@flusys/ng-auth 7.0.2 → 8.0.0-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/ng-auth",
-  "version": "7.0.2",
+  "version": "8.0.0-beta.1",
   "description": "Authentication module for FLUSYS Angular applications",
   "license": "MIT",
   "peerDependencies": {
@@ -8,10 +8,10 @@
     "@angular/core": ">=22.0.0",
     "@angular/forms": ">=22.0.0",
     "@angular/router": ">=22.0.0",
-    "@flusys/ng-core": ">=7.0.2",
-    "@flusys/ng-layout": ">=7.0.2",
-    "@flusys/ng-shared": ">=7.0.2",
-    "@flusys/ng-ui": ">=7.0.2",
+    "@flusys/ng-core": ">=8.0.0-beta.1",
+    "@flusys/ng-layout": ">=8.0.0-beta.1",
+    "@flusys/ng-shared": ">=8.0.0-beta.1",
+    "@flusys/ng-ui": ">=8.0.0-beta.1",
     "rxjs": "^7.8.0"
   },
   "sideEffects": false,

package/types/flusys-ng-auth.d.ts

@@ -1,4 +1,4 @@
-import { ISingleResponse, IMessageResponse, ApiResourceService, IFilterData, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserBranchPermission as IUserBranchPermission$1, IUserCompanyInfo, IUserProvider, ILogicNode, RouterTabItem, BaseFormComponent, IFormField, ITableAction, ITableColumn, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
+import { ISingleResponse, IBaseEntity, IMessageResponse, ApiResourceService, IFilterData, IListResponse, IUserBasicInfo, ICompanyApiProvider, ICompanyBasicInfo, IAuthStateProvider, IUserPermissionProvider, IUserBranchPermission as IUserBranchPermission$1, IUserCompanyInfo, IUserProvider, ILogicNode, RouterTabItem, BaseFormComponent, IFormField, ITableAction, ITableColumn, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
 import * as rxjs from 'rxjs';
 import { Observable } from 'rxjs';
 import * as _angular_core from '@angular/core';
@@ -10,6 +10,14 @@ import * as _angular_forms_signals from '@angular/forms/signals';
 import * as _flusys_ng_auth from '@flusys/ng-auth';
 import * as _flusys_ng_core from '@flusys/ng-core';
 
+declare enum SocialProviderEnum {
+    GOOGLE = "google",
+    FACEBOOK = "facebook",
+    LINKEDIN = "linkedin",
+    MICROSOFT = "microsoft"
+}
+declare const SOCIAL_PROVIDERS: readonly [SocialProviderEnum.GOOGLE, SocialProviderEnum.FACEBOOK, SocialProviderEnum.LINKEDIN, SocialProviderEnum.MICROSOFT];
+
 interface ILoginRequest {
     email: string;
     password: string;
@@ -216,6 +224,40 @@ interface IUserBranchPermission {
     companyId: string;
 }
 
+interface ISocialAuthConfig extends IBaseEntity {
+    provider: SocialProviderEnum;
+    isEnabled: boolean;
+    clientId: string | null;
+    hasClientSecret: boolean;
+    scopes: string[] | null;
+    extraConfig: Record<string, unknown> | null;
+}
+interface ICreateSocialAuthConfigDto {
+    provider: SocialProviderEnum;
+    isEnabled?: boolean;
+    clientId?: string;
+    clientSecret?: string;
+    scopes?: string[];
+    extraConfig?: Record<string, unknown>;
+}
+interface IUpdateSocialAuthConfigDto extends Partial<ICreateSocialAuthConfigDto> {
+    id: string;
+}
+interface ISocialProviderInfo {
+    provider: SocialProviderEnum;
+    redirectUri: string;
+}
+interface ISocialAuthorization {
+    provider: SocialProviderEnum;
+    authorizationUrl: string;
+    state: string;
+}
+interface ISocialCallbackRequest {
+    code: string;
+    state: string;
+    redirectUri: string;
+}
+
 interface ICreateUserRequest {
     name: string;
     email: string;
@@ -299,7 +341,6 @@ declare class AuthStateService {
     private readonly appConfig;
     private readonly router;
     private readonly platform;
-    private readonly translateAdapter;
     private readonly permissionValidator;
     private readonly _user;
     private readonly _accessToken;
@@ -376,6 +417,31 @@ declare class CompanyApiService extends ApiResourceService<ICreateCompanyRequest
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<CompanyApiService>;
 }
 
+/** Round-trips the pre-login returnUrl through the OAuth redirect, which cannot carry it itself. */
+declare const SOCIAL_RETURN_URL_KEY = "flusys_social_return_url";
+declare class SocialAuthApiService {
+    private readonly appConfig;
+    private readonly http;
+    private readonly platform;
+    private readonly baseUrl;
+    get redirectUri(): string;
+    /** Called before redirecting to the provider, so the callback page can resume where the user left off. */
+    saveReturnUrl(returnUrl: string): void;
+    /** Reads and clears the returnUrl saved by {@link saveReturnUrl}. */
+    consumeReturnUrl(): string;
+    getProviders(): Observable<ISingleResponse<ISocialProviderInfo[]>>;
+    authorize(provider: SocialProviderEnum): Observable<ISingleResponse<ISocialAuthorization>>;
+    callback(request: ISocialCallbackRequest): Observable<AuthResponse>;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthApiService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthApiService>;
+}
+
+declare class SocialAuthConfigApiService extends ApiResourceService<ICreateSocialAuthConfigDto | IUpdateSocialAuthConfigDto, ISocialAuthConfig> {
+    constructor();
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthConfigApiService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthConfigApiService>;
+}
+
 /**
  * Token Refresh State Service
  * Manages token refresh state for SSR-safe request queuing.
@@ -488,9 +554,9 @@ declare class AuthLayoutApiAdapter implements ILayoutAuthApi {
     private readonly authState;
     private readonly permissionApi;
     private readonly router;
-    logOut(): Observable<any>;
+    logOut(): Observable<unknown>;
     navigateLogin(withUrl?: boolean): void;
-    switchCompany(companyId: string, branchId: string): Observable<any>;
+    switchCompany(companyId: string, branchId: string): Observable<unknown>;
     getUserCompanies(): Observable<ICompanyInfo$1[]>;
     getCompanyBranches(companyId: string): Observable<IBranchInfo$1[]>;
     getMyCompanies(): Observable<ICompanyInfo$1[]>;
@@ -518,7 +584,7 @@ declare class AuthUserProviderAdapter implements IUserProvider {
         pageSize?: number;
         search?: string;
         isActive?: boolean;
-        [key: string]: any;
+        [key: string]: unknown;
     }): Observable<IListResponse<IUserBasicInfo>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthUserProviderAdapter, never>;
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthUserProviderAdapter>;
@@ -772,6 +838,7 @@ declare const AUTH_ENDPOINTS: {
     readonly FORGOT_PASSWORD: "/auth/forgot-password";
     readonly RESET_PASSWORD: "/auth/reset-password";
     readonly RESEND_VERIFICATION: "/auth/resend-verification";
+    readonly SOCIAL_CALLBACK: "/auth/social/callback";
 };
 /** Check if a URL matches a specific endpoint */
 declare function isEndpoint(url: string, endpoint: string): boolean;
@@ -784,6 +851,7 @@ declare const AUTH_MESSAGES: Record<string, string>;
  * - Users (always visible) - includes permission management via dialogs
  * - Companies (only if company feature enabled)
  * - Branches (only if company feature enabled)
+ * - Social Config (social sign-in provider credentials)
  */
 declare class AdministrationPageComponent {
     private readonly appConfig;
@@ -843,7 +911,7 @@ declare class BranchFormComponent {
     loadBranch(id: string): Promise<void>;
     private toFormModel;
     generateSlug(): void;
-    onSubmit(): Promise<void>;
+    onSubmit(event: Event): Promise<void>;
     private updateBranch;
     private createBranch;
     private buildOptionalFields;
@@ -942,7 +1010,7 @@ declare class ForgotPasswordPageComponent {
     readonly formModel: _angular_core.WritableSignal<IForgotPasswordFormModel>;
     readonly forgotForm: _angular_forms_signals.FieldTree<IForgotPasswordFormModel, string | number, "writable">;
     readonly isFormValid: _angular_core.Signal<boolean>;
-    onSubmit(): void;
+    onSubmit(event: Event): void;
     private showEmailSent;
     resetForm(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<ForgotPasswordPageComponent, never>;
@@ -974,6 +1042,7 @@ declare class LoginPageComponent {
     readonly isLoading: _angular_core.WritableSignal<boolean>;
     readonly unverifiedEmail: _angular_core.WritableSignal<string>;
     readonly savedUserName: _angular_core.WritableSignal<string | null>;
+    readonly welcomeBackText: _angular_core.Signal<string>;
     readonly loginFormModel: _angular_core.WritableSignal<ILoginFormModel>;
     private readonly emailErrorMessage;
     private readonly passwordMinLength;
@@ -994,9 +1063,9 @@ declare class LoginPageComponent {
     readonly branches: _angular_core.Signal<IBranchSelectionInfo[]>;
     constructor();
     private restorePendingSelectionState;
-    onSubmit(): void;
+    onSubmit(event: Event): void;
     onCompanyChange(): void;
-    onSelectCompany(): void;
+    onSelectCompany(event: Event): void;
     goBackToCredentials(): void;
     onResendVerification(): void;
     private autoSelectIfSingle;
@@ -1071,6 +1140,7 @@ declare class ProfilePageComponent {
     private readonly fieldInjectors;
     getFieldInjector(field: IProfileExtraField): Injector;
     readonly passwordModel: _angular_core.WritableSignal<IPasswordFormModel>;
+    readonly passwordForm: _angular_forms_signals.FieldTree<IPasswordFormModel, string | number, "writable">;
     readonly isPasswordLoading: _angular_core.WritableSignal<boolean>;
     readonly isPasswordFormValid: _angular_core.Signal<boolean>;
     readonly passwordsMatch: _angular_core.Signal<boolean>;
@@ -1184,11 +1254,64 @@ declare class ResetPasswordPageComponent {
     readonly passwordMismatch: _angular_core.Signal<boolean>;
     readonly canSubmit: _angular_core.Signal<boolean>;
     constructor();
-    onSubmit(): void;
+    onSubmit(event: Event): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<ResetPasswordPageComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<ResetPasswordPageComponent, "lib-reset-password-page", never, {}, {}, never, never, true, never>;
 }
 
+declare class SocialCallbackPageComponent {
+    private readonly destroyRef;
+    private readonly route;
+    private readonly router;
+    private readonly platform;
+    private readonly socialApi;
+    private readonly authState;
+    private readonly messageService;
+    private readonly translateAdapter;
+    private readonly _error;
+    readonly errorDetail: _angular_core.Signal<string | null>;
+    constructor();
+    backToLogin(): void;
+    private exchangeCode;
+    private returnUrl;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialCallbackPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialCallbackPageComponent, "lib-social-callback-page", never, {}, {}, never, never, true, never>;
+}
+
+interface IProviderFormModel {
+    provider: SocialProviderEnum;
+    id: string | null;
+    isEnabled: boolean;
+    clientId: string;
+    /** A newly typed secret to save. Left blank keeps the previously stored one. */
+    clientSecret: string;
+    hasClientSecret: boolean;
+    tenantId: string;
+    scopes: string;
+}
+declare class SocialConfigPageComponent {
+    private readonly configService;
+    private readonly socialApi;
+    private readonly messageService;
+    private readonly translateAdapter;
+    readonly tenantProvider = SocialProviderEnum.MICROSOFT;
+    private readonly _forms;
+    readonly forms: _angular_core.Signal<IProviderFormModel[]>;
+    private readonly _isLoading;
+    readonly isLoading: _angular_core.Signal<boolean>;
+    private readonly _isSaving;
+    readonly isSaving: _angular_core.Signal<boolean>;
+    readonly redirectUri: string;
+    constructor();
+    updateField<K extends keyof IProviderFormModel>(provider: SocialProviderEnum, field: K, value: IProviderFormModel[K]): void;
+    onSave(): Promise<void>;
+    private loadConfigs;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialConfigPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialConfigPageComponent, "lib-social-config-page", never, {}, {}, never, never, true, never>;
+}
+
 interface IUserFormModel {
     name: string;
     email: string;
@@ -1324,12 +1447,35 @@ declare class VerifyEmailPageComponent {
     private verifyEmail;
     private handleVerificationResult;
     showResendForm(): void;
-    onResend(): void;
+    onResend(event: Event): void;
     private handleResendComplete;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<VerifyEmailPageComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<VerifyEmailPageComponent, "lib-verify-email-page", never, {}, {}, never, never, true, never>;
 }
 
+declare class SocialLoginButtonsComponent {
+    private readonly destroyRef;
+    private readonly socialApi;
+    private readonly messageService;
+    private readonly platform;
+    private readonly document;
+    private readonly translateAdapter;
+    readonly returnUrl: _angular_core.InputSignal<string>;
+    readonly providerEnum: typeof SocialProviderEnum;
+    private readonly _providers;
+    readonly providers: _angular_core.Signal<ISocialProviderInfo[]>;
+    private readonly _pendingProvider;
+    readonly pendingProvider: _angular_core.Signal<SocialProviderEnum | null>;
+    readonly showLabels: _angular_core.Signal<boolean>;
+    readonly layoutClass: _angular_core.Signal<"grid grid-cols-1" | "grid grid-cols-2 gap-3" | "flex flex-wrap justify-center gap-3">;
+    constructor();
+    onSelect(provider: SocialProviderEnum): void;
+    protected redirectTo(url: string): void;
+    private translate;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialLoginButtonsComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SocialLoginButtonsComponent, "lib-social-login-buttons", never, { "returnUrl": { "alias": "returnUrl"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+}
+
 interface BranchWithAssignment extends IBranch {
     isAssigned: boolean;
 }
@@ -1393,11 +1539,11 @@ declare class UserCompanyPermissionDialogComponent {
     private assignedCompanyIds;
     constructor();
     private loadData;
-    onCompanyToggle(company: CompanyWithAssignment): Promise<void>;
+    onCompanyToggle(company: CompanyWithAssignment, isAssigned: boolean): Promise<void>;
     onClose(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserCompanyPermissionDialogComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserCompanyPermissionDialogComponent, "lib-user-company-permission-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "user": { "alias": "user"; "required": true; "isSignal": true; }; }, { "closed": "closed"; "permissionsChanged": "permissionsChanged"; }, never, never, true, never>;
 }
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
-export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
+export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateSocialAuthConfigDto, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISocialAuthConfig, ISocialAuthorization, ISocialCallbackRequest, ISocialProviderInfo, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateSocialAuthConfigDto, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };