fix and update

apps/sso-core/src/domain/auth.service.ts

@@ -16,6 +16,7 @@ import { NotificationsService } from './notifications.service';
 import { canonicalPhoneE164, phoneLookupVariants } from '../infra/phone.util';
 import { TotpService } from './totp.service';
 import { RbacService } from './rbac.service';
+import { DEFAULT_VERIFICATION_ICON, resolveVerificationIcon } from './verification.constants';
 
 const FIRST_ADMIN_LOCK = 'locks:first-super-admin';
 const TOTP_LOGIN_CHALLENGE_TTL_SECONDS = 5 * 60;
@@ -765,7 +766,7 @@ export class AuthService {
     return this.toPublicUser(user);
   }
 
-  async toPublicUser(user: Pick<User, 'id' | 'email' | 'phone' | 'backupEmail' | 'backupPhone' | 'displayName' | 'username' | 'avatarUrl' | 'avatarStorageKey' | 'isSuperAdmin' | 'status' | 'passwordHash'>): Promise<PublicUser> {
+  async toPublicUser(user: Pick<User, 'id' | 'email' | 'phone' | 'backupEmail' | 'backupPhone' | 'displayName' | 'username' | 'avatarUrl' | 'avatarStorageKey' | 'isSuperAdmin' | 'isVerified' | 'verificationIcon' | 'status' | 'passwordHash'>): Promise<PublicUser> {
     const access = await this.access.getUserAccess(user.id, user.isSuperAdmin);
     return {
       id: user.id,
@@ -778,6 +779,8 @@ export class AuthService {
       avatarUrl: user.avatarUrl,
       hasAvatar: Boolean(user.avatarStorageKey || user.avatarUrl),
       isSuperAdmin: user.isSuperAdmin,
+      isVerified: user.isVerified,
+      verificationIcon: user.isVerified ? resolveVerificationIcon(user.verificationIcon) : undefined,
       status: user.status,
       hasPassword: Boolean(user.passwordHash),
       roles: access.roles,
@@ -791,7 +794,8 @@ export class AuthService {
       canManageAllUsers: access.canManageAllUsers,
       canManageSettings: access.canManageSettings,
       canViewUsers: access.canViewUsers,
-      canViewUserDocuments: access.canViewUserDocuments
+      canViewUserDocuments: access.canViewUserDocuments,
+      canVerifyUsers: access.canVerifyUsers
     };
   }