From 8020bbd394f22a93eab2a9b269cc1a4ef79a013e Mon Sep 17 00:00:00 2001
From: Kincses <kincses@gmail.com>
Date: Fri, 6 Feb 2026 23:43:01 +0000
Subject: [PATCH] feat: complete Tier 2 onboarding - KYC, Private Fleet, and
 Wallet creation fully functional

---
 .../app/api/__pycache__/deps.cpython-312.pyc  | Bin 2362 -> 1968 bytes
 backend/app/api/deps.py                       |  54 ++++++++------
 .../__pycache__/auth.cpython-312.pyc          | Bin 3922 -> 4952 bytes
 backend/app/api/v1/endpoints/auth.py          |  35 ++++++---
 .../core/__pycache__/security.cpython-312.pyc | Bin 1913 -> 2414 bytes
 backend/app/core/security.py                  |  13 +++-
 .../models/__pycache__/user.cpython-312.pyc   | Bin 1907 -> 184 bytes
 .../__pycache__/auth_service.cpython-312.pyc  | Bin 9844 -> 10649 bytes
 backend/app/services/auth_service.py          |  70 +++++++++++-------
 9 files changed, 114 insertions(+), 58 deletions(-)
 mode change 100755 => 100644 backend/app/api/__pycache__/deps.cpython-312.pyc
 mode change 100755 => 100644 backend/app/models/__pycache__/user.cpython-312.pyc

diff --git a/backend/app/api/__pycache__/deps.cpython-312.pyc b/backend/app/api/__pycache__/deps.cpython-312.pyc
old mode 100755
new mode 100644
index 9be3ecb95a5f4ca31cfb3c3d0e1113e6bf5e0dfb..d194b41fd09dc02d4f540ae6219b4311269d82db
GIT binary patch
literal 1968
zcmb7FO=ufO6rSDHuH@Cf<fLkqHWG1YRfrTjZh8p;Cvuz+kV9fqSSZU{JGNI|?W!{)
zCvp{Hl9CcAlu~F6?IqAlNJ0yNP-sulv6mPZ><lseqtM<Il0(U<Giz;Rr|F>sJM+Ca
z@4fkX-@N@X8dU*n58SI(MFHS<F8D3j15dtX;5smYDcGPcXoA48Xp418lj;F2P?t5?
z(@C~c4{AXV2kcONKpXI|Y^(LK7WS}WN9s{6>fxXrtH-stheLLvp45^85CIID1Gm*%
z!q)m)ifJSm^<_^=`O>UthT(u2foU@ele3B$`$*OXTk%5TFYaCtXlx9(oazL0ATo%H
z3K9*LVFNlQrqPpAQ)k96RAGZyu0s_}4AR8RXK-??N#;k+7#N>-k$DUn2qLDBc(Kkw
zjF~-?6%1`yB^=E`qMI|^#)MVZggS8-Ah!ujV~CbgC8J@L7Kcj)3tY0@Ig8JQJfmr3
zQ_-BEvL{gmLDED{Ropti*N0etg?&!~OnVv#EFYwIKLE4^|28g)Z4qaQ<a?5Uk7_Kt
zFE&%SE#B&_a#?7LwSgBc05GNJv8A^3KVk=V#0ItSzhjfAuOl%Z`K#5EzNSC+t!k;h
z)<<NQkJ``oyzmwPenfw~!r1#EyP+?{>(W(O1{VYEK<yRZw?E$M!HaTR{*QBK`qn-&
z<sIjiYp?k;{Sm!9LwoubJ~EY^(awQ)!6(`s>AX+~R+@Qc*13ijJ2#ycVMKIti^g0l
zXTw_O1|m6+O~ryp!&|)8IW4JTLSk4pm2h*W`6`Pr#d(@DmR!fhojas+16#RyYsM%x
z-(a&RpgnKkC8u-4?%d5eu%07^&4hV_bnX_L{B+|>IU_e~b?z?YNar5v+_M)U+XNxS
zLLBk5Bbj%cfOHpsar)@NVSTzXHa&H6^6V*Xyi6tbdT0<{fYl~}h|>^7xVe0O9wJCZ
z%cPR!5SqeO!#0raI#73!?y!-jdLc*k%H))OVsg4trmBT?lidh`=JWYOZ0_u_Q|0n_
zrJx{AI27k=1RF-nb`6sTo9v<Ld?^Gm4R8tbP3OG!Y>>U+M(?vqCT!qhqeT<^-B+6k
zL5Jwv1r0G59v%P2x<A3+%iw7U#Iq~!ti|%n6A#0wN3raq%p2>O(bdf8M*8qmS&FM&
zAPuNp6~uRcx^Qh_W&c_%_Y&LUHrohDrmw4?sb3xbdg#j|>)8XV*#o!DZ{}{!{gD3d
zz3=y|7RT4JC)N@Z>*~bv@r`h7J)B<+=hwpfmdn3}<NhXwS2M#K=|kHBs~{Bl_|oM|
zJ1t7vED|7+SU%m|55gyfXE@D{dHGnr421jpgyTm8_lL%^OsEugQH8V`mNSQVJ)*%`
zgYmFoAzqWVQ6kaP7ct8|vPcW@9}nG)Kd=qEIuGluBD_F~2Cw3li+ClZYJbvW3yrbd
z6wMhH!z;~*|J7)cE2}Po{m`6_G|lyO_84qjv`m&bzNp8yID$=V%-D=wyiSj>S3<Tj
zdJ{Zht^n=h0YXQZchiPP(J&Kv9memot}6+GunF=%gOOD*vI&MaL1`1b{s+i!g10xp
z&|?Lp-+XYe{8MUtInIR4-j&7AFFj0VR`#wX3y<afLSiE{*p=A$OE}i$a#sP0`ZUN8
II>=V|2mb}%JOBUy

literal 2362
zcma)7U2IfE6rS0;_uk#T-QDi?2Wo5CgugC7TUv>TAj!hE6fiA98^RL0x!pT0ce(rH
z+`BEswl+WvD6ybXF!<nu(GZH7n5c<A58wldFKybS<w_&OX!NaE5*y-!XYTHGX%iAB
znVE0SIdf*_%r|F#@_Ic8$_GCWtLu1#eq{r@h()k)2f!7iAO&kEjpG<I?9d!(F3zQ$
zac7#3^OlU$gtQnJE$q}>X?NUhVP5m3rMP5aK`Tpp<6aAknlJ5-`z`F!%F}^(z`|}V
zn68LdVB|nVR6OI-4P4kuyizG6xYwb0&pG2&pyf!Ft+Pgz_6TfzL{j{u8fH}V3QGAo
zKE7fw5DxyyT!pde-b*rs%0`xkIa7?09LXrU>22%mJlJw7Npgmo&6t92$VOfV^U98B
z-Z;^GP}cQ<ELC<BnGy<e*Zw1&EtG;6Y?ej!!A$Zn(RG*$V?iexNgCHdQxv|OP0AXx
zR7f(bkc5#vNtmUxODFVnuu;ybjs4AyGAz}oW&2d7b6G}RR5Jxij6BUG3&AL~?3OqO
zLJMyLIDjzRlu?WpLN|(*ThUpppw~Er-gjK#-r#vOjE2xnCyWZW2{(EJoUn4%vD6Zy
zL9`8Bd<Lqx8Z{O4PVmGrPumcWbUfg|=qRksY)^4V(Ez^54d5_trxJLCGl+U2C_39(
z=y4?+G*_%@qe60eBsXXZeZ)v8J+u;Rd{FiE(ENcGN6|fh?byi0k&jl)`l{aY{>`EC
z`mvD<Ba7!p7RN>y`bU2OY|r?kJid%K3GZ+K-V?TP*CYU+;E3~60l;S%nlFT?L;MPF
zFZ)^q@Ph~<)1ma3ycOnTF$&-fAs5uMP#0bVX(6`mC!#xqZMF?Nh8!t~?((9PEVv;~
zuQlL}6^bF)D8*J;RusoLXWz#e?1sBad6${M(D2(bqufUJj#3r2q|}$JQY^&Fim}2L
z3~{!XlMTS3BAe{~EO2EBlbl1&RE<5i)Z5%k)s|#7vUS7!5dV~@)Y-PBUg4jN$`GHb
zFX?Rb6mKD0U+NWMskg&uH8QMh$ZXaiT8Gj9zAxvKz6OeK0A9=`>m7*gCa33nPD`Ea
zxrd0AE*z#*NG=JM2~0sDhOBC*z56o#vZg8_i;ky#EHQ*KStHb&&1aN+0QT0Z-v07r
zC_~aA`J{3CW`86cpo|_S2M>rcic!Wcvx?=i#MUiMiLUl&S7%$tp?&d|7-f7jMRJNH
z^9G^p#FV`@lOH%iC@~$XVsdK6fHw=dN~XHW_o`Gk%wW;o)<k<pXQH*Et377ARXrgm
z4Yi;Ar+yAphj#Ca#ai0K0<B{1tF0At@}QQL6;sT^krHebN_5l7MmpPX$SRZ(*DPnL
zAepC>WQ+u}pc_COgsT4zjg=JUT>{^Y?*;3x=BI*d&x^CcnkySGZ@fyTf@{u;cm37(
zf~&?`XEwD>Zfcu&rF%M<m?%rkL+)5H??HizE1t`q51;>d&9$8~wVNkvH;*fy_g(M%
zuHu^`-_}h=TBd4Sr^@%vc=nF&nU#EFJ1*>a>!lf~ep0HRl0u`g2a^AuuXbFRX^2iX
zL?`ygr+vpJT*vN9{;^$e?pmTcKJDwCaCL)f^uXey8dO&K7s71kh550`hS;6NwD0(Y
z>-ap!6p!ZxB(>qkdKiv+2FGggx$S$J(DzXZ;4K%9)i`gtqYW^)-Ly7V&HY&I1l%58
zX$r<*PR;aDmWoWVR|bORR0_!&Jwc1|qCBDl1E^{YQuc?K&QuoSY>}f{e^ryU<Oz}<
zjF3}CL}uTbnx$@L=P4;I@|Zrz<q@R^+*$t~En`*zCQN22DXn5r)X(H;AiSnWtb4Vn
z=cgpE%RL%NWZBo(Y<&UnW{kqUUq=hz6BVf8+6mM18relz%4f+*PeB8r!*~wW{eqe&
zQS%&XnnN{nsBsQG`x{z6hc?Wi(1YN*i7m0|V9Tg~-s!;Am(&FW-9ryrx$0{FyRY93
lth~BvDiD6iSK;zmSLHkh{e8(d&&F^kg6EM4h;D=B{sk9$CN=;7

diff --git a/backend/app/api/deps.py b/backend/app/api/deps.py
index 3eed9e3..9986682 100755
--- a/backend/app/api/deps.py
+++ b/backend/app/api/deps.py
@@ -1,39 +1,51 @@
-from typing import Generator
+from typing import AsyncGenerator
 from fastapi import Depends, HTTPException, status
 from fastapi.security import OAuth2PasswordBearer
-from jose import JWTError
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 
-from app.db.session import SessionLocal
+from app.db.session import get_db
 from app.core.security import decode_token
-from app.models.user import User
+from app.models.identity import User # Javítva identity-re
 
-reusable_oauth2 = OAuth2PasswordBearer(tokenUrl="/api/v2/auth/login")
-
-async def get_db() -> Generator:
-    async with SessionLocal() as session:
-        yield session
+# Javítva v1-re
+reusable_oauth2 = OAuth2PasswordBearer(tokenUrl="/api/v1/auth/login")
 
 async def get_current_user(
     db: AsyncSession = Depends(get_db),
     token: str = Depends(reusable_oauth2),
 ) -> User:
-    try:
-        payload = decode_token(token)
-        user_id = payload.get("sub")
-        if not user_id:
-            raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Token error")
-    except JWTError:
-        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid token")
+    payload = decode_token(token)
+    if not payload:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED, 
+            detail="Érvénytelen vagy lejárt token."
+        )
+    
+    user_id = payload.get("sub")
+    if not user_id:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED, 
+            detail="Token azonosítási hiba."
+        )
 
+    # Felhasználó keresése az adatbázisban
     res = await db.execute(select(User).where(User.id == int(user_id)))
-    user = res.scalars().first()
+    user = res.scalar_one_or_none()
 
     if not user:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="User not found")
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND, 
+            detail="Felhasználó nem található."
+        )
 
-    if not user.is_active:
-        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Fiók nem aktív.")
+    if user.is_deleted:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN, 
+            detail="Ez a fiók törölve lett."
+        )
 
-    return user
+    # FONTOS: Itt NEM dobunk hibát, ha user.is_active == False, 
+    # mert a Step 2 (KYC) kitöltéséhez be kell tudnia lépni inaktívként is!
+    
+    return user
\ No newline at end of file
diff --git a/backend/app/api/v1/endpoints/__pycache__/auth.cpython-312.pyc b/backend/app/api/v1/endpoints/__pycache__/auth.cpython-312.pyc
index 3c2ff8bc5f8dfc8e5146f5de5b87b8fd15c9f3cd..28947ec6e5e602abb535b76b1fbfb8e7ccc80dc8 100644
GIT binary patch
delta 2238
zcmZuyU2IfE6rQ<1d$--)ZvVI2ZRsuYw?MbHRw`(X6(|OiQUX;eCe3y4w7uQCKg_+`
z+7+zeABjHLj8Psi+6N;|A!3>kVu&%h;YnjwYXYn`V2noJ7OIKy$uoDmSQBsBGiT<U
zIWy-w-<<t!!_6(*z6t~?5qw8eZx}E55&D@=%Aa>lS?w0)woN^lY#3?4NJn~w*_aHC
zgj~JSY)Xbl!WapN;Kj8KBh93FvX^y9b&8MF>Hdp>xv#^KDpIQliFZuWt6!7vyS9{F
z<r-3Vv6eOA&5=6dS@W!4=h+ILeLSexu!!fr2}K%7+nQTwots(?c%W$!mo5Z%6Nvvm
zvru_9Cg@?(z~ku6Bs}KPBkN+dmt%=7r6XHO{o0Wm*12t*X^X1tH+&9D?6lC?Q3wuO
zgg$+2@7{DWV-lN0aiMyg*rV|*r6gsKX2A?=5_e;lh09oEnz&n*boru(eJJjZh%bo<
zy(hjez9Gx#lxPRbHPIEeD((n+%hx|8os{$n)**#(CEG7WMW60xC#109Srkfp&R|_U
zCBH0B<7xDwcnnSBOX4(+2C{p>e#9mjwQG;sZ)zDUXQb@wpQ)6L8&=My&V1Z(mQ-iK
zQniF_OgZx=Oi4#lGfXw%Tr+hrkr=xub>czxgR}!TFh%~jYZJsRRP28-PBONUPDMSm
z5mso3FU#=>5>FH)4nRS+(+QHIVYVW7S8n4zTm+ZGo>q+OS+DXsJLaord8Lv~`-1Fu
z#fN3~r?MmHxu3mwQUpXgy`g>H^WqWIi{9SnW>=AY5JEjkCW#4nCrHlCBByHcII*lz
z_h2<i#;qKo+~zDykX(!nd$%@3_(fW|*uaI#MLV1G_8yLMbvqY4#i&I28E#&*gKIGm
zmIOkDk9LAmkj?bCk)jWS&O=(0AbvxCy@LMmpxRazs+g({bWRa!jLmcq4lIqa3g0`A
z_JH6164G!>La)zR&Lx}Ut!iq*D4~DFw$)N58kBF+nNP(AX*2uPw>`*{C@4wDRU0SS
zhgrnGvHqZQWrEnS-z|E#x(x`*PWaol^Lv-dqgYuNAPd;Xvv8B3k8nE|TiNISJtKp8
z-=Vy8sHmXeBY#`aG|-vmUHClikv?eJg>!+<_!{dw5;O6F2gIn6D)`rPKhEQqKN*x)
z;eYikdtTWt3X>8$q11_JQDj5DkOC#P0=B|ZzLr^CIWM?XZgQ*a%?`l6QaXFoLy06n
zFq2NG)VVUATf=LoIz%~lZS@Egdd#KsvziI7@?TcZTUu<;co(`wme+iMm=l_nOO*(p
zB1zTOOqfi}YPPc!qb@^sgJbpy5C^DcXSq3>O0=u}|8tzC4mk^{obAlhxOV^4DNTh-
z*s-WUJrIWWf&fnWU;wbzARGnsN|fU$&4PUo_vLSiKFS3r-hVkq`}jH+oPiccsKmG`
zVBC$G=(jb|3mY$(pQabmSErV125$HUUfFlc7yPj*azV`Z9R0p(IPV?4+1Qrfnflh3
z&P!>iwEqD9+X~h|tTUVY1^fx_N799GzrfzAn1M$cn1vq$K^G0|R>$jBN6Kym|AWM|
za?Vo6lwnyp4PY{PVU|?WNF~;FkwG{AEYImFz(|cdmy)XKEZ8JxBzCIAbSZB;*Aify
zAm$7u<yiBUp?Y{YVzXnF8~1O47y#<yFt|Wjyb+ckWN<7^$J6#`MzgHxG}UQ882PEz
zLm<je)7QwpsBBS==6%C?X_);~84?Gh53q(newJ2)U%{_sGBGV<#B`FeD95Ex$Cr|6
z9rBGCI&>Ywo}sne;-TrR4gF5aq%GU+ac)B>i13p@-KOHcFt={}ItyqOBr0_f?_&@%
zYm&$5VOYamAS@G@S`;zHw^83R>RUm(R#4{(iu{7wS5O!H-A2ck(eV`&T|t}Jb5&!r
z3VsgfBRxgLl`qYE?zk!<p`$49rD81-yl*z2Za#Zx8MoZp)pvDlDSa2ocnF`17v1rr
zllR<_?`kay+*GXMyCSC}XGfQD>s=3OYCAW@W^aYne0$e&xcjbBfiw7~KeDwba_x?{
zz9@60=s|U%d#;s-+fWqT)kb!wDzsU|&)|I9Lq)`ut1b83k-N3u75EYz0u25EBG+xn

delta 1490
zcmZ`(O-vg{6rS0g^*=Fx27~!oNSj~?wIBpa1vE{Q7NrVQLaCY@S}p9@EU~?4c5Mf0
zN)ok6)mCbvk!YkQQaH3t1gMEPG>1y9WT~o@%cdNXSVBpa9&+fxz@a~<&MbD|l9Bbj
zH}Ab~=9`(fez@=VrnY-!WgfuBSK}A8AvXX|`J^-)MQ7_Lc%>~p4}kzMTq*`n2XJ7j
zvsAicRX46uJ<HxDaXZF10`@Jz?O7D6K3u7mVOJEXdp?n#uU7kl)%>_>xqL}rY}yay
zNCkEj$(6gv!55ILs0C}f*`C$7x=0J`qSZ0lp&jKVPp#p!CPu5pp&~7~i`Fnx7p|ut
z2v?y<{}v*2OuP*NMW|mARkSS8BdDLvv#1U_=mP5SJ4=V3Ls_J{sD)~wn?6I~A&=@c
zD@xmDrBdBD;JUCZ*@tGy3s41f(#KK;X24nT6v)68F$2TC5xO8n=&w=-tfZULx4{-x
zn|B{OJAtQ7O;3g$q>4pIHT}U6gf;XxN4Mu?9^l|xMb1VDD`>0hQ>OK%t1$#sVOiYS
z)AX`3d#H#$adjMeu5M1uimD?kOqG`^cC6~WCXRtV@a0ikql>28`vXCiC-odc92z+^
z(L3(G(S6+A&w+~%Bf|TMRC8$O(80h!3}iOQ0p{eTxE|Azq?`GCNn?`1Gw{zj@MlE>
z?f0bV(><A!;3L+23&PjpMM(k>sO)SSv~{^`UE)aInZSmj#Bhph7{>7#f^&=Ucy7ha
zEgG5})#EctLNR3=*ODrWrWN{^zjb~us}2j~ATzd3gLh_0n?I_Pm~MVJtr$i|Co1V<
zNzO337;LNb1Ri)g?|V9Lj^Ez<WB5*Z%`@--4OnR4p)X+7zHWIBTj+2>1k&JthL5o>
zywnB1gAw$-y9>^i`6FpewCGGHPAFQObkLtYmruOK%8t#N@?>r$J*CJA9Fr9}O7x_O
zlj;FkNoZ$u!a^wna}&qu+^zUHPBK5HC&q~)pHWOxOPa5YkXrh=x7};M82>U-Cuz>x
z+H*oTOgWKTB<wmEIfiE^v8gfsJEz{1365#TtVwc<6IyQ7l-tHkJS}(Af4$A^`~mHI
z$~%qJ#00x?Lu8@SYm$DR=g>xv_+D#CT3+2kdcg_&uNIGA-wUt79&|m}3rE6@^m4g1
zpLY;FWnz*?(@dA$&vrl9*PRz**d%si@pW&3ErwvbcU%JrT}{RD5E*7M{*Pn?85Tqc
z;bSnk1_swb?>dOAgU~u?SqEM0_ZS?%503xguKXf&&hZ2~FNJ7B<>`3`d>>k&o&w;`
zFY!&=ZiztXEC@VQC<lV;Qs{ihDr;VY@}uEV>)rS6`8R+7-+)&0!Gi7FZP>IeC$<y>
wo-4RGvHpDhXQOMd;Zg74-RP>m0VFsLuTB(fdn3CUupLfo+z@z<yv<JYKfx1SRsaA1

diff --git a/backend/app/api/v1/endpoints/auth.py b/backend/app/api/v1/endpoints/auth.py
index c8e27c9..5ffbfc4 100644
--- a/backend/app/api/v1/endpoints/auth.py
+++ b/backend/app/api/v1/endpoints/auth.py
@@ -2,16 +2,19 @@ from fastapi import APIRouter, Depends, HTTPException, status
 from fastapi.security import OAuth2PasswordRequestForm
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import text
+
 from app.db.session import get_db
 from app.services.auth_service import AuthService
 from app.core.security import create_access_token
-from app.schemas.auth import UserLiteRegister, Token, PasswordResetRequest
+from app.schemas.auth import UserLiteRegister, Token, PasswordResetRequest, UserKYCComplete
+from app.api.deps import get_current_user # Ez kezeli a belépett felhasználót
+from app.models.identity import User
 
 router = APIRouter()
 
 @router.post("/register-lite", response_model=Token, status_code=201)
 async def register_lite(user_in: UserLiteRegister, db: AsyncSession = Depends(get_db)):
-    # Email csekkolás nyers SQL-el
+    """Step 1: Alapszintű regisztráció és aktiváló e-mail küldése."""
     check = await db.execute(text("SELECT id FROM data.users WHERE email = :e"), {"e": user_in.email})
     if check.fetchone():
         raise HTTPException(status_code=400, detail="Ez az email cím már foglalt.")
@@ -25,6 +28,7 @@ async def register_lite(user_in: UserLiteRegister, db: AsyncSession = Depends(ge
 
 @router.post("/login", response_model=Token)
 async def login(form_data: OAuth2PasswordRequestForm = Depends(), db: AsyncSession = Depends(get_db)):
+    """Bejelentkezés az access_token megszerzéséhez."""
     user = await AuthService.authenticate(db, form_data.username, form_data.password)
     if not user:
         raise HTTPException(status_code=401, detail="Hibás e-mail vagy jelszó.")
@@ -32,15 +36,28 @@ async def login(form_data: OAuth2PasswordRequestForm = Depends(), db: AsyncSessi
     token = create_access_token(data={"sub": str(user.id)})
     return {"access_token": token, "token_type": "bearer", "is_active": user.is_active}
 
-@router.post("/forgot-password")
-async def forgot_password(req: PasswordResetRequest, db: AsyncSession = Depends(get_db)):
-    await AuthService.initiate_password_reset(db, req.email)
-    return {"message": "Helyreállítási folyamat elindítva."}
-
 @router.get("/verify-email")
 async def verify_email(token: str, db: AsyncSession = Depends(get_db)):
-    """Ezt hívja meg a frontend, amikor a user a levélben a gombra kattint."""
+    """E-mail megerősítése a kiküldött token alapján."""
     success = await AuthService.verify_email(db, token)
     if not success:
         raise HTTPException(status_code=400, detail="Érvénytelen vagy lejárt token.")
-    return {"message": "Email sikeresen megerősítve! Most már elvégezheti a KYC regisztrációt (Step 2)."}
\ No newline at end of file
+    return {"message": "Email sikeresen megerősítve! Jöhet a Step 2 (KYC)."}
+
+@router.post("/complete-kyc")
+async def complete_kyc(
+    kyc_in: UserKYCComplete, 
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """Step 2: Okmányok rögzítése, Privát Széf és Wallet aktiválása."""
+    user = await AuthService.complete_kyc(db, current_user.id, kyc_in)
+    if not user:
+        raise HTTPException(status_code=404, detail="Felhasználó nem található.")
+    return {"status": "success", "message": "Gratulálunk! A Privát Széf és a Pénztárca aktiválva lett."}
+
+@router.post("/forgot-password")
+async def forgot_password(req: PasswordResetRequest, db: AsyncSession = Depends(get_db)):
+    """Jelszó-visszaállító link küldése."""
+    await AuthService.initiate_password_reset(db, req.email)
+    return {"message": "Ha a cím létezik, elküldtük a helyreállítási linket."}
\ No newline at end of file
diff --git a/backend/app/core/__pycache__/security.cpython-312.pyc b/backend/app/core/__pycache__/security.cpython-312.pyc
index ba97cab458d38d91f8fd8c7284ae3ef52cc0ad92..0708508aab7b8824515134e8bccdd0120691e6a8 100644
GIT binary patch
delta 894
zcmY*XO=#3W6rR~+vcK8?trlqwSX$E36)RW^rA4qH9(u7-yP!+lWdF==mPzW`qEt$e
z9z3|@(Bi2F4_ovgc(NDq@8rb=p_&$Y^(2c`v7UUBvQ!7=d*6KT<-M1Aa}fR(4}TEF
z0D_e@9+V#Pjqq{2)fkwZs01<rj8vo&Jy;24Lcj%0RK2i$S~xGL{uMqGQ3LK-%=2mx
z&QUd{hBTsyjg8c>2tnZ$l8LDiH;88rO~`w?p&HxpQ4~IkFK}|a@n$mWakz5ba(tI(
zXQn7MsO`mHg%AW%(f)}?NeZafKI8f2ivp7gjoGKU)I<Ufj-YBeL)BytJ;si_spyvJ
z0V+u}$&^?@v$8eCH0uUcvqi-$(jL%*_A)n)yI#EFnivP|B1z+fy+(S3UU1Tr_7;(F
z(%vE6WEg~qeL$*m7t2R1<Ca#<Vc?xbfN-$)9|5c(KeBINY02U{{<6?vNA@4D??~;i
z0)B>{vXrpy;k)<>I)yBET1@Ffl*4EaEqLna4mXGDSmx%3zyTL1x$Q}}OG~D?sN}V>
z^>)+LBmha%b*=ioK^K{lma!91^nyW4R<UAE%L4U726}=)kb%r#kO3<U7n}y;cx%dn
zZYb)1cN{t#Le{NKM<6bRvIv=z!0w|q&y(bCJhe917+k;l<kEKEXsd7Z-L>th+1AwT
z$BWlK#phPNpCetX;orN##CL>A@=GMq=D_|jBambH+!%W4zd*RxJO-5Uw4AVO!oX6D
zwZxYVQ#<UQb?QWvS}mP3s0L8YmkRFhIGkxwhrekUI%V(4eFT)v*6nu_Q8wMfC*vEh
z80x&PP0%sW*rd(J0MHP|duXJEM)pvD3-#|1B<`VJJLbJUw2yc^gWDkiC)c?)0<+<3
VCY!nEXPd>%-j;O!2h-dle*t~L&cXly

delta 499
zcmX9)OKTKC5bmDonas{>H!o4}v0%tDC^;mE2Sb9$qT&nU9&{rN<8<xjvDsOwN0#K0
zOZ)*#Lw<vT2f?4=Dc6zUO#`CjAc8k*#)hi?>g%sQy6V@=-!S|f1TLe~x$$=UgE<K=
z^5aQs{S{}DNo(Nld0mgN4ZfVBa3JW}vUVi8p>(U-?+NKqU6*y~g9Sd=J>wD?$^ZoL
z3OV3YS9oM~8~bL|n0#Bed13C1bA5}S*&d0}*Vm2P)*L}c$Ht${I-$tI23^HeABHL!
z<b}PJsIAc$XG+$VkY*Ah122@NC>6>e*lgl#$xQblk4K48;|yh7w&G>tef`l~<@29@
zn(sJw^|7_IQ2Dvf+xIrwo%m7vWl_8P`2Mqvhn)vcB7s+^39srit9h;RolOyv9O5KR
zL8&;;c43G&Nz~9Sdsv$%6!E9gw7%oC4yysgPNo2B^ib53(P$~n5GW0M+kGsTUzjS#
zLcGqh0hTMM{#jYRXIT3EAIMqV%jBB@tl<iAoI)K?IyX7z-`VmBTmH%xPuSuY7M!xV
TQ?_s}^bhBS_nQgc;g!)pJe+*;

diff --git a/backend/app/core/security.py b/backend/app/core/security.py
index a98c2e2..cf1fe91 100644
--- a/backend/app/core/security.py
+++ b/backend/app/core/security.py
@@ -1,8 +1,7 @@
-# /opt/docker/dev/service_finder/backend/app/core/security.py
 from datetime import datetime, timedelta, timezone
 from typing import Optional, Dict, Any
 import bcrypt
-from jose import jwt
+from jose import jwt, JWTError
 from app.core.config import settings
 
 def verify_password(plain_password: str, hashed_password: str) -> bool:
@@ -17,4 +16,12 @@ def create_access_token(data: Dict[str, Any], expires_delta: Optional[timedelta]
     to_encode = data.copy()
     expire = datetime.now(timezone.utc) + (expires_delta or timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES))
     to_encode.update({"exp": expire})
-    return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)
\ No newline at end of file
+    return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)
+
+def decode_token(token: str) -> Optional[Dict[str, Any]]:
+    """JWT token visszafejtése és ellenőrzése."""
+    try:
+        payload = jwt.decode(token, settings.SECRET_KEY, algorithms=[settings.ALGORITHM])
+        return payload
+    except JWTError:
+        return None
\ No newline at end of file
diff --git a/backend/app/models/__pycache__/user.cpython-312.pyc b/backend/app/models/__pycache__/user.cpython-312.pyc
old mode 100755
new mode 100644
index c7156409eb549153eec1aaf1c4f0e9a39c714cc0..8d3f67fd245ed80ce131f884317d49f6ffd6dcb6
GIT binary patch
literal 184
zcmX@j%ge<81m|})XD(%AV0aATzyK4J@mU1On9h*GkiwY5kjogwn9CH!#K=&|q{;je
zsE0w5=@v_9aca>m4iFiXpOfmR$$X0=GbJ^zB(tQlh#9D+hy_TjWcUmu8GecDCl(Zd
zac+J}YEH3!DNvtYLFFwD8=ydGPO4oICr};8>|$OZ@qw9<k?}hl1EcB%29+Xqpa=k<
CnkxMO

literal 1907
zcmbVMJ!~9B6rR1?zuWt9?rfj);}`^1;)`TENFg*4Qes~mC$W(dJH<Au@y*y?v%7bh
z-E(qO8!1IfLyDLRQ*p=^q70%Sh=PKKVkPWB5kjfxkQ^E+-t4Z=ag>Uc_RV|Wym@ct
z{ryrb8VJ5GE_Lj61)&#0IQZ0*+5ZffCx{>-Imi@i#*y5NnQ^mb)|E}!RZPWIP1V&*
zO%nTAM|X2(F6L#&aPww9<`t*l7R{oBGH3=7^&uh}Em5>Ka^UiC-If#HJQnNfpqrz`
z?QDvcJ5tT~O9=Bdm8(-tr|o)NoAm;^LK#<Y2h8?XxOS!4bSU<?JdFd&bwL+wm)0a+
zVAR2Z-Sqrby9Khm-1Zt`y@Gw(NZce;N`?JlV4fg~Oo<>fLnJdxGNw$jrb1*>?I>^)
zebJ}v7Wm`}Caw*R+W>G4$hzI2ytwR88dxs&Fx+##rg7b}JnT}-;)Z3pP11G*U$CsZ
zZS15w%H`>~*?BH6-mc%`8jw4)Q*~avdb3_%u;wn$U!JMo`Wo$vd;U8#iCeAs2V>On
zC&dLOS{+t|-I!>=_*Ebe(QctXtncQ_;q-24D4f|Hc=y2^J9(gZBnrK1_y*$fdK5_3
zmP|Q=s6tgD6M0AJWlD=tU7$qW(Rz8!rMSAIZ)d<Ge5R3L+iAqj{A+R{mWyEj@JuPu
zp?zy_$3~8jom|g$Io7Md*+Z;9#ne}@fj3}-iH{?Gt8c)DQp|Y8-f@A!e*#YD4_*fH
z$+e3|t{My5DYR4Q-Fx_doiFyzpYD`ueNZ~03>8reK3Dz5Ds?fJ2@dc=EyMFIX1kbm
ztdD7jE4D}I{j0SsSKFR_w@ukQa4W8RZO6e&4)hKi1prz_BXk+Joq%VqErO^A&{>}}
zJ<(kyQSg*msfO5XdhHfCr1P~ARsjR7UyuP|yJ%T~FrAirDHScuR(#81qUo8K2RvgF
z24f0w1@3P<yl)lztCUzR?ECkcjBsPwW_}QN6wf(0Wtk{>t}odvSS2`Z1<?UqX3(ol
z)HcuAzJ(isy-s-nSijw(EN)%{q(;+iVXwmrDU*0G0({@{+U^p>HqYn^OcT%~l<8oQ
ziOI^dUh^I|8jQlriG>4hBvBANJ0aBKb~`1w(+5Pfs{aBAbm+jTaBjCcvZekycs88>
zGuOAFZ7qB|5alk0SM~~(jf-2OUGj7>Dolm-z3TAhoi2^47s8MB%0rv#<B{<C-m&V&
z`r}eKyVp0kLADm6zH{NVy?lA&%+}af<6n+P`SanlP`cNZqhsTs*MDO3Z1?@B|Gn_0
zu%dMbqw*ve0{l$(Lezgg!PV|SRGt95a(uH2d}SiM0s5co-O=dy<TL%5{ImX}{*w`v
zZ-7#7<LTJb(I3XX8~grTRIWd`p1fZ?y;k8eg=liazw2N})M)20_i^6iOvTxZLkwls
z)0}8Bm*v3B5fJv1Jmg_2PLQREC7A9kFVwPrz_?rohskJ+qkl9bT)&h|<PX^t91&y5
z{{YC}SxJ(9NBKX{%x`GsIXe3sz4aUozm#QZ^pU?Y{bcsj*_Q}}mxYRSReE&cA0*cJ
Gss90brs$yn

diff --git a/backend/app/services/__pycache__/auth_service.cpython-312.pyc b/backend/app/services/__pycache__/auth_service.cpython-312.pyc
index 36c5e0de7426eb4029b99f2cb8a1ad762fc0f28e..fb32aea8257b2f3aa5e65ff116ae443ce0ad0ddb 100644
GIT binary patch
delta 3477
zcmZuzYit|G5#ANa<3oIt5+CAAvSf$WBa#wJj$=Df<V2P!$MFkEm;wyLJIkc`Q1?!j
zrI4ocXdwh{YxRuAZqhhL14M?M+JKAv=r1QuQzQydv2r2eYC|oMAN@(h2AZJ#(V3$u
z2SFCN?`C#pXLt57GxsLWAG9u6EG7c&jaPr3{xGy)_0rE4Ha%X>8RN#BDQ=>KC%i7(
zoHNJGIZND<v&OACTilkj$L*?&%Q|w-xKpL|Sy#>-cjsE-Eh=xww&px>PtF_ns=P7l
z%lYGel{RJDa)Ee2rJJ+CTqqu*q=}3X-ux!vZI;VTxGF;8;n}9Bb>a5bpjP2TAuFUL
zMJov>08>d(Qn-T>OXnx$4fG>xlq#l7A)OcaY$3^CU#1$4hUHuOw`fpK7$$f#*keJ2
z5P+gd^1PxulARWhvS#d!Ah=Lum`aM`Oo8!AQ<`TM?9xt)0%M&>>L&#$DM^gA)&<jP
zurm$#D6`5oV?S+?pET~`{2*m*@>|9~QQP&WO?h4UF;)NY;qhHek3uW*x|yQ_6IeIW
z`m~sUd3e@`VhzIM2s(uA0E%8XA*7}yL2-(yWH!kXg}jg`utXmI>?u@x0^v!7T>w!%
zQ`fN%XnD}S(K!Kxh_grPjqQ~)_HH_U{WtcPXlD-y6z<q;Dv{2oaQ;R!0PzNVceiu$
zfW<9GotyM%1)4k?ipVvs!E~9{J2K7k4rfsQ%;J)BPAgZ^6iLP=@3)3!#p$FD`L&3@
zv!pBPn7OFSpy3}hk<QX$Q^qB?x40j=qG^~daX+qJ(u1;FzG!jT^a(sjwLza3`z-nd
zp1azlHu<6}-~|z0fFCr;FaIJOXv%EB^?4ijuc%Mh8j3Kk6HS)&3Fmqr$7_ASfF9l)
zwG}yDcfZfw=;JxiXlZcL{hcC2!W~yz!_CaP3k}KlwK8xs<lkEyR42czaodkQ1j2!a
zqSPb5rweS99&L0qyx{ey*x*VA^+3QAYLNfx^y!R6V@5re-6d1eBt9ecHVhQ?nV|;#
z;QtQc4ItV2pr=8B#P~aHQC*yu=XgDQ+!fPhuC7pOhM6D7JsfLp_)E$6b_4IY+8WXy
z-Hmmv%ucjb-wUVe;{A;+nb%!3t1eoKmb!~pF)Hn7%u-*dn{VdLS1gzB-}jQWvB;pc
zu?&b)aQhw{AZU!hJqf~%ws4dHJBlljx3_k5H=TZYn4F=fyN1c>5`3HBvu_|0K1a26
z5;k12!I&}C#FbWuR~l~!d8-s_&_$d42d=eTw7pJwTC$zA&CnTgLh~Y-p&w~xXw){n
z6I2gM!c=5%TO{`4Xe7xerNXfYyZQ0t+|7@qo0mi(vghEwXM0~s&q)O_!r#0oP3MjY
zb3ztm5KsG_RkRtgkcZf*%@ue-v7~t+FQui~1YbyrN^?3@780pKUP`8<Ly9S#=hMg2
z{B$y_(8#m{rjPVSo@43bU^wzjwjfE#D5q%i$(*1V3NsLt5)eVdpa(3QOh~g+0vHt&
z#|4%?k`{Qy28_g#dGUzAlCNZi$%gj~Q$SS1XpcPS3BEAr9z8IAXnb^JLiP0N0|)jU
z*cORytcOy3G>X13C8Y~_k$I5grUV9_u>-&`yv6Jg!eNw|(AR8&pUzFmfA$<MvjmD>
zM!>Z)I|7ejL=X@#PpX-to<kl%7Gnd$CtQ!cqe!U%7!SK1g-3vj+UrqR)qDv>&m+8m
zFbq&uEEsd)@RA8U4TVnCw@Z|A61W8$#{^L^3n$W|1nCYU{-mPM3o|OwJd@031u3B_
zo9;8HZ$gba&n93R5#72U_t$@HFGQ5Td82!isBsE5{omx<Q>4a?P^0@EM;xBBl5Adc
zco#hH`ajt9VeDdT#n->$7+7<(F0`DL-kw>Qd4E&I6J2p^uIY)zQ8ST1NZ#QKx1W<P
zy!zW$tDd%+fdn_K26`)j-fKh4f!>wCw)wsPw7X^A7olIvKl2Th!##`pDxvN3Bd7OO
z1JOlL-3s*Hsy_t3*gXUBhThGtc)C|T0~OD}ZF^wV-c_-8ExNCIE_o{U{@Zr<*`KVo
zY_7CyzVgh9{gG?MihcC1PUE%C@5brF7xtXr^ZtpIK>uoM|NL0Btz)%qOQmhgO55=K
z#J^nS@NNIbY9M$ac0P7)$0A*9zuI%DXEC%qynER<UJbTic>etJ)lf$@7_CM+tDO(s
zv*_ELXY@5Yak$>*7PvDrXKk=sZS5blzSFnr@2mLxt{lI5^3us0?!S0G@l+n(z2YCA
zk5$9%7v|2-Eq1SjhgN+<^LwhU;Hs;?(&_5I<r=&l+_1Ro>e!{R8yl7n9K01gbjDP*
zJ5}>@x9lDADSv-CM@ehXceSm=Gw@w4Lj1$u!Wt~0Z>#2x@4mKqzabi<yXthm-M!E)
z_pX}56?6Eu*|7|n)U~+(a_gdD**S2_JXm$Q=Ewe9(}VW^#P{InU#AlR`sPS9<|Ci<
z(wIg2NnZ!hpW3niQ^zhpFrRnRa?Gy%yyq!Y`=W)$T-q;MM?AoM31eEcU-o%{UgBuX
zqg~SLkT&D^B@0E`uA)mt7z{lg6@A7DpJu7UHR0AQZK1KP+|p18=&#&5=>N*60Soo&
zYzw)5w(SM_5<d6(!;Sz2VM$EDdln=poz@>YYeyx_z)`OL{7{!|LBQvyXyA>g&rihk
zRDTdq4vhu7>4(?F;2$*{Bu&CL%f0P^^20zzwX7d|FyXR61bonkqMipa=)t1cDO7l{
z8qAhz#mKM>WZMw10IY{5%soG-^_Uj>)G)Jyz-Wf$1H*`~2Ainydrqn0<TVswIALQ5
zyAj5J-4UXD<#5Lcy>>m>agOfBn9ZI=z{ten0E#A^ml)PG>?FeL2=f4!$X!5!A%ZY0
zX;i>fi#Ozv&gV9dQl0x;u}1KJEmi;Dc;XwCzpEjfv(|*7+MXu)<IX*SUo}ibBlYT5
zby2NuACm)JL;8BSHOc$Bd@br3n{fmd;Pt(-$)&E~HVk8mJvlYiC#H@Hxun>aoR*F<
z)id-$aiA<!U_ze=)iQ%@rq=b$E#K;jlyM&w+qw!Qw<GDvdNFSmf0|8Z(dcYnf#uXh
zQg{59xCV9oxEYFJJ7kdQtgw@v2bRJoVx?ZwP)gUxV1*3+gEZeE53iAd6*90!_Wzyi
hzeD=h$j-F@dGZc<^bYB~L%ROMm6~YFHw00&{(plJInw|D

delta 2655
zcmZuzeQZ<L6~EWde*R7zKRb5p=fnvyv73-jAV9KYVFB{NT38ZwxZNzz?-A_yBfakh
zgGidKV;h@LA-#W$Or0RwB#LOIbeSfto4PS76jV(jqf)H54>W0ibm||A3e%AK$9B(i
zOsZ;EdcSwhJ?EZ#?tSOuEl)f-UiG2VX+vx{a^FwC8(6CH<JF~>zD0~AB$=|-oGot4
z+2i({BkssK<IY@Fyh@kx+3K7t?$T*<wkGF}yK_QZ(0NPNlk>*Cx!QQG&Res-oImc@
zX<N1~7l;QiGN5BfvR_1!<F)}DKqwwOZ-_bn3FOkhd#Vi@ugF<BrD{f1KBv+n_?=%E
zI3A1CX!#Ki&?}bX61YwR06_*Cmy{&UbUHhyoFP`24FS}E$TFK$lwyHMnjtL_J4_kp
z6q%4lAkEXVnp9OnJY~ULn%S9SxR*HSptTbVbk;h|`<RsY>3i1quybwBmNzZ#*Y&5S
zMu&+Rgbv_M#WOOINfc;vT1l{dB+?3E4&VTQ3E&_D%`BgjQ*)}Uxs_Bhn<R-sUQQH9
zBG2Ar5Y+ksz63DDAZ8}IAIBL@zvbHP9%Y0AyNAnzjM1OCTJf>9d#;yobBqZze&&2C
zk<O=J|H^<B-(}C^_l-2^^w74(G5RmJg%Xp8e(1Ji8-2GyaN@H10ymE`PWqjy1}X|}
zTn#dM!egd?tg;yAO&J?q5(JK)H_%ni<C^CaaQ*t2H)K3?!zuXqgdS)xsloyDk?}K`
z$B+rozk38+OFt1rL#AQdy35HYoE1%G`f8J>nVEL&Ol6uX^v*jIsW?|ZjINlkSW;XX
zr3~MwMd)P~X$$5B%e;Bsl4+@^byCA+zY(Rl1<Qh&*@t-12Xh_1;TOiv!YEUQfYFC!
zV4SzYse3BaJfCTQW0%*&F`|<ZX5&xc!gyNKAP5G@^frInSk_&zvODg9yQ;R{-oAH?
z*xbH~r*zrpu2OrSnXZ^IOP05-x3@p;f~{gEWZN;r+%xUC$21Op&Zrmn!M5}dzNRjG
z`TdjuZ{J1{^`gtO?0Jqo!Y-sjDC(mbk??|@*%^FhC+7Fa^Y+)Ugct0u+Kae|&T*$u
z5x>I~am+S1%+^h)@@%;KP<Z^*SHejtsTOA1!jmk?PZ#oS;S(f%_U?)rKAJ74YBGHH
zmJ)t3na#>-I60$&D0_EBNwz;f`9@vcpk_<wrS#dfG?&cAjG8f@%*mRiP-HoiU<od=
z%@|9j6YBX{dAjT~OCTsUF^<G&rY_VT3zw5tFBLB^3F(1l#!Mld*Z5hPD1|&Z3G-iL
zKp)jjEo#oRB<Iz%dOjf)Qi^6ut8z}!j8dA_DSJ94CsKvHnoOy>2c!xXLuo1(sZOA}
z03fW($^B)Z^bFUN+fhz#$XfDsfJuNUfW3%)4Gqs~ct*o#HFI7rvN|!X*?=hOH$_I7
zq5?%|yB6p#RuDRat%nmJ`-BD7$LQ&|(H7rf_54Gqd$XDLZwiqOA@XzS=Jd++s&8ZW
zfrrAuO<`a|82GLFy9>X*@K6}PG+YXX=v%=COUW19;!%y4ejE(rzfh~VfAPS;X7Bh$
z@Azi#$&KEVAN5XrR6n`VJ8?^W>y_2UYp>jByt#X2_s^os7asIZ{HcEO($M7>N@CNd
z*uEjQZ;Cw|V$VZyADjJZDNxT|<4<_x+g0+{UAHgWuP)pex{<t@UCG|~=7XN$2i_y4
zy3lpsvXAMO>LO39CSO<8rDIzT<gC7O^oK{U_A=vc&yS-^QTp7bLww*6nYlo?<QK1-
zm(8V6V<{-o>ozY<hB|{27}d6Y_E<y>Q+UgdoS~;%0pzTIT5>ee=N*y7YwXTm!=oX5
zaVR{}h3+)tktXAvNG;HPFn_22aELJ<)CET({0Dmv^NhK72#>TH@AVCt8MAJ{BYTYN
zoFC{Q9_cWyizc8OVflI!20Ef^?$PNE9lNZf0dBqdkTB}y?mO|Qi@#rG2HI<4g8KoE
zEiSjW?zPwJPvMt#f*6_}OAjR>vCL9g>v<N!q@Ib0n?Z~($C=(ByI~gMOyh{GK%60k
zXHbqI7Cnc<t(dOm!@uPC2<W!ZXtTK3#>kkFK&2z?0384jxsx&97c)!W=qxDgc(V^!
z4*;}L0(DJqpn4kqzg|h8QW8Cj4k6Y?i2!^b05r;&^>c@U^N=C{oQFX5Ax8j?($AXf
z@fZz6hVYwfFGsH7k!qM92N(c&k%7jg^D2Q>LsWos0IxE*g&s3RWDJ1ylrlidDZiop
zEhi#fCeO9`EyP}{DgE{P!B2sE%pu;rWnk3SX-t3BGA4envN|S~PpcnK|1;Q6#pwQ4
zO-Rnpw&x1$Ln`f+!c+dU(f@qlH>P}JPWpprC<Nt3bHN%Vbw<u5mG<PEdWPu7bJ06d
zA72A2-1KkJF#DzXZ`3=iU%!5giy+cnf}?4cezxyiRvsX)GZxyB0^e(k!x%q8-5aR;
c&&d8))bR-IqO&n?&3}wD2JHP50qSP{2hYrMQ2+n{

diff --git a/backend/app/services/auth_service.py b/backend/app/services/auth_service.py
index 7805f84..7694946 100644
--- a/backend/app/services/auth_service.py
+++ b/backend/app/services/auth_service.py
@@ -1,13 +1,15 @@
 from datetime import datetime, timedelta, timezone
 import uuid
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy import select, text
+from sqlalchemy import select, text, cast, String
 from app.models.identity import User, Person, UserRole, VerificationToken, Wallet
 from app.models.organization import Organization
 from app.schemas.auth import UserLiteRegister, UserKYCComplete
 from app.core.security import get_password_hash, verify_password
 from app.services.email_manager import email_manager
 from app.core.config import settings
+from sqlalchemy.orm import joinedload # <--- EZT ADD HOZZÁ AZ IMPORTOKHOZ!
+
 
 class AuthService:
     @staticmethod
@@ -94,47 +96,64 @@ class AuthService:
 
     @staticmethod
     async def complete_kyc(db: AsyncSession, user_id: int, kyc_in: UserKYCComplete):
-        """Step 2: KYC adatok, Telefon, Privát Flotta és Wallet aktiválása."""
+        """Step 2: KYC adatok rögzítése JSON-biztos dátumkezeléssel."""
         try:
-            # 1. User és Person lekérése
-            stmt = select(User).where(User.id == user_id).join(User.person)
+            # 1. User és Person lekérése joinedload-dal (a korábbi hiba javítása)
+            stmt = (
+                select(User)
+                .options(joinedload(User.person))
+                .where(User.id == user_id)
+            )
             result = await db.execute(stmt)
             user = result.scalar_one_or_none()
             
-            if not user:
+            if not user or not user.person:
                 return None
 
-            # 2. Személyes adatok rögzítése (tábla szinten)
+            # 2. Előkészítjük a JSON-kompatibilis adatokat
+            # A mode='json' átalakítja a date objektumokat string-gé!
+            kyc_data_json = kyc_in.model_dump(mode='json')
+
             p = user.person
             p.phone = kyc_in.phone_number
             p.birth_place = kyc_in.birth_place
+            # A sima DATE oszlopba mehet a Python date objektum
             p.birth_date = datetime.combine(kyc_in.birth_date, datetime.min.time())
             p.mothers_name = kyc_in.mothers_name
             
-            # JSONB mezők mentése Pydantic modellekből
-            p.identity_docs = {k: v.dict() for k, v in kyc_in.identity_docs.items()}
-            p.ice_contact = kyc_in.ice_contact.dict()
+            # A JSONB mezőkbe a már stringesített adatokat tesszük
+            p.identity_docs = kyc_data_json["identity_docs"]
+            p.ice_contact = kyc_data_json["ice_contact"]
             p.is_active = True
 
-            # 3. PRIVÁT FLOTTA (Organization) automata generálása
-            new_org = Organization(
-                name=f"{p.last_name} {p.first_name} - Privát Flotta",
-                owner_id=user.id,
-                is_active=True,
-                org_type="individual"
+            # 3. PRIVÁT FLOTTA (Organization)
+            # Megnézzük, létezik-e már (idempotencia)
+            org_stmt = select(Organization).where(
+                Organization.owner_id == user.id, 
+                cast(Organization.org_type, String) == "individual"
             )
-            db.add(new_org)
-            await db.flush()
+            org_res = await db.execute(org_stmt)
+            existing_org = org_res.scalar_one_or_none()
+            
+            if not existing_org:
+                new_org = Organization(
+                    name=f"{p.last_name} {p.first_name} - Privát Flotta",
+                    owner_id=user.id,
+                    is_active=True,
+                    org_type="individual",
+                    is_verified=True,
+                    is_transferable=True
+                )
+                db.add(new_org)
 
-            # 4. WALLET automata generálása
-            new_wallet = Wallet(
-                user_id=user.id,
-                coin_balance=0.00,
-                xp_balance=0
-            )
-            db.add(new_wallet)
+            # 4. WALLET
+            wallet_stmt = select(Wallet).where(Wallet.user_id == user.id)
+            wallet_res = await db.execute(wallet_stmt)
+            if not wallet_res.scalar_one_or_none():
+                new_wallet = Wallet(user_id=user.id, coin_balance=0.0, xp_balance=0)
+                db.add(new_wallet)
 
-            # 5. USER TELJES AKTIVÁLÁSA
+            # 5. USER AKTIVÁLÁSA
             user.is_active = True
             
             await db.commit()
@@ -142,6 +161,7 @@ class AuthService:
             return user
         except Exception as e:
             await db.rollback()
+            print(f"CRITICAL KYC ERROR: {str(e)}")
             raise e
 
     @staticmethod