added backup and email client

backend/src/services/user.service.ts

@@ -134,10 +134,11 @@ export async function createUser(data: {
   lastName: string;
   roleIds: number[];
   customerId?: number;
+  hasDeveloperAccess?: boolean;
 }) {
   const hashedPassword = await bcrypt.hash(data.password, 10);
 
-  return prisma.user.create({
+  const user = await prisma.user.create({
     data: {
       email: data.email,
       password: hashedPassword,
@@ -160,6 +161,13 @@ export async function createUser(data: {
       },
     },
   });
+
+  // Entwicklerzugriff setzen falls aktiviert
+  if (data.hasDeveloperAccess) {
+    await setUserDeveloperAccess(user.id, true);
+  }
+
+  return user;
 }
 
 export async function updateUser(
@@ -270,10 +278,28 @@ export async function updateUser(
     (userData as Record<string, unknown>).password = await bcrypt.hash(password, 10);
   }
 
-  // Update user
+  // Prüfen ob Rollen geändert werden (für Zwangslogout)
+  let rolesChanged = false;
+  if (roleIds !== undefined) {
+    const currentRoles = await prisma.userRole.findMany({
+      where: { userId: id },
+      select: { roleId: true },
+    });
+    const currentRoleIds = currentRoles.map((r) => r.roleId).sort();
+    const newRoleIds = [...roleIds].sort();
+    rolesChanged =
+      currentRoleIds.length !== newRoleIds.length ||
+      !currentRoleIds.every((id, i) => id === newRoleIds[i]);
+  }
+
+  // Update user - bei Rollenänderung Token invalidieren
   await prisma.user.update({
     where: { id },
-    data: userData,
+    data: {
+      ...userData,
+      // Token invalidieren wenn Rollen geändert werden
+      ...(rolesChanged && { tokenInvalidatedAt: new Date() }),
+    },
   });
 
   // Update roles if provided
@@ -338,12 +364,22 @@ async function setUserDeveloperAccess(userId: number, enabled: boolean) {
     await prisma.userRole.create({
       data: { userId, roleId: developerRole.id },
     });
+    // Token invalidieren bei Rechteänderung
+    await prisma.user.update({
+      where: { id: userId },
+      data: { tokenInvalidatedAt: new Date() },
+    });
   } else if (!enabled && hasRole) {
     // Remove Developer role
     console.log('Removing Developer role');
     await prisma.userRole.delete({
       where: { userId_roleId: { userId, roleId: developerRole.id } },
     });
+    // Token invalidieren bei Rechteänderung
+    await prisma.user.update({
+      where: { id: userId },
+      data: { tokenInvalidatedAt: new Date() },
+    });
   } else {
     console.log('No action needed - enabled:', enabled, 'hasRole:', !!hasRole);
   }