@archbase/security 4.0.40 → 4.0.42

package/dist/src/ArchbaseResetPassword.d.ts

@@ -1,4 +1,5 @@
 import { CSSProperties } from '@mantine/core';
+import { ArchbasePasswordPolicy } from '@archbase/core';
 export interface ArchbaseResetPasswordProps {
     error?: string;
     initialEmail?: string;
@@ -6,9 +7,18 @@ export interface ArchbaseResetPasswordProps {
     onSendResetPasswordEmail: (email: string) => Promise<void>;
     onResetPassword: (email: string, passwordResetToken: string, newPassword: string) => Promise<void>;
     onClickBackToLogin: () => void;
-    validatePassword?: () => string;
-    validateToken?: () => string;
+    /** Validação customizada da nova senha. Deve retornar a mensagem de erro ou string vazia */
+    validatePassword?: (newPassword: string) => string;
+    validateToken?: (passwordResetToken: string) => string;
+    /**
+     * Critérios de senha forte aplicados na nova senha.
+     * `true` aplica a política padrão do Archbase; um objeto permite ajustar cada critério.
+     * Quando ausente somente a confirmação de senha é verificada.
+     */
+    passwordPolicy?: ArchbasePasswordPolicy | boolean;
+    /** Indicador se a lista de critérios deve ser exibida abaixo do campo. Padrão: true */
+    showPasswordRequirements?: boolean;
     /** Estilo do card */
     style?: CSSProperties;
 }
-export declare function ArchbaseResetPassword({ error, onSendResetPasswordEmail, onResetPassword, onClickBackToLogin, validatePassword, validateToken, initialEmail, description, style }: ArchbaseResetPasswordProps): import("react/jsx-runtime").JSX.Element;
+export declare function ArchbaseResetPassword({ error, onSendResetPasswordEmail, onResetPassword, onClickBackToLogin, validatePassword, validateToken, initialEmail, description, style, passwordPolicy, showPasswordRequirements }: ArchbaseResetPasswordProps): import("react/jsx-runtime").JSX.Element;

package/dist/src/SecurityDomain.d.ts

@@ -109,6 +109,12 @@ export declare class UserDto extends SecurityDto {
     allowPasswordChange: boolean;
     allowMultipleLogins: boolean;
     passwordNeverExpires: boolean;
+    /**
+     * Data da última troca de senha, preenchida pelo backend. Base de cálculo da expiração
+     * periódica quando `archbase.security.password.expiration-days` está configurado.
+     * Somente leitura — o backend a atualiza sozinho a cada troca de senha.
+     */
+    passwordChangedAt?: string;
     accountDeactivated: boolean;
     accountLocked: boolean;
     unlimitedAccessHours: boolean;

package/dist/src/hooks/useArchbaseAuthenticationManager.d.ts

@@ -1,4 +1,10 @@
 import { ContextualAuthenticationRequest, FlexibleLoginRequest, SocialLoginRequest, RegisterUserRequest, SupportedContextsResponse, ContextValidationResponse, ContextObject } from '../types/ContextualAuthentication';
+/**
+ * Reconhece a recusa de login por credenciais expiradas devolvida pelo archbase-security:
+ * HTTP 403 com `{ error: 'CREDENTIALS_EXPIRED', requirePasswordChange: true }`. Aceita tanto o
+ * erro do axios quanto o corpo já desembrulhado.
+ */
+export declare function isCredentialsExpiredError(error: any): boolean;
 export interface AuthenticationManagerReturnType {
     login: (username: string, password: string, rememberMe: boolean) => void;
     logout: (clearRememberMe?: boolean) => void;
@@ -13,6 +19,13 @@ export interface AuthenticationManagerReturnType {
     mfaRequired: boolean;
     verifyMfa?: (code: string) => Promise<void>;
     cancelMfa: () => void;
+    /**
+     * O backend recusou o login com CREDENTIALS_EXPIRED: há troca de senha obrigatória pendente
+     * ou a senha venceu pela política de validade. O app deve levar o usuário ao fluxo de
+     * redefinição de senha (ArchbaseResetPassword) em vez de só exibir o erro.
+     */
+    passwordChangeRequired: boolean;
+    clearPasswordChangeRequired: () => void;
     loginWithContext?: (request: ContextualAuthenticationRequest, rememberMe?: boolean) => Promise<void>;
     loginFlexible?: (request: FlexibleLoginRequest, rememberMe?: boolean) => Promise<void>;
     loginSocial?: (request: SocialLoginRequest) => Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archbase/security",
-  "version": "4.0.40",
+  "version": "4.0.42",
   "description": "Security and authentication components for Archbase React",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -37,10 +37,10 @@
     "reflect-metadata": "^0.1.13",
     "rxjs": "^7.8.2",
     "uuid": "^9.0.1",
-    "@archbase/components": "4.0.40",
-    "@archbase/core": "4.0.40",
-    "@archbase/data": "4.0.40",
-    "@archbase/layout": "4.0.40"
+    "@archbase/components": "4.0.42",
+    "@archbase/core": "4.0.42",
+    "@archbase/data": "4.0.42",
+    "@archbase/layout": "4.0.42"
   },
   "devDependencies": {
     "@types/crypto-js": "^4.1.1",