@acorex-platform/module-security-management-client 0.0.58 → 0.0.60

package/fesm2022/{acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-BSGZRsGz.mjs → acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-B61j_cJF.mjs}

@@ -1,18 +1,20 @@
 import * as i0 from '@angular/core';
-import { Injectable, NgModule, inject, signal, input, computed, output, ChangeDetectionStrategy, ViewEncapsulation, Component, effect, untracked } from '@angular/core';
+import { Injectable, inject, NgModule, signal, input, computed, output, ChangeDetectionStrategy, ViewEncapsulation, Component, effect, untracked } from '@angular/core';
 import { AXPSessionService, AXP_PERMISSION_DEFINITION_PROVIDER, AXPPermissionDefinitionService } from '@acorex-platform/framework-client/auth';
-import { AXPSearchCommandProvider, createEntitySearchCommand, AXP_MENU_PROVIDER, AXP_SEARCH_PROVIDER, AXP_STATUS_PROVIDERS, AXPSettingsService, AXPCommonSettings } from '@acorex-platform/framework-client/common';
+import { AXPSearchCommandProvider, createEntitySearchCommand, AXP_MENU_PROVIDER, AXP_SEARCH_PROVIDER, AXP_STATUS_PROVIDERS, AXP_SETTING_DEFINITION_PROVIDER, AXPSettingsService, AXPCommonSettings } from '@acorex-platform/framework-client/common';
 import { AXP_EXPRESSION_EVALUATOR_SCOPE_PROVIDER, AXP_FEATURE_DEFINITION_PROVIDER, AXP_CONTEXT_DEFINITION_PROVIDER, provideLazyProvider, setupPopupFooterKeyboardShortcuts, AXPEntityBroadcastService, AXPDialogOpener } from '@acorex-platform/framework-client/core';
 import { AXP_PAGE_COMPONENT_PROVIDER, AXPStateMessageComponent } from '@acorex-platform/framework-client/layout/components';
+import { AXPEntityService, AXP_ENTITY_STORAGE_MIDDLEWARE, AXP_ENTITY_MODIFIER, AXPEntityDefinitionRegistryService, dispatchEntityModifiedSideEffects } from '@acorex-platform/framework-client/layout/entity';
 import { provideCommandSetups, AXPCommandService } from '@acorex-platform/framework-client/runtime';
+import { HTTP_INTERCEPTORS } from '@angular/common/http';
+import { RootConfig, AXP_DEVICE_SESSION_TENANT_SESSIONS_VIEW, AXP_DEVICE_SESSION_ADMIN_SCOPE_PARAM, AXP_DEVICE_SESSION_ADMIN_SCOPE_HEADER, AXPSecurityManagementFeatureKeys, AXM_USER_ACCESS_STATE_DEFINITION_KEY, AXMUserAccessState, AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY, AXMUserEffectiveState, AXPSecurityManagementMenuKeys, AXPAdministrationPermissionKeys, isUserProvisioningListAction, userProvisioningListActions, ROLE_PERMISSIONS_PAGE_COMPONENT_KEY } from '@acorex-platform/module-security-management-client/contracts';
+import { Router } from '@angular/router';
 import { AXM_SECURITY_CONTEXT_DEFINITIONS } from '@acorex-platform/module-security-management-client/contracts';
-import { RootConfig, AXPSecurityManagementFeatureKeys, AXM_USER_ACCESS_STATE_DEFINITION_KEY, AXMUserAccessState, AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY, AXMUserEffectiveState, AXPSecurityManagementMenuKeys, AXPAdministrationPermissionKeys, ROLE_PERMISSIONS_PAGE_COMPONENT_KEY } from '@acorex-platform/module-security-management-client/contracts';
 import { AXPWidgetsList, AXPStatusProvider, AXPSystemStatusType } from '@acorex-platform/framework-shared/core';
 import { AXPWidgetCoreModule, AXP_WIDGET_DEFINITION_PROVIDER, AXPValueWidgetComponent, AXPColumnWidgetComponent } from '@acorex-platform/framework-client/layout/widget-core';
 import { AXPWidgetGroupEnum } from '@acorex-platform/framework-shared/widget-core';
 import { AXP_NAME_PROPERTY, AXP_DATA_PATH_PROPERTY, AXP_DISABLED_PROPERTY } from '@acorex-platform/framework-client/layout/widgets';
 import { AXPCommonMenuKeys, AXPCommonPermissionGroupKeys } from '@acorex-platform/module-common-client/contracts';
-import { AXPEntityService, AXPEntityDefinitionRegistryService, dispatchEntityModifiedSideEffects } from '@acorex-platform/framework-client/layout/entity';
 import * as i1 from '@angular/common';
 import { CommonModule } from '@angular/common';
 import { AXBasePageComponent } from '@acorex/components/page';
@@ -61,6 +63,113 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
             type: Injectable
         }] });
 
+//#region ----- Imports -----
+//#endregion
+//#region ----- Device Sessions admin scope (client) -----
+const DEVICE_SESSIONS_ENTITY_NAME = `${RootConfig.module.name}.${RootConfig.entities.deviceSessions.name}`;
+/** Resolve admin scope from the entity list route (`?view=tenant-sessions`). */
+function resolveDeviceSessionAdminScopeFromUrl(url) {
+    if (!url) {
+        return 'application';
+    }
+    try {
+        const parsed = new URL(url, 'http://local.invalid');
+        const view = parsed.searchParams.get('view')?.trim();
+        if (view === AXP_DEVICE_SESSION_TENANT_SESSIONS_VIEW) {
+            return 'tenant';
+        }
+    }
+    catch {
+        // Fall through — treat as application-sessions.
+    }
+    if (url.includes(`view=${AXP_DEVICE_SESSION_TENANT_SESSIONS_VIEW}`)) {
+        return 'tenant';
+    }
+    return 'application';
+}
+function withDeviceSessionAdminScopeParam(params, scope) {
+    return {
+        ...(params ?? {}),
+        [AXP_DEVICE_SESSION_ADMIN_SCOPE_PARAM]: scope,
+    };
+}
+//#endregion
+
+//#region ----- Imports -----
+//#endregion
+//#region ----- Device Sessions admin scope interceptor -----
+/**
+ * Attaches admin-scope header for DeviceSessions runtime calls so getOne /
+ * update / delete honor the same operation as the open list view.
+ */
+class DeviceSessionsAdminScopeInterceptor {
+    constructor() {
+        this.router = inject(Router);
+    }
+    intercept(request, next) {
+        if (!this.targetsDeviceSessions(request)) {
+            return next.handle(request);
+        }
+        const scope = resolveDeviceSessionAdminScopeFromUrl(this.router.url);
+        return next.handle(request.clone({
+            setHeaders: {
+                [AXP_DEVICE_SESSION_ADMIN_SCOPE_HEADER]: scope,
+            },
+        }));
+    }
+    targetsDeviceSessions(request) {
+        const body = request.body;
+        if (body && typeof body === 'object' && !Array.isArray(body)) {
+            const record = body;
+            const input = record['input'];
+            const entityFromInput = input && typeof input === 'object' && !Array.isArray(input)
+                ? input['entity']
+                : undefined;
+            const entity = record['entity'] ?? entityFromInput;
+            if (entity === DEVICE_SESSIONS_ENTITY_NAME) {
+                return true;
+            }
+        }
+        const entityQuery = request.params?.get?.('entity');
+        if (entityQuery === DEVICE_SESSIONS_ENTITY_NAME) {
+            return true;
+        }
+        return request.url.includes('/DeviceSessions') || request.url.includes('DeviceSessions');
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: DeviceSessionsAdminScopeInterceptor, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: DeviceSessionsAdminScopeInterceptor }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: DeviceSessionsAdminScopeInterceptor, decorators: [{
+            type: Injectable
+        }] });
+
+//#region ----- Imports -----
+//#endregion
+//#region ----- Device Sessions admin scope (client entity middleware) -----
+/**
+ * Injects explicit `deviceSessionAdminScope` on DeviceSessions queries from the
+ * active list view (`tenant-sessions` vs default application sessions).
+ */
+const deviceSessionsAdminScopeMiddleware = {
+    target: {
+        ops: ['query'],
+        entity: DEVICE_SESSIONS_ENTITY_NAME,
+        order: 8,
+    },
+    execute: async (ctx, next) => {
+        const router = inject(Router);
+        const scope = resolveDeviceSessionAdminScopeFromUrl(router.url);
+        if (ctx.request) {
+            ctx.request = {
+                ...ctx.request,
+                params: withDeviceSessionAdminScopeParam(ctx.request.params, scope),
+            };
+        }
+        await next();
+    },
+};
+//#endregion
+
 //#region ---- User context definitions ----
 class AXMSecurityManagementContextDefinitionProvider {
     async items() {
@@ -597,11 +706,19 @@ class AXMUserStatusProvider extends AXPStatusProvider {
 }
 //#endregion
 
+/** TM Standard edition — Administration uses Tenant Users / Sessions instead of Security. */
+const TENANT_CONSOLE_FEATURE = 'TenantManagement:Feature:TenantConsole';
 class AXMMenuProvider {
     constructor() {
         this.entityService = inject(AXPEntityService);
+        this.sessionService = inject(AXPSessionService);
     }
     async provide(context) {
+        // TM application: hide application-scoped Security (Users / Roles / Sessions).
+        // Tenant-wide menus come from TenantManagement menu provider.
+        if (this.sessionService.isFeatureEnabled(TENANT_CONSOLE_FEATURE)) {
+            return;
+        }
         const moduleName = RootConfig.module.name;
         // Check if Security submenu exists under Administration, create it if not
         const securityMenu = context.find(AXPSecurityManagementMenuKeys.Root);
@@ -749,18 +866,59 @@ class AXMSearchCommandProvider extends AXPSearchCommandProvider {
     }
 }
 
+//#region ----- Imports -----
+//#endregion
+//#region ----- User provisioning modifier -----
+/**
+ * Demo loads User from `Domain:GetEntityLayout`, so the packaged factory is not the layout
+ * the list renders. Rewrite the server actions in memory after that load.
+ */
+const AXMUserProvisioningEntityModifier = {
+    entityName: RootConfig.entities.users.name,
+    order: 200,
+    modifier: (ctx) => {
+        if (ctx.module.get() !== RootConfig.module.name) {
+            return;
+        }
+        ctx.interfaces.master.list.update((current) => {
+            const kept = (current?.actions ?? []).filter((action) => !isUserProvisioningListAction(action));
+            return {
+                views: current?.views ?? [],
+                ...current,
+                actions: [...userProvisioningListActions(), ...kept],
+            };
+        });
+    },
+};
+//#endregion
+
 class AXMSecurityManagementModule {
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXMSecurityManagementModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
     static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "22.0.8", ngImport: i0, type: AXMSecurityManagementModule, imports: [AXMPermissionsModule] }); }
     static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXMSecurityManagementModule, providers: [
             // Module-specific providers (not part of manifest system)
+            {
+                provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                useValue: deviceSessionsAdminScopeMiddleware,
+                multi: true,
+            },
+            {
+                provide: AXP_ENTITY_MODIFIER,
+                useValue: AXMUserProvisioningEntityModifier,
+                multi: true,
+            },
+            {
+                provide: HTTP_INTERCEPTORS,
+                useClass: DeviceSessionsAdminScopeInterceptor,
+                multi: true,
+            },
             {
                 provide: AXP_EXPRESSION_EVALUATOR_SCOPE_PROVIDER,
                 useClass: AXMSecurityManagementEvaluatorScopeProvider,
                 multi: true,
             },
             provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => Promise.resolve().then(function () { return index; }).then((m) => m.AXMRolePermissionsPageComponentProvider)),
-            provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-security-management-client-index-DKk9lEIl.mjs').then((m) => m.AXMUserRolesPageComponentProvider)),
+            provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-security-management-client-index-B6qo6qLT.mjs').then((m) => m.AXMUserRolesPageComponentProvider)),
             // Provider references (now using tokens)
             {
                 provide: AXP_PERMISSION_DEFINITION_PROVIDER,
@@ -807,6 +965,7 @@ class AXMSecurityManagementModule {
                 useClass: AXMSecurityManagementContextDefinitionProvider,
                 multi: true,
             },
+            provideLazyProvider(AXP_SETTING_DEFINITION_PROVIDER, () => import('./acorex-platform-module-security-management-client-settings.provider-CwDiU-C8.mjs').then((m) => m.AXMSecurityManagementSettingProvider)),
             provideCommandSetups([
                 {
                     key: 'Session:Terminate',
@@ -814,15 +973,19 @@ class AXMSecurityManagementModule {
                 },
                 {
                     key: 'SecurityManagement:User:SendPasswordResetEmail',
-                    command: () => import('./acorex-platform-module-security-management-client-send-password-reset-email.command-CoQgWdya.mjs').then((c) => c.AXPSendPasswordResetEmailCommand),
+                    command: () => import('./acorex-platform-module-security-management-client-send-password-reset-email.command-DFxm2T_x.mjs').then((c) => c.AXPSendPasswordResetEmailCommand),
                 },
                 {
                     key: 'SecurityManagement:User:ResetTwoFactor',
-                    command: () => import('./acorex-platform-module-security-management-client-reset-two-factor.command-psTDKoNf.mjs').then((c) => c.AXPResetTwoFactorCommand),
+                    command: () => import('./acorex-platform-module-security-management-client-reset-two-factor.command-C27mUZ1-.mjs').then((c) => c.AXPResetTwoFactorCommand),
                 },
                 {
                     key: 'SecurityManagement:User:Invite',
-                    command: () => import('./acorex-platform-module-security-management-client-invite-user.command-kFXjLdxy.mjs').then((c) => c.AXPInviteUserCommand),
+                    command: () => import('./acorex-platform-module-security-management-client-invite-user.command-ClQ6WxxN.mjs').then((c) => c.AXPInviteUserCommand),
+                },
+                {
+                    key: 'SecurityManagement:User:CreateInTenant',
+                    command: () => import('./acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs').then((c) => c.AXPCreateUserInTenantCommand),
                 },
                 {
                     key: 'SecurityManagement:User:ResendInvitation',
@@ -832,6 +995,14 @@ class AXMSecurityManagementModule {
                     key: 'SecurityManagement:User:CancelInvitation',
                     command: () => import('./acorex-platform-module-security-management-client-cancel-invitation.command-C3iaOEKI.mjs').then((c) => c.AXPCancelInvitationCommand),
                 },
+                {
+                    key: 'SecurityManagement:User:ApproveJoinRequest',
+                    command: () => import('./acorex-platform-module-security-management-client-approve-join-request.command-BSvK59LV.mjs').then((c) => c.AXPApproveJoinRequestCommand),
+                },
+                {
+                    key: 'SecurityManagement:User:RejectJoinRequest',
+                    command: () => import('./acorex-platform-module-security-management-client-reject-join-request.command-B3kiok6b.mjs').then((c) => c.AXPRejectJoinRequestCommand),
+                },
             ]),
         ], imports: [AXMPermissionsModule] }); }
 }
@@ -845,13 +1016,28 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
                     declarations: [],
                     providers: [
                         // Module-specific providers (not part of manifest system)
+                        {
+                            provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                            useValue: deviceSessionsAdminScopeMiddleware,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_ENTITY_MODIFIER,
+                            useValue: AXMUserProvisioningEntityModifier,
+                            multi: true,
+                        },
+                        {
+                            provide: HTTP_INTERCEPTORS,
+                            useClass: DeviceSessionsAdminScopeInterceptor,
+                            multi: true,
+                        },
                         {
                             provide: AXP_EXPRESSION_EVALUATOR_SCOPE_PROVIDER,
                             useClass: AXMSecurityManagementEvaluatorScopeProvider,
                             multi: true,
                         },
                         provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => Promise.resolve().then(function () { return index; }).then((m) => m.AXMRolePermissionsPageComponentProvider)),
-                        provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-security-management-client-index-DKk9lEIl.mjs').then((m) => m.AXMUserRolesPageComponentProvider)),
+                        provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-security-management-client-index-B6qo6qLT.mjs').then((m) => m.AXMUserRolesPageComponentProvider)),
                         // Provider references (now using tokens)
                         {
                             provide: AXP_PERMISSION_DEFINITION_PROVIDER,
@@ -898,6 +1084,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
                             useClass: AXMSecurityManagementContextDefinitionProvider,
                             multi: true,
                         },
+                        provideLazyProvider(AXP_SETTING_DEFINITION_PROVIDER, () => import('./acorex-platform-module-security-management-client-settings.provider-CwDiU-C8.mjs').then((m) => m.AXMSecurityManagementSettingProvider)),
                         provideCommandSetups([
                             {
                                 key: 'Session:Terminate',
@@ -905,15 +1092,19 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
                             },
                             {
                                 key: 'SecurityManagement:User:SendPasswordResetEmail',
-                                command: () => import('./acorex-platform-module-security-management-client-send-password-reset-email.command-CoQgWdya.mjs').then((c) => c.AXPSendPasswordResetEmailCommand),
+                                command: () => import('./acorex-platform-module-security-management-client-send-password-reset-email.command-DFxm2T_x.mjs').then((c) => c.AXPSendPasswordResetEmailCommand),
                             },
                             {
                                 key: 'SecurityManagement:User:ResetTwoFactor',
-                                command: () => import('./acorex-platform-module-security-management-client-reset-two-factor.command-psTDKoNf.mjs').then((c) => c.AXPResetTwoFactorCommand),
+                                command: () => import('./acorex-platform-module-security-management-client-reset-two-factor.command-C27mUZ1-.mjs').then((c) => c.AXPResetTwoFactorCommand),
                             },
                             {
                                 key: 'SecurityManagement:User:Invite',
-                                command: () => import('./acorex-platform-module-security-management-client-invite-user.command-kFXjLdxy.mjs').then((c) => c.AXPInviteUserCommand),
+                                command: () => import('./acorex-platform-module-security-management-client-invite-user.command-ClQ6WxxN.mjs').then((c) => c.AXPInviteUserCommand),
+                            },
+                            {
+                                key: 'SecurityManagement:User:CreateInTenant',
+                                command: () => import('./acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs').then((c) => c.AXPCreateUserInTenantCommand),
                             },
                             {
                                 key: 'SecurityManagement:User:ResendInvitation',
@@ -923,6 +1114,14 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
                                 key: 'SecurityManagement:User:CancelInvitation',
                                 command: () => import('./acorex-platform-module-security-management-client-cancel-invitation.command-C3iaOEKI.mjs').then((c) => c.AXPCancelInvitationCommand),
                             },
+                            {
+                                key: 'SecurityManagement:User:ApproveJoinRequest',
+                                command: () => import('./acorex-platform-module-security-management-client-approve-join-request.command-BSvK59LV.mjs').then((c) => c.AXPApproveJoinRequestCommand),
+                            },
+                            {
+                                key: 'SecurityManagement:User:RejectJoinRequest',
+                                command: () => import('./acorex-platform-module-security-management-client-reject-join-request.command-B3kiok6b.mjs').then((c) => c.AXPRejectJoinRequestCommand),
+                            },
                         ]),
                     ],
                 }]
@@ -2178,4 +2377,4 @@ var permissionsWidgetColumn_component = /*#__PURE__*/Object.freeze({
  */
 
 export { AXMAssignPermissionsCommand as A, AXMDeviceSessionsService as a, AXMPermissionsModule as b, AXMRolePermissionGrantService as c, AXMRolePermissionsPageComponent as d, AXMRolePermissionsPageComponentProvider as e, AXMSecurityManagementModule as f, AXPPermissionsEditorComponent as g, AXPPermissionsWidget as h, AXPPermissionsWidgetColumnComponent as i, AXPPermissionsWidgetEditComponent as j, AXPPermissionsWidgetViewComponent as k, resolvePersistedEntityId as r };
-//# sourceMappingURL=acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-BSGZRsGz.mjs.map
+//# sourceMappingURL=acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-B61j_cJF.mjs.map