@archbase/security 4.0.40 → 4.0.41

package/dist/src/SecurityDomain.d.ts

@@ -109,6 +109,12 @@ export declare class UserDto extends SecurityDto {
     allowPasswordChange: boolean;
     allowMultipleLogins: boolean;
     passwordNeverExpires: boolean;
+    /**
+     * Data da última troca de senha, preenchida pelo backend. Base de cálculo da expiração
+     * periódica quando `archbase.security.password.expiration-days` está configurado.
+     * Somente leitura — o backend a atualiza sozinho a cada troca de senha.
+     */
+    passwordChangedAt?: string;
     accountDeactivated: boolean;
     accountLocked: boolean;
     unlimitedAccessHours: boolean;

package/dist/src/hooks/useArchbaseAuthenticationManager.d.ts

@@ -1,4 +1,10 @@
 import { ContextualAuthenticationRequest, FlexibleLoginRequest, SocialLoginRequest, RegisterUserRequest, SupportedContextsResponse, ContextValidationResponse, ContextObject } from '../types/ContextualAuthentication';
+/**
+ * Reconhece a recusa de login por credenciais expiradas devolvida pelo archbase-security:
+ * HTTP 403 com `{ error: 'CREDENTIALS_EXPIRED', requirePasswordChange: true }`. Aceita tanto o
+ * erro do axios quanto o corpo já desembrulhado.
+ */
+export declare function isCredentialsExpiredError(error: any): boolean;
 export interface AuthenticationManagerReturnType {
     login: (username: string, password: string, rememberMe: boolean) => void;
     logout: (clearRememberMe?: boolean) => void;
@@ -13,6 +19,13 @@ export interface AuthenticationManagerReturnType {
     mfaRequired: boolean;
     verifyMfa?: (code: string) => Promise<void>;
     cancelMfa: () => void;
+    /**
+     * O backend recusou o login com CREDENTIALS_EXPIRED: há troca de senha obrigatória pendente
+     * ou a senha venceu pela política de validade. O app deve levar o usuário ao fluxo de
+     * redefinição de senha (ArchbaseResetPassword) em vez de só exibir o erro.
+     */
+    passwordChangeRequired: boolean;
+    clearPasswordChangeRequired: () => void;
     loginWithContext?: (request: ContextualAuthenticationRequest, rememberMe?: boolean) => Promise<void>;
     loginFlexible?: (request: FlexibleLoginRequest, rememberMe?: boolean) => Promise<void>;
     loginSocial?: (request: SocialLoginRequest) => Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archbase/security",
-  "version": "4.0.40",
+  "version": "4.0.41",
   "description": "Security and authentication components for Archbase React",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -37,10 +37,10 @@
     "reflect-metadata": "^0.1.13",
     "rxjs": "^7.8.2",
     "uuid": "^9.0.1",
-    "@archbase/components": "4.0.40",
-    "@archbase/core": "4.0.40",
-    "@archbase/data": "4.0.40",
-    "@archbase/layout": "4.0.40"
+    "@archbase/components": "4.0.41",
+    "@archbase/core": "4.0.41",
+    "@archbase/data": "4.0.41",
+    "@archbase/layout": "4.0.41"
   },
   "devDependencies": {
     "@types/crypto-js": "^4.1.1",