@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42

package/contracts/src/entities/identity-provider/identity-provider.entity.js

@@ -0,0 +1,453 @@
+"use strict";
+//#region ---- Imports ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identityProviderFactory = identityProviderFactory;
+const tslib_1 = require("tslib");
+const core_1 = require("@acorex-platform/framework-shared/core");
+const entity_1 = require("@acorex-platform/framework-shared/entity");
+const root_config_1 = require("../../root-config");
+const identity_provider_types_1 = require("./identity-provider.types");
+//#endregion
+//#region ---- Constants ----
+const SECTION_LAYOUT = { positions: { lg: { colSpan: 12 } } };
+const VISIBLE_WHEN_OIDC = `{{ !context.eval('protocol') || context.eval('protocol') == '${identity_provider_types_1.AXM_IDENTITY_PROVIDER_PROTOCOL.Oidc}' }}`;
+const VISIBLE_WHEN_DIRECTORY = `{{ context.eval('protocol') == '${identity_provider_types_1.AXM_IDENTITY_PROVIDER_PROTOCOL.Directory}' }}`;
+const PROTOCOL_ITEMS = [
+    {
+        name: identity_provider_types_1.AXM_IDENTITY_PROVIDER_PROTOCOL.Oidc,
+        title: `@${root_config_1.RootConfig.config.i18n}:identity-providers.entities.identity-provider.fields.protocol.options.oidc`,
+    },
+    {
+        name: identity_provider_types_1.AXM_IDENTITY_PROVIDER_PROTOCOL.Directory,
+        title: `@${root_config_1.RootConfig.config.i18n}:identity-providers.entities.identity-provider.fields.protocol.options.directory`,
+    },
+];
+const MASTER_SECTIONS = [
+    { id: 'basic-info', layout: SECTION_LAYOUT },
+    {
+        id: 'endpoints',
+        layout: Object.assign(Object.assign({}, SECTION_LAYOUT), { visible: VISIBLE_WHEN_OIDC }),
+    },
+    {
+        id: 'directory',
+        layout: Object.assign(Object.assign({}, SECTION_LAYOUT), { visible: VISIBLE_WHEN_DIRECTORY }),
+    },
+    { id: 'credentials', layout: SECTION_LAYOUT },
+];
+const MASTER_PROPERTIES = [
+    { name: 'protocol', layout: { positions: { lg: { colSpan: 6, order: 1 } } } },
+    { name: 'key', layout: { positions: { lg: { colSpan: 6, order: 2 } } } },
+    { name: 'title', layout: { positions: { lg: { colSpan: 6, order: 3 } } } },
+    { name: 'icon', layout: { positions: { lg: { colSpan: 6, order: 4 } } } },
+    { name: 'priority', layout: { positions: { lg: { colSpan: 6, order: 5 } } } },
+    { name: 'issuerUrl', layout: { positions: { lg: { colSpan: 12, order: 6 } } } },
+    {
+        name: 'authorizationUrl',
+        layout: { positions: { lg: { colSpan: 12, order: 7 } }, visible: VISIBLE_WHEN_OIDC },
+    },
+    {
+        name: 'tokenUrl',
+        layout: { positions: { lg: { colSpan: 12, order: 8 } }, visible: VISIBLE_WHEN_OIDC },
+    },
+    {
+        name: 'userInfoUrl',
+        layout: { positions: { lg: { colSpan: 12, order: 9 } }, visible: VISIBLE_WHEN_OIDC },
+    },
+    {
+        name: 'scopes',
+        layout: { positions: { lg: { colSpan: 12, order: 10 } }, visible: VISIBLE_WHEN_OIDC },
+    },
+    {
+        name: 'directoryUrl',
+        layout: { positions: { lg: { colSpan: 12, order: 11 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    {
+        name: 'directoryBaseDn',
+        layout: { positions: { lg: { colSpan: 12, order: 12 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    {
+        name: 'directoryUserDnTemplate',
+        layout: { positions: { lg: { colSpan: 12, order: 13 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    {
+        name: 'directoryUserSearchFilter',
+        layout: { positions: { lg: { colSpan: 12, order: 14 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    {
+        name: 'directoryUseTls',
+        layout: { positions: { lg: { colSpan: 6, order: 15 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    {
+        name: 'directoryTlsRejectUnauthorized',
+        layout: { positions: { lg: { colSpan: 6, order: 16 } }, visible: VISIBLE_WHEN_DIRECTORY },
+    },
+    { name: 'clientId', layout: { positions: { lg: { colSpan: 6, order: 17 } } } },
+    { name: 'clientSecret', layout: { positions: { lg: { colSpan: 6, order: 18 } } } },
+];
+//#endregion
+//#region ---- Entity factory ----
+function identityProviderFactory() {
+    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+        const i18n = root_config_1.RootConfig.config.i18n;
+        const entityI18n = `@${i18n}:identity-providers.entities.identity-provider`;
+        const entityDef = {
+            module: root_config_1.RootConfig.module.name,
+            name: root_config_1.RootConfig.entities.identityProvider.name,
+            title: root_config_1.RootConfig.entities.identityProvider.title,
+            icon: root_config_1.RootConfig.entities.identityProvider.icon,
+            searchTags: [
+                'identity-provider',
+                'identity-providers',
+                'idp',
+                'oauth',
+                'saml',
+                'oidc',
+                'federation',
+                'google',
+                'microsoft',
+                'client-id',
+                'ارائه‌دهنده هویت',
+                'ارائه‌دهندگان هویت',
+                'ورود خارجی',
+                'احراز هویت',
+            ],
+            formats: {
+                individual: root_config_1.RootConfig.entities.identityProvider.title,
+                plural: root_config_1.RootConfig.entities.identityProvider.titlePlural,
+                searchResult: {
+                    title: '{{ title }}',
+                    description: root_config_1.RootConfig.module.title,
+                },
+            },
+            plugins: [
+                { name: 'history' },
+                { name: 'disable' },
+                { name: 'unique-fields', options: { fields: 'key', scope: 'global' } },
+            ],
+            relatedEntities: [],
+            groups: [
+                {
+                    id: 'basic-info',
+                    title: `@general:terms.interface.basic-info`,
+                },
+                {
+                    id: 'endpoints',
+                    title: `${entityI18n}.groups.endpoints`,
+                },
+                {
+                    id: 'directory',
+                    title: `${entityI18n}.groups.directory`,
+                },
+                {
+                    id: 'credentials',
+                    title: `${entityI18n}.groups.credentials`,
+                },
+            ],
+            properties: [
+                {
+                    name: 'protocol',
+                    title: `${entityI18n}.fields.protocol.title`,
+                    description: `${entityI18n}.fields.protocol.description`,
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: true },
+                        filter: { advance: { enabled: true }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        defaultValue: identity_provider_types_1.AXM_IDENTITY_PROVIDER_PROTOCOL.Oidc,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.select,
+                            options: {
+                                valueField: 'name',
+                                textField: 'title',
+                                multiple: false,
+                                dataSource: PROTOCOL_ITEMS,
+                            },
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'key',
+                    title: `${entityI18n}.fields.key.title`,
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: true },
+                        filter: { advance: { enabled: true }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'title',
+                    title: '@general:terms.common.title',
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: true },
+                        filter: { advance: { enabled: true }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'icon',
+                    title: `${entityI18n}.fields.icon.title`,
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'priority',
+                    title: `${entityI18n}.fields.priority.title`,
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: true },
+                        filter: { advance: { enabled: true }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'number',
+                        defaultValue: 100,
+                        interface: { type: core_1.AXPWidgetsCatalog.number },
+                    },
+                },
+                {
+                    name: 'issuerUrl',
+                    title: `${entityI18n}.fields.issuer-url.title`,
+                    description: `${entityI18n}.fields.issuer-url.description`,
+                    groupId: 'basic-info',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'authorizationUrl',
+                    title: `${entityI18n}.fields.authorization-url.title`,
+                    groupId: 'endpoints',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_OIDC,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'tokenUrl',
+                    title: `${entityI18n}.fields.token-url.title`,
+                    groupId: 'endpoints',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_OIDC,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'userInfoUrl',
+                    title: `${entityI18n}.fields.user-info-url.title`,
+                    groupId: 'endpoints',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_OIDC,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'scopes',
+                    title: `${entityI18n}.fields.scopes.title`,
+                    groupId: 'endpoints',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        defaultValue: 'openid email profile',
+                        visible: VISIBLE_WHEN_OIDC,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'directoryUrl',
+                    title: `${entityI18n}.fields.directory-url.title`,
+                    description: `${entityI18n}.fields.directory-url.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'directoryBaseDn',
+                    title: `${entityI18n}.fields.directory-base-dn.title`,
+                    description: `${entityI18n}.fields.directory-base-dn.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'directoryUserDnTemplate',
+                    title: `${entityI18n}.fields.directory-user-dn-template.title`,
+                    description: `${entityI18n}.fields.directory-user-dn-template.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'directoryUserSearchFilter',
+                    title: `${entityI18n}.fields.directory-user-search-filter.title`,
+                    description: `${entityI18n}.fields.directory-user-search-filter.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'directoryUseTls',
+                    title: `${entityI18n}.fields.directory-use-tls.title`,
+                    description: `${entityI18n}.fields.directory-use-tls.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'boolean',
+                        defaultValue: false,
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.toggle },
+                    },
+                },
+                {
+                    name: 'directoryTlsRejectUnauthorized',
+                    title: `${entityI18n}.fields.directory-tls-reject-unauthorized.title`,
+                    description: `${entityI18n}.fields.directory-tls-reject-unauthorized.description`,
+                    groupId: 'directory',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'boolean',
+                        defaultValue: true,
+                        visible: VISIBLE_WHEN_DIRECTORY,
+                        interface: { type: core_1.AXPWidgetsCatalog.toggle },
+                    },
+                },
+                {
+                    name: 'clientId',
+                    title: `${entityI18n}.fields.client-id.title`,
+                    description: `${entityI18n}.fields.client-id.description`,
+                    groupId: 'credentials',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.text },
+                    },
+                },
+                {
+                    name: 'clientSecret',
+                    title: `${entityI18n}.fields.client-secret.title`,
+                    description: `${entityI18n}.fields.client-secret.description`,
+                    groupId: 'credentials',
+                    options: {
+                        sort: { enabled: false },
+                        filter: { advance: { enabled: false }, inline: { enabled: false } },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: { type: core_1.AXPWidgetsCatalog.password },
+                    },
+                },
+            ],
+            columns: [{ name: 'protocol' }, { name: 'key' }, { name: 'title' }, { name: 'priority' }],
+            interfaces: {
+                master: {
+                    create: {
+                        sections: [...MASTER_SECTIONS],
+                        properties: [...MASTER_PROPERTIES],
+                    },
+                    update: {
+                        sections: [...MASTER_SECTIONS],
+                        properties: [...MASTER_PROPERTIES],
+                    },
+                    single: {
+                        title: '{{title}}',
+                        sections: [...MASTER_SECTIONS],
+                        properties: [...MASTER_PROPERTIES],
+                        actions: [...(0, entity_1.entityMasterRecordActions)()],
+                    },
+                    list: {
+                        actions: [...(0, entity_1.entityMasterCrudActions)()],
+                        views: [
+                            (0, entity_1.createAllQueryView)({
+                                sorts: [
+                                    { name: 'priority', dir: 'asc' },
+                                    { name: 'title', dir: 'asc' },
+                                ],
+                            }),
+                        ],
+                    },
+                },
+            },
+        };
+        return entityDef;
+    });
+}
+//#endregion
+//# sourceMappingURL=identity-provider.entity.js.map

package/contracts/src/entities/identity-provider/identity-provider.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-provider.entity.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/identity-provider/identity-provider.entity.ts"],"names":[],"mappings":";AAAA,2BAA2B;;AAiG3B,0DA0WC;;AAzcD,iEAA2E;AAC3E,qEAA6I;AAC7I,mDAA+C;AAC/C,uEAA2E;AAE3E,YAAY;AAEZ,6BAA6B;AAE7B,MAAM,cAAc,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAW,CAAC;AAEvE,MAAM,iBAAiB,GACrB,gEAAgE,wDAA8B,CAAC,IAAI,MAAM,CAAC;AAC5G,MAAM,sBAAsB,GAC1B,mCAAmC,wDAA8B,CAAC,SAAS,MAAM,CAAC;AAEpF,MAAM,cAAc,GAAG;IACrB;QACE,IAAI,EAAE,wDAA8B,CAAC,IAAI;QACzC,KAAK,EAAE,IAAI,wBAAU,CAAC,MAAM,CAAC,IAAI,6EAA6E;KAC/G;IACD;QACE,IAAI,EAAE,wDAA8B,CAAC,SAAS;QAC9C,KAAK,EAAE,IAAI,wBAAU,CAAC,MAAM,CAAC,IAAI,kFAAkF;KACpH;CACF,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE;IAC5C;QACE,EAAE,EAAE,WAAW;QACf,MAAM,kCAAO,cAAc,KAAE,OAAO,EAAE,iBAAiB,GAAE;KAC1D;IACD;QACE,EAAE,EAAE,WAAW;QACf,MAAM,kCAAO,cAAc,KAAE,OAAO,EAAE,sBAAsB,GAAE;KAC/D;IACD,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE;CAC9C,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IAC7E,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IACxE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IAC1E,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IACzE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IAC7E,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IAC/E;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACrF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACrF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACrF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACtF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC3F;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC3F;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC3F;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC3F;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC1F;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;KAC1F;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;IAC9E,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;CACnF,CAAC;AAEF,YAAY;AAEZ,kCAAkC;AAElC,SAAsB,uBAAuB;;QAC3C,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,IAAI,gDAAgD,CAAC;QAE5E,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI;YAC/C,KAAK,EAAE,wBAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK;YACjD,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI;YAC/C,UAAU,EAAE;gBACV,mBAAmB;gBACnB,oBAAoB;gBACpB,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,MAAM;gBACN,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,WAAW;gBACX,kBAAkB;gBAClB,oBAAoB;gBACpB,YAAY;gBACZ,YAAY;aACb;YACD,OAAO,EAAE;gBACP,UAAU,EAAE,wBAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK;gBACtD,MAAM,EAAE,wBAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW;gBACxD,YAAY,EAAE;oBACZ,KAAK,EAAE,aAAa;oBACpB,WAAW,EAAE,wBAAU,CAAC,MAAM,CAAC,KAAK;iBACrC;aACF;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;aACvE;YACD,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,qCAAqC;iBAC7C;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,KAAK,EAAE,GAAG,UAAU,mBAAmB;iBACxC;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,KAAK,EAAE,GAAG,UAAU,mBAAmB;iBACxC;gBACD;oBACE,EAAE,EAAE,aAAa;oBACjB,KAAK,EAAE,GAAG,UAAU,qBAAqB;iBAC1C;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,GAAG,UAAU,wBAAwB;oBAC5C,WAAW,EAAE,GAAG,UAAU,8BAA8B;oBACxD,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACnE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,YAAY,EAAE,wDAA8B,CAAC,IAAI;wBACjD,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,MAAM;4BAC9B,OAAO,EAAE;gCACP,UAAU,EAAE,MAAM;gCAClB,SAAS,EAAE,OAAO;gCAClB,QAAQ,EAAE,KAAK;gCACf,UAAU,EAAE,cAAc;6BAC3B;yBACF;qBACF;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,GAAG,UAAU,mBAAmB;oBACvC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACnE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,6BAA6B;oBACpC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACnE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,GAAG,UAAU,oBAAoB;oBACxC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,GAAG,UAAU,wBAAwB;oBAC5C,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACnE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,YAAY,EAAE,GAAG;wBACjB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,MAAM,EAAE;qBAC9C;iBACF;gBACD;oBACE,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,GAAG,UAAU,0BAA0B;oBAC9C,WAAW,EAAE,GAAG,UAAU,gCAAgC;oBAC1D,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,kBAAkB;oBACxB,KAAK,EAAE,GAAG,UAAU,iCAAiC;oBACrD,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,iBAAiB;wBAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,GAAG,UAAU,yBAAyB;oBAC7C,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,iBAAiB;wBAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,GAAG,UAAU,6BAA6B;oBACjD,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,iBAAiB;wBAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,GAAG,UAAU,sBAAsB;oBAC1C,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,YAAY,EAAE,sBAAsB;wBACpC,OAAO,EAAE,iBAAiB;wBAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,GAAG,UAAU,6BAA6B;oBACjD,WAAW,EAAE,GAAG,UAAU,mCAAmC;oBAC7D,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,GAAG,UAAU,iCAAiC;oBACrD,WAAW,EAAE,GAAG,UAAU,uCAAuC;oBACjE,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,GAAG,UAAU,0CAA0C;oBAC9D,WAAW,EAAE,GAAG,UAAU,gDAAgD;oBAC1E,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,GAAG,UAAU,4CAA4C;oBAChE,WAAW,EAAE,GAAG,UAAU,kDAAkD;oBAC5E,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,GAAG,UAAU,iCAAiC;oBACrD,WAAW,EAAE,GAAG,UAAU,uCAAuC;oBACjE,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,SAAS;wBACnB,YAAY,EAAE,KAAK;wBACnB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,MAAM,EAAE;qBAC9C;iBACF;gBACD;oBACE,IAAI,EAAE,gCAAgC;oBACtC,KAAK,EAAE,GAAG,UAAU,iDAAiD;oBACrE,WAAW,EAAE,GAAG,UAAU,uDAAuD;oBACjF,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,SAAS;wBACnB,YAAY,EAAE,IAAI;wBAClB,OAAO,EAAE,sBAAsB;wBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,MAAM,EAAE;qBAC9C;iBACF;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,GAAG,UAAU,yBAAyB;oBAC7C,WAAW,EAAE,GAAG,UAAU,+BAA+B;oBACzD,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,IAAI,EAAE;qBAC5C;iBACF;gBACD;oBACE,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,GAAG,UAAU,6BAA6B;oBACjD,WAAW,EAAE,GAAG,UAAU,mCAAmC;oBAC7D,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;wBACxB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qBACpE;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,EAAE,IAAI,EAAE,wBAAiB,CAAC,QAAQ,EAAE;qBAChD;iBACF;aACF;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACzF,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,QAAQ,EAAE,CAAC,GAAG,eAAe,CAAC;wBAC9B,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC;qBACnC;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,CAAC,GAAG,eAAe,CAAC;wBAC9B,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC;qBACnC;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,CAAC,GAAG,eAAe,CAAC;wBAC9B,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC;wBAClC,OAAO,EAAE,CAAC,GAAG,IAAA,kCAAyB,GAAE,CAAC;qBAC1C;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE,CAAC,GAAG,IAAA,gCAAuB,GAAE,CAAC;wBACvC,KAAK,EAAE;4BACL,IAAA,2BAAkB,EAAC;gCACjB,KAAK,EAAE;oCACL,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE;oCAChC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE;iCAC9B;6BACF,CAAC;yBACH;qBACF;iBACF;aACF;SACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA;AAED,YAAY"}

package/contracts/src/entities/identity-provider/identity-provider.types.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Login protocol for {@link AXMIdentityProviderEntityModel}.
+ * `directory` covers LDAP, Active Directory, and similar bind-based directories.
+ */
+export declare const AXM_IDENTITY_PROVIDER_PROTOCOL: {
+    readonly Oidc: "oidc";
+    readonly Directory: "directory";
+};
+export type AXMIdentityProviderProtocol = (typeof AXM_IDENTITY_PROVIDER_PROTOCOL)[keyof typeof AXM_IDENTITY_PROVIDER_PROTOCOL];
+/**
+ * Platform login IdP row (SecurityManagement.IdentityProvider).
+ * Active/inactive uses the disable plugin field `isDisabled`.
+ * Broker routing uses `key` as OAuth `acr_values` (OIDC only).
+ */
+export interface AXMIdentityProviderEntityModel {
+    id: string;
+    /** Stable key used by ListProviders and `/connect` (`google`, `okta-hr`, …). */
+    key: string;
+    title: string;
+    icon?: string | null;
+    /**
+     * `oidc` = external OAuth/OIDC broker; `directory` = LDAP/AD-style bind login.
+     * Missing/legacy rows are treated as `oidc`.
+     */
+    protocol?: AXMIdentityProviderProtocol | null;
+    /** External IdP authorize URL (OIDC). */
+    authorizationUrl?: string | null;
+    /** External IdP token URL (OIDC). */
+    tokenUrl?: string | null;
+    /** Optional userinfo URL when id_token is absent (OIDC). */
+    userInfoUrl?: string | null;
+    /** Space-separated scopes requested from the external IdP (OIDC). */
+    scopes?: string | null;
+    /**
+     * OIDC issuer URL, or stable directory issuer label stored on provisioned identities.
+     */
+    issuerUrl?: string | null;
+    /**
+     * OAuth client id (OIDC), or directory service-account Bind DN when using search bind.
+     */
+    clientId?: string | null;
+    /**
+     * OAuth client secret (OIDC), or directory Bind Password when using search bind.
+     */
+    clientSecret?: string | null;
+    /** Directory server URL, e.g. `ldap://directory.example.com:389`. */
+    directoryUrl?: string | null;
+    /** Directory search base DN, e.g. `DC=example,DC=com`. */
+    directoryBaseDn?: string | null;
+    /** Direct bind template with `{{username}}`, e.g. `{{username}}@example.com`. */
+    directoryUserDnTemplate?: string | null;
+    /** Optional search filter with `{{username}}` when using a service bind account. */
+    directoryUserSearchFilter?: string | null;
+    /** Start TLS when connecting to the directory server. */
+    directoryUseTls?: boolean | null;
+    /** Reject connections when the directory TLS certificate is untrusted. */
+    directoryTlsRejectUnauthorized?: boolean | null;
+    /** From disable plugin — `true` means not offered on login. */
+    isDisabled?: boolean;
+    priority: number;
+}

package/contracts/src/entities/identity-provider/identity-provider.types.js

@@ -0,0 +1,14 @@
+"use strict";
+//#region ---- Identity provider entity model ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXM_IDENTITY_PROVIDER_PROTOCOL = void 0;
+/**
+ * Login protocol for {@link AXMIdentityProviderEntityModel}.
+ * `directory` covers LDAP, Active Directory, and similar bind-based directories.
+ */
+exports.AXM_IDENTITY_PROVIDER_PROTOCOL = {
+    Oidc: 'oidc',
+    Directory: 'directory',
+};
+//#endregion
+//# sourceMappingURL=identity-provider.types.js.map

package/contracts/src/entities/identity-provider/identity-provider.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-provider.types.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/identity-provider/identity-provider.types.ts"],"names":[],"mappings":";AAAA,kDAAkD;;;AAElD;;;GAGG;AACU,QAAA,8BAA8B,GAAG;IAC5C,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,WAAW;CACd,CAAC;AA0DX,YAAY"}

package/contracts/src/entities/identity-provider/index.d.ts

@@ -0,0 +1 @@
+export * from './identity-provider.types';

package/contracts/src/entities/identity-provider/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./identity-provider.types"), exports);
+//# sourceMappingURL=index.js.map

package/contracts/src/entities/identity-provider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/identity-provider/index.ts"],"names":[],"mappings":";;;AAAA,oEAA0C"}

package/contracts/src/entities/index.d.ts

@@ -1,5 +1,9 @@
 export * from './device-sessions';
+export * from './identity-provider';
 export * from './policy';
 export * from './profile';
+export * from './role-permission';
 export * from './roles';
+export * from './user-role';
+export * from './user-two-factor';
 export * from './users';

package/contracts/src/entities/index.js

@@ -2,8 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./device-sessions"), exports);
+tslib_1.__exportStar(require("./identity-provider"), exports);
 tslib_1.__exportStar(require("./policy"), exports);
 tslib_1.__exportStar(require("./profile"), exports);
+tslib_1.__exportStar(require("./role-permission"), exports);
 tslib_1.__exportStar(require("./roles"), exports);
+tslib_1.__exportStar(require("./user-role"), exports);
+tslib_1.__exportStar(require("./user-two-factor"), exports);
 tslib_1.__exportStar(require("./users"), exports);
 //# sourceMappingURL=index.js.map

package/contracts/src/entities/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/modules/security-management/server/contracts/src/entities/index.ts"],"names":[],"mappings":";;;AAAA,4DAAkC;AAClC,mDAAyB;AACzB,oDAA0B;AAC1B,kDAAwB;AACxB,kDAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/modules/security-management/contracts/src/entities/index.ts"],"names":[],"mappings":";;;AAAA,4DAAkC;AAClC,8DAAoC;AACpC,mDAAyB;AACzB,oDAA0B;AAC1B,4DAAkC;AAClC,kDAAwB;AACxB,sDAA4B;AAC5B,4DAAkC;AAClC,kDAAwB"}

package/contracts/src/entities/policy/index.d.ts

@@ -1,2 +1 @@
-export * from './policy.entity';
 export * from './policy.types';

package/contracts/src/entities/policy/index.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./policy.entity"), exports);
 tslib_1.__exportStar(require("./policy.types"), exports);
 //# sourceMappingURL=index.js.map

package/contracts/src/entities/policy/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/contracts/src/entities/policy/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,yDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/policy/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B"}

package/contracts/src/entities/policy/policy.entity.js

@@ -13,6 +13,21 @@ function policyFactory() {
             name: root_config_1.RootConfig.entities.policy.name,
             title: root_config_1.RootConfig.entities.policy.title,
             icon: root_config_1.RootConfig.entities.policy.icon,
+            searchTags: [
+                'security-policy',
+                'policy',
+                'policies',
+                'access-policy',
+                'security-rules',
+                'authorization',
+                'configuration',
+                'compliance',
+                'سیاست',
+                'سیاست‌ها',
+                'امنیت',
+                'دسترسی',
+                'مدیریت امنیت',
+            ],
             formats: {
                 individual: root_config_1.RootConfig.entities.policy.title,
                 plural: root_config_1.RootConfig.entities.policy.titlePlural,