@acorex/platform 20.8.22 → 20.8.24

package/auth/index.d.ts

@@ -298,6 +298,8 @@ declare class AXPSessionService {
     readonly isAuthenticated$: Observable<boolean>;
     readonly isAuthenticatedWithLoading$: Observable<boolean>;
     readonly isAuthorized$: Observable<boolean>;
+    /** Waits for session restore to finish, then emits whether the session is fully authorized. */
+    readonly isAuthorizedWithLoading$: Observable<boolean>;
     restoreSession(): Promise<void>;
     signin(credentials: AXPBaseCredentials): Promise<void>;
     updateToken(params?: {

package/common/index.d.ts

@@ -9,7 +9,7 @@ import { AXPWidgetTypesMap, AXPMetaDataDefinition, AXPWidgetNode } from '@acorex
 import * as i3 from '@acorex/core/date-time';
 import { AXCalendarService } from '@acorex/core/date-time';
 import * as _angular_router from '@angular/router';
-import { Route, Routes, Router, RedirectCommand, ActivatedRouteSnapshot, CanActivateFn } from '@angular/router';
+import { Route, Routes, UrlTree, Router, RedirectCommand, ActivatedRouteSnapshot, CanActivateFn } from '@angular/router';
 import * as i1 from '@acorex/platform/workflow';
 import { AXPWorkflowAction, AXPWorkflowContext, AXPWorkflow } from '@acorex/platform/workflow';
 import * as i4 from '@acorex/components/toast';
@@ -525,6 +525,10 @@ declare class AXPHomePageService {
     private buildFullPaths;
     private refreshRoutes;
     private applyMergedConfig;
+    /**
+     * Resolves the current user's home page as a router URL tree.
+     */
+    resolveHomeUrlTree(): UrlTree;
     navigateTo(): Promise<void>;
     static ɵfac: i0.ɵɵFactoryDeclaration<AXPHomePageService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AXPHomePageService>;
@@ -585,6 +589,13 @@ declare function axpIsEntityRecordNotFound(data: unknown): boolean;
  */
 declare function axpRedirectToNotFound(router?: Router): RedirectCommand;
 
+/** Canonical route path for the platform 401 page. */
+declare const AXP_UNAUTHORIZED_ROUTE = "/error/401";
+/**
+ * Creates an Angular redirect command to the platform 401 page.
+ */
+declare function axpRedirectToUnauthorized(router?: Router): RedirectCommand;
+
 interface AXPCommonModuleConfigs {
     errorHandlers: (new () => AXPErrorHandler)[];
 }
@@ -1574,6 +1585,11 @@ declare const AXPMenuService: i0.Type<{
  */
 declare class AXPMenuVisibilityService {
     private sessionService;
+    /**
+     * Checks visibility for a menu branch, including ancestor policies.
+     * Parent module features and permissions must pass before child routes are accessible.
+     */
+    isMenuBranchVisible(item: AXPMenuItem, ancestors?: AXPMenuItem[]): boolean;
     /**
      * Checks if a menu item should be visible based on permissions and features.
      */
@@ -1601,6 +1617,8 @@ declare class AXPMenuVisibilityService {
 
 interface AXPMenuRouteMatchResult {
     item: AXPMenuItem;
+    /** Parent menu items from root down to the direct parent of the matched item. */
+    ancestors: AXPMenuItem[];
     isPartialMatch: boolean;
 }
 /**
@@ -1617,14 +1635,12 @@ declare function axpMenuPathsMatch(itemPath: string, currentPath: string, traili
 declare function axpFindMenuItemByRoute(items: AXPMenuItem[], currentPath: string, trailingSegmentsToIgnore?: string[]): AXPMenuRouteMatchResult | null;
 
 /**
- * Resolves route access using the same permission and feature policies defined on menu items.
+ * Resolves route access using menu policy, route metadata, permissions, and features.
  */
-declare class AXPMenuRoutePermissionService {
+declare class AXPMenuRouteAccessService {
     private readonly menuProvider;
     private readonly menuVisibility;
     private readonly sessionService;
-    private readonly toastService;
-    private readonly translationService;
     /**
      * Checks whether navigation to the target URL is allowed for the current user.
      */
@@ -1635,18 +1651,20 @@ declare class AXPMenuRoutePermissionService {
     private getInheritedRouteData;
     private normalizeKeys;
     private normalizeUrl;
-    private showAccessDeniedToast;
-    static ɵfac: i0.ɵɵFactoryDeclaration<AXPMenuRoutePermissionService, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<AXPMenuRoutePermissionService>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<AXPMenuRouteAccessService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<AXPMenuRouteAccessService>;
 }
 
 /**
- * Blocks navigation when the target route matches a menu item the current user cannot access.
- * Uses the same permission and feature policies applied to menu visibility.
+
+ * Blocks navigation when the target route is not accessible for the current user.
+
+ * Evaluates menu policy, permissions, and features.
+
  */
-declare const AXPMenuPermissionGuard: CanActivateFn;
+declare const AXPMenuRouteGuard: CanActivateFn;
 
-/** Standard guards for authenticated routes with menu-based permission enforcement. */
+/** Standard guards for authenticated routes with menu-based access enforcement. */
 declare const AXP_PROTECTED_ROUTE_GUARDS: readonly [_angular_router.CanActivateFn, _angular_router.CanActivateFn];
 
 interface AXPSearchDefinitionDisplayFormat {
@@ -2585,8 +2603,9 @@ declare class AXPTokenEvaluatorScopeProvider implements AXPExpressionEvaluatorSc
 }
 
 declare class AXPClipBoardService {
-    private toast;
-    copy(title: string, value: string): void;
+    private readonly toast;
+    private readonly translationService;
+    copy(title: string, value: string): Promise<void>;
     static ɵfac: i0.ɵɵFactoryDeclaration<AXPClipBoardService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AXPClipBoardService>;
 }
@@ -2810,5 +2829,5 @@ declare class AXMWorkflowErrorHandler implements AXPErrorHandler {
     static ɵprov: i0.ɵɵInjectableDeclaration<AXMWorkflowErrorHandler>;
 }
 
-export { ALL_DEFAULT_OPERATORS, AXMWorkflowErrorHandler, AXPAppVersionService, AXPCleanNestedFilters, AXPClipBoardService, AXPCommonModule, AXPCommonSettings, AXPCustomOperatorService, AXPCustomOperatorServiceImpl, AXPDataProvider, AXPDebugService, AXPDialogConfirmAction, AXPEntityCommandScope, AXPEntityQueryType, AXPErrorHandlerRegistryService, AXPExportService, AXPFileActionsService, AXPFileStorageService, AXPFileStorageStatus, AXPFileTypeProviderService, AXPFilterOperatorMiddlewareService, AXPFilterOperatorMiddlewareServiceImpl, AXPFooterTextSlotComponent, AXPGlobalErrorHandler, AXPHomePageModule, AXPHomePageService, AXPLockService, AXPMenuMiddlewareRegistry, AXPMenuPermissionGuard, AXPMenuProviderService, AXPMenuRoutePermissionService, AXPMenuSearchDefinitionProvider, AXPMenuSearchProvider, AXPMenuService, AXPMenuVisibilityService, AXPNavBarSlotComponent, AXPNavigateWorkflow, AXPNotFoundCatchAllRoute, AXPNotFoundError, AXPPlatformDefaultConfigs, AXPRedirectEvent, AXPRefreshEvent, AXPRegionalSetting, AXPRelationshipCardinality, AXPRelationshipKind, AXPReloadAction, AXPReloadEvent, AXPSearchCommandProvider, AXPSearchDefinitionActionBuilder, AXPSearchDefinitionBuilder, AXPSearchDefinitionProviderContext, AXPSearchDefinitionProviderService, AXPSearchService, AXPSettingDefaultValuesAggregatorService, AXPSettingDefinitionGroupBuilder, AXPSettingDefinitionProviderContext, AXPSettingDefinitionProviderService, AXPSettingDefinitionSectionBuilder, AXPSettingsService, AXPStatusDefinitionProviderService, AXPStatusProvider, AXPStickyDirective, AXPSystemStatusType, AXPSystemStatuses, AXPToastAction, AXPTokenDefinitionService, AXPTokenEvaluatorScopeProvider, AXPVersioningService, AXPWorkflowNavigateAction, AXPWorkflowRouterNavigateAction, AXP_APP_VERSION_PROVIDER, AXP_FILE_ACTION_PROVIDER, AXP_FILE_TYPE_INFO_PROVIDER, AXP_HOME_PAGES, AXP_HOME_PAGE_DEFAULT_KEY, AXP_MENU_MIDDLEWARE, AXP_MENU_PROVIDER, AXP_NOT_FOUND_CATCH_ALL_ROUTE, AXP_NOT_FOUND_ROUTE, AXP_PLATFORM_CONFIG_TOKEN, AXP_PROTECTED_ROUTE_GUARDS, AXP_ROOT_CONFIG_TOKEN, AXP_SEARCH_DEFINITION_PROVIDER, AXP_SEARCH_PROVIDER, AXP_SETTING_DEFAULT_VALUES_PROVIDERS, AXP_SETTING_DEFINITION_PROVIDER, AXP_SETTING_VALUE_PROVIDER, AXP_STATUS_PROVIDERS, AXP_TOKEN_DEFINITION_PROVIDER, AXVChangeType, BETWEEN_OPER, BOOLEAN_OPERATORS, CONTAINS_OPER, DATE_OPERATORS, DEFAULT_DATE_FILTER_PRESETS, ENDS_WITH_OPER, ENVIRONMENT, EQ_OPER, GTE_OPER, GT_OPER, IN_OPER, IS_EMPTY_OPER, IS_NOT_EMPTY_OPER, LTE_OPER, LT_OPER, NOT_CONTAINS_OPER, NOT_EQ_OPER, NUMBER_OPERATORS, STARTS_WITH_OPER, STRING_OPERATORS, UploadFromComputerActionProvider, applyDateFilterPreset, axpFindMenuItemByRoute, axpIsEntityRecordNotFound, axpMenuPathsMatch, axpRedirectToNotFound, configPlatform, createAllQueryView, createMenuContext, createMenuMiddleware, createQueryView, findManualPresetIdByOperation, getEntityInfo, getStatusInfo, getSystemStatus, provideDynamicHomePage, provideMenuMiddleware, resolveDateFilterPresets, resolveStatusLook, systemStatusToDefinition };
+export { ALL_DEFAULT_OPERATORS, AXMWorkflowErrorHandler, AXPAppVersionService, AXPCleanNestedFilters, AXPClipBoardService, AXPCommonModule, AXPCommonSettings, AXPCustomOperatorService, AXPCustomOperatorServiceImpl, AXPDataProvider, AXPDebugService, AXPDialogConfirmAction, AXPEntityCommandScope, AXPEntityQueryType, AXPErrorHandlerRegistryService, AXPExportService, AXPFileActionsService, AXPFileStorageService, AXPFileStorageStatus, AXPFileTypeProviderService, AXPFilterOperatorMiddlewareService, AXPFilterOperatorMiddlewareServiceImpl, AXPFooterTextSlotComponent, AXPGlobalErrorHandler, AXPHomePageModule, AXPHomePageService, AXPLockService, AXPMenuMiddlewareRegistry, AXPMenuProviderService, AXPMenuRouteAccessService, AXPMenuRouteGuard, AXPMenuSearchDefinitionProvider, AXPMenuSearchProvider, AXPMenuService, AXPMenuVisibilityService, AXPNavBarSlotComponent, AXPNavigateWorkflow, AXPNotFoundCatchAllRoute, AXPNotFoundError, AXPPlatformDefaultConfigs, AXPRedirectEvent, AXPRefreshEvent, AXPRegionalSetting, AXPRelationshipCardinality, AXPRelationshipKind, AXPReloadAction, AXPReloadEvent, AXPSearchCommandProvider, AXPSearchDefinitionActionBuilder, AXPSearchDefinitionBuilder, AXPSearchDefinitionProviderContext, AXPSearchDefinitionProviderService, AXPSearchService, AXPSettingDefaultValuesAggregatorService, AXPSettingDefinitionGroupBuilder, AXPSettingDefinitionProviderContext, AXPSettingDefinitionProviderService, AXPSettingDefinitionSectionBuilder, AXPSettingsService, AXPStatusDefinitionProviderService, AXPStatusProvider, AXPStickyDirective, AXPSystemStatusType, AXPSystemStatuses, AXPToastAction, AXPTokenDefinitionService, AXPTokenEvaluatorScopeProvider, AXPVersioningService, AXPWorkflowNavigateAction, AXPWorkflowRouterNavigateAction, AXP_APP_VERSION_PROVIDER, AXP_FILE_ACTION_PROVIDER, AXP_FILE_TYPE_INFO_PROVIDER, AXP_HOME_PAGES, AXP_HOME_PAGE_DEFAULT_KEY, AXP_MENU_MIDDLEWARE, AXP_MENU_PROVIDER, AXP_NOT_FOUND_CATCH_ALL_ROUTE, AXP_NOT_FOUND_ROUTE, AXP_PLATFORM_CONFIG_TOKEN, AXP_PROTECTED_ROUTE_GUARDS, AXP_ROOT_CONFIG_TOKEN, AXP_SEARCH_DEFINITION_PROVIDER, AXP_SEARCH_PROVIDER, AXP_SETTING_DEFAULT_VALUES_PROVIDERS, AXP_SETTING_DEFINITION_PROVIDER, AXP_SETTING_VALUE_PROVIDER, AXP_STATUS_PROVIDERS, AXP_TOKEN_DEFINITION_PROVIDER, AXP_UNAUTHORIZED_ROUTE, AXVChangeType, BETWEEN_OPER, BOOLEAN_OPERATORS, CONTAINS_OPER, DATE_OPERATORS, DEFAULT_DATE_FILTER_PRESETS, ENDS_WITH_OPER, ENVIRONMENT, EQ_OPER, GTE_OPER, GT_OPER, IN_OPER, IS_EMPTY_OPER, IS_NOT_EMPTY_OPER, LTE_OPER, LT_OPER, NOT_CONTAINS_OPER, NOT_EQ_OPER, NUMBER_OPERATORS, STARTS_WITH_OPER, STRING_OPERATORS, UploadFromComputerActionProvider, applyDateFilterPreset, axpFindMenuItemByRoute, axpIsEntityRecordNotFound, axpMenuPathsMatch, axpRedirectToNotFound, axpRedirectToUnauthorized, configPlatform, createAllQueryView, createMenuContext, createMenuMiddleware, createQueryView, findManualPresetIdByOperation, getEntityInfo, getStatusInfo, getSystemStatus, provideDynamicHomePage, provideMenuMiddleware, resolveDateFilterPresets, resolveStatusLook, systemStatusToDefinition };
 export type { AXCFileUploaderAction, AXCFileUploaderActionsPayload, AXCFileUploaderCapabilities, AXEntityPropertyWidget, AXPAggregate, AXPAppVersion, AXPAppVersionProvider, AXPApplication, AXPCategoryEntity, AXPColumnAlign, AXPColumnContentAlign, AXPCommandActionCallback, AXPCommandActionDisplay, AXPCommandActionLook, AXPCommandActionPriority, AXPCommandActionType, AXPCommonModuleConfigs, AXPCurrency, AXPDateTimeFilterPreset, AXPDateTimeFilterPresetKind, AXPDateTimeFilterValue, AXPDomToImageOptions, AXPEntity, AXPEntityAction, AXPEntityCommand, AXPEntityDetailListView, AXPEntityMasterCreateLayoutView, AXPEntityMasterLayoutView, AXPEntityMasterListView, AXPEntityMasterSingleLayoutView, AXPEntityMasterUpdateLayoutView, AXPEntityProperty, AXPEntityPropertyCreateView, AXPEntityPropertyGroup, AXPEntityPropertyLayoutConfig, AXPEntityPropertyUpdateView, AXPEntityPropertyView, AXPEntityQuery, AXPEntitySectionView, AXPEntityTableColumn, AXPEntityVersionHistory, AXPErrorHandler, AXPFileActionProvider, AXPFileActionProviderToken, AXPFileExtension, AXPFileManyStorageInfo, AXPFileStorageCreateRequest, AXPFileStorageFindRequest, AXPFileStorageInfo, AXPFileStorageUpdateRequest, AXPFileType, AXPFileTypeInfoProvider, AXPFilterOperator, AXPGeoLocation, AXPGroupSearchResult, AXPHomePageDefinition, AXPLanguage, AXPLocaleProfile, AXPLockGetInfoRequest, AXPLockInfo, AXPLockRequest, AXPLockType, AXPMenuFinderResult, AXPMenuInsertion, AXPMenuItem, AXPMenuItemCommand, AXPMenuItemFinder, AXPMenuItemWithParent, AXPMenuMiddleware, AXPMenuMiddlewareContext, AXPMenuMiddlewareProvider, AXPMenuProvider, AXPMenuProviderContext, AXPMenuRouteMatchResult, AXPMenuType, AXPModule, AXPPlatformConfigs, AXPQueryFilter, AXPQuerySort, AXPQueryView, AXPRelatedEntity, AXPRelationship, AXPRootConfigs, AXPSearchAction, AXPSearchDefinition, AXPSearchDefinitionDisplayFormat, AXPSearchDefinitionProvider, AXPSearchDisplayGroupResult, AXPSearchDisplayResult, AXPSearchDisplayResultForSave, AXPSearchParentResult, AXPSearchProvider, AXPSearchResult, AXPSettingChangedEvent, AXPSettingDefaultValuesProvider, AXPSettingDefinition, AXPSettingDefinitionGroup, AXPSettingDefinitionProvider, AXPSettingDefinitionSection, AXPSettingValue, AXPSettingValueProvider, AXPSettingsServiceInterface, AXPStatusDefinition, AXPStatusTransition, AXPTimeZone, AXPTokenDefinition, AXPTokenDefinitionProvider, AXPTokenDefinitionProviderToken, AXPUnLockRequest, AXPVersionChange, AXPVersionEntry, AXPVersionStream, CanonicalChange, CanonicalChangeOp, VersionedFileInfo };

package/core/index.d.ts

@@ -2360,12 +2360,14 @@ declare class AXPModuleManifestRegistry {
 
 interface AXPStartUpTask {
     name: string;
+    /** Translation key (e.g. `@general:startup-tasks.module-manifests`). */
     statusText: string;
     priority: number;
     run: () => Promise<void>;
 }
 
 declare class AXPAppStartUpService {
+    private readonly translationService;
     private tasks;
     registerTask(task: AXPStartUpTask): void;
     runAllTasks(): Promise<void>;

package/fesm2022/acorex-platform-auth.mjs

@@ -272,6 +272,13 @@ class AXPSessionService {
             return this.isAuthenticated$;
         }), shareReplay(1));
         this.isAuthorized$ = this.status$.pipe(map((status) => status === AXPSessionStatus.Authorized), shareReplay(1));
+        /** Waits for session restore to finish, then emits whether the session is fully authorized. */
+        this.isAuthorizedWithLoading$ = this.isLoading$.pipe(switchMap((loading) => {
+            if (loading) {
+                return this.isLoading$.pipe(filter((isLoading) => !isLoading), switchMap(() => this.isAuthorized$));
+            }
+            return this.isAuthorized$;
+        }), shareReplay(1));
     }
     static { this.SESSION_KEY = 'AXP_SESSION'; }
     get user() {
@@ -698,12 +705,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.19", ngImpo
 const AXPPermissionGuard = (route, state) => {
     const sessionService = inject(AXPSessionService);
     const permissionKeys = route.data['requiredPermission'];
-    return sessionService.isAuthorized$.pipe(first(), map((value) => {
+    return sessionService.isAuthorizedWithLoading$.pipe(first(), map((value) => {
+        debugger;
         const keys = !permissionKeys ? [] : Array.isArray(permissionKeys) ? permissionKeys : [permissionKeys];
         const hasPermission = keys.length == 0 || sessionService.authorize(...keys);
         if (!hasPermission) {
             throw new AXPUnauthorizedError(`Access denied. Required permissions: ${keys.join(', ')}. Please contact your administrator if you believe this is an error.`, {
-                redirectUrl: state.url
+                redirectUrl: state.url,
             });
         }
         return true;