Implement OAuth2 server, link oauth:Client and auth::Oauth2Client, implement permission checks

app/models/auth/User.model.js

@@ -31,6 +31,7 @@ class User extends AuthUser {
             app_passwords: [AppPassword],
             mfa_enabled: {type: Boolean, default: false},
             mfa_enable_date: Date,
+            create_date: {type: Date, default: () => new Date},
         }}
     }
 
@@ -42,6 +43,7 @@ class User extends AuthUser {
             last_name: this.last_name,
             email: this.email,
             tagline: this.tagline,
+            group_ids: (await this.groups()).map(x => x.id),
         }
     }
 
@@ -112,6 +114,11 @@ class User extends AuthUser {
         return { password: gen, record: pw }
     }
 
+    async groups() {
+        const Group = this.models.get('auth:Group')
+        return Group.find({ active: true, user_ids: this.id })
+    }
+
     async ldap_groups() {
         const Group = this.models.get('ldap:Group')
         return await Group.find({