@flusys/ng-auth 8.1.4 → 9.0.0

package/fesm2022/flusys-ng-auth.mjs

@@ -1,10 +1,10 @@
 import { HttpClient } from '@angular/common/http';
 import * as i0 from '@angular/core';
-import { inject, Service, signal, computed, effect, PLATFORM_ID, InjectionToken, Component, input, output, untracked, viewChild, DestroyRef, DOCUMENT, Injector, resource, makeStateKey, TransferState } from '@angular/core';
+import { inject, Service, signal, computed, effect, InjectionToken, PLATFORM_ID, Component, input, output, untracked, viewChild, DestroyRef, DOCUMENT, Injector, resource, makeStateKey, TransferState } from '@angular/core';
 import { APP_CONFIG, getServiceUrl, isCompanyFeatureEnabled, isServiceEnabled, isSignUpEnabled, getPermissionMode, getDefaultCompanySlug, getDefaultBranchSlug } from '@flusys/ng-core';
 import { of, timeout, switchMap, map, tap, catchError, shareReplay, finalize, BehaviorSubject, throwError, filter, take, from, firstValueFrom, forkJoin } from 'rxjs';
 import { Router, RouterOutlet, ActivatedRoute, RouterLink } from '@angular/router';
-import { PlatformService, PermissionValidatorService, ApiResourceService, CookieService, TranslateService, USER_PERMISSIONS, COMPANY_PERMISSIONS, BRANCH_PERMISSIONS, SOCIAL_AUTH_CONFIG_PERMISSIONS, resolveTranslationModule, SHARED_MESSAGES, permissionGuard, USER_PROVIDER, COMPANY_API_PROVIDER, USER_PERMISSION_PROVIDER, AUTH_STATE_PROVIDER, RouterTabsComponent, TranslatePipe, HasPermissionDirective, BaseFormComponent, BaseListComponent, BaseListTemplateDirective, FileUrlService, FILE_PROVIDER, PROFILE_PERMISSION_PROVIDER, FileUploaderComponent } from '@flusys/ng-shared';
+import { PlatformService, PermissionValidatorService, ApiResourceService, TranslateService, CookieService, USER_PERMISSIONS, COMPANY_PERMISSIONS, BRANCH_PERMISSIONS, SOCIAL_AUTH_CONFIG_PERMISSIONS, resolveTranslationModule, SHARED_MESSAGES, permissionGuard, USER_PROVIDER, COMPANY_API_PROVIDER, USER_PERMISSION_PROVIDER, AUTH_STATE_PROVIDER, RouterTabsComponent, TranslatePipe, HasPermissionDirective, BaseFormComponent, BaseListComponent, BaseListTemplateDirective, FileUrlService, FILE_PROVIDER, PROFILE_PERMISSION_PROVIDER, FileUploaderComponent } from '@flusys/ng-shared';
 import { map as map$1, catchError as catchError$1, tap as tap$1 } from 'rxjs/operators';
 import { isPlatformBrowser, NgComponentOutlet, NgTemplateOutlet } from '@angular/common';
 import { MessageService, CardComponent, CheckboxComponent, FButtonDirective, InputTextDirective, SelectComponent, UiIconComponent, ConfirmationService, DialogComponent, ProgressSpinnerComponent, TooltipDirective, IconFieldComponent, InputIconComponent, TableComponent, TagComponent, PasswordComponent, AvatarComponent, SkeletonComponent, TextareaDirective, ToggleSwitchComponent } from '@flusys/ng-ui';
@@ -538,6 +538,101 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
             type: Service
         }] });
 
+const AUTH_VALIDATION_CONFIG = new InjectionToken('AUTH_VALIDATION_CONFIG');
+const REGISTRATION_FIELD_CONTEXT = new InjectionToken('REGISTRATION_FIELD_CONTEXT');
+const AUTH_REGISTRATION_EXTENSION = new InjectionToken('AUTH_REGISTRATION_EXTENSION');
+const AUTH_USER_LIST_EXTENSION = new InjectionToken('AUTH_USER_LIST_EXTENSION');
+const PROFILE_FIELD_CONTEXT = new InjectionToken('PROFILE_FIELD_CONTEXT');
+const AUTH_PROFILE_EXTENSION = new InjectionToken('AUTH_PROFILE_EXTENSION');
+const USER_FORM_FIELD_CONTEXT = new InjectionToken('USER_FORM_FIELD_CONTEXT');
+const AUTH_USER_FORM_EXTENSION = new InjectionToken('AUTH_USER_FORM_EXTENSION');
+const AUTH_USER_DETAIL_CONFIG = new InjectionToken('AUTH_USER_DETAIL_CONFIG');
+const PASSWORD_SPECIAL_CHAR_PATTERN = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?~`]/;
+const DEFAULT_PASSWORD_VALIDATION = {
+    minLength: 8,
+    maxLength: 128,
+    requireUppercase: true,
+    requireLowercase: true,
+    requireNumbers: true,
+    requireSpecialChars: true,
+};
+function resolvePasswordValidation(config) {
+    const overrides = Object.fromEntries(Object.entries(config ?? {}).filter(([, value]) => value !== undefined));
+    return { ...DEFAULT_PASSWORD_VALIDATION, ...overrides };
+}
+function validatePassword(password, config = DEFAULT_PASSWORD_VALIDATION) {
+    const rules = resolvePasswordValidation(config);
+    const fail = (key) => rules.messageKey ?? rules.message ?? key;
+    if (password.length < (rules.minLength ?? 0)) {
+        return fail('auth.validation.password.min.length');
+    }
+    if (rules.maxLength && password.length > rules.maxLength) {
+        return fail('auth.validation.password.max.length');
+    }
+    if (rules.pattern) {
+        return rules.pattern.test(password) ? null : fail('auth.validation.password.pattern');
+    }
+    if (rules.requireUppercase && !/[A-Z]/.test(password)) {
+        return fail('auth.validation.password.require.uppercase');
+    }
+    if (rules.requireLowercase && !/[a-z]/.test(password)) {
+        return fail('auth.validation.password.require.lowercase');
+    }
+    if (rules.requireNumbers && !/\d/.test(password)) {
+        return fail('auth.validation.password.require.number');
+    }
+    if (rules.requireSpecialChars && !PASSWORD_SPECIAL_CHAR_PATTERN.test(password)) {
+        return fail('auth.validation.password.require.special');
+    }
+    return null;
+}
+function validateEmail(email, config) {
+    const pattern = config?.pattern ?? /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    if (pattern.test(email))
+        return null;
+    return config?.messageKey ?? config?.message ?? 'shared.invalid.email';
+}
+
+class PasswordPolicyService {
+    config = inject(AUTH_VALIDATION_CONFIG, { optional: true });
+    translateAdapter = inject(TranslateService, { optional: true });
+    rules = resolvePasswordValidation(this.config?.password);
+    minLength = this.rules.minLength ?? DEFAULT_PASSWORD_VALIDATION.minLength;
+    maxLength = this.rules.maxLength ?? DEFAULT_PASSWORD_VALIDATION.maxLength;
+    validate(password) {
+        if (!password)
+            return null;
+        const key = validatePassword(password, this.rules);
+        if (!key)
+            return null;
+        const params = { min: this.minLength, max: this.maxLength, ...this.rules.messageParam };
+        return this.translateAdapter?.translate(key, params) ?? key;
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: PasswordPolicyService, deps: [], target: i0.ɵɵFactoryTarget.Service });
+    static ɵprov = i0.ɵɵngDeclareService({ minVersion: "22.0.0", version: "22.1.5", ngImport: i0, type: PasswordPolicyService });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: PasswordPolicyService, decorators: [{
+            type: Service
+        }] });
+
+class EmailPolicyService {
+    config = inject(AUTH_VALIDATION_CONFIG, { optional: true })?.email;
+    translateAdapter = inject(TranslateService, { optional: true });
+    validate(email) {
+        if (!email)
+            return null;
+        const key = validateEmail(email, this.config);
+        if (!key)
+            return null;
+        return this.translateAdapter?.translate(key, this.config?.messageParam) ?? key;
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: EmailPolicyService, deps: [], target: i0.ɵɵFactoryTarget.Service });
+    static ɵprov = i0.ɵɵngDeclareService({ minVersion: "22.0.0", version: "22.1.5", ngImport: i0, type: EmailPolicyService });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: EmailPolicyService, decorators: [{
+            type: Service
+        }] });
+
 /**
  * User API Service
  * Signal-based service for user CRUD operations
@@ -808,6 +903,7 @@ const AUTH_MESSAGES = {
     'auth.select.success': 'Company selected successfully',
     'auth.switch.company.success': 'Company switched successfully',
     'auth.register.email.exists': 'Email already exists',
+    'auth.register.account.deleted': 'This account has been permanently deleted. Please contact your system administrator.',
     'auth.register.company.already.assigned': 'Company already assigned',
     'auth.password.change.success': 'Password changed successfully',
     'auth.password.change.invalid.current': 'Current password is incorrect',
@@ -913,10 +1009,10 @@ const AUTH_MESSAGES = {
     'auth.login.branch.label': 'Branch',
     'auth.login.select.branch.option': 'Select a branch',
     'auth.login.remember.selection': 'Remember my selection',
-    'auth.validation.password.min.length': 'Password must be at least 8 characters',
+    'auth.validation.password.min.length': 'Password must be at least {{min}} characters',
     'auth.validation.email.required': 'Email is required',
     'auth.validation.password.required': 'Password is required',
-    'auth.validation.password.max.length': 'Password exceeds maximum length',
+    'auth.validation.password.max.length': 'Password must be at most {{max}} characters',
     'auth.validation.password.pattern': 'Password does not meet requirements',
     'auth.validation.password.require.uppercase': 'Password must contain at least one uppercase letter',
     'auth.validation.password.require.lowercase': 'Password must contain at least one lowercase letter',
@@ -938,6 +1034,7 @@ const AUTH_MESSAGES = {
     // pages/register/register-page.component.ts
     'auth.register.create.account': 'Create Account',
     'auth.register.subtitle': 'Fill in your details to create an account.',
+    'auth.register.signup.disabled': 'New account registration is currently disabled.',
     'auth.register.full.name': 'Full Name',
     'auth.register.name.placeholder': 'Enter your full name',
     'auth.phone.label': 'Phone Number',
@@ -1100,6 +1197,7 @@ const AUTH_MESSAGES = {
     'auth.social.company.required': 'No account is linked to this {{provider}} profile. Please sign up manually and join or create a company first, then social sign-in will work.',
     'auth.social.email.required': '{{provider}} did not share an email address',
     'auth.social.email.not.verified': '{{provider}} has not verified this email address',
+    'auth.social.account.deleted': 'This account has been permanently deleted. Please contact your system administrator.',
     // components/social-login-buttons.component.ts
     'auth.social.continue.with': 'or continue with',
     'auth.social.provider.google': 'Google',
@@ -1627,54 +1725,6 @@ function provideAuthProviders() {
     ];
 }
 
-const AUTH_VALIDATION_CONFIG = new InjectionToken('AUTH_VALIDATION_CONFIG');
-const REGISTRATION_FIELD_CONTEXT = new InjectionToken('REGISTRATION_FIELD_CONTEXT');
-const AUTH_REGISTRATION_EXTENSION = new InjectionToken('AUTH_REGISTRATION_EXTENSION');
-const AUTH_USER_LIST_EXTENSION = new InjectionToken('AUTH_USER_LIST_EXTENSION');
-const PROFILE_FIELD_CONTEXT = new InjectionToken('PROFILE_FIELD_CONTEXT');
-const AUTH_PROFILE_EXTENSION = new InjectionToken('AUTH_PROFILE_EXTENSION');
-const USER_FORM_FIELD_CONTEXT = new InjectionToken('USER_FORM_FIELD_CONTEXT');
-const AUTH_USER_FORM_EXTENSION = new InjectionToken('AUTH_USER_FORM_EXTENSION');
-const AUTH_USER_DETAIL_CONFIG = new InjectionToken('AUTH_USER_DETAIL_CONFIG');
-function validatePassword(password, config) {
-    const minLen = config.minLength ?? 8;
-    const maxLen = config.maxLength;
-    if (password.length < minLen) {
-        return config.message ?? 'auth.validation.password.min.length';
-    }
-    if (maxLen && password.length > maxLen) {
-        return config.message ?? 'auth.validation.password.max.length';
-    }
-    if (config.pattern) {
-        if (!config.pattern.test(password)) {
-            return config.message ?? 'auth.validation.password.pattern';
-        }
-    }
-    else {
-        if (config.requireUppercase && !/[A-Z]/.test(password)) {
-            return config.message ?? 'auth.validation.password.require.uppercase';
-        }
-        if (config.requireLowercase && !/[a-z]/.test(password)) {
-            return config.message ?? 'auth.validation.password.require.lowercase';
-        }
-        if (config.requireNumbers && !/\d/.test(password)) {
-            return config.message ?? 'auth.validation.password.require.number';
-        }
-        if (config.requireSpecialChars &&
-            !/[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?]/.test(password)) {
-            return config.message ?? 'auth.validation.password.require.special';
-        }
-    }
-    return null;
-}
-function validateEmail(email, config) {
-    const pattern = config?.pattern ?? /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-    const message = config?.message ?? 'shared.invalid.email';
-    if (!pattern.test(email))
-        return message;
-    return null;
-}
-
 /**
  * Administration Page Component
  * Unified administration page with tabs for:
@@ -4026,9 +4076,7 @@ class LoginPageComponent {
     translateAdapter = inject(TranslateService, {
         optional: true,
     });
-    validationConfig = inject(AUTH_VALIDATION_CONFIG, {
-        optional: true,
-    });
+    emailPolicy = inject(EmailPolicyService);
     translate(key, vars) {
         return this.translateAdapter?.translate(key, vars) ?? key;
     }
@@ -4050,49 +4098,19 @@ class LoginPageComponent {
         rememberMe: true,
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "loginFormModel" }] : /* istanbul ignore next */ []));
-    emailErrorMessage = computed(() => this.validationConfig?.email?.message ??
-        this.translate('shared.invalid.email'), /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "emailErrorMessage" }] : /* istanbul ignore next */ []));
-    passwordMinLength = computed(() => this.validationConfig?.password?.minLength ?? 8, /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "passwordMinLength" }] : /* istanbul ignore next */ []));
-    passwordErrorMessage = computed(() => this.validationConfig?.password?.message ??
-        this.translate('auth.validation.password.min.length', {
-            min: this.passwordMinLength(),
-        }), /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "passwordErrorMessage" }] : /* istanbul ignore next */ []));
     loginForm = form(this.loginFormModel, (f) => {
         required(f.email, {
             message: this.translate('auth.validation.email.required'),
         });
-        email(f.email, { message: this.emailErrorMessage() });
         required(f.password, {
             message: this.translate('auth.validation.password.required'),
         });
-        minLength(f.password, this.passwordMinLength(), {
-            message: this.passwordErrorMessage(),
-        });
     });
-    emailValidationError = computed(() => {
-        const email = this.loginFormModel().email;
-        if (!email)
-            return null;
-        return validateEmail(email, this.validationConfig?.email ?? undefined);
-    }, /* @ts-ignore */
+    emailValidationError = computed(() => this.emailPolicy.validate(this.loginFormModel().email), /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "emailValidationError" }] : /* istanbul ignore next */ []));
-    passwordValidationError = computed(() => {
-        const password = this.loginFormModel().password;
-        if (!password)
-            return null;
-        if (!this.validationConfig?.password)
-            return null;
-        return validatePassword(password, this.validationConfig.password);
-    }, /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "passwordValidationError" }] : /* istanbul ignore next */ []));
     isLoginFormValid = computed(() => {
         const formValid = this.loginForm().valid();
-        const emailError = this.emailValidationError();
-        const passwordError = this.passwordValidationError();
-        return formValid && !emailError && !passwordError;
+        return formValid && !this.emailValidationError();
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "isLoginFormValid" }] : /* istanbul ignore next */ []));
     selectionFormModel = signal({
@@ -4196,7 +4214,7 @@ class LoginPageComponent {
                         severity: 'success',
                         summary: this.translate('shared.success'),
                         detail: response.messageKey
-                            ? this.translate(response.messageKey)
+                            ? this.translate(response.messageKey, response.messageVariables)
                             : (response.message ?? this.translate('auth.login.success')),
                     });
                     this.authState.navigateAfterLogin(this.returnUrl());
@@ -4206,7 +4224,7 @@ class LoginPageComponent {
                 this.isLoading.set(false);
                 const messageKey = error?.error?.messageKey;
                 const detail = messageKey
-                    ? this.translate(messageKey)
+                    ? this.translate(messageKey, error?.error?.messageVariables)
                     : error?.error?.message;
                 this.messageService.add({
                     severity: 'error',
@@ -4268,7 +4286,7 @@ class LoginPageComponent {
                     severity: 'success',
                     summary: this.translate('shared.success'),
                     detail: response.messageKey
-                        ? this.translate(response.messageKey)
+                        ? this.translate(response.messageKey, response.messageVariables)
                         : response.message,
                 });
                 this.authState.navigateAfterLogin(this.returnUrl());
@@ -4305,7 +4323,7 @@ class LoginPageComponent {
                     severity: 'success',
                     summary: this.translate('shared.success'),
                     detail: response.messageKey
-                        ? this.translate(response.messageKey)
+                        ? this.translate(response.messageKey, response.messageVariables)
                         : response.message,
                 });
             },
@@ -4427,7 +4445,7 @@ class LoginPageComponent {
                   [formField]="loginForm.email"
                   autocomplete="email"
                 />
-                @if (emailValidationError() && loginFormModel().email) {
+                @if (emailValidationError()) {
                   <small class="text-danger block mt-1">{{
                     emailValidationError()
                   }}</small>
@@ -4448,11 +4466,6 @@ class LoginPageComponent {
                     [formField]="loginForm.password"
                     autocomplete="current-password"
                   />
-                  @if (passwordValidationError() && loginFormModel().password) {
-                    <small class="text-danger block mt-1">{{
-                      passwordValidationError()
-                    }}</small>
-                  }
                 </div>
 
                 <div
@@ -4717,7 +4730,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                   [formField]="loginForm.email"
                   autocomplete="email"
                 />
-                @if (emailValidationError() && loginFormModel().email) {
+                @if (emailValidationError()) {
                   <small class="text-danger block mt-1">{{
                     emailValidationError()
                   }}</small>
@@ -4738,11 +4751,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                     [formField]="loginForm.password"
                     autocomplete="current-password"
                   />
-                  @if (passwordValidationError() && loginFormModel().password) {
-                    <small class="text-danger block mt-1">{{
-                      passwordValidationError()
-                    }}</small>
-                  }
                 </div>
 
                 <div
@@ -4914,6 +4922,10 @@ var loginPage_component = /*#__PURE__*/Object.freeze({
     LoginPageComponent: LoginPageComponent
 });
 
+function sortByOrder(items) {
+    return [...items].sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+}
+
 class ProfilePageComponent {
     destroyRef = inject(DestroyRef);
     appConfig = inject(APP_CONFIG);
@@ -4921,6 +4933,7 @@ class ProfilePageComponent {
     authState = inject(AuthStateService);
     userService = inject(UserApiService);
     authApiService = inject(AuthApiService);
+    passwordPolicy = inject(PasswordPolicyService);
     fileUrlService = inject(FileUrlService);
     fileProvider = inject(FILE_PROVIDER, { optional: true });
     permissionProvider = inject(PROFILE_PERMISSION_PROVIDER, {
@@ -4956,22 +4969,19 @@ class ProfilePageComponent {
     extraSections = computed(() => {
         if (!this.profileExtension?.getExtraSections)
             return [];
-        const sections = this.profileExtension.getExtraSections();
-        return sections.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.profileExtension.getExtraSections());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraSections" }] : /* istanbul ignore next */ []));
     editableFields = computed(() => {
         if (!this.profileExtension?.getExtraFields)
             return [];
-        const fields = this.profileExtension.getExtraFields();
-        return fields.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.profileExtension.getExtraFields());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "editableFields" }] : /* istanbul ignore next */ []));
     viewOnlyFields = computed(() => {
         if (!this.userFormExtension?.getExtraFields)
             return [];
-        const fields = this.userFormExtension.getExtraFields();
-        return fields.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.userFormExtension.getExtraFields());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "viewOnlyFields" }] : /* istanbul ignore next */ []));
     hasExtraContent = computed(() => this.extraSections().length > 0 ||
@@ -5115,18 +5125,21 @@ class ProfilePageComponent {
     ...(ngDevMode ? [{ debugName: "passwordModel" }] : /* istanbul ignore next */ []));
     passwordForm = form(this.passwordModel, (f) => {
         required(f.currentPassword, {
-            message: this.translate('profile.current.password.required'),
+            message: this.translate('auth.password.change.current.required'),
         });
         required(f.newPassword, {
-            message: this.translate('profile.new.password.required'),
+            message: this.translate('auth.validation.password.required'),
         });
     });
     isPasswordLoading = signal(false, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "isPasswordLoading" }] : /* istanbul ignore next */ []));
+    newPasswordError = computed(() => this.passwordPolicy.validate(this.passwordModel().newPassword), /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "newPasswordError" }] : /* istanbul ignore next */ []));
     isPasswordFormValid = computed(() => {
         const model = this.passwordModel();
         return (model.currentPassword.length > 0 &&
-            model.newPassword.length >= 6 &&
+            model.newPassword.length > 0 &&
+            !this.newPasswordError() &&
             model.newPassword === model.confirmPassword);
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "isPasswordFormValid" }] : /* istanbul ignore next */ []));
@@ -5697,10 +5710,13 @@ class ProfilePageComponent {
             <f-password
               [inputId]="'newPassword'"
               [formField]="passwordForm.newPassword"
-              [placeholder]="'shared.min.characters' | translate: { count: 6 }"
+              [placeholder]="'shared.min.characters' | translate: { count: passwordPolicy.minLength }"
               class="w-full"
               autocomplete="new-password"
             />
+            @if (newPasswordError()) {
+              <small class="text-danger">{{ newPasswordError() }}</small>
+            }
           </div>
 
           <div class="flex flex-col gap-2">
@@ -6257,10 +6273,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
             <f-password
               [inputId]="'newPassword'"
               [formField]="passwordForm.newPassword"
-              [placeholder]="'shared.min.characters' | translate: { count: 6 }"
+              [placeholder]="'shared.min.characters' | translate: { count: passwordPolicy.minLength }"
               class="w-full"
               autocomplete="new-password"
             />
+            @if (newPasswordError()) {
+              <small class="text-danger">{{ newPasswordError() }}</small>
+            }
           </div>
 
           <div class="flex flex-col gap-2">
@@ -6466,9 +6485,8 @@ class RegisterPageComponent {
     authState = inject(AuthStateService);
     route = inject(ActivatedRoute);
     router = inject(Router);
-    validationConfig = inject(AUTH_VALIDATION_CONFIG, {
-        optional: true,
-    });
+    emailPolicy = inject(EmailPolicyService);
+    passwordPolicy = inject(PasswordPolicyService);
     registrationExtension = inject(AUTH_REGISTRATION_EXTENSION, {
         optional: true,
     });
@@ -6497,8 +6515,7 @@ class RegisterPageComponent {
     extraFields = computed(() => {
         if (!this.registrationExtension)
             return [];
-        const fields = this.registrationExtension.getExtraFields();
-        return fields.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.registrationExtension.getExtraFields());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraFields" }] : /* istanbul ignore next */ []));
     extraFieldsModel = signal(this.extraFields().reduce((acc, field) => {
@@ -6508,16 +6525,6 @@ class RegisterPageComponent {
         return acc;
     }, {}), /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraFieldsModel" }] : /* istanbul ignore next */ []));
-    emailErrorMessage = computed(() => this.validationConfig?.email?.message ??
-        this.translate('shared.invalid.email'), /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "emailErrorMessage" }] : /* istanbul ignore next */ []));
-    passwordMinLength = computed(() => this.validationConfig?.password?.minLength ?? 8, /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "passwordMinLength" }] : /* istanbul ignore next */ []));
-    passwordErrorMessage = computed(() => this.validationConfig?.password?.message ??
-        this.translate('auth.validation.password.min.length', {
-            min: this.passwordMinLength(),
-        }), /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "passwordErrorMessage" }] : /* istanbul ignore next */ []));
     userFormModel = signal({
         name: '',
         email: '',
@@ -6536,13 +6543,9 @@ class RegisterPageComponent {
         required(f.email, {
             message: this.translate('auth.validation.email.required'),
         });
-        email(f.email, { message: this.emailErrorMessage() });
         required(f.password, {
             message: this.translate('auth.validation.password.required'),
         });
-        minLength(f.password, this.passwordMinLength(), {
-            message: this.passwordErrorMessage(),
-        });
         required(f.confirmPassword, {
             message: this.translate('auth.validation.confirm.password.required'),
         });
@@ -6557,21 +6560,9 @@ class RegisterPageComponent {
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "companyFormModel" }] : /* istanbul ignore next */ []));
     companyForm = form(this.companyFormModel);
-    emailValidationError = computed(() => {
-        const email = this.userFormModel().email;
-        if (!email)
-            return null;
-        return validateEmail(email, this.validationConfig?.email ?? undefined);
-    }, /* @ts-ignore */
+    emailValidationError = computed(() => this.emailPolicy.validate(this.userFormModel().email), /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "emailValidationError" }] : /* istanbul ignore next */ []));
-    passwordValidationError = computed(() => {
-        const password = this.userFormModel().password;
-        if (!password)
-            return null;
-        if (!this.validationConfig?.password)
-            return null;
-        return validatePassword(password, this.validationConfig.password);
-    }, /* @ts-ignore */
+    passwordValidationError = computed(() => this.passwordPolicy.validate(this.userFormModel().password), /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "passwordValidationError" }] : /* istanbul ignore next */ []));
     extraFieldsValidationError = computed(() => {
         if (!this.registrationExtension?.validateExtraFields)
@@ -6592,7 +6583,7 @@ class RegisterPageComponent {
         const userValid = userModel.name.trim().length >= 2 &&
             userModel.email.includes('@') &&
             !emailError &&
-            userModel.password.length >= this.passwordMinLength() &&
+            userModel.password.length > 0 &&
             !passwordError &&
             userModel.confirmPassword.length > 0 &&
             this.passwordsMatch() &&
@@ -6681,9 +6672,8 @@ class RegisterPageComponent {
             }
         });
     }
-    onCreateCompanyToggle() {
-        const currentValue = this.companyFormModel().createNewCompany;
-        if (!currentValue) {
+    onCreateCompanyToggle(createNew) {
+        if (createNew) {
             this.companyFormModel.update((model) => ({
                 ...model,
                 createNewCompany: true,
@@ -6755,7 +6745,7 @@ class RegisterPageComponent {
                         severity: 'success',
                         summary: this.translate('shared.success'),
                         detail: response.messageKey
-                            ? this.translate(response.messageKey)
+                            ? this.translate(response.messageKey, response.messageVariables)
                             : response.message,
                         life: 5000,
                     });
@@ -6773,7 +6763,7 @@ class RegisterPageComponent {
                         severity: 'success',
                         summary: this.translate('shared.success'),
                         detail: response.messageKey
-                            ? this.translate(response.messageKey)
+                            ? this.translate(response.messageKey, response.messageVariables)
                             : response.message,
                     });
                     this.authState.navigateAfterLogin(this.returnUrl());
@@ -6851,7 +6841,7 @@ class RegisterPageComponent {
                   class="w-full"
                   autocomplete="email"
                 />
-                @if (emailValidationError() && userFormModel().email) {
+                @if (emailValidationError()) {
                   <small class="text-danger block mt-1">{{
                     emailValidationError()
                   }}</small>
@@ -6868,12 +6858,12 @@ class RegisterPageComponent {
                     [formField]="userForm.password"
                     [placeholder]="
                       'shared.min.characters'
-                        | translate: { count: passwordMinLength() }
+                        | translate: { count: passwordPolicy.minLength }
                     "
                     class="w-full"
                     autocomplete="new-password"
                   />
-                  @if (passwordValidationError() && userFormModel().password) {
+                  @if (passwordValidationError()) {
                     <small class="text-danger block mt-1">{{
                       passwordValidationError()
                     }}</small>
@@ -7098,7 +7088,7 @@ class RegisterPageComponent {
                       <f-checkbox
                         [formField]="companyForm.createNewCompany"
                         [label]="'auth.register.create.new.company' | translate"
-                        (click)="onCreateCompanyToggle()"
+                        (onChange)="onCreateCompanyToggle($event.checked)"
                       />
                     </div>
                   }
@@ -7339,7 +7329,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                   class="w-full"
                   autocomplete="email"
                 />
-                @if (emailValidationError() && userFormModel().email) {
+                @if (emailValidationError()) {
                   <small class="text-danger block mt-1">{{
                     emailValidationError()
                   }}</small>
@@ -7356,12 +7346,12 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                     [formField]="userForm.password"
                     [placeholder]="
                       'shared.min.characters'
-                        | translate: { count: passwordMinLength() }
+                        | translate: { count: passwordPolicy.minLength }
                     "
                     class="w-full"
                     autocomplete="new-password"
                   />
-                  @if (passwordValidationError() && userFormModel().password) {
+                  @if (passwordValidationError()) {
                     <small class="text-danger block mt-1">{{
                       passwordValidationError()
                     }}</small>
@@ -7586,7 +7576,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                       <f-checkbox
                         [formField]="companyForm.createNewCompany"
                         [label]="'auth.register.create.new.company' | translate"
-                        (click)="onCreateCompanyToggle()"
+                        (onChange)="onCreateCompanyToggle($event.checked)"
                       />
                     </div>
                   }
@@ -7753,6 +7743,7 @@ class ResetPasswordPageComponent {
     route = inject(ActivatedRoute);
     messageService = inject(MessageService);
     authApi = inject(AuthApiService);
+    passwordPolicy = inject(PasswordPolicyService);
     translateAdapter = inject(TranslateService, {
         optional: true,
     });
@@ -7775,11 +7766,6 @@ class ResetPasswordPageComponent {
         required(f.newPassword, {
             message: this.translate('auth.validation.password.required'),
         });
-        minLength(f.newPassword, 8, {
-            message: this.translate('auth.validation.password.min.length', {
-                min: 8,
-            }),
-        });
         required(f.confirmPassword, {
             message: this.translate('auth.validation.confirm.password.required'),
         });
@@ -7790,7 +7776,11 @@ class ResetPasswordPageComponent {
             model.newPassword !== model.confirmPassword);
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "passwordMismatch" }] : /* istanbul ignore next */ []));
-    canSubmit = computed(() => this.resetForm().valid() && !this.passwordMismatch(), /* @ts-ignore */
+    passwordValidationError = computed(() => this.passwordPolicy.validate(this.formModel().newPassword), /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "passwordValidationError" }] : /* istanbul ignore next */ []));
+    canSubmit = computed(() => this.resetForm().valid() &&
+        !this.passwordValidationError() &&
+        !this.passwordMismatch(), /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "canSubmit" }] : /* istanbul ignore next */ []));
     constructor() {
         effect(() => {
@@ -7821,13 +7811,12 @@ class ResetPasswordPageComponent {
             .pipe(takeUntilDestroyed(this.destroyRef), finalize(() => this.isLoading.set(false)))
             .subscribe({
             next: (response) => {
-                const r = response;
                 this.messageService.add({
                     severity: 'success',
                     summary: this.translate('shared.success'),
-                    detail: r?.messageKey
-                        ? this.translate(r.messageKey, r.messageVariables)
-                        : r?.message,
+                    detail: response?.messageKey
+                        ? this.translate(response.messageKey, response.messageVariables)
+                        : response?.message,
                 });
                 this.pageState.set('success');
             },
@@ -7880,15 +7869,22 @@ class ResetPasswordPageComponent {
                   >
                     {{ 'auth.reset.password.new.password' | translate }}
                   </label>
-                  <f-password
-                    [inputId]="'newPassword'"
-                    [placeholder]="
-                      'auth.reset.password.new.password.placeholder' | translate
-                    "
-                    class="w-full mb-4"
-                    [formField]="resetForm.newPassword"
-                    autocomplete="new-password"
-                  />
+                  <div class="mb-4">
+                    <f-password
+                      [inputId]="'newPassword'"
+                      [placeholder]="
+                        'auth.reset.password.new.password.placeholder' | translate
+                      "
+                      class="w-full"
+                      [formField]="resetForm.newPassword"
+                      autocomplete="new-password"
+                    />
+                    @if (passwordValidationError()) {
+                      <small class="text-danger block mt-1">{{
+                        passwordValidationError()
+                      }}</small>
+                    }
+                  </div>
 
                   <label
                     for="confirmPassword"
@@ -8043,15 +8039,22 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                   >
                     {{ 'auth.reset.password.new.password' | translate }}
                   </label>
-                  <f-password
-                    [inputId]="'newPassword'"
-                    [placeholder]="
-                      'auth.reset.password.new.password.placeholder' | translate
-                    "
-                    class="w-full mb-4"
-                    [formField]="resetForm.newPassword"
-                    autocomplete="new-password"
-                  />
+                  <div class="mb-4">
+                    <f-password
+                      [inputId]="'newPassword'"
+                      [placeholder]="
+                        'auth.reset.password.new.password.placeholder' | translate
+                      "
+                      class="w-full"
+                      [formField]="resetForm.newPassword"
+                      autocomplete="new-password"
+                    />
+                    @if (passwordValidationError()) {
+                      <small class="text-danger block mt-1">{{
+                        passwordValidationError()
+                      }}</small>
+                    }
+                  </div>
 
                   <label
                     for="confirmPassword"
@@ -8227,7 +8230,7 @@ class SocialCallbackPageComponent {
                         severity: 'success',
                         summary: this.translate('shared.success'),
                         detail: response.messageKey
-                            ? this.translate(response.messageKey)
+                            ? this.translate(response.messageKey, response.messageVariables)
                             : (response.message ?? this.translate('auth.login.success')),
                     });
                     this.authState.navigateAfterLogin(this.returnUrl());
@@ -8719,6 +8722,7 @@ class UserFormComponent {
     userService = inject(UserApiService);
     permissionService = inject(UserPermissionApiService);
     authState = inject(AuthStateService);
+    passwordPolicy = inject(PasswordPolicyService);
     translateAdapter = inject(TranslateService, {
         optional: true,
     });
@@ -8772,9 +8776,7 @@ class UserFormComponent {
     extraFields = computed(() => {
         if (!this.userFormExtension?.getExtraFields)
             return [];
-        return this.userFormExtension
-            .getExtraFields()
-            .sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.userFormExtension.getExtraFields());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraFields" }] : /* istanbul ignore next */ []));
     hasExtraFields = computed(() => this.extraFields().length > 0, /* @ts-ignore */
@@ -8832,12 +8834,14 @@ class UserFormComponent {
         });
         return injector;
     }
+    passwordError = computed(() => this.passwordPolicy.validate(this.formModel().password), /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "passwordError" }] : /* istanbul ignore next */ []));
     isFormValid = computed(() => {
         const model = this.formModel();
         const isEdit = this.isEditMode();
         const nameValid = model.name.trim().length > 0;
         const emailValid = model.email.includes('@');
-        const passwordValid = isEdit ? true : model.password.length >= 8;
+        const passwordValid = model.password ? !this.passwordError() : isEdit;
         return nameValid && emailValid && passwordValid;
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "isFormValid" }] : /* istanbul ignore next */ []));
@@ -9080,6 +9084,9 @@ class UserFormComponent {
             "
             autocomplete="new-password"
           />
+          @if (passwordError()) {
+            <small class="text-danger">{{ passwordError() }}</small>
+          }
         </div>
 
         <div class="flex flex-col gap-2">
@@ -9395,6 +9402,9 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
             "
             autocomplete="new-password"
           />
+          @if (passwordError()) {
+            <small class="text-danger">{{ passwordError() }}</small>
+          }
         </div>
 
         <div class="flex flex-col gap-2">
@@ -10201,15 +10211,13 @@ class UserListComponent {
     extraColumns = computed(() => {
         if (!this.userListExtension)
             return [];
-        const columns = this.userListExtension.getExtraColumns();
-        return columns.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.userListExtension.getExtraColumns());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraColumns" }] : /* istanbul ignore next */ []));
     extraActions = computed(() => {
         if (!this.userListExtension)
             return [];
-        const actions = this.userListExtension.getExtraActions();
-        return actions.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
+        return sortByOrder(this.userListExtension.getExtraActions());
     }, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "extraActions" }] : /* istanbul ignore next */ []));
     hasUserDetailView = computed(() => !!this.userDetailConfig, /* @ts-ignore */
@@ -11427,5 +11435,5 @@ var verifyEmailPage_component = /*#__PURE__*/Object.freeze({
  * Generated bundle index. Do not edit.
  */
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, BranchPermittedUsersDialogComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, CompanyPermittedUsersDialogComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, BranchPermittedUsersDialogComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, CompanyPermittedUsersDialogComponent, DEFAULT_PASSWORD_VALIDATION, EmailPolicyService, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, PasswordPolicyService, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, resolvePasswordValidation, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
 //# sourceMappingURL=flusys-ng-auth.mjs.map