type -> identity.UnlockPinRequest
-	14, // 7: identity.TwoFaService.ConfirmTotpErollment:input_type -> identity.ConfirmTotpEnrollmentRequest
+	12, // 7: identity.AuthService.Verify2Fa:input_type -> identity.Verify2FaRequest
-	10, // 8: identity.TwoFaService.CancelTotpEnrollment:input_type -> identity.AuthenticatedAccessRequest
+	15, // 8: identity.TwoFaService.GetTwoFaStatus:input_type -> identity.GetTwoFaStatusRequest
-	17, // 9: identity.TwoFaService.DisableTotp:input_type -> identity.DisableTotpRequest
+	14, // 9: identity.TwoFaService.StartTotpEnrollment:input_type -> identity.AuthenticatedAccessRequest
-	10, // 10: identity.TwoFaService.StartTelegramEnrollment:input_type -> identity.AuthenticatedAccessRequest
+	18, // 10: identity.TwoFaService.ConfirmTotpErollment:input_type -> identity.ConfirmTotpEnrollmentRequest
-	20, // 11: identity.TwoFaService.ConfirmTelegramEnrollment:input_type -> identity.ConfirmTelegramEnrollmentRequest
+	14, // 11: identity.TwoFaService.CancelTotpEnrollment:input_type -> identity.AuthenticatedAccessRequest
-	22, // 12: identity.TwoFaService.DisableTelegram:input_type -> identity.DisableTelegramRequest
+	21, // 12: identity.TwoFaService.DisableTotp:input_type -> identity.DisableTotpRequest
-	1,  // 13: identity.AuthService.Login:output_type -> identity.LoginResponse
+	14, // 13: identity.TwoFaService.StartTelegramEnrollment:input_type -> identity.AuthenticatedAccessRequest
-	3,  // 14: identity.AuthService.Refresh:output_type -> identity.RefreshResponse
+	24, // 14: identity.TwoFaService.ConfirmTelegramEnrollment:input_type -> identity.ConfirmTelegramEnrollmentRequest
-	5,  // 15: identity.AuthService.Logout:output_type -> identity.LogoutResponse
+	26, // 15: identity.TwoFaService.DisableTelegram:input_type -> identity.DisableTelegramRequest
-	7,  // 16: identity.AuthService.UnlockPin:output_type -> identity.UnlockPinResponse
+	1,  // 16: identity.AuthService.Login:output_type -> identity.LoginResponse
-	9,  // 17: identity.AuthService.Verify2Fa:output_type -> identity.Verify2FaResponse
+	3,  // 17: identity.AuthService.Refresh:output_type -> identity.RefreshResponse
-	12, // 18: identity.TwoFaService.GetTwoFaStatus:output_type -> identity.GetTwoFaStatusResponse
+	7,  // 18: identity.AuthService.VerifyToken:output_type -> identity.VerifyTokenResponse
-	13, // 19: identity.TwoFaService.StartTotpEnrollment:output_type -> identity.StartTotpEnrollmentResponse
+	9,  // 19: identity.AuthService.GetAccountRoleLevel:output_type -> identity.GetAccountRoleLevelResponse
-	15, // 20: identity.TwoFaService.ConfirmTotpErollment:output_type -> identity.ConfirmTotpEnrollmentResponse
+	5,  // 20: identity.AuthService.Logout:output_type -> identity.LogoutResponse
-	16, // 21: identity.TwoFaService.CancelTotpEnrollment:output_type -> identity.CancelTotpEnrollmentResponse
+	5,  // 21: identity.AuthService.LogoutAll:output_type -> identity.LogoutResponse
-	18, // 22: identity.TwoFaService.DisableTotp:output_type -> identity.DisableTotpResponse
+	11, // 22: identity.AuthService.UnlockPin:output_type -> identity.UnlockPinResponse
-	19, // 23: identity.TwoFaService.StartTelegramEnrollment:output_type -> identity.StartTelegramEnrollmentResponse
+	13, // 23: identity.AuthService.Verify2Fa:output_type -> identity.Verify2FaResponse
-	21, // 24: identity.TwoFaService.ConfirmTelegramEnrollment:output_type -> identity.ConfirmTelegramEnrollmentResponse
+	16, // 24: identity.TwoFaService.GetTwoFaStatus:output_type -> identity.GetTwoFaStatusResponse
-	23, // 25: identity.TwoFaService.DisableTelegram:output_type -> identity.DisableTelegramResponse
+	17, // 25: identity.TwoFaService.StartTotpEnrollment:output_type -> identity.StartTotpEnrollmentResponse
-	13, // [13:26] is the sub-list for method output_type
+	19, // 26: identity.TwoFaService.ConfirmTotpErollment:output_type -> identity.ConfirmTotpEnrollmentResponse
-	0,  // [0:13] is the sub-list for method input_type
+	20, // 27: identity.TwoFaService.CancelTotpEnrollment:output_type -> identity.CancelTotpEnrollmentResponse
+	22, // 28: identity.TwoFaService.DisableTotp:output_type -> identity.DisableTotpResponse
+	23, // 29: identity.TwoFaService.StartTelegramEnrollment:output_type -> identity.StartTelegramEnrollmentResponse
+	25, // 30: identity.TwoFaService.ConfirmTelegramEnrollment:output_type -> identity.ConfirmTelegramEnrollmentResponse
+	27, // 31: identity.TwoFaService.DisableTelegram:output_type -> identity.DisableTelegramResponse
+	16, // [16:32] is the sub-list for method output_type
+	0,  // [0:16] is the sub-list for method input_type
 	0,  // [0:0] is the sub-list for extension type_name
 	0,  // [0:0] is the sub-list for extension extendee
 	0,  // [0:0] is the sub-list for field type_name
@@ -1599,16 +1878,17 @@ func file_identity_proto_init() {
 		return
 	}
 	file_identity_proto_msgTypes[1].OneofWrappers = []any{}
-	file_identity_proto_msgTypes[8].OneofWrappers = []any{}
+	file_identity_proto_msgTypes[7].OneofWrappers = []any{}
-	file_identity_proto_msgTypes[17].OneofWrappers = []any{}
+	file_identity_proto_msgTypes[12].OneofWrappers = []any{}
-	file_identity_proto_msgTypes[22].OneofWrappers = []any{}
+	file_identity_proto_msgTypes[21].OneofWrappers = []any{}
+	file_identity_proto_msgTypes[26].OneofWrappers = []any{}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_identity_proto_rawDesc), len(file_identity_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   24,
+			NumMessages:   28,
 			NumExtensions: 0,
 			NumServices:   2,
 		},

gen/go/identity_grpc.pb.go

@@ -4,7 +4,7 @@
 // - protoc             v3.21.12
 // source: identity.proto
 
-package gen
+package pb
 
 import (
 	context "context"
@@ -21,7 +21,10 @@ const _ = grpc.SupportPackageIsVersion9
 const (
 	AuthService_Login_FullMethodName               = "/identity.AuthService/Login"
 	AuthService_Refresh_FullMethodName             = "/identity.AuthService/Refresh"
+	AuthService_VerifyToken_FullMethodName         = "/identity.AuthService/VerifyToken"
+	AuthService_GetAccountRoleLevel_FullMethodName = "/identity.AuthService/GetAccountRoleLevel"
 	AuthService_Logout_FullMethodName              = "/identity.AuthService/Logout"
+	AuthService_LogoutAll_FullMethodName           = "/identity.AuthService/LogoutAll"
 	AuthService_UnlockPin_FullMethodName           = "/identity.AuthService/UnlockPin"
 	AuthService_Verify2Fa_FullMethodName           = "/identity.AuthService/Verify2Fa"
 )
@@ -32,7 +35,10 @@ const (
 type AuthServiceClient interface {
 	Login(ctx context.Context, in *LoginRequest, opts ...grpc.CallOption) (*LoginResponse, error)
 	Refresh(ctx context.Context, in *RefreshRequest, opts ...grpc.CallOption) (*RefreshResponse, error)
+	VerifyToken(ctx context.Context, in *VerifyTokenRequest, opts ...grpc.CallOption) (*VerifyTokenResponse, error)
+	GetAccountRoleLevel(ctx context.Context, in *GetAccountRoleLevelRequest, opts ...grpc.CallOption) (*GetAccountRoleLevelResponse, error)
 	Logout(ctx context.Context, in *LogoutRequest, opts ...grpc.CallOption) (*LogoutResponse, error)
+	LogoutAll(ctx context.Context, in *LogoutRequest, opts ...grpc.CallOption) (*LogoutResponse, error)
 	UnlockPin(ctx context.Context, in *UnlockPinRequest, opts ...grpc.CallOption) (*UnlockPinResponse, error)
 	Verify2Fa(ctx context.Context, in *Verify2FaRequest, opts ...grpc.CallOption) (*Verify2FaResponse, error)
 }
@@ -65,6 +71,26 @@ func (c *authServiceClient) Refresh(ctx context.Context, in *RefreshRequest, opt
 	return out, nil
 }
 
+func (c *authServiceClient) VerifyToken(ctx context.Context, in *VerifyTokenRequest, opts ...grpc.CallOption) (*VerifyTokenResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(VerifyTokenResponse)
+	err := c.cc.Invoke(ctx, AuthService_VerifyToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *authServiceClient) GetAccountRoleLevel(ctx context.Context, in *GetAccountRoleLevelRequest, opts ...grpc.CallOption) (*GetAccountRoleLevelResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetAccountRoleLevelResponse)
+	err := c.cc.Invoke(ctx, AuthService_GetAccountRoleLevel_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 func (c *authServiceClient) Logout(ctx context.Context, in *LogoutRequest, opts ...grpc.CallOption) (*LogoutResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(LogoutResponse)
@@ -75,6 +101,16 @@ func (c *authServiceClient) Logout(ctx context.Context, in *LogoutRequest, opts
 	return out, nil
 }
 
+func (c *authServiceClient) LogoutAll(ctx context.Context, in *LogoutRequest, opts ...grpc.CallOption) (*LogoutResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(LogoutResponse)
+	err := c.cc.Invoke(ctx, AuthService_LogoutAll_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 func (c *authServiceClient) UnlockPin(ctx context.Context, in *UnlockPinRequest, opts ...grpc.CallOption) (*UnlockPinResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(UnlockPinResponse)
@@ -101,7 +137,10 @@ func (c *authServiceClient) Verify2Fa(ctx context.Context, in *Verify2FaRequest,
 type AuthServiceServer interface {
 	Login(context.Context, *LoginRequest) (*LoginResponse, error)
 	Refresh(context.Context, *RefreshRequest) (*RefreshResponse, error)
+	VerifyToken(context.Context, *VerifyTokenRequest) (*VerifyTokenResponse, error)
+	GetAccountRoleLevel(context.Context, *GetAccountRoleLevelRequest) (*GetAccountRoleLevelResponse, error)
 	Logout(context.Context, *LogoutRequest) (*LogoutResponse, error)
+	LogoutAll(context.Context, *LogoutRequest) (*LogoutResponse, error)
 	UnlockPin(context.Context, *UnlockPinRequest) (*UnlockPinResponse, error)
 	Verify2Fa(context.Context, *Verify2FaRequest) (*Verify2FaResponse, error)
 	mustEmbedUnimplementedAuthServiceServer()
@@ -120,9 +159,18 @@ func (UnimplementedAuthServiceServer) Login(context.Context, *LoginRequest) (*Lo
 func (UnimplementedAuthServiceServer) Refresh(context.Context, *RefreshRequest) (*RefreshResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method Refresh not implemented")
 }
+func (UnimplementedAuthServiceServer) VerifyToken(context.Context, *VerifyTokenRequest) (*VerifyTokenResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method VerifyToken not implemented")
+}
+func (UnimplementedAuthServiceServer) GetAccountRoleLevel(context.Context, *GetAccountRoleLevelRequest) (*GetAccountRoleLevelResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method GetAccountRoleLevel not implemented")
+}
 func (UnimplementedAuthServiceServer) Logout(context.Context, *LogoutRequest) (*LogoutResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method Logout not implemented")
 }
+func (UnimplementedAuthServiceServer) LogoutAll(context.Context, *LogoutRequest) (*LogoutResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method LogoutAll not implemented")
+}
 func (UnimplementedAuthServiceServer) UnlockPin(context.Context, *UnlockPinRequest) (*UnlockPinResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method UnlockPin not implemented")
 }
@@ -186,6 +234,42 @@ func _AuthService_Refresh_Handler(srv interface{}, ctx context.Context, dec func
 	return interceptor(ctx, in, info, handler)
 }
 
+func _AuthService_VerifyToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(VerifyTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(AuthServiceServer).VerifyToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: AuthService_VerifyToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(AuthServiceServer).VerifyToken(ctx, req.(*VerifyTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _AuthService_GetAccountRoleLevel_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetAccountRoleLevelRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(AuthServiceServer).GetAccountRoleLevel(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: AuthService_GetAccountRoleLevel_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(AuthServiceServer).GetAccountRoleLevel(ctx, req.(*GetAccountRoleLevelRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 func _AuthService_Logout_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(LogoutRequest)
 	if err := dec(in); err != nil {
@@ -204,6 +288,24 @@ func _AuthService_Logout_Handler(srv interface{}, ctx context.Context, dec func(
 	return interceptor(ctx, in, info, handler)
 }
 
+func _AuthService_LogoutAll_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(LogoutRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(AuthServiceServer).LogoutAll(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: AuthService_LogoutAll_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(AuthServiceServer).LogoutAll(ctx, req.(*LogoutRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 func _AuthService_UnlockPin_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(UnlockPinRequest)
 	if err := dec(in); err != nil {
@@ -255,10 +357,22 @@ var AuthService_ServiceDesc = grpc.ServiceDesc{
 			MethodName: "Refresh",
 			Handler:    _AuthService_Refresh_Handler,
 		},
+		{
+			MethodName: "VerifyToken",
+			Handler:    _AuthService_VerifyToken_Handler,
+		},
+		{
+			MethodName: "GetAccountRoleLevel",
+			Handler:    _AuthService_GetAccountRoleLevel_Handler,
+		},
 		{
 			MethodName: "Logout",
 			Handler:    _AuthService_Logout_Handler,
 		},
+		{
+			MethodName: "LogoutAll",
+			Handler:    _AuthService_LogoutAll_Handler,
+		},
 		{
 			MethodName: "UnlockPin",
 			Handler:    _AuthService_UnlockPin_Handler,

gen/go/ldap.pb.go

@@ -4,7 +4,7 @@
 // 	protoc        v3.21.12
 // source: ldap.proto
 
-package ldap_service
+package pb
 
 import (
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
@@ -879,7 +879,7 @@ const file_ldap_proto_rawDesc = "" +
 	"\x10ToggleUserStatus\x12!.ldap_service.ToggleStatusRequest\x1a\x1c.ldap_service.StatusResponse\x12H\n" +
 	"\tGetGroups\x12\x1a.ldap_service.EmptyRequest\x1a\x1f.ldap_service.GroupListResponse\x12P\n" +
 	"\x0eAddUserToGroup\x12 .ldap_service.GroupMemberRequest\x1a\x1c.ldap_service.StatusResponse\x12U\n" +
-	"\x13RemoveUserFromGroup\x12 .ldap_service.GroupMemberRequest\x1a\x1c.ldap_service.StatusResponseB<Z:git.lendry.ru/lendry-erp/contracts.git/gen/go;ldap_serviceb\x06proto3"
+	"\x13RemoveUserFromGroup\x12 .ldap_service.GroupMemberRequest\x1a\x1c.ldap_service.StatusResponseB*Z(git.lendry.ru/lendry-erp/proto.git/go;pbb\x06proto3"
 
 var (
 	file_ldap_proto_rawDescOnce sync.Once

gen/go/ldap_grpc.pb.go

@@ -4,7 +4,7 @@
 // - protoc             v3.21.12
 // source: ldap.proto
 
-package ldap_service
+package pb
 
 import (
 	context "context"

gen/identity.ts

@@ -5,6 +5,7 @@
 // source: identity.proto
 
 /* eslint-disable */
+import type { Metadata } from "@grpc/grpc-js";
 import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
 import { Observable } from "rxjs";
 
@@ -43,6 +44,30 @@ export interface LogoutResponse {
   message: string;
 }
 
+export interface VerifyTokenRequest {
+  token: string;
+}
+
+export interface VerifyTokenResponse {
+  isValid: boolean;
+  errorMessage?: string | undefined;
+  id?: string | undefined;
+  username?: string | undefined;
+  roleLevel?: number | undefined;
+  permissions: string[];
+  sessionId?: string | undefined;
+  requiresPin?: boolean | undefined;
+}
+
+export interface GetAccountRoleLevelRequest {
+  accountId: string;
+}
+
+export interface GetAccountRoleLevelResponse {
+  found: boolean;
+  roleLevel: number;
+}
+
 export interface UnlockPinRequest {
   accessToken: string;
   pinCode: string;
@@ -149,32 +174,77 @@ export interface DisableTelegramResponse {
 export const IDENTITY_PACKAGE_NAME = "identity";
 
 export interface AuthServiceClient {
-  login(request: LoginRequest): Observable<LoginResponse>;
+  login(request: LoginRequest, metadata?: Metadata): Observable<LoginResponse>;
 
-  refresh(request: RefreshRequest): Observable<RefreshResponse>;
+  refresh(request: RefreshRequest, metadata?: Metadata): Observable<RefreshResponse>;
 
-  logout(request: LogoutRequest): Observable<LogoutResponse>;
+  verifyToken(request: VerifyTokenRequest, metadata?: Metadata): Observable<VerifyTokenResponse>;
 
-  unlockPin(request: UnlockPinRequest): Observable<UnlockPinResponse>;
+  getAccountRoleLevel(
+    request: GetAccountRoleLevelRequest,
+    metadata?: Metadata,
+  ): Observable<GetAccountRoleLevelResponse>;
 
-  verify2Fa(request: Verify2FaRequest): Observable<Verify2FaResponse>;
+  logout(request: LogoutRequest, metadata?: Metadata): Observable<LogoutResponse>;
+
+  logoutAll(request: LogoutRequest, metadata?: Metadata): Observable<LogoutResponse>;
+
+  unlockPin(request: UnlockPinRequest, metadata?: Metadata): Observable<UnlockPinResponse>;
+
+  verify2Fa(request: Verify2FaRequest, metadata?: Metadata): Observable<Verify2FaResponse>;
 }
 
 export interface AuthServiceController {
-  login(request: LoginRequest): Promise<LoginResponse> | Observable<LoginResponse> | LoginResponse;
+  login(request: LoginRequest, metadata?: Metadata): Promise<LoginResponse> | Observable<LoginResponse> | LoginResponse;
 
-  refresh(request: RefreshRequest): Promise<RefreshResponse> | Observable<RefreshResponse> | RefreshResponse;
+  refresh(
+    request: RefreshRequest,
+    metadata?: Metadata,
+  ): Promise<RefreshResponse> | Observable<RefreshResponse> | RefreshResponse;
 
-  logout(request: LogoutRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
+  verifyToken(
+    request: VerifyTokenRequest,
+    metadata?: Metadata,
+  ): Promise<VerifyTokenResponse> | Observable<VerifyTokenResponse> | VerifyTokenResponse;
 
-  unlockPin(request: UnlockPinRequest): Promise<UnlockPinResponse> | Observable<UnlockPinResponse> | UnlockPinResponse;
+  getAccountRoleLevel(
+    request: GetAccountRoleLevelRequest,
+    metadata?: Metadata,
+  ): Promise<GetAccountRoleLevelResponse> | Observable<GetAccountRoleLevelResponse> | GetAccountRoleLevelResponse;
 
-  verify2Fa(request: Verify2FaRequest): Promise<Verify2FaResponse> | Observable<Verify2FaResponse> | Verify2FaResponse;
+  logout(
+    request: LogoutRequest,
+    metadata?: Metadata,
+  ): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
+
+  logoutAll(
+    request: LogoutRequest,
+    metadata?: Metadata,
+  ): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
+
+  unlockPin(
+    request: UnlockPinRequest,
+    metadata?: Metadata,
+  ): Promise<UnlockPinResponse> | Observable<UnlockPinResponse> | UnlockPinResponse;
+
+  verify2Fa(
+    request: Verify2FaRequest,
+    metadata?: Metadata,
+  ): Promise<Verify2FaResponse> | Observable<Verify2FaResponse> | Verify2FaResponse;
 }
 
 export function AuthServiceControllerMethods() {
   return function (constructor: Function) {
-    const grpcMethods: string[] = ["login", "refresh", "logout", "unlockPin", "verify2Fa"];
+    const grpcMethods: string[] = [
+      "login",
+      "refresh",
+      "verifyToken",
+      "getAccountRoleLevel",
+      "logout",
+      "logoutAll",
+      "unlockPin",
+      "verify2Fa",
+    ];
     for (const method of grpcMethods) {
       const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
       GrpcMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
@@ -190,46 +260,67 @@ export function AuthServiceControllerMethods() {
 export const AUTH_SERVICE_NAME = "AuthService";
 
 export interface TwoFaServiceClient {
-  getTwoFaStatus(request: GetTwoFaStatusRequest): Observable<GetTwoFaStatusResponse>;
+  getTwoFaStatus(request: GetTwoFaStatusRequest, metadata?: Metadata): Observable<GetTwoFaStatusResponse>;
 
-  startTotpEnrollment(request: AuthenticatedAccessRequest): Observable<StartTotpEnrollmentResponse>;
+  startTotpEnrollment(
+    request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
+  ): Observable<StartTotpEnrollmentResponse>;
 
-  confirmTotpErollment(request: ConfirmTotpEnrollmentRequest): Observable<ConfirmTotpEnrollmentResponse>;
+  confirmTotpErollment(
+    request: ConfirmTotpEnrollmentRequest,
+    metadata?: Metadata,
+  ): Observable<ConfirmTotpEnrollmentResponse>;
 
-  cancelTotpEnrollment(request: AuthenticatedAccessRequest): Observable<CancelTotpEnrollmentResponse>;
+  cancelTotpEnrollment(
+    request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
+  ): Observable<CancelTotpEnrollmentResponse>;
 
-  disableTotp(request: DisableTotpRequest): Observable<DisableTotpResponse>;
+  disableTotp(request: DisableTotpRequest, metadata?: Metadata): Observable<DisableTotpResponse>;
 
-  startTelegramEnrollment(request: AuthenticatedAccessRequest): Observable<StartTelegramEnrollmentResponse>;
+  startTelegramEnrollment(
+    request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
+  ): Observable<StartTelegramEnrollmentResponse>;
 
-  confirmTelegramEnrollment(request: ConfirmTelegramEnrollmentRequest): Observable<ConfirmTelegramEnrollmentResponse>;
+  confirmTelegramEnrollment(
+    request: ConfirmTelegramEnrollmentRequest,
+    metadata?: Metadata,
+  ): Observable<ConfirmTelegramEnrollmentResponse>;
 
-  disableTelegram(request: DisableTelegramRequest): Observable<DisableTelegramResponse>;
+  disableTelegram(request: DisableTelegramRequest, metadata?: Metadata): Observable<DisableTelegramResponse>;
 }
 
 export interface TwoFaServiceController {
   getTwoFaStatus(
     request: GetTwoFaStatusRequest,
+    metadata?: Metadata,
   ): Promise<GetTwoFaStatusResponse> | Observable<GetTwoFaStatusResponse> | GetTwoFaStatusResponse;
 
   startTotpEnrollment(
     request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
   ): Promise<StartTotpEnrollmentResponse> | Observable<StartTotpEnrollmentResponse> | StartTotpEnrollmentResponse;
 
   confirmTotpErollment(
     request: ConfirmTotpEnrollmentRequest,
+    metadata?: Metadata,
   ): Promise<ConfirmTotpEnrollmentResponse> | Observable<ConfirmTotpEnrollmentResponse> | ConfirmTotpEnrollmentResponse;
 
   cancelTotpEnrollment(
     request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
   ): Promise<CancelTotpEnrollmentResponse> | Observable<CancelTotpEnrollmentResponse> | CancelTotpEnrollmentResponse;
 
   disableTotp(
     request: DisableTotpRequest,
+    metadata?: Metadata,
   ): Promise<DisableTotpResponse> | Observable<DisableTotpResponse> | DisableTotpResponse;
 
   startTelegramEnrollment(
     request: AuthenticatedAccessRequest,
+    metadata?: Metadata,
   ):
     | Promise<StartTelegramEnrollmentResponse>
     | Observable<StartTelegramEnrollmentResponse>
@@ -237,6 +328,7 @@ export interface TwoFaServiceController {
 
   confirmTelegramEnrollment(
     request: ConfirmTelegramEnrollmentRequest,
+    metadata?: Metadata,
   ):
     | Promise<ConfirmTelegramEnrollmentResponse>
     | Observable<ConfirmTelegramEnrollmentResponse>
@@ -244,6 +336,7 @@ export interface TwoFaServiceController {
 
   disableTelegram(
     request: DisableTelegramRequest,
+    metadata?: Metadata,
   ): Promise<DisableTelegramResponse> | Observable<DisableTelegramResponse> | DisableTelegramResponse;
 }
 

gen/ldap.ts

@@ -5,6 +5,7 @@
 // source: ldap.proto
 
 /* eslint-disable */
+import type { Metadata } from "@grpc/grpc-js";
 import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
 import { Observable } from "rxjs";
 
@@ -136,27 +137,27 @@ export const LDAP_SERVICE_PACKAGE_NAME = "ldap_service";
 export interface LdapAuthClient {
   /** --- Вектор 1: Авторизация (Bind от имени пользователя) --- */
 
-  verifyUser(request: VerifyRequest): Observable<VerifyResponse>;
+  verifyUser(request: VerifyRequest, metadata?: Metadata): Observable<VerifyResponse>;
 
   /** --- Вектор 2: Управление Пользователями (Bind системного аккаунта) --- */
 
-  getUsers(request: EmptyRequest): Observable<UserListResponse>;
+  getUsers(request: EmptyRequest, metadata?: Metadata): Observable<UserListResponse>;
 
-  createUser(request: CreateUserRequest): Observable<StatusResponse>;
+  createUser(request: CreateUserRequest, metadata?: Metadata): Observable<StatusResponse>;
 
-  updateUser(request: UpdateUserRequest): Observable<StatusResponse>;
+  updateUser(request: UpdateUserRequest, metadata?: Metadata): Observable<StatusResponse>;
 
-  changePassword(request: ChangePasswordRequest): Observable<StatusResponse>;
+  changePassword(request: ChangePasswordRequest, metadata?: Metadata): Observable<StatusResponse>;
 
-  toggleUserStatus(request: ToggleStatusRequest): Observable<StatusResponse>;
+  toggleUserStatus(request: ToggleStatusRequest, metadata?: Metadata): Observable<StatusResponse>;
 
   /** --- Вектор 3: Управление Группами --- */
 
-  getGroups(request: EmptyRequest): Observable<GroupListResponse>;
+  getGroups(request: EmptyRequest, metadata?: Metadata): Observable<GroupListResponse>;
 
-  addUserToGroup(request: GroupMemberRequest): Observable<StatusResponse>;
+  addUserToGroup(request: GroupMemberRequest, metadata?: Metadata): Observable<StatusResponse>;
 
-  removeUserFromGroup(request: GroupMemberRequest): Observable<StatusResponse>;
+  removeUserFromGroup(request: GroupMemberRequest, metadata?: Metadata): Observable<StatusResponse>;
 }
 
 /**
@@ -168,28 +169,53 @@ export interface LdapAuthClient {
 export interface LdapAuthController {
   /** --- Вектор 1: Авторизация (Bind от имени пользователя) --- */
 
-  verifyUser(request: VerifyRequest): Promise<VerifyResponse> | Observable<VerifyResponse> | VerifyResponse;
+  verifyUser(
+    request: VerifyRequest,
+    metadata?: Metadata,
+  ): Promise<VerifyResponse> | Observable<VerifyResponse> | VerifyResponse;
 
   /** --- Вектор 2: Управление Пользователями (Bind системного аккаунта) --- */
 
-  getUsers(request: EmptyRequest): Promise<UserListResponse> | Observable<UserListResponse> | UserListResponse;
+  getUsers(
+    request: EmptyRequest,
+    metadata?: Metadata,
+  ): Promise<UserListResponse> | Observable<UserListResponse> | UserListResponse;
 
-  createUser(request: CreateUserRequest): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
+  createUser(
+    request: CreateUserRequest,
+    metadata?: Metadata,
+  ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 
-  updateUser(request: UpdateUserRequest): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
+  updateUser(
+    request: UpdateUserRequest,
+    metadata?: Metadata,
+  ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 
-  changePassword(request: ChangePasswordRequest): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
+  changePassword(
+    request: ChangePasswordRequest,
+    metadata?: Metadata,
+  ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 
-  toggleUserStatus(request: ToggleStatusRequest): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
+  toggleUserStatus(
+    request: ToggleStatusRequest,
+    metadata?: Metadata,
+  ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 
   /** --- Вектор 3: Управление Группами --- */
 
-  getGroups(request: EmptyRequest): Promise<GroupListResponse> | Observable<GroupListResponse> | GroupListResponse;
+  getGroups(
+    request: EmptyRequest,
+    metadata?: Metadata,
+  ): Promise<GroupListResponse> | Observable<GroupListResponse> | GroupListResponse;
 
-  addUserToGroup(request: GroupMemberRequest): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
+  addUserToGroup(
+    request: GroupMemberRequest,
+    metadata?: Metadata,
+  ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 
   removeUserFromGroup(
     request: GroupMemberRequest,
+    metadata?: Metadata,
   ): Promise<StatusResponse> | Observable<StatusResponse> | StatusResponse;
 }
 

package-lock.json

@@ -1,14 +1,15 @@
 {
   "name": "@lendry-erp/contracts",
-  "version": "1.0.2",
+  "version": "1.0.24",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@lendry-erp/contracts",
-      "version": "1.0.2",
+      "version": "1.0.24",
       "dependencies": {
-        "@lendry-erp/contracts": "^1.0.2",
+        "@lendry-erp/contracts": "^1.0.24",
+        "@lendry-erp/passport": "^1.0.3",
         "@nestjs/microservices": "^11.1.17",
         "rxjs": "^7.8.2",
         "ts-proto": "^2.11.6"
@@ -23,7 +24,6 @@
       "resolved": "https://registry.npmjs.org/@borewit/text-codec/-/text-codec-0.2.2.tgz",
       "integrity": "sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==",
       "license": "MIT",
-      "peer": true,
       "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/Borewit"
@@ -36,21 +36,32 @@
       "license": "(Apache-2.0 AND BSD-3-Clause)"
     },
     "node_modules/@lendry-erp/contracts": {
-      "version": "1.0.2",
+      "version": "1.0.24",
-      "resolved": "https://git.lendry.ru/api/packages/lendry-erp/npm/%40lendry-erp%2Fcontracts/-/1.0.2/contracts-1.0.2.tgz",
+      "resolved": "https://git.lendry.ru/api/packages/lendry-erp/npm/%40lendry-erp%2Fcontracts/-/1.0.24/contracts-1.0.24.tgz",
-      "integrity": "sha512-39NulQ6mn3dmrX/GXwzYYPyX/rE+4gO1En+uJJR9bHXZ3awWi0U3drIvgwM25gyi829Ae0U8vVtzMaP3gON90A==",
+      "integrity": "sha512-Bn4RgU22O6IDFhYEbQicBLpRtSGHrEgqOSAljQh4lT5shMeLedlE0V3jFxzFu9xpyTzcM/o+C96vpsAHab0tbg==",
       "dependencies": {
         "@nestjs/microservices": "^11.1.17",
         "rxjs": "^7.8.2",
         "ts-proto": "^2.11.6"
       }
     },
+    "node_modules/@lendry-erp/passport": {
+      "version": "1.0.3",
+      "resolved": "https://git.lendry.ru/api/packages/lendry-erp/npm/%40lendry-erp%2Fpassport/-/1.0.3/passport-1.0.3.tgz",
+      "integrity": "sha512-gaPdlZahkXmOUnLBlzNdk41nJ1BI6TPZY5xUaCmlIkpqZKr8D5TSBBkFrw4Vlw+TLImqL2Y1JUT4k60gHHtjiw==",
+      "license": "ISC",
+      "dependencies": {
+        "@nestjs/common": "^11.1.17",
+        "@nestjs/core": "^11.1.17",
+        "reflect-metadata": "^0.2.2",
+        "rxjs": "^7.8.2"
+      }
+    },
     "node_modules/@lukeed/csprng": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@lukeed/csprng/-/csprng-1.1.0.tgz",
       "integrity": "sha512-Z7C/xXCiGWsg0KuKsHTKJxbWhpI3Vs5GwLfOean7MGyVFGqdRgBbAjOCh6u4bbjPc/8MJ2pZmK/0DLdCbivLDA==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=8"
       }
@@ -60,7 +71,6 @@
       "resolved": "https://registry.npmjs.org/@nestjs/common/-/common-11.1.17.tgz",
       "integrity": "sha512-hLODw5Abp8OQgA+mUO4tHou4krKgDtUcM9j5Ihxncst9XeyxYBTt2bwZm4e4EQr5E352S4Fyy6V3iFx9ggxKAg==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "file-type": "21.3.2",
         "iterare": "1.2.1",
@@ -93,7 +103,6 @@
       "integrity": "sha512-lD5mAYekTTurF3vDaa8C2OKPnjiz4tsfxIc5XlcSUzOhkwWf6Ay3HKvt6FmvuWQam6uIIHX52Clg+e6tAvf/cg==",
       "hasInstallScript": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@nuxt/opencollective": "0.4.1",
         "fast-safe-stringify": "2.1.1",
@@ -192,7 +201,6 @@
       "resolved": "https://registry.npmjs.org/@nuxt/opencollective/-/opencollective-0.4.1.tgz",
       "integrity": "sha512-GXD3wy50qYbxCJ652bDrDzgMr3NFEkIS374+IgFQKkCvk9yiYcLvX2XDYr7UyQxf4wK0e+yqDYRubZ0DtOxnmQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "consola": "^3.2.3"
       },
@@ -209,7 +217,6 @@
       "resolved": "https://registry.npmjs.org/@tokenizer/inflate/-/inflate-0.4.1.tgz",
       "integrity": "sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "debug": "^4.4.3",
         "token-types": "^6.1.1"
@@ -226,8 +233,7 @@
       "version": "0.3.0",
       "resolved": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz",
       "integrity": "sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==",
-      "license": "MIT",
+      "license": "MIT"
-      "peer": true
     },
     "node_modules/@types/node": {
       "version": "25.5.0",
@@ -256,7 +262,6 @@
       "resolved": "https://registry.npmjs.org/consola/-/consola-3.4.2.tgz",
       "integrity": "sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": "^14.18.0 || >=16.10.0"
       }
@@ -266,7 +271,6 @@
       "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
       "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "ms": "^2.1.3"
       },
@@ -304,15 +308,13 @@
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/fast-safe-stringify/-/fast-safe-stringify-2.1.1.tgz",
       "integrity": "sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==",
-      "license": "MIT",
+      "license": "MIT"
-      "peer": true
     },
     "node_modules/file-type": {
       "version": "21.3.2",
       "resolved": "https://registry.npmjs.org/file-type/-/file-type-21.3.2.tgz",
       "integrity": "sha512-DLkUvGwep3poOV2wpzbHCOnSKGk1LzyXTv+aHFgN2VFl96wnp8YA9YjO2qPzg5PuL8q/SW9Pdi6WTkYOIh995w==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@tokenizer/inflate": "^0.4.1",
         "strtok3": "^10.3.4",
@@ -344,8 +346,7 @@
           "url": "https://feross.org/support"
         }
       ],
-      "license": "BSD-3-Clause",
+      "license": "BSD-3-Clause"
-      "peer": true
     },
     "node_modules/iterare": {
       "version": "1.2.1",
@@ -371,7 +372,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=13.2.0"
       }
@@ -380,15 +380,13 @@
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "license": "MIT",
+      "license": "MIT"
-      "peer": true
     },
     "node_modules/path-to-regexp": {
       "version": "8.3.0",
       "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz",
       "integrity": "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==",
       "license": "MIT",
-      "peer": true,
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/express"
@@ -398,8 +396,7 @@
       "version": "0.2.2",
       "resolved": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.2.2.tgz",
       "integrity": "sha512-urBwgfrvVP/eAyXx4hluJivBKzuEbSQs9rKWCrCkbSxNv8mxPcUZKeuoF3Uy4mJl3Lwprp6yy5/39VWigZ4K6Q==",
-      "license": "Apache-2.0",
+      "license": "Apache-2.0"
-      "peer": true
     },
     "node_modules/rxjs": {
       "version": "7.8.2",
@@ -415,7 +412,6 @@
       "resolved": "https://registry.npmjs.org/strtok3/-/strtok3-10.3.5.tgz",
       "integrity": "sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@tokenizer/token": "^0.3.0"
       },
@@ -432,7 +428,6 @@
       "resolved": "https://registry.npmjs.org/token-types/-/token-types-6.1.2.tgz",
       "integrity": "sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@borewit/text-codec": "^0.2.1",
         "@tokenizer/token": "^0.3.0",
@@ -504,7 +499,6 @@
       "resolved": "https://registry.npmjs.org/uid/-/uid-2.0.2.tgz",
       "integrity": "sha512-u3xV3X7uzvi5b1MncmZo3i2Aw222Zk1keqLA1YkHldREkAhAqi65wuPfe7lHx8H/Wzy+8CE7S7uS3jekIM5s8g==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@lukeed/csprng": "^1.0.0"
       },
@@ -517,7 +511,6 @@
       "resolved": "https://registry.npmjs.org/uint8array-extras/-/uint8array-extras-1.5.0.tgz",
       "integrity": "sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=18"
       },

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lendry-erp/contracts",
-  "version": "1.0.21",
+  "version": "1.0.27",
   "description": "Protobuf definitions and generated TypeScript types",
   "type": "commonjs",
   "main": "./dist/index.js",
@@ -17,6 +17,8 @@
     "access": "public"
   },
   "dependencies": {
+    "@lendry-erp/contracts": "^1.0.24",
+    "@lendry-erp/passport": "^1.0.3",
     "@nestjs/microservices": "^11.1.17",
     "rxjs": "^7.8.2",
     "ts-proto": "^2.11.6"

proto/identity.proto

@@ -7,7 +7,10 @@ option go_package = "git.lendry.ru/lendry-erp/proto.git/go;pb";
 service AuthService {
     rpc Login (LoginRequest) returns (LoginResponse);
     rpc Refresh (RefreshRequest) returns (RefreshResponse);
+    rpc VerifyToken (VerifyTokenRequest) returns (VerifyTokenResponse);
+    rpc GetAccountRoleLevel (GetAccountRoleLevelRequest) returns (GetAccountRoleLevelResponse);
     rpc Logout (LogoutRequest) returns (LogoutResponse);
+    rpc LogoutAll (LogoutRequest) returns (LogoutResponse);
     rpc UnlockPin (UnlockPinRequest) returns (UnlockPinResponse);
     rpc Verify2Fa (Verify2FaRequest) returns (Verify2FaResponse);
 }
@@ -56,6 +59,30 @@ message LogoutResponse {
   string message = 2;
 }
 
+message VerifyTokenRequest {
+  string token = 1;
+}
+
+message VerifyTokenResponse {
+  bool is_valid = 1;
+  optional string error_message = 2;
+  optional string id = 3;
+  optional string username = 4;
+  optional int32 role_level = 5;
+  repeated string permissions = 6;
+  optional string session_id = 7;
+  optional bool requires_pin = 8;
+}
+
+message GetAccountRoleLevelRequest {
+  string account_id = 1;
+}
+
+message GetAccountRoleLevelResponse {
+  bool found = 1;
+  int32 role_level = 2;
+}
+
 message UnlockPinRequest {
   string access_token = 1;
   string pin_code = 2;