@flusys/ng-auth 4.1.0 → 5.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/ng-auth",
-  "version": "4.1.0",
+  "version": "5.0.0",
   "description": "Authentication module for FLUSYS Angular applications",
   "license": "MIT",
   "peerDependencies": {
@@ -8,9 +8,9 @@
     "@angular/core": ">=21.0.0",
     "@angular/forms": ">=21.0.0",
     "@angular/router": ">=21.0.0",
-    "@flusys/ng-core": ">=4.1.0",
-    "@flusys/ng-layout": ">=4.1.0",
-    "@flusys/ng-shared": ">=4.1.0",
+    "@flusys/ng-core": ">=5.0.0",
+    "@flusys/ng-layout": ">=5.0.0",
+    "@flusys/ng-shared": ">=5.0.0",
     "@primeuix/themes": ">=1.0.0",
     "primeicons": ">=7.0.0",
     "primeng": ">=21.0.0",

package/types/flusys-ng-auth.d.ts

@@ -1,4 +1,4 @@
-import { IMessageResponse, ApiResourceService, ISingleResponse, ICompanyApiProvider, IListResponse, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserProvider, IUserBasicInfo, ILogicNode, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
+import { ISingleResponse, IMessageResponse, ApiResourceService, ICompanyApiProvider, IListResponse, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserBranchPermission as IUserBranchPermission$1, IUserProvider, IUserBasicInfo, ILogicNode, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
 import * as rxjs from 'rxjs';
 import { Observable } from 'rxjs';
 import * as _angular_core from '@angular/core';
@@ -75,19 +75,19 @@ interface ICompanyWithBranches {
     logoId?: string | null;
     branches: IBranchSelectionInfo[];
 }
-interface ILoginResponse {
+interface ILoginData {
     accessToken: string;
-    refreshToken: string;
+    refreshToken?: string;
     user: IUserInfo;
     company?: ICompanyInfo;
     branch?: IBranchInfo;
 }
-interface IMeResponse {
+interface IMeData {
     user: IUserInfo;
     company?: ICompanyInfo;
     branch?: IBranchInfo;
 }
-interface IRegistrationResponse {
+interface IRegistrationData {
     accessToken?: string;
     refreshToken?: string;
     user: IUserInfo;
@@ -95,23 +95,27 @@ interface IRegistrationResponse {
     branch?: IBranchInfo;
     requiresEmailVerification?: boolean;
 }
-interface ICompanySelectionResponse {
+interface ICompanySelectionData {
     requiresSelection: true;
     sessionId: string;
     expiresAt: Date | string;
     user: IUserInfo;
     companies: ICompanyWithBranches[];
 }
-interface IRefreshTokenResponse {
-    accessToken: string;
-    refreshToken?: string;
-}
-interface ILoginRequiresEmailVerification {
+interface IEmailVerificationData {
     requiresEmailVerification: true;
     email: string;
-    message: string;
 }
-type AuthResponse = ILoginResponse | ICompanySelectionResponse | ILoginRequiresEmailVerification;
+type ILoginResponse = ISingleResponse<ILoginData>;
+type IMeResponse = ISingleResponse<IMeData>;
+type IRegistrationResponse = ISingleResponse<IRegistrationData>;
+type ICompanySelectionResponse = ISingleResponse<ICompanySelectionData>;
+type ILoginRequiresEmailVerification = ISingleResponse<IEmailVerificationData>;
+type IRefreshTokenResponse = ISingleResponse<{
+    accessToken: string;
+    refreshToken?: string;
+}>;
+type AuthResponse = ISingleResponse<ILoginData | ICompanySelectionData | IEmailVerificationData>;
 declare function isEmailVerificationRequired(response: AuthResponse): response is ILoginRequiresEmailVerification;
 declare function isCompanySelectionResponse(response: AuthResponse): response is ICompanySelectionResponse;
 declare function isLoginResponse(response: AuthResponse): response is ILoginResponse;
@@ -211,20 +215,6 @@ interface IUserBranchPermission {
     branchSlug: string;
     companyId: string;
 }
-interface IUserCompaniesResponse {
-    success: boolean;
-    message: string;
-    data: IUserCompanyPermission[];
-}
-interface IUserBranchesResponse {
-    success: boolean;
-    message: string;
-    data: IUserBranchPermission[];
-}
-interface IBatchOperationResponse {
-    success: boolean;
-    message: string;
-}
 
 interface ICreateUserRequest {
     name: string;
@@ -266,113 +256,34 @@ interface IUser {
     deletedAt?: Date | string | null;
 }
 
-/**
- * Auth API Service
- * Handles all authentication-related API calls matching NestJS auth endpoints
- */
 declare class AuthApiService {
     private readonly appConfig;
     private readonly http;
     private readonly baseUrl;
     constructor();
-    /**
-     * Login with email and password
-     * Returns either:
-     * - ILoginResponse (direct login success)
-     * - ICompanySelectionResponse (requires company/branch selection)
-     */
     login(data: ILoginRequest): Observable<AuthResponse>;
-    /**
-     * Register new user
-     * Supports simple registration and company-based registration
-     * Returns RegistrationResponse directly (not wrapped in SingleResponse)
-     */
     register(data: IRegistrationRequest): Observable<IRegistrationResponse>;
-    /**
-     * Select company and branch after login
-     * Used when login returns requiresSelection: true
-     * Returns LoginResponse directly (not wrapped)
-     */
     select(data: ISelectRequest): Observable<ILoginResponse>;
-    /**
-     * Switch company/branch for logged-in user
-     * Returns LoginResponse directly (not wrapped)
-     */
     switchCompany(data: ISwitchCompanyRequest): Observable<ILoginResponse>;
-    /**
-     * Refresh access token
-     * Refresh token is sent via HTTP-only cookie
-     * Returns RefreshTokenResponse directly (not wrapped)
-     */
     refresh(): Observable<IRefreshTokenResponse>;
-    /**
-     * Get current user info
-     * Returns only user data (no tokens) - IMeResponse
-     */
     me(): Observable<IMeResponse>;
-    /**
-     * Logout current user
-     */
     logout(): Observable<IMessageResponse>;
-    /**
-     * Change password for logged-in user
-     */
     changePassword(data: IChangePasswordRequest): Observable<IMessageResponse>;
-    /**
-     * Send forgot password email
-     */
     forgotPassword(email: string): Observable<IMessageResponse>;
-    /**
-     * Reset password with token
-     */
     resetPassword(token: string, newPassword: string): Observable<IMessageResponse>;
-    /**
-     * Resend verification email (unauthenticated)
-     */
     resendVerification(email: string): Observable<IMessageResponse>;
-    /**
-     * Verify email with token
-     * Returns IMessageResponse for existing user verification
-     * Returns IRegistrationResponse for pending registration completion
-     */
     verifyEmail(token: string): Observable<IMessageResponse | IRegistrationResponse>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthApiService, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthApiService>;
 }
 
-/**
- * Auth Initialization Service
- * Handles app startup authentication flow:
- * 1. Check if user has valid session (via refresh token cookie)
- * 2. Restore user state from /auth/me
- * 3. Handle company selection if needed
- *
- * IMPORTANT: Skips initialization during SSR to avoid cookie/localStorage issues
- */
 declare class AuthInitService {
     private readonly authState;
     private readonly authApi;
-    private readonly router;
     private readonly appConfig;
-    /** Whether initial auth check has completed */
-    readonly initialized: _angular_core.WritableSignal<boolean>;
-    /** Whether auth check is in progress */
-    readonly loading: _angular_core.WritableSignal<boolean>;
-    /** Error from auth check */
-    readonly error: _angular_core.WritableSignal<string | null>;
-    /** Cached initialization observable to prevent duplicate calls */
+    private readonly _initialized;
+    readonly initialized: _angular_core.Signal<boolean>;
     private initializationCache$;
-    /**
-     * Initialize authentication state on app startup.
-     *
-     * Flow:
-     * 1. If already authenticated with user data -> done
-     * 2. Try refresh token (via cookie) -> get new access token
-     * 3. Call /auth/me to get user info
-     * 4. Update state accordingly
-     *
-     * Uses shareReplay to prevent duplicate initialization calls.
-     */
     initialize(): Observable<boolean>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthInitService, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthInitService>;
@@ -399,7 +310,6 @@ declare class AuthStateService {
     readonly branch: _angular_core.Signal<IBranchInfo | null>;
     private readonly _selectionSessionId;
     private readonly _availableCompanies;
-    private readonly _selectionExpiresAt;
     readonly selectionSessionId: _angular_core.Signal<string | null>;
     readonly availableCompanies: _angular_core.Signal<ICompanyWithBranches[]>;
     readonly isAuthenticated: _angular_core.Signal<boolean>;
@@ -414,8 +324,8 @@ declare class AuthStateService {
     readonly isTokenExpired: _angular_core.Signal<boolean>;
     readonly tenantId: _angular_core.Signal<string | null>;
     constructor();
-    setLoginState(response: ILoginResponse): void;
-    setSelectionState(response: ICompanySelectionResponse): void;
+    setLoginState(data: ILoginData): void;
+    setSelectionState(data: ICompanySelectionData): void;
     clearSelectionState(): void;
     resetState(): void;
     setUser(user: IUserInfo | null): void;
@@ -446,9 +356,7 @@ declare class AuthStateService {
  * Signal-based service for branch CRUD operations
  */
 declare class BranchApiService extends ApiResourceService<ICreateBranchRequest | IUpdateBranchRequest, IBranch> {
-    private readonly _currentCompanyId;
     constructor();
-    setCurrentCompanyId(companyId: string | null): void;
     fetchByCompany(companyId: string, search?: string): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<BranchApiService, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<BranchApiService>;
@@ -501,14 +409,14 @@ declare class UserPermissionApiService {
     private readonly appConfig;
     private readonly http;
     private readonly baseUrl;
-    assignUserCompanies(data: IAssignUserCompanyRequest): Observable<IBatchOperationResponse>;
-    assignUserToCompany(userId: string, companyId: string): Observable<IBatchOperationResponse>;
-    revokeUserFromCompany(userId: string, companyId: string): Observable<IBatchOperationResponse>;
-    getUserCompanies(userId: string): Observable<IUserCompaniesResponse>;
-    assignUserBranches(data: IAssignUserBranchRequest): Observable<IBatchOperationResponse>;
-    assignUserToBranch(userId: string, branchId: string): Observable<IBatchOperationResponse>;
-    revokeUserFromBranch(userId: string, branchId: string): Observable<IBatchOperationResponse>;
-    getUserBranches(userId: string, companyId?: string): Observable<IUserBranchesResponse>;
+    assignUserCompanies(data: IAssignUserCompanyRequest): Observable<IMessageResponse>;
+    assignUserToCompany(userId: string, companyId: string): Observable<IMessageResponse>;
+    revokeUserFromCompany(userId: string, companyId: string): Observable<IMessageResponse>;
+    getUserCompanies(userId: string): Observable<ISingleResponse<IUserCompanyPermission[]>>;
+    assignUserBranches(data: IAssignUserBranchRequest): Observable<IMessageResponse>;
+    assignUserToBranch(userId: string, branchId: string): Observable<IMessageResponse>;
+    revokeUserFromBranch(userId: string, branchId: string): Observable<IMessageResponse>;
+    getUserBranches(userId: string, companyId?: string): Observable<ISingleResponse<IUserBranchPermission[]>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserPermissionApiService, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<UserPermissionApiService>;
 }
@@ -622,7 +530,7 @@ declare class AuthCompanyApiProviderAdapter implements ICompanyApiProvider {
 }
 declare class AuthUserPermissionProviderAdapter implements IUserPermissionProvider {
     private readonly userPermissionApi;
-    getUserBranchPermissions(userId: string, companyId?: string): Observable<ISingleResponse<any>>;
+    getUserBranchPermissions(userId: string, companyId?: string): Observable<ISingleResponse<IUserBranchPermission$1[]>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthUserPermissionProviderAdapter, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthUserPermissionProviderAdapter>;
 }
@@ -1181,8 +1089,6 @@ declare class ProfilePageComponent {
     private readonly userFormExtension;
     private readonly translateAdapter;
     private translate;
-    /** Translate with fallback: if key returns unchanged, use fallback instead */
-    safeTranslate(key: string | undefined, fallback: string): string;
     readonly isLoading: _angular_core.WritableSignal<boolean>;
     readonly isLoadingPermissions: _angular_core.WritableSignal<boolean>;
     readonly isLoadingExtraFields: _angular_core.WritableSignal<boolean>;
@@ -1281,8 +1187,6 @@ declare class RegisterPageComponent {
     private readonly registrationExtension;
     private readonly translateAdapter;
     private translate;
-    /** Translate with fallback: if key returns unchanged, use fallback instead */
-    safeTranslate(key: string | undefined, fallback: string): string;
     private readonly queryParamMap;
     private companySlugInitialized;
     readonly returnUrl: _angular_core.InputSignal<string>;
@@ -1345,7 +1249,6 @@ declare class ResetPasswordPageComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<ResetPasswordPageComponent, "lib-reset-password-page", never, {}, {}, never, never, true, never>;
 }
 
-/** User form model interface */
 interface IUserFormModel {
     name: string;
     email: string;
@@ -1354,11 +1257,6 @@ interface IUserFormModel {
     isActive: boolean;
     emailVerified: boolean;
 }
-/**
- * User Form Component
- * Handles creating and editing users.
- * When company feature is enabled, automatically assigns new users to current company/branch.
- */
 declare class UserFormComponent {
     private readonly destroyRef;
     private readonly router;
@@ -1372,25 +1270,15 @@ declare class UserFormComponent {
     private readonly userFormExtension;
     private readonly parentInjector;
     private translate;
-    /** Translate with fallback: if key returns unchanged, use fallback instead */
-    safeTranslate(key: string | undefined, fallback: string): string;
     private readonly routeParams;
     private userLoadTriggered;
-    /** Loading state */
     readonly isLoading: _angular_core.WritableSignal<boolean>;
-    /** Existing user data when editing */
     readonly existingUser: _angular_core.WritableSignal<IUser | null>;
-    /** Whether in edit mode */
     readonly isEditMode: _angular_core.Signal<boolean>;
-    /** Whether company feature is enabled */
     readonly companyFeatureEnabled: _angular_core.Signal<boolean>;
-    /** Current company name */
     readonly currentCompanyName: _angular_core.Signal<string>;
-    /** Current branch name */
     readonly currentBranchName: _angular_core.Signal<string>;
-    /** Form model */
     readonly formModel: _angular_core.WritableSignal<IUserFormModel>;
-    /** Form with validation schema */
     readonly formTree: _angular_forms_signals.FieldTree<IUserFormModel, string | number>;
     readonly isLoadingExtraFields: _angular_core.WritableSignal<boolean>;
     readonly extraFieldsModel: _angular_core.WritableSignal<Record<string, unknown>>;
@@ -1403,10 +1291,9 @@ declare class UserFormComponent {
     getExtraFieldValue(key: string): unknown;
     getFieldTemplateContext(field: IUserFormExtraField): IUserFormFieldTemplateContext;
     getFieldInjector(field: IUserFormExtraField): Injector;
-    /** Check if form is valid */
     readonly isFormValid: _angular_core.Signal<boolean>;
     constructor();
-    loadUser(id: string): void;
+    loadUser(id: string): Promise<void>;
     private loadExtraFields;
     private toFormModel;
     onSubmit(): void;
@@ -1414,9 +1301,6 @@ declare class UserFormComponent {
     private createUser;
     private saveExtraFieldsForNewUser;
     private onSaveSuccess;
-    /**
-     * Assign user to current company and branch
-     */
     private assignUserToCompanyAndBranch;
     onCancel(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserFormComponent, never>;
@@ -1439,8 +1323,6 @@ declare class UserListComponent {
     readonly userDetailConfig: _flusys_ng_auth.IUserDetailViewConfig | null;
     private readonly translateAdapter;
     private translate;
-    /** Translate with fallback: if key returns unchanged, use fallback instead */
-    safeTranslate(key: string | undefined, fallback: string): string;
     readonly users: _angular_core.Signal<IUser[]>;
     readonly isLoading: _angular_core.Signal<boolean>;
     readonly total: _angular_core.Signal<number>;
@@ -1519,20 +1401,32 @@ declare class UserBranchPermissionDialogComponent {
     readonly user: _angular_core.InputSignal<IUser | null>;
     readonly closed: _angular_core.OutputEmitterRef<void>;
     readonly permissionsChanged: _angular_core.OutputEmitterRef<void>;
-    readonly isLoading: _angular_core.WritableSignal<boolean>;
     readonly isSaving: _angular_core.WritableSignal<boolean>;
-    readonly branches: _angular_core.WritableSignal<BranchWithAssignment[]>;
-    readonly companies: _angular_core.WritableSignal<{
+    readonly selectedCompanyId: _angular_core.WritableSignal<string | null>;
+    readonly companiesResource: _angular_core.ResourceRef<{
         id: string;
         name: string;
-    }[]>;
-    selectedCompanyId: string | null;
-    private assignedBranchIds;
-    constructor();
-    private loadUserCompaniesAndData;
-    private loadData;
-    onCompanyChange(): void;
-    onBranchToggle(branch: BranchWithAssignment): Promise<void>;
+    }[] | undefined>;
+    readonly branchesResource: _angular_core.ResourceRef<{
+        isAssigned: boolean;
+        id: string;
+        name: string;
+        slug: string;
+        companyId: string;
+        parentId?: string | null;
+        logoId?: string | null;
+        address?: string | null;
+        phone?: string | null;
+        email?: string | null;
+        serial?: number;
+        isActive: boolean;
+        readOnly: boolean;
+        additionalFields?: Record<string, unknown> | null;
+        createdAt: Date | string;
+        updatedAt: Date | string;
+    }[] | undefined>;
+    readonly isInitialLoading: _angular_core.Signal<boolean>;
+    onBranchToggle(branch: BranchWithAssignment, isAssigned: boolean): Promise<void>;
     onClose(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserBranchPermissionDialogComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserBranchPermissionDialogComponent, "lib-user-branch-permission-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "user": { "alias": "user"; "required": true; "isSignal": true; }; }, { "closed": "closed"; "permissionsChanged": "permissionsChanged"; }, never, never, true, never>;
@@ -1564,4 +1458,4 @@ declare class UserCompanyPermissionDialogComponent {
 }
 
 export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
-export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBatchOperationResponse, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, IEmailValidationConfig, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserBranchesResponse, IUserCompaniesResponse, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };
+export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };