feat: add auth, RBAC, admin panel, and JWT-protected routes

server/package.json

@@ -25,12 +25,18 @@
   },
   "dependencies": {
     "7z-wasm": "^1.2.0",
+    "@fastify/cookie": "^11.0.2",
+    "@fastify/rate-limit": "^10.3.0",
     "@fastify/static": "^9.0.0",
     "@nestjs/common": "^11.0.1",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.0.1",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/passport": "^11.0.5",
     "@nestjs/platform-fastify": "^11.1.11",
+    "@nestjs/schedule": "^6.1.0",
     "@types/pdf-parse": "^1.1.5",
+    "bcryptjs": "^3.0.3",
     "chokidar": "^4.0.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.3",
@@ -38,6 +44,9 @@
     "drizzle-orm": "^0.45.1",
     "fast-xml-parser": "^5.3.3",
     "node-unrar-js": "^2.0.2",
+    "nodemailer": "^7.0.12",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
     "pdf-parse": "^2.4.5",
     "pg": "^8.16.3",
     "reflect-metadata": "^0.2.2",
@@ -53,10 +62,14 @@
     "@nestjs/testing": "^11.0.1",
     "@swc/cli": "^0.7.9",
     "@swc/core": "^1.15.8",
+    "@types/bcrypt": "^6.0.0",
+    "@types/bcryptjs": "^3.0.0",
     "@types/chokidar": "^1.7.5",
     "@types/express": "^5.0.0",
     "@types/jest": "^30.0.0",
     "@types/node": "^22.10.7",
+    "@types/nodemailer": "^7.0.5",
+    "@types/passport-jwt": "^4.0.1",
     "@types/pg": "^8.16.0",
     "@types/sharp": "^0.32.0",
     "@types/supertest": "^6.0.2",