@flusys/ng-auth 7.0.1 → 7.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/ng-auth",
-  "version": "7.0.1",
+  "version": "7.1.0",
   "description": "Authentication module for FLUSYS Angular applications",
   "license": "MIT",
   "peerDependencies": {
@@ -8,10 +8,10 @@
     "@angular/core": ">=22.0.0",
     "@angular/forms": ">=22.0.0",
     "@angular/router": ">=22.0.0",
-    "@flusys/ng-core": ">=7.0.1",
-    "@flusys/ng-layout": ">=7.0.1",
-    "@flusys/ng-shared": ">=7.0.1",
-    "@flusys/ng-ui": ">=7.0.1",
+    "@flusys/ng-core": ">=7.1.0",
+    "@flusys/ng-layout": ">=7.1.0",
+    "@flusys/ng-shared": ">=7.1.0",
+    "@flusys/ng-ui": ">=7.1.0",
     "rxjs": "^7.8.0"
   },
   "sideEffects": false,

package/types/flusys-ng-auth.d.ts

@@ -1,4 +1,4 @@
-import { ISingleResponse, IMessageResponse, ApiResourceService, IFilterData, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserBranchPermission as IUserBranchPermission$1, IUserCompanyInfo, IUserProvider, ILogicNode, RouterTabItem, BaseFormComponent, IFormField, ITableAction, ITableColumn, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
+import { ISingleResponse, IBaseEntity, IMessageResponse, ApiResourceService, IFilterData, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserBranchPermission as IUserBranchPermission$1, IUserCompanyInfo, IUserProvider, ILogicNode, RouterTabItem, BaseFormComponent, IFormField, ITableAction, ITableColumn, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
 import * as rxjs from 'rxjs';
 import { Observable } from 'rxjs';
 import * as _angular_core from '@angular/core';
@@ -10,6 +10,14 @@ import * as _angular_forms_signals from '@angular/forms/signals';
 import * as _flusys_ng_auth from '@flusys/ng-auth';
 import * as _flusys_ng_core from '@flusys/ng-core';
 
+declare enum SocialProviderEnum {
+    GOOGLE = "google",
+    FACEBOOK = "facebook",
+    LINKEDIN = "linkedin",
+    MICROSOFT = "microsoft"
+}
+declare const SOCIAL_PROVIDERS: readonly [SocialProviderEnum.GOOGLE, SocialProviderEnum.FACEBOOK, SocialProviderEnum.LINKEDIN, SocialProviderEnum.MICROSOFT];
+
 interface ILoginRequest {
     email: string;
     password: string;
@@ -216,6 +224,40 @@ interface IUserBranchPermission {
     companyId: string;
 }
 
+interface ISocialAuthConfig extends IBaseEntity {
+    provider: SocialProviderEnum;
+    isEnabled: boolean;
+    clientId: string | null;
+    hasClientSecret: boolean;
+    scopes: string[] | null;
+    extraConfig: Record<string, unknown> | null;
+}
+interface ICreateSocialAuthConfigDto {
+    provider: SocialProviderEnum;
+    isEnabled?: boolean;
+    clientId?: string;
+    clientSecret?: string;
+    scopes?: string[];
+    extraConfig?: Record<string, unknown>;
+}
+interface IUpdateSocialAuthConfigDto extends Partial<ICreateSocialAuthConfigDto> {
+    id: string;
+}
+interface ISocialProviderInfo {
+    provider: SocialProviderEnum;
+    redirectUri: string;
+}
+interface ISocialAuthorization {
+    provider: SocialProviderEnum;
+    authorizationUrl: string;
+    state: string;
+}
+interface ISocialCallbackRequest {
+    code: string;
+    state: string;
+    redirectUri: string;
+}
+
 interface ICreateUserRequest {
     name: string;
     email: string;
@@ -376,6 +418,31 @@ declare class CompanyApiService extends ApiResourceService<ICreateCompanyRequest
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<CompanyApiService>;
 }
 
+/** Round-trips the pre-login returnUrl through the OAuth redirect, which cannot carry it itself. */
+declare const SOCIAL_RETURN_URL_KEY = "flusys_social_return_url";
+declare class SocialAuthApiService {
+    private readonly appConfig;
+    private readonly http;
+    private readonly platform;
+    private readonly baseUrl;
+    get redirectUri(): string;
+    /** Called before redirecting to the provider, so the callback page can resume where the user left off. */
+    saveReturnUrl(returnUrl: string): void;
+    /** Reads and clears the returnUrl saved by {@link saveReturnUrl}. */
+    consumeReturnUrl(): string;
+    getProviders(): Observable<ISingleResponse<ISocialProviderInfo[]>>;
+    authorize(provider: SocialProviderEnum): Observable<ISingleResponse<ISocialAuthorization>>;
+    callback(request: ISocialCallbackRequest): Observable<AuthResponse>;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthApiService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthApiService>;
+}
+
+declare class SocialAuthConfigApiService extends ApiResourceService<ICreateSocialAuthConfigDto | IUpdateSocialAuthConfigDto, ISocialAuthConfig> {
+    constructor();
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthConfigApiService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthConfigApiService>;
+}
+
 /**
  * Token Refresh State Service
  * Manages token refresh state for SSR-safe request queuing.
@@ -772,6 +839,7 @@ declare const AUTH_ENDPOINTS: {
     readonly FORGOT_PASSWORD: "/auth/forgot-password";
     readonly RESET_PASSWORD: "/auth/reset-password";
     readonly RESEND_VERIFICATION: "/auth/resend-verification";
+    readonly SOCIAL_CALLBACK: "/auth/social/callback";
 };
 /** Check if a URL matches a specific endpoint */
 declare function isEndpoint(url: string, endpoint: string): boolean;
@@ -784,6 +852,7 @@ declare const AUTH_MESSAGES: Record<string, string>;
  * - Users (always visible) - includes permission management via dialogs
  * - Companies (only if company feature enabled)
  * - Branches (only if company feature enabled)
+ * - Social Config (social sign-in provider credentials)
  */
 declare class AdministrationPageComponent {
     private readonly appConfig;
@@ -974,6 +1043,7 @@ declare class LoginPageComponent {
     readonly isLoading: _angular_core.WritableSignal<boolean>;
     readonly unverifiedEmail: _angular_core.WritableSignal<string>;
     readonly savedUserName: _angular_core.WritableSignal<string | null>;
+    readonly welcomeBackText: _angular_core.Signal<string>;
     readonly loginFormModel: _angular_core.WritableSignal<ILoginFormModel>;
     private readonly emailErrorMessage;
     private readonly passwordMinLength;
@@ -1189,6 +1259,59 @@ declare class ResetPasswordPageComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<ResetPasswordPageComponent, "lib-reset-password-page", never, {}, {}, never, never, true, never>;
 }
 
+declare class SocialCallbackPageComponent {
+    private readonly destroyRef;
+    private readonly route;
+    private readonly router;
+    private readonly platform;
+    private readonly socialApi;
+    private readonly authState;
+    private readonly messageService;
+    private readonly translateAdapter;
+    private readonly _error;
+    readonly errorDetail: _angular_core.Signal<string | null>;
+    constructor();
+    backToLogin(): void;
+    private exchangeCode;
+    private returnUrl;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialCallbackPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialCallbackPageComponent, "lib-social-callback-page", never, {}, {}, never, never, true, never>;
+}
+
+interface IProviderFormModel {
+    provider: SocialProviderEnum;
+    id: string | null;
+    isEnabled: boolean;
+    clientId: string;
+    /** A newly typed secret to save. Left blank keeps the previously stored one. */
+    clientSecret: string;
+    hasClientSecret: boolean;
+    tenantId: string;
+    scopes: string;
+}
+declare class SocialConfigPageComponent {
+    private readonly configService;
+    private readonly socialApi;
+    private readonly messageService;
+    private readonly translateAdapter;
+    readonly tenantProvider = SocialProviderEnum.MICROSOFT;
+    private readonly _forms;
+    readonly forms: _angular_core.Signal<IProviderFormModel[]>;
+    private readonly _isLoading;
+    readonly isLoading: _angular_core.Signal<boolean>;
+    private readonly _isSaving;
+    readonly isSaving: _angular_core.Signal<boolean>;
+    readonly redirectUri: string;
+    constructor();
+    updateField<K extends keyof IProviderFormModel>(provider: SocialProviderEnum, field: K, value: IProviderFormModel[K]): void;
+    onSave(): Promise<void>;
+    private loadConfigs;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialConfigPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialConfigPageComponent, "lib-social-config-page", never, {}, {}, never, never, true, never>;
+}
+
 interface IUserFormModel {
     name: string;
     email: string;
@@ -1330,6 +1453,29 @@ declare class VerifyEmailPageComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<VerifyEmailPageComponent, "lib-verify-email-page", never, {}, {}, never, never, true, never>;
 }
 
+declare class SocialLoginButtonsComponent {
+    private readonly destroyRef;
+    private readonly socialApi;
+    private readonly messageService;
+    private readonly platform;
+    private readonly document;
+    private readonly translateAdapter;
+    readonly returnUrl: _angular_core.InputSignal<string>;
+    readonly providerEnum: typeof SocialProviderEnum;
+    private readonly _providers;
+    readonly providers: _angular_core.Signal<ISocialProviderInfo[]>;
+    private readonly _pendingProvider;
+    readonly pendingProvider: _angular_core.Signal<SocialProviderEnum | null>;
+    readonly showLabels: _angular_core.Signal<boolean>;
+    readonly layoutClass: _angular_core.Signal<"grid grid-cols-1" | "grid grid-cols-2 gap-3" | "flex flex-wrap justify-center gap-3">;
+    constructor();
+    onSelect(provider: SocialProviderEnum): void;
+    protected redirectTo(url: string): void;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialLoginButtonsComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialLoginButtonsComponent, "lib-social-login-buttons", never, { "returnUrl": { "alias": "returnUrl"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+}
+
 interface BranchWithAssignment extends IBranch {
     isAssigned: boolean;
 }
@@ -1399,5 +1545,5 @@ declare class UserCompanyPermissionDialogComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserCompanyPermissionDialogComponent, "lib-user-company-permission-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "user": { "alias": "user"; "required": true; "isSignal": true; }; }, { "closed": "closed"; "permissionsChanged": "permissionsChanged"; }, never, never, true, never>;
 }
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
-export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
+export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateSocialAuthConfigDto, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISocialAuthConfig, ISocialAuthorization, ISocialCallbackRequest, ISocialProviderInfo, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateSocialAuthConfigDto, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };