@acorex-platform/module-security-management-client 0.0.15 → 0.0.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acorex-platform/module-security-management-client",
-  "version": "0.0.15",
+  "version": "0.0.18",
   "sideEffects": false,
   "peerDependencies": {
     "@angular/common": "^21.0.0",

package/types/acorex-platform-module-security-management-client-contracts.d.ts

@@ -130,6 +130,44 @@ declare enum AXMUserEffectiveState {
     CredentialExpired = "credential-expired"
 }
 
+/**
+ * Derives the unified operational state from account lifecycle and sign-in gate.
+ * Used for persisted `effectiveState` on SecurityManagement.User.
+ */
+declare function resolveAXMUserEffectiveState(input: {
+    accountState: string | undefined;
+    accessState: AXMUserAccessState | string | undefined;
+}): AXMUserEffectiveState;
+
+/**
+ * One-time password-reset token state stored as JSON on SecurityManagement.User.
+ * The raw token is never persisted — only a SHA-256 hash.
+ */
+interface AXMUserPasswordResetInfo {
+    tokenHash: string;
+    expiresAt: string;
+    sentAt: string;
+}
+
+declare const AXMSecurityManagementServerCommands: {
+    readonly SendPasswordResetEmail: "SecurityManagement:Server:SendPasswordResetEmail";
+    readonly CompletePasswordReset: "SecurityManagement:Server:CompletePasswordReset";
+};
+/** Client/UI action key (confirm dialog → server send). */
+declare const AXM_USER_SEND_PASSWORD_RESET_COMMAND = "SecurityManagement:User:SendPasswordResetEmail";
+interface AXMSendPasswordResetEmailInput {
+    /** Admin path: target user id. */
+    userId?: string;
+    /** Forgot path: email or username. */
+    login?: string;
+    /** Optional absolute web origin for reset link (defaults to env / localhost). */
+    webOrigin?: string;
+}
+interface AXMCompletePasswordResetInput {
+    token: string;
+    newPassword: string;
+}
+
 declare function deviceSessionsFactory(): Promise<AXPEntity | null>;
 
 declare enum AXMSessionStatusTypes {
@@ -212,6 +250,8 @@ interface AXMSecurityManagementUsersEntityModel extends AXPEntityModel<string> {
     id: string;
     username: string;
     displayName: string;
+    /** Globally unique login email (required for password-reset email). */
+    email?: string;
     password: string;
     /** Profile photo file storage id or external URL. */
     avatar?: string | null;
@@ -222,7 +262,13 @@ interface AXMSecurityManagementUsersEntityModel extends AXPEntityModel<string> {
     effectiveState?: AXMUserEffectiveState | string;
     /** Sign-in gate (read-only in UI); lockout and credential expiry map here, not to `accountState`. */
     accessState?: AXMUserAccessState;
+    /** ISO timestamp of last successful password change. */
+    passwordChangedAt?: string | null;
+    /** ISO timestamp of last successful sign-in. */
+    lastSignInAt?: string | null;
+    /** Active password-reset challenge (hidden from UI). */
+    passwordReset?: AXMUserPasswordResetInfo | null;
 }
 
-export { AXMSecurityManagementDataSourceKeys, AXMSessionStatusTypes, AXMUserAccessState, AXMUserEffectiveState, AXM_USER_ACCESS_STATE_DEFINITION_KEY, AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY, AXPSecurityManagementFeatureKeys, AXPSecurityManagementMenuKeys, AXPSecurityManagementPermissionKeys, RootConfig, deviceSessionsFactory, policyFactory, profileFactory, rolesFactory, usersFactory };
-export type { AXMPolicyEffect, AXMPolicyEffectRule, AXMPolicyScope, AXMSecurityManagementDeviceSessionsEntityModel, AXMSecurityManagementPolicyEntityModel, AXMSecurityManagementProfileEntityModel, AXMSecurityManagementRolesEntityModel, AXMSecurityManagementUsersEntityModel };
+export { AXMSecurityManagementDataSourceKeys, AXMSecurityManagementServerCommands, AXMSessionStatusTypes, AXMUserAccessState, AXMUserEffectiveState, AXM_USER_ACCESS_STATE_DEFINITION_KEY, AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY, AXM_USER_SEND_PASSWORD_RESET_COMMAND, AXPSecurityManagementFeatureKeys, AXPSecurityManagementMenuKeys, AXPSecurityManagementPermissionKeys, RootConfig, deviceSessionsFactory, policyFactory, profileFactory, resolveAXMUserEffectiveState, rolesFactory, usersFactory };
+export type { AXMCompletePasswordResetInput, AXMPolicyEffect, AXMPolicyEffectRule, AXMPolicyScope, AXMSecurityManagementDeviceSessionsEntityModel, AXMSecurityManagementPolicyEntityModel, AXMSecurityManagementProfileEntityModel, AXMSecurityManagementRolesEntityModel, AXMSecurityManagementUsersEntityModel, AXMSendPasswordResetEmailInput, AXMUserPasswordResetInfo };