@flusys/ng-auth 1.0.0-beta → 1.1.0-beta

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/ng-auth",
-  "version": "1.0.0-beta",
+  "version": "1.1.0-beta",
   "description": "Authentication module for FLUSYS Angular applications",
   "license": "MIT",
   "peerDependencies": {
@@ -8,9 +8,9 @@
     "@angular/core": "^21.0.0",
     "@angular/forms": "^21.0.0",
     "@angular/router": "^21.0.0",
-    "@flusys/ng-core": "^1.0.0-beta",
-    "@flusys/ng-layout": "^1.0.0-beta",
-    "@flusys/ng-shared": "^1.0.0-beta",
+    "@flusys/ng-core": "^1.1.0-beta",
+    "@flusys/ng-layout": "^1.1.0-beta",
+    "@flusys/ng-shared": "^1.1.0-beta",
     "@primeuix/themes": "^1.0.0",
     "primeicons": "^7.0.0",
     "primeng": "^21.0.0"

package/types/flusys-ng-auth.d.ts

@@ -1,4 +1,4 @@
-import { IMessageResponse, ApiResourceService, ISingleResponse, IUserProvider, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IUserPermissionProvider } from '@flusys/ng-shared';
+import { IMessageResponse, ApiResourceService, ISingleResponse, IUserProvider, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IUserPermissionProvider, IProfileRoleInfo, IProfileActionInfo, UploadFileFn } from '@flusys/ng-shared';
 import * as rxjs from 'rxjs';
 import { Observable } from 'rxjs';
 import * as _angular_core from '@angular/core';
@@ -8,6 +8,7 @@ import { CanActivateFn, Routes } from '@angular/router';
 import { ILayoutAuthApi, ICompanyInfo as ICompanyInfo$1, IBranchInfo as IBranchInfo$1, ILayoutAuthState, IUserInfo as IUserInfo$1 } from '@flusys/ng-layout';
 import * as _angular_forms_signals from '@angular/forms/signals';
 import * as _flusys_ng_auth from '@flusys/ng-auth';
+import * as _flusys_ng_core from '@flusys/ng-core';
 
 /**
  * Login Request Interface
@@ -62,6 +63,7 @@ interface IUserInfo {
     id: string;
     email: string;
     name?: string;
+    phone?: string | null;
     profilePictureId?: string | null;
     companyId?: string;
     branchId?: string;
@@ -134,12 +136,13 @@ interface IMeResponse {
  * Returned on successful registration
  */
 interface IRegistrationResponse {
-    accessToken: string;
-    refreshToken: string;
+    accessToken?: string;
+    refreshToken?: string;
     user: IUserInfo;
     company?: ICompanyInfo;
     branch?: IBranchInfo;
     companyFeatureEnabled?: boolean;
+    requiresEmailVerification?: boolean;
 }
 /**
  * Company Selection Response Interface
@@ -160,9 +163,21 @@ interface IRefreshTokenResponse {
     refreshToken?: string;
 }
 /**
- * Auth Response Type - Can be login success or company selection required
+ * Login Response when email verification required
+ */
+interface ILoginRequiresEmailVerification {
+    requiresEmailVerification: true;
+    email: string;
+    message: string;
+}
+/**
+ * Auth Response Type - Can be login success, company selection, or email verification required
  */
-type AuthResponse = ILoginResponse | ICompanySelectionResponse;
+type AuthResponse = ILoginResponse | ICompanySelectionResponse | ILoginRequiresEmailVerification;
+/**
+ * Type guard to check if response requires email verification
+ */
+declare function isEmailVerificationRequired(response: AuthResponse): response is ILoginRequiresEmailVerification;
 /**
  * Type guard to check if response requires company selection
  */
@@ -445,6 +460,16 @@ declare class AuthApiService {
      * Reset password with token
      */
     resetPassword(token: string, newPassword: string): Observable<IMessageResponse>;
+    /**
+     * Resend verification email (unauthenticated)
+     */
+    resendVerification(email: string): Observable<IMessageResponse>;
+    /**
+     * Verify email with token
+     * Returns IMessageResponse for existing user verification
+     * Returns IRegistrationResponse for pending registration completion
+     */
+    verifyEmail(token: string): Observable<IMessageResponse | IRegistrationResponse>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthApiService, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthApiService>;
 }
@@ -848,21 +873,7 @@ declare const guestGuard: CanActivateFn;
 declare const companyFeatureGuard: CanActivateFn;
 
 /**
- * Auth Interceptor
- * Adds Authorization header and tenant header to HTTP requests.
- *
- * - Adds Bearer token for authenticated requests (including /auth/me)
- * - Adds tenant header for multi-tenant mode
- * - Adds withCredentials for auth endpoints (cookies)
- *
- * @example
- * ```typescript
- * // In app.config.ts
- * provideHttpClient(
- *   withFetch(),
- *   withInterceptors([authInterceptor, tokenRefreshInterceptor])
- * )
- * ```
+ * Auth Interceptor - Adds auth headers and cookie credentials to requests
  */
 declare function authInterceptor(req: HttpRequest<unknown>, next: HttpHandlerFn): Observable<HttpEvent<unknown>>;
 
@@ -901,6 +912,11 @@ declare const AUTH_ROUTES: Routes;
  * Uses tabbed interface - all under /administration with child routes
  */
 declare const ADMINISTRATION_ROUTES: Routes;
+/**
+ * Profile Routes Configuration
+ * Protected route for user profile management
+ */
+declare const PROFILE_ROUTES: Routes;
 
 /**
  * Auth Layout State Adapter
@@ -1101,6 +1117,10 @@ declare const AUTH_ENDPOINTS: {
     readonly REGISTER: "/auth/register";
     readonly SELECT: "/auth/select";
     readonly SWITCH_COMPANY: "/auth/switch-company";
+    readonly VERIFY_EMAIL: "/auth/verify-email";
+    readonly FORGOT_PASSWORD: "/auth/forgot-password";
+    readonly RESET_PASSWORD: "/auth/reset-password";
+    readonly RESEND_VERIFICATION: "/auth/resend-verification";
 };
 /**
  * Check if a URL is an auth-related endpoint
@@ -1291,6 +1311,25 @@ declare class CompanyListComponent implements OnInit {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<CompanyListComponent, "lib-company-list", never, {}, {}, never, never, true, never>;
 }
 
+interface IForgotPasswordFormModel {
+    email: string;
+}
+declare class ForgotPasswordPageComponent {
+    private readonly destroyRef;
+    private readonly messageService;
+    private readonly authApi;
+    readonly isLoading: _angular_core.WritableSignal<boolean>;
+    readonly emailSent: _angular_core.WritableSignal<boolean>;
+    readonly submittedEmail: _angular_core.WritableSignal<string>;
+    readonly formModel: _angular_core.WritableSignal<IForgotPasswordFormModel>;
+    readonly forgotForm: _angular_forms_signals.FieldTree<IForgotPasswordFormModel, string | number>;
+    readonly isFormValid: _angular_core.Signal<boolean>;
+    onSubmit(): void;
+    resetForm(): void;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ForgotPasswordPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ForgotPasswordPageComponent, "lib-forgot-password-page", never, {}, {}, never, never, true, never>;
+}
+
 /** Login form model interface */
 interface ILoginFormModel {
     email: string;
@@ -1303,7 +1342,7 @@ interface ISelectionFormModel {
     branchId: string;
     rememberSelection: boolean;
 }
-type LoginStep = 'credentials' | 'company-selection';
+type LoginStep = 'credentials' | 'company-selection' | 'email-verification';
 /**
  * Login Page Component
  * Multi-step authentication flow:
@@ -1316,12 +1355,10 @@ declare class LoginPageComponent implements OnInit {
     private readonly messageService;
     private readonly authApi;
     private readonly authState;
-    /** Return URL after successful login */
     readonly returnUrl: _angular_core.InputSignal<string>;
-    /** Current step in login flow */
     readonly currentStep: _angular_core.WritableSignal<LoginStep>;
-    /** Loading state */
     readonly isLoading: _angular_core.WritableSignal<boolean>;
+    readonly unverifiedEmail: _angular_core.WritableSignal<string>;
     /** Login form model */
     readonly loginFormModel: _angular_core.WritableSignal<ILoginFormModel>;
     /** Login form with validation schema */
@@ -1350,12 +1387,94 @@ declare class LoginPageComponent implements OnInit {
     onCompanyChange(): void;
     onSelectCompany(): void;
     goBackToCredentials(): void;
+    onResendVerification(): void;
     private autoSelectIfSingle;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<LoginPageComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<LoginPageComponent, "lib-login-page", never, { "returnUrl": { "alias": "returnUrl"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
 }
 
-/** User registration form model */
+/** Profile form model */
+interface IProfileFormModel {
+    name: string;
+    phone: string;
+}
+/** Password form model */
+interface IPasswordFormModel {
+    currentPassword: string;
+    newPassword: string;
+    confirmPassword: string;
+}
+/**
+ * Profile Page Component
+ *
+ * Allows users to view and update their profile information.
+ * Features:
+ * - Update name, phone, profile picture (if storage enabled)
+ * - View company/branch info (read-only, if company feature enabled)
+ * - View roles/actions (read-only, if IAM enabled via optional injection)
+ *
+ * Package Independence:
+ * - Uses PROFILE_UPLOAD_PROVIDER (optional) for storage functionality
+ * - Uses PROFILE_PERMISSION_PROVIDER (optional) for IAM functionality
+ * - No direct imports from ng-storage or ng-iam
+ */
+declare class ProfilePageComponent implements OnInit {
+    private readonly destroyRef;
+    private readonly appConfig;
+    private readonly messageService;
+    private readonly authState;
+    private readonly userService;
+    private readonly authApiService;
+    private readonly fileUrlService;
+    private readonly uploadProvider;
+    private readonly permissionProvider;
+    readonly isLoading: _angular_core.WritableSignal<boolean>;
+    readonly isLoadingPermissions: _angular_core.WritableSignal<boolean>;
+    private readonly _profilePictureUrl;
+    readonly profilePictureUrl: _angular_core.Signal<string | null>;
+    private readonly _userRoles;
+    readonly userRoles: _angular_core.Signal<IProfileRoleInfo[]>;
+    private readonly _userActions;
+    readonly userActions: _angular_core.Signal<IProfileActionInfo[]>;
+    readonly userEmail: _angular_core.Signal<string>;
+    readonly userName: _angular_core.Signal<string>;
+    readonly userInitials: _angular_core.Signal<string>;
+    readonly companyName: _angular_core.Signal<string>;
+    readonly branchName: _angular_core.Signal<string>;
+    readonly showUploadSection: _angular_core.Signal<boolean>;
+    readonly showCompanySection: _angular_core.Signal<boolean>;
+    readonly showPermissionsSection: _angular_core.Signal<boolean>;
+    readonly permissionMode: _angular_core.Signal<_flusys_ng_core.PermissionMode>;
+    readonly showRoles: _angular_core.Signal<boolean>;
+    readonly showActions: _angular_core.Signal<boolean>;
+    readonly showBottomRow: _angular_core.Signal<boolean>;
+    readonly formModel: _angular_core.WritableSignal<IProfileFormModel>;
+    readonly formTree: _angular_forms_signals.FieldTree<IProfileFormModel, string | number>;
+    readonly isFormValid: _angular_core.Signal<boolean>;
+    readonly passwordModel: _angular_core.WritableSignal<IPasswordFormModel>;
+    readonly isPasswordLoading: _angular_core.WritableSignal<boolean>;
+    readonly isPasswordFormValid: _angular_core.Signal<boolean>;
+    readonly passwordsMatch: _angular_core.Signal<boolean>;
+    readonly uploadFileFn: UploadFileFn;
+    /** Map upload result to IUploadedFile format */
+    private mapUploadResultToUploadedFile;
+    ngOnInit(): void;
+    private loadUserData;
+    private loadPermissions;
+    onProfilePictureUploaded(file: {
+        id?: string;
+        name: string;
+        key: string;
+        size: number;
+        contentType: string;
+    }): void;
+    onSubmit(): void;
+    updatePasswordField(field: keyof IPasswordFormModel, value: string): void;
+    onChangePassword(): void;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ProfilePageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ProfilePageComponent, "lib-profile-page", never, {}, {}, never, never, true, never>;
+}
+
 interface IUserFormModel$1 {
     name: string;
     email: string;
@@ -1363,7 +1482,6 @@ interface IUserFormModel$1 {
     confirmPassword: string;
     phone: string;
 }
-/** Company form model */
 interface ICompanyFormModel {
     createNewCompany: boolean;
     companySlug: string;
@@ -1372,11 +1490,6 @@ interface ICompanyFormModel {
     newCompanyPhone: string;
     newCompanyAddress: string;
 }
-/**
- * Registration Page Component
- * Handles user registration with optional company creation
- * Adapts UI based on company feature configuration
- */
 declare class RegisterPageComponent implements OnInit {
     private readonly destroyRef;
     private readonly appConfig;
@@ -1384,31 +1497,46 @@ declare class RegisterPageComponent implements OnInit {
     private readonly authApi;
     private readonly authState;
     private readonly route;
-    /** Return URL after successful registration */
+    private readonly router;
     readonly returnUrl: _angular_core.InputSignal<string>;
-    /** Loading state */
     readonly isLoading: _angular_core.WritableSignal<boolean>;
-    /** Whether company feature is enabled */
     readonly companyFeatureEnabled: _angular_core.Signal<boolean>;
-    /** User form model */
     readonly userFormModel: _angular_core.WritableSignal<IUserFormModel$1>;
-    /** User form with validation schema */
     readonly userForm: _angular_forms_signals.FieldTree<IUserFormModel$1, string | number>;
-    /** Company form model */
     readonly companyFormModel: _angular_core.WritableSignal<ICompanyFormModel>;
-    /** Company form with conditional validation schema */
     readonly companyForm: _angular_forms_signals.FieldTree<ICompanyFormModel, string | number>;
-    ngOnInit(): void;
-    /** Check if passwords match */
     readonly passwordsMatch: _angular_core.Signal<boolean>;
-    /** Check if form is valid */
     readonly isFormValid: _angular_core.Signal<boolean>;
+    ngOnInit(): void;
     onCreateCompanyToggle(): void;
     onSubmit(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<RegisterPageComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<RegisterPageComponent, "lib-register-page", never, { "returnUrl": { "alias": "returnUrl"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
 }
 
+interface IResetPasswordFormModel {
+    newPassword: string;
+    confirmPassword: string;
+}
+type PageState$1 = 'form' | 'success' | 'invalid-token';
+declare class ResetPasswordPageComponent implements OnInit {
+    private readonly destroyRef;
+    private readonly route;
+    private readonly messageService;
+    private readonly authApi;
+    private token;
+    readonly isLoading: _angular_core.WritableSignal<boolean>;
+    readonly pageState: _angular_core.WritableSignal<PageState$1>;
+    readonly formModel: _angular_core.WritableSignal<IResetPasswordFormModel>;
+    readonly resetForm: _angular_forms_signals.FieldTree<IResetPasswordFormModel, string | number>;
+    readonly passwordMismatch: _angular_core.Signal<boolean>;
+    readonly canSubmit: _angular_core.Signal<boolean>;
+    ngOnInit(): void;
+    onSubmit(): void;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ResetPasswordPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ResetPasswordPageComponent, "lib-reset-password-page", never, {}, {}, never, never, true, never>;
+}
+
 /** User form model interface */
 interface IUserFormModel {
     name: string;
@@ -1500,6 +1628,34 @@ declare class UserListComponent implements OnInit {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserListComponent, "lib-user-list", never, {}, {}, never, never, true, never>;
 }
 
+interface IResendFormModel {
+    email: string;
+}
+type PageState = 'verifying' | 'success' | 'invalid-token' | 'resend';
+declare class VerifyEmailPageComponent implements OnInit {
+    private readonly platformId;
+    private readonly transferState;
+    private readonly destroyRef;
+    private readonly route;
+    private readonly messageService;
+    private readonly authApi;
+    readonly isLoading: _angular_core.WritableSignal<boolean>;
+    readonly pageState: _angular_core.WritableSignal<PageState>;
+    readonly resendSuccess: _angular_core.WritableSignal<boolean>;
+    readonly submittedEmail: _angular_core.WritableSignal<string>;
+    readonly resendFormModel: _angular_core.WritableSignal<IResendFormModel>;
+    readonly resendForm: _angular_forms_signals.FieldTree<IResendFormModel, string | number>;
+    readonly isResendFormValid: _angular_core.Signal<boolean>;
+    ngOnInit(): void;
+    private verifyEmail;
+    private handleVerificationResult;
+    showResendForm(): void;
+    onResend(): void;
+    private handleResendComplete;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<VerifyEmailPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<VerifyEmailPageComponent, "lib-verify-email-page", never, {}, {}, never, never, true, never>;
+}
+
 /**
  * User Branch Permission Dialog
  *
@@ -1595,5 +1751,5 @@ interface CompanyWithAssignment extends ICompany {
     isAssigned: boolean;
 }
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_ROUTES, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, LoginPageComponent, RegisterPageComponent, TokenRefreshStateService, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, authGuard, authInterceptor, companyFeatureGuard, guestGuard, isAuthEndpoint, isCompanySelectionResponse, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, tokenRefreshInterceptor };
-export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IBatchOperationResponse, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, ILoginRequest, ILoginResponse, IMeResponse, IPermissionItem, IRefreshTokenResponse, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserBranchesResponse, IUserCompaniesResponse, IUserCompanyPermission, IUserInfo };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_ROUTES, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_ROUTES, ProfilePageComponent, RegisterPageComponent, ResetPasswordPageComponent, TokenRefreshStateService, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, guestGuard, isAuthEndpoint, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, tokenRefreshInterceptor };
+export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IBatchOperationResponse, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeResponse, IPermissionItem, IRefreshTokenResponse, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserBranchesResponse, IUserCompaniesResponse, IUserCompanyPermission, IUserInfo };