From 73b57164ab8bd6b46e88c2e0a0f7d38bc60df94b Mon Sep 17 00:00:00 2001
From: LittleSheep <littlesheep.code@hotmail.com>
Date: Fri, 17 May 2024 19:53:47 +0800
Subject: [PATCH] :sparkles: Bug fixes of permission check

---
 .../74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml  | 361 +++++++++---------
 .../schema/public.abK9xQ.meta                 |   2 +-
 .idea/workspace.xml                           |  32 +-
 pkg/services/auth.go                          |  17 +-
 pkg/services/perms.go                         |   5 +-
 5 files changed, 215 insertions(+), 202 deletions(-)

diff --git a/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml b/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml
index 0fad7f5..548fa8f 100644
--- a/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml
+++ b/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml
@@ -11,9 +11,9 @@
 4||10|c|G
 4||10|C|G
 4||10|T|G</Grants>
-      <IntrospectionStateNumber>6992</IntrospectionStateNumber>
+      <IntrospectionStateNumber>7186</IntrospectionStateNumber>
       <ServerVersion>16.2</ServerVersion>
-      <StartupTime>1714636069</StartupTime>
+      <StartupTime>1715783487</StartupTime>
       <TimeZones>true ACDT
 true ACSST
 false ACST
@@ -808,7 +808,7 @@ false Zulu
 13474||10|C|G
 13474||-9223372036854775808|U|G
 13474||10|U|G</Grants>
-      <IntrospectionStateNumber>6992</IntrospectionStateNumber>
+      <IntrospectionStateNumber>7186</IntrospectionStateNumber>
       <ObjectId>37312</ObjectId>
       <OwnerName>postgres</OwnerName>
     </database>
@@ -838,50 +838,50 @@ false Zulu
       <Replication>1</Replication>
       <SuperRole>1</SuperRole>
     </role>
-    <role id="8" parent="1" name="pg_database_owner">
+    <role id="8" parent="1" name="pg_checkpoint">
+      <ObjectId>4544</ObjectId>
+    </role>
+    <role id="9" parent="1" name="pg_create_subscription">
+      <ObjectId>6304</ObjectId>
+    </role>
+    <role id="10" parent="1" name="pg_database_owner">
       <ObjectId>6171</ObjectId>
     </role>
-    <role id="9" parent="1" name="pg_read_all_data">
-      <ObjectId>6181</ObjectId>
+    <role id="11" parent="1" name="pg_execute_server_program">
+      <ObjectId>4571</ObjectId>
     </role>
-    <role id="10" parent="1" name="pg_write_all_data">
-      <ObjectId>6182</ObjectId>
-    </role>
-    <role id="11" parent="1" name="pg_monitor">
+    <role id="12" parent="1" name="pg_monitor">
       <ObjectId>3373</ObjectId>
       <RoleGrants>3374
 3375
 3377</RoleGrants>
     </role>
-    <role id="12" parent="1" name="pg_read_all_settings">
+    <role id="13" parent="1" name="pg_read_all_data">
+      <ObjectId>6181</ObjectId>
+    </role>
+    <role id="14" parent="1" name="pg_read_all_settings">
       <ObjectId>3374</ObjectId>
     </role>
-    <role id="13" parent="1" name="pg_read_all_stats">
+    <role id="15" parent="1" name="pg_read_all_stats">
       <ObjectId>3375</ObjectId>
     </role>
-    <role id="14" parent="1" name="pg_stat_scan_tables">
-      <ObjectId>3377</ObjectId>
-    </role>
-    <role id="15" parent="1" name="pg_read_server_files">
+    <role id="16" parent="1" name="pg_read_server_files">
       <ObjectId>4569</ObjectId>
     </role>
-    <role id="16" parent="1" name="pg_write_server_files">
-      <ObjectId>4570</ObjectId>
-    </role>
-    <role id="17" parent="1" name="pg_execute_server_program">
-      <ObjectId>4571</ObjectId>
-    </role>
-    <role id="18" parent="1" name="pg_signal_backend">
+    <role id="17" parent="1" name="pg_signal_backend">
       <ObjectId>4200</ObjectId>
     </role>
-    <role id="19" parent="1" name="pg_checkpoint">
-      <ObjectId>4544</ObjectId>
+    <role id="18" parent="1" name="pg_stat_scan_tables">
+      <ObjectId>3377</ObjectId>
     </role>
-    <role id="20" parent="1" name="pg_use_reserved_connections">
+    <role id="19" parent="1" name="pg_use_reserved_connections">
       <ObjectId>4550</ObjectId>
     </role>
-    <role id="21" parent="1" name="pg_create_subscription">
-      <ObjectId>6304</ObjectId>
+    <role id="20" parent="1" name="pg_write_all_data">
+      <ObjectId>6182</ObjectId>
+    </role>
+    <role id="21" parent="1" name="pg_write_server_files">
+      <ObjectId>4570</ObjectId>
     </role>
     <role id="22" parent="1" name="postgres">
       <CanLogin>1</CanLogin>
@@ -4249,8 +4249,8 @@ false Zulu
     <schema id="268" parent="2" name="public">
       <Comment>standard public schema</Comment>
       <Current>1</Current>
-      <IntrospectionStateNumber>6992</IntrospectionStateNumber>
-      <LastIntrospectionLocalTimestamp>2024-05-05.03:46:49</LastIntrospectionLocalTimestamp>
+      <IntrospectionStateNumber>7186</IntrospectionStateNumber>
+      <LastIntrospectionLocalTimestamp>2024-05-17.11:41:59</LastIntrospectionLocalTimestamp>
       <ObjectId>2200</ObjectId>
       <StateNumber>523</StateNumber>
       <OwnerName>pg_database_owner</OwnerName>
@@ -4393,7 +4393,7 @@ false Zulu
     </table>
     <table id="287" parent="268" name="passport_accounts">
       <ObjectId>37314</ObjectId>
-      <StateNumber>6227</StateNumber>
+      <StateNumber>7177</StateNumber>
       <AccessMethodId>2</AccessMethodId>
       <OwnerName>littlesheep</OwnerName>
     </table>
@@ -4423,7 +4423,7 @@ false Zulu
     </table>
     <table id="292" parent="268" name="passport_notification_subscribers">
       <ObjectId>37510</ObjectId>
-      <StateNumber>6251</StateNumber>
+      <StateNumber>7011</StateNumber>
       <AccessMethodId>2</AccessMethodId>
       <OwnerName>littlesheep</OwnerName>
     </table>
@@ -4881,7 +4881,13 @@ false Zulu
       <StateNumber>6224</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <index id="362" parent="287" name="passport_accounts_pkey">
+    <column id="362" parent="287" name="perm_nodes">
+      <DasType>jsonb|0s</DasType>
+      <Position>12</Position>
+      <StateNumber>7177</StateNumber>
+      <TypeId>3802</TypeId>
+    </column>
+    <index id="363" parent="287" name="passport_accounts_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37320</ObjectId>
@@ -4890,7 +4896,7 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="363" parent="287" name="idx_passport_accounts_name">
+    <index id="364" parent="287" name="idx_passport_accounts_name">
       <ColNames>name</ColNames>
       <ObjectId>37322</ObjectId>
       <StateNumber>6225</StateNumber>
@@ -4900,20 +4906,20 @@ false Zulu
       <CollationIds>100</CollationIds>
       <CollationParentNames>pg_catalog</CollationParentNames>
     </index>
-    <index id="364" parent="287" name="idx_passport_accounts_deleted_at">
+    <index id="365" parent="287" name="idx_passport_accounts_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37323</ObjectId>
       <StateNumber>6226</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="365" parent="287" name="passport_accounts_pkey">
+    <key id="366" parent="287" name="passport_accounts_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37321</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6224</StateNumber>
       <UnderlyingIndexId>37320</UnderlyingIndexId>
     </key>
-    <column id="366" parent="288" name="id">
+    <column id="367" parent="288" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_action_events_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -4922,68 +4928,68 @@ false Zulu
       <SequenceId>37474</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="367" parent="288" name="created_at">
+    <column id="368" parent="288" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="368" parent="288" name="updated_at">
+    <column id="369" parent="288" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="369" parent="288" name="deleted_at">
+    <column id="370" parent="288" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="370" parent="288" name="type">
+    <column id="371" parent="288" name="type">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="371" parent="288" name="target">
+    <column id="372" parent="288" name="target">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="372" parent="288" name="location">
+    <column id="373" parent="288" name="location">
       <DasType>text|0s</DasType>
       <Position>7</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="373" parent="288" name="ip_address">
+    <column id="374" parent="288" name="ip_address">
       <DasType>text|0s</DasType>
       <Position>8</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="374" parent="288" name="user_agent">
+    <column id="375" parent="288" name="user_agent">
       <DasType>text|0s</DasType>
       <Position>9</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="375" parent="288" name="account_id">
+    <column id="376" parent="288" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>10</Position>
       <StateNumber>6247</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="376" parent="288" name="fk_passport_accounts_events">
+    <foreign-key id="377" parent="288" name="fk_passport_accounts_events">
       <ColNames>account_id</ColNames>
       <ObjectId>37483</ObjectId>
       <StateNumber>6247</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="377" parent="288" name="passport_action_events_pkey">
+    <index id="378" parent="288" name="passport_action_events_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37481</ObjectId>
@@ -4992,20 +4998,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="378" parent="288" name="idx_passport_action_events_deleted_at">
+    <index id="379" parent="288" name="idx_passport_action_events_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37488</ObjectId>
       <StateNumber>6248</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="379" parent="288" name="passport_action_events_pkey">
+    <key id="380" parent="288" name="passport_action_events_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37482</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6247</StateNumber>
       <UnderlyingIndexId>37481</UnderlyingIndexId>
     </key>
-    <column id="380" parent="289" name="id">
+    <column id="381" parent="289" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_auth_factors_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5014,56 +5020,56 @@ false Zulu
       <SequenceId>37324</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="381" parent="289" name="created_at">
+    <column id="382" parent="289" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="382" parent="289" name="updated_at">
+    <column id="383" parent="289" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="383" parent="289" name="deleted_at">
+    <column id="384" parent="289" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="384" parent="289" name="type">
+    <column id="385" parent="289" name="type">
       <DasType>smallint|0s</DasType>
       <Position>5</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>21</TypeId>
     </column>
-    <column id="385" parent="289" name="secret">
+    <column id="386" parent="289" name="secret">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="386" parent="289" name="config">
+    <column id="387" parent="289" name="config">
       <DasType>jsonb|0s</DasType>
       <Position>7</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="387" parent="289" name="account_id">
+    <column id="388" parent="289" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>8</Position>
       <StateNumber>6227</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="388" parent="289" name="fk_passport_accounts_factors">
+    <foreign-key id="389" parent="289" name="fk_passport_accounts_factors">
       <ColNames>account_id</ColNames>
       <ObjectId>37333</ObjectId>
       <StateNumber>6227</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="389" parent="289" name="passport_auth_factors_pkey">
+    <index id="390" parent="289" name="passport_auth_factors_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37331</ObjectId>
@@ -5072,20 +5078,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="390" parent="289" name="idx_passport_auth_factors_deleted_at">
+    <index id="391" parent="289" name="idx_passport_auth_factors_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37338</ObjectId>
       <StateNumber>6228</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="391" parent="289" name="passport_auth_factors_pkey">
+    <key id="392" parent="289" name="passport_auth_factors_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37332</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6227</StateNumber>
       <UnderlyingIndexId>37331</UnderlyingIndexId>
     </key>
-    <column id="392" parent="290" name="id">
+    <column id="393" parent="290" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_auth_tickets_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5094,136 +5100,136 @@ false Zulu
       <SequenceId>37526</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="393" parent="290" name="created_at">
+    <column id="394" parent="290" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="394" parent="290" name="updated_at">
+    <column id="395" parent="290" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="395" parent="290" name="deleted_at">
+    <column id="396" parent="290" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="396" parent="290" name="location">
+    <column id="397" parent="290" name="location">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="397" parent="290" name="ip_address">
+    <column id="398" parent="290" name="ip_address">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="398" parent="290" name="user_agent">
+    <column id="399" parent="290" name="user_agent">
       <DasType>text|0s</DasType>
       <Position>7</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="399" parent="290" name="require_mfa">
+    <column id="400" parent="290" name="require_mfa">
       <DasType>boolean|0s</DasType>
       <Position>8</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="400" parent="290" name="require_authenticate">
+    <column id="401" parent="290" name="require_authenticate">
       <DasType>boolean|0s</DasType>
       <Position>9</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="401" parent="290" name="claims">
+    <column id="402" parent="290" name="claims">
       <DasType>jsonb|0s</DasType>
       <Position>10</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="402" parent="290" name="audiences">
+    <column id="403" parent="290" name="audiences">
       <DasType>jsonb|0s</DasType>
       <Position>11</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="403" parent="290" name="grant_token">
+    <column id="404" parent="290" name="grant_token">
       <DasType>text|0s</DasType>
       <Position>12</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="404" parent="290" name="access_token">
+    <column id="405" parent="290" name="access_token">
       <DasType>text|0s</DasType>
       <Position>13</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="405" parent="290" name="refresh_token">
+    <column id="406" parent="290" name="refresh_token">
       <DasType>text|0s</DasType>
       <Position>14</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="406" parent="290" name="expired_at">
+    <column id="407" parent="290" name="expired_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>15</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="407" parent="290" name="available_at">
+    <column id="408" parent="290" name="available_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>16</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="408" parent="290" name="last_grant_at">
+    <column id="409" parent="290" name="last_grant_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>17</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="409" parent="290" name="client_id">
+    <column id="410" parent="290" name="client_id">
       <DasType>bigint|0s</DasType>
       <Position>18</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <column id="410" parent="290" name="account_id">
+    <column id="411" parent="290" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>19</Position>
       <StateNumber>6259</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="411" parent="290" name="fk_passport_third_clients_sessions">
+    <foreign-key id="412" parent="290" name="fk_passport_third_clients_sessions">
       <ColNames>client_id</ColNames>
       <ObjectId>37540</ObjectId>
       <StateNumber>6259</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37404</RefTableId>
     </foreign-key>
-    <foreign-key id="412" parent="290" name="fk_passport_accounts_sessions">
+    <foreign-key id="413" parent="290" name="fk_passport_accounts_sessions">
       <ColNames>account_id</ColNames>
       <ObjectId>37535</ObjectId>
       <StateNumber>6259</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <foreign-key id="413" parent="290" name="fk_passport_accounts_tickets">
+    <foreign-key id="414" parent="290" name="fk_passport_accounts_tickets">
       <ColNames>account_id</ColNames>
       <ObjectId>37546</ObjectId>
       <StateNumber>6301</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="414" parent="290" name="passport_auth_tickets_pkey">
+    <index id="415" parent="290" name="passport_auth_tickets_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37533</ObjectId>
@@ -5232,20 +5238,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="415" parent="290" name="idx_passport_auth_tickets_deleted_at">
+    <index id="416" parent="290" name="idx_passport_auth_tickets_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37545</ObjectId>
       <StateNumber>6260</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="416" parent="290" name="passport_auth_tickets_pkey">
+    <key id="417" parent="290" name="passport_auth_tickets_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37534</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6259</StateNumber>
       <UnderlyingIndexId>37533</UnderlyingIndexId>
     </key>
-    <column id="417" parent="291" name="id">
+    <column id="418" parent="291" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_magic_tokens_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5254,56 +5260,56 @@ false Zulu
       <SequenceId>37459</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="418" parent="291" name="created_at">
+    <column id="419" parent="291" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="419" parent="291" name="updated_at">
+    <column id="420" parent="291" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="420" parent="291" name="deleted_at">
+    <column id="421" parent="291" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="421" parent="291" name="code">
+    <column id="422" parent="291" name="code">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="422" parent="291" name="type">
+    <column id="423" parent="291" name="type">
       <DasType>smallint|0s</DasType>
       <Position>6</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>21</TypeId>
     </column>
-    <column id="423" parent="291" name="assign_to">
+    <column id="424" parent="291" name="assign_to">
       <DasType>bigint|0s</DasType>
       <Position>7</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <column id="424" parent="291" name="expired_at">
+    <column id="425" parent="291" name="expired_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>8</Position>
       <StateNumber>6245</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <foreign-key id="425" parent="291" name="fk_passport_accounts_magic_tokens">
+    <foreign-key id="426" parent="291" name="fk_passport_accounts_magic_tokens">
       <ColNames>assign_to</ColNames>
       <ObjectId>37468</ObjectId>
       <StateNumber>6245</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="426" parent="291" name="passport_magic_tokens_pkey">
+    <index id="427" parent="291" name="passport_magic_tokens_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37466</ObjectId>
@@ -5312,20 +5318,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="427" parent="291" name="idx_passport_magic_tokens_deleted_at">
+    <index id="428" parent="291" name="idx_passport_magic_tokens_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37473</ObjectId>
       <StateNumber>6246</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="428" parent="291" name="passport_magic_tokens_pkey">
+    <key id="429" parent="291" name="passport_magic_tokens_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37467</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6245</StateNumber>
       <UnderlyingIndexId>37466</UnderlyingIndexId>
     </key>
-    <column id="429" parent="292" name="id">
+    <column id="430" parent="292" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_notification_subscribers_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5334,56 +5340,62 @@ false Zulu
       <SequenceId>37509</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="430" parent="292" name="created_at">
+    <column id="431" parent="292" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="431" parent="292" name="updated_at">
+    <column id="432" parent="292" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="432" parent="292" name="deleted_at">
+    <column id="433" parent="292" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="433" parent="292" name="user_agent">
+    <column id="434" parent="292" name="user_agent">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="434" parent="292" name="provider">
+    <column id="435" parent="292" name="provider">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="435" parent="292" name="device_id">
+    <column id="436" parent="292" name="device_id">
       <DasType>text|0s</DasType>
       <Position>7</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="436" parent="292" name="account_id">
+    <column id="437" parent="292" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>8</Position>
       <StateNumber>6251</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="437" parent="292" name="fk_passport_accounts_notify_subscribers">
+    <column id="438" parent="292" name="device_token">
+      <DasType>text|0s</DasType>
+      <Position>9</Position>
+      <StateNumber>7011</StateNumber>
+      <TypeId>25</TypeId>
+    </column>
+    <foreign-key id="439" parent="292" name="fk_passport_accounts_notify_subscribers">
       <ColNames>account_id</ColNames>
       <ObjectId>37518</ObjectId>
       <StateNumber>6251</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="438" parent="292" name="passport_notification_subscribers_pkey">
+    <index id="440" parent="292" name="passport_notification_subscribers_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37516</ObjectId>
@@ -5392,7 +5404,7 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="439" parent="292" name="idx_passport_notification_subscribers_device_id">
+    <index id="441" parent="292" name="idx_passport_notification_subscribers_device_id">
       <ColNames>device_id</ColNames>
       <ObjectId>37523</ObjectId>
       <StateNumber>6252</StateNumber>
@@ -5402,20 +5414,20 @@ false Zulu
       <CollationIds>100</CollationIds>
       <CollationParentNames>pg_catalog</CollationParentNames>
     </index>
-    <index id="440" parent="292" name="idx_passport_notification_subscribers_deleted_at">
+    <index id="442" parent="292" name="idx_passport_notification_subscribers_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37524</ObjectId>
       <StateNumber>6253</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="441" parent="292" name="passport_notification_subscribers_pkey">
+    <key id="443" parent="292" name="passport_notification_subscribers_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37517</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6251</StateNumber>
       <UnderlyingIndexId>37516</UnderlyingIndexId>
     </key>
-    <column id="442" parent="293" name="id">
+    <column id="444" parent="293" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_notifications_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5424,81 +5436,81 @@ false Zulu
       <SequenceId>37489</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="443" parent="293" name="created_at">
+    <column id="445" parent="293" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="444" parent="293" name="updated_at">
+    <column id="446" parent="293" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="445" parent="293" name="deleted_at">
+    <column id="447" parent="293" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="446" parent="293" name="subject">
+    <column id="448" parent="293" name="subject">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="447" parent="293" name="content">
+    <column id="449" parent="293" name="content">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="448" parent="293" name="links">
+    <column id="450" parent="293" name="links">
       <DasType>jsonb|0s</DasType>
       <Position>7</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="449" parent="293" name="is_important">
+    <column id="451" parent="293" name="is_important">
       <DasType>boolean|0s</DasType>
       <Position>8</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="450" parent="293" name="read_at">
+    <column id="452" parent="293" name="read_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>9</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="451" parent="293" name="sender_id">
+    <column id="453" parent="293" name="sender_id">
       <DasType>bigint|0s</DasType>
       <Position>10</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <column id="452" parent="293" name="recipient_id">
+    <column id="454" parent="293" name="recipient_id">
       <DasType>bigint|0s</DasType>
       <Position>11</Position>
       <StateNumber>6249</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="453" parent="293" name="fk_passport_third_clients_notifications">
+    <foreign-key id="455" parent="293" name="fk_passport_third_clients_notifications">
       <ColNames>sender_id</ColNames>
       <ObjectId>37498</ObjectId>
       <StateNumber>6249</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37404</RefTableId>
     </foreign-key>
-    <foreign-key id="454" parent="293" name="fk_passport_accounts_notifications">
+    <foreign-key id="456" parent="293" name="fk_passport_accounts_notifications">
       <ColNames>recipient_id</ColNames>
       <ObjectId>37503</ObjectId>
       <StateNumber>6249</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="455" parent="293" name="passport_notifications_pkey">
+    <index id="457" parent="293" name="passport_notifications_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37496</ObjectId>
@@ -5507,20 +5519,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="456" parent="293" name="idx_passport_notifications_deleted_at">
+    <index id="458" parent="293" name="idx_passport_notifications_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37508</ObjectId>
       <StateNumber>6250</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="457" parent="293" name="passport_notifications_pkey">
+    <key id="459" parent="293" name="passport_notifications_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37497</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6249</StateNumber>
       <UnderlyingIndexId>37496</UnderlyingIndexId>
     </key>
-    <column id="458" parent="294" name="id">
+    <column id="460" parent="294" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_realm_members_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5529,57 +5541,64 @@ false Zulu
       <SequenceId>37562</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="459" parent="294" name="created_at">
+    <column id="461" parent="294" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="460" parent="294" name="updated_at">
+    <column id="462" parent="294" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="461" parent="294" name="deleted_at">
+    <column id="463" parent="294" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="462" parent="294" name="realm_id">
+    <column id="464" parent="294" name="realm_id">
       <DasType>bigint|0s</DasType>
       <Position>5</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <column id="463" parent="294" name="account_id">
+    <column id="465" parent="294" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>6</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <column id="464" parent="294" name="power_level">
+    <column id="466" parent="294" name="power_level">
       <DasType>bigint|0s</DasType>
       <Position>7</Position>
       <StateNumber>6430</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="465" parent="294" name="fk_passport_realms_members">
+    <foreign-key id="467" parent="294" name="fk_passport_realms_members">
       <ColNames>realm_id</ColNames>
       <ObjectId>37574</ObjectId>
       <StateNumber>6430</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37552</RefTableId>
     </foreign-key>
-    <foreign-key id="466" parent="294" name="fk_passport_realm_members_account">
+    <foreign-key id="468" parent="294" name="fk_passport_accounts_realm_identities">
+      <ColNames>account_id</ColNames>
+      <ObjectId>38570</ObjectId>
+      <StateNumber>7010</StateNumber>
+      <RefKeyColPositions>1</RefKeyColPositions>
+      <RefTableId>37314</RefTableId>
+    </foreign-key>
+    <foreign-key id="469" parent="294" name="fk_passport_realm_members_account">
       <ColNames>account_id</ColNames>
       <ObjectId>37569</ObjectId>
       <StateNumber>6430</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="467" parent="294" name="passport_realm_members_pkey">
+    <index id="470" parent="294" name="passport_realm_members_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37567</ObjectId>
@@ -5588,20 +5607,20 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="468" parent="294" name="idx_passport_realm_members_deleted_at">
+    <index id="471" parent="294" name="idx_passport_realm_members_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37579</ObjectId>
       <StateNumber>6431</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="469" parent="294" name="passport_realm_members_pkey">
+    <key id="472" parent="294" name="passport_realm_members_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37568</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6430</StateNumber>
       <UnderlyingIndexId>37567</UnderlyingIndexId>
     </key>
-    <column id="470" parent="295" name="id">
+    <column id="473" parent="295" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_realms_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5610,61 +5629,61 @@ false Zulu
       <SequenceId>37551</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="471" parent="295" name="created_at">
+    <column id="474" parent="295" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="472" parent="295" name="updated_at">
+    <column id="475" parent="295" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="473" parent="295" name="deleted_at">
+    <column id="476" parent="295" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="474" parent="295" name="alias">
+    <column id="477" parent="295" name="alias">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="475" parent="295" name="name">
+    <column id="478" parent="295" name="name">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="476" parent="295" name="description">
+    <column id="479" parent="295" name="description">
       <DasType>text|0s</DasType>
       <Position>7</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="477" parent="295" name="is_public">
+    <column id="480" parent="295" name="is_public">
       <DasType>boolean|0s</DasType>
       <Position>8</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="478" parent="295" name="is_community">
+    <column id="481" parent="295" name="is_community">
       <DasType>boolean|0s</DasType>
       <Position>9</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="479" parent="295" name="account_id">
+    <column id="482" parent="295" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>10</Position>
       <StateNumber>6427</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <index id="480" parent="295" name="passport_realms_pkey">
+    <index id="483" parent="295" name="passport_realms_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37558</ObjectId>
@@ -5673,7 +5692,7 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="481" parent="295" name="idx_passport_realms_alias">
+    <index id="484" parent="295" name="idx_passport_realms_alias">
       <ColNames>alias</ColNames>
       <ObjectId>37561</ObjectId>
       <StateNumber>6429</StateNumber>
@@ -5683,20 +5702,20 @@ false Zulu
       <CollationIds>100</CollationIds>
       <CollationParentNames>pg_catalog</CollationParentNames>
     </index>
-    <index id="482" parent="295" name="idx_passport_realms_deleted_at">
+    <index id="485" parent="295" name="idx_passport_realms_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37560</ObjectId>
       <StateNumber>6428</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="483" parent="295" name="passport_realms_pkey">
+    <key id="486" parent="295" name="passport_realms_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37559</ObjectId>
       <Primary>1</Primary>
       <StateNumber>6427</StateNumber>
       <UnderlyingIndexId>37558</UnderlyingIndexId>
     </key>
-    <column id="484" parent="296" name="id">
+    <column id="487" parent="296" name="id">
       <DasType>bigint|0s</DasType>
       <DefaultExpression>nextval(&apos;passport_third_clients_id_seq&apos;::regclass)</DefaultExpression>
       <NotNull>1</NotNull>
@@ -5705,80 +5724,80 @@ false Zulu
       <SequenceId>37403</SequenceId>
       <TypeId>20</TypeId>
     </column>
-    <column id="485" parent="296" name="created_at">
+    <column id="488" parent="296" name="created_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>2</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="486" parent="296" name="updated_at">
+    <column id="489" parent="296" name="updated_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>3</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="487" parent="296" name="deleted_at">
+    <column id="490" parent="296" name="deleted_at">
       <DasType>timestamp with time zone|0s</DasType>
       <Position>4</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>1184</TypeId>
     </column>
-    <column id="488" parent="296" name="alias">
+    <column id="491" parent="296" name="alias">
       <DasType>text|0s</DasType>
       <Position>5</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="489" parent="296" name="name">
+    <column id="492" parent="296" name="name">
       <DasType>text|0s</DasType>
       <Position>6</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="490" parent="296" name="description">
+    <column id="493" parent="296" name="description">
       <DasType>text|0s</DasType>
       <Position>7</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="491" parent="296" name="secret">
+    <column id="494" parent="296" name="secret">
       <DasType>text|0s</DasType>
       <Position>8</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>25</TypeId>
     </column>
-    <column id="492" parent="296" name="urls">
+    <column id="495" parent="296" name="urls">
       <DasType>jsonb|0s</DasType>
       <Position>9</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="493" parent="296" name="callbacks">
+    <column id="496" parent="296" name="callbacks">
       <DasType>jsonb|0s</DasType>
       <Position>10</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>3802</TypeId>
     </column>
-    <column id="494" parent="296" name="is_draft">
+    <column id="497" parent="296" name="is_draft">
       <DasType>boolean|0s</DasType>
       <Position>11</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>16</TypeId>
     </column>
-    <column id="495" parent="296" name="account_id">
+    <column id="498" parent="296" name="account_id">
       <DasType>bigint|0s</DasType>
       <Position>12</Position>
       <StateNumber>6238</StateNumber>
       <TypeId>20</TypeId>
     </column>
-    <foreign-key id="496" parent="296" name="fk_passport_accounts_third_clients">
+    <foreign-key id="499" parent="296" name="fk_passport_accounts_third_clients">
       <ColNames>account_id</ColNames>
       <ObjectId>37412</ObjectId>
       <StateNumber>6238</StateNumber>
       <RefKeyColPositions>1</RefKeyColPositions>
       <RefTableId>37314</RefTableId>
     </foreign-key>
-    <index id="497" parent="296" name="passport_third_clients_pkey">
+    <index id="500" parent="296" name="passport_third_clients_pkey">
       <ColNames>id</ColNames>
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37410</ObjectId>
@@ -5787,7 +5806,7 @@ false Zulu
       <Unique>1</Unique>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <index id="498" parent="296" name="idx_passport_third_clients_alias">
+    <index id="501" parent="296" name="idx_passport_third_clients_alias">
       <ColNames>alias</ColNames>
       <ObjectId>37417</ObjectId>
       <StateNumber>6239</StateNumber>
@@ -5797,13 +5816,13 @@ false Zulu
       <CollationIds>100</CollationIds>
       <CollationParentNames>pg_catalog</CollationParentNames>
     </index>
-    <index id="499" parent="296" name="idx_passport_third_clients_deleted_at">
+    <index id="502" parent="296" name="idx_passport_third_clients_deleted_at">
       <ColNames>deleted_at</ColNames>
       <ObjectId>37418</ObjectId>
       <StateNumber>6240</StateNumber>
       <AccessMethodId>403</AccessMethodId>
     </index>
-    <key id="500" parent="296" name="passport_third_clients_pkey">
+    <key id="503" parent="296" name="passport_third_clients_pkey">
       <NameSurrogate>1</NameSurrogate>
       <ObjectId>37411</ObjectId>
       <Primary>1</Primary>
diff --git a/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta b/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta
index 8a7058b..0bfb1f5 100644
--- a/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta
+++ b/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta
@@ -1,2 +1,2 @@
 #n:public
-!<md> [6992, 0, null, null, -2147483648, -2147483648]
+!<md> [7186, 0, null, null, -2147483648, -2147483648]
diff --git a/.idea/workspace.xml b/.idea/workspace.xml
index a517cd5..160800f 100644
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@@ -4,19 +4,12 @@
     <option name="autoReloadType" value="ALL" />
   </component>
   <component name="ChangeListManager">
-    <list default="true" id="3fefb2c4-b6f9-466b-a523-53352e8d6f95" name="更改" comment=":sparkles: Permission check">
+    <list default="true" id="3fefb2c4-b6f9-466b-a523-53352e8d6f95" name="更改" comment=":zap: In memory auth context cache">
+      <change beforePath="$PROJECT_DIR$/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25.xml" afterDir="false" />
+      <change beforePath="$PROJECT_DIR$/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/dataSources/74bcf3ef-a2b9-435b-b9e5-f32902a33b25/storage_v2/_src_/database/hy_passport.gNOKQQ/schema/public.abK9xQ.meta" afterDir="false" />
       <change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/go.mod" beforeDir="false" afterPath="$PROJECT_DIR$/go.mod" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/go.sum" beforeDir="false" afterPath="$PROJECT_DIR$/go.sum" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/cmd/main.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/cmd/main.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/database/source.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/database/source.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/models/auth.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/models/auth.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/server/accounts_api.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/server/accounts_api.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/server/ui/personalize.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/server/ui/personalize.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/services/accounts.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/services/accounts.go" afterDir="false" />
       <change beforePath="$PROJECT_DIR$/pkg/services/auth.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/services/auth.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pkg/services/ticker_maintainer.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/services/ticker_maintainer.go" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/settings.toml" beforeDir="false" afterPath="$PROJECT_DIR$/settings.toml" afterDir="false" />
+      <change beforePath="$PROJECT_DIR$/pkg/services/perms.go" beforeDir="false" afterPath="$PROJECT_DIR$/pkg/services/perms.go" afterDir="false" />
     </list>
     <option name="SHOW_DIALOG" value="false" />
     <option name="HIGHLIGHT_CONFLICTS" value="true" />
@@ -54,7 +47,7 @@
   <component name="PropertiesComponent"><![CDATA[{
   "keyToString": {
     "DefaultGoTemplateProperty": "Go File",
-    "Go 构建.Backend.executor": "Run",
+    "Go 构建.Backend.executor": "Debug",
     "RunOnceActivity.ShowReadmeOnStart": "true",
     "RunOnceActivity.go.formatter.settings.were.checked": "true",
     "RunOnceActivity.go.migrated.go.modules.settings": "true",
@@ -149,7 +142,6 @@
     </option>
   </component>
   <component name="VcsManagerConfiguration">
-    <MESSAGE value=":sparkles: Personalize" />
     <MESSAGE value=":sparkles: OAuth" />
     <MESSAGE value=":truck: Update well known" />
     <MESSAGE value=":sparkles: Others userinfo" />
@@ -174,9 +166,21 @@
     <MESSAGE value=":bug: Fix notification push issue" />
     <MESSAGE value=":sparkles: Basis perm nodes feature" />
     <MESSAGE value=":sparkles: Permission check" />
-    <option name="LAST_COMMIT_MESSAGE" value=":sparkles: Permission check" />
+    <MESSAGE value=":zap: In memory auth context cache" />
+    <option name="LAST_COMMIT_MESSAGE" value=":zap: In memory auth context cache" />
   </component>
   <component name="VgoProject">
     <settings-migrated>true</settings-migrated>
   </component>
+  <component name="XDebuggerManager">
+    <breakpoint-manager>
+      <breakpoints>
+        <line-breakpoint enabled="true" type="DlvLineBreakpoint">
+          <url>file://$PROJECT_DIR$/pkg/services/perms.go</url>
+          <line>49</line>
+          <option name="timeStamp" value="5" />
+        </line-breakpoint>
+      </breakpoints>
+    </breakpoint-manager>
+  </component>
 </project>
\ No newline at end of file
diff --git a/pkg/services/auth.go b/pkg/services/auth.go
index 353449f..f260d09 100644
--- a/pkg/services/auth.go
+++ b/pkg/services/auth.go
@@ -30,18 +30,7 @@ func Authenticate(access, refresh string, depth int) (user models.Account, perms
 	newRefresh = refresh
 
 	var ctx models.AuthContext
-
-	ctx, lookupErr := GetAuthContext(claims.ID)
-	if lookupErr == nil {
-		log.Debug().Str("jti", claims.ID).Msg("Hit auth context cache once!")
-		perms = FilterPermNodes(ctx.Account.PermNodes, ctx.Ticket.Claims)
-		user = ctx.Account
-		return
-	}
-
-	ctx, err = GrantAuthContext(claims.ID)
-	if err == nil {
-
+	if ctx, err = GetAuthContext(claims.ID); err == nil {
 		perms = FilterPermNodes(ctx.Account.PermNodes, ctx.Ticket.Claims)
 		user = ctx.Account
 		return
@@ -61,14 +50,14 @@ func GetAuthContext(jti string) (models.AuthContext, error) {
 		authContextCache[jti] = ctx
 		log.Debug().Str("jti", jti).Msg("Used an auth context cache")
 	} else {
-		ctx, err = GrantAuthContext(jti)
+		ctx, err = CacheAuthContext(jti)
 		log.Debug().Str("jti", jti).Msg("Created a new auth context cache")
 	}
 
 	return ctx, err
 }
 
-func GrantAuthContext(jti string) (models.AuthContext, error) {
+func CacheAuthContext(jti string) (models.AuthContext, error) {
 	var ctx models.AuthContext
 
 	// Query data from primary database
diff --git a/pkg/services/perms.go b/pkg/services/perms.go
index 438a6e1..0ea3316 100644
--- a/pkg/services/perms.go
+++ b/pkg/services/perms.go
@@ -1,6 +1,7 @@
 package services
 
 import (
+	"fmt"
 	"reflect"
 	"regexp"
 	"strings"
@@ -45,8 +46,8 @@ func FilterPermNodes(tree map[string]any, claims []string) map[string]any {
 	filteredTree := make(map[string]any)
 
 	match := func(claim, permission string) bool {
-		regex := strings.Replace(permission, "*", ".*", -1)
-		match, _ := regexp.MatchString("^"+regex+"$", claim)
+		regex := strings.ReplaceAll(claim, "*", ".*")
+		match, _ := regexp.MatchString(fmt.Sprintf("^%s$", regex), permission)
 		return match
 	}