fix(auth): add local JwtStrategy to all services, fix @genex/common import

6 services (user/issuer/clearing/compliance/notification/telemetry) were
missing JwtStrategy provider, causing 'Unknown authentication strategy jwt'
500 errors on all auth-protected endpoints.

- Create infrastructure/strategies/jwt.strategy.ts in each service
- Update each module to import from local path (not @genex/common)
- Revert @genex/common/index.ts strategy export (passport-jwt not in each
  service's node_modules, causes runtime 'Cannot find module' error)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/packages/common/src/index.ts

@@ -8,9 +8,6 @@ export * from './decorators/roles.decorator';
 export * from './guards/jwt-auth.guard';
 export * from './guards/roles.guard';
 
-// Strategies
-export * from './strategies/jwt.strategy';
-
 // Interceptors
 export * from './interceptors/logging.interceptor';
 export * from './interceptors/transform.interceptor';

backend/services/clearing-service/src/clearing.module.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { PassportModule } from '@nestjs/passport';
 import { JwtModule } from '@nestjs/jwt';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // Domain entities
 import { Settlement } from './domain/entities/settlement.entity';

backend/services/clearing-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -0,0 +1,18 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_ACCESS_SECRET || 'dev-access-secret',
+    });
+  }
+
+  async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
+    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+  }
+}

backend/services/compliance-service/src/compliance.module.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { PassportModule } from '@nestjs/passport';
 import { JwtModule } from '@nestjs/jwt';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // ─── Domain Entities ───
 import { AmlAlert } from './domain/entities/aml-alert.entity';

backend/services/compliance-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -0,0 +1,18 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_ACCESS_SECRET || 'dev-access-secret',
+    });
+  }
+
+  async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
+    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+  }
+}

backend/services/issuer-service/src/issuer.module.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { PassportModule } from '@nestjs/passport';
 import { JwtModule } from '@nestjs/jwt';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // Domain entities
 import { Issuer } from './domain/entities/issuer.entity';

backend/services/notification-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -0,0 +1,18 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_ACCESS_SECRET || 'dev-access-secret',
+    });
+  }
+
+  async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
+    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+  }
+}

backend/services/notification-service/src/notification.module.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { PassportModule } from '@nestjs/passport';
 import { JwtModule } from '@nestjs/jwt';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // Domain entities
 import { Notification } from './domain/entities/notification.entity';

backend/services/telemetry-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -0,0 +1,18 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_ACCESS_SECRET || 'dev-access-secret',
+    });
+  }
+
+  async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
+    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+  }
+}

backend/services/telemetry-service/src/telemetry.module.ts

@@ -3,7 +3,7 @@ import { TypeOrmModule } from '@nestjs/typeorm';
 import { JwtModule } from '@nestjs/jwt';
 import { PassportModule } from '@nestjs/passport';
 import { ScheduleModule } from '@nestjs/schedule';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // Domain entities
 import { TelemetryEvent } from './domain/entities/telemetry-event.entity';

backend/services/user-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -0,0 +1,18 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_ACCESS_SECRET || 'dev-access-secret',
+    });
+  }
+
+  async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
+    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+  }
+}

backend/services/user-service/src/user.module.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { JwtModule } from '@nestjs/jwt';
 import { PassportModule } from '@nestjs/passport';
-import { JwtStrategy } from '@genex/common';
+import { JwtStrategy } from './infrastructure/strategies/jwt.strategy';
 
 // Domain entities
 import { User } from './domain/entities/user.entity';