@flusys/ng-auth 8.1.5 → 9.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/ng-auth",
-  "version": "8.1.5",
+  "version": "9.0.1",
   "description": "Authentication module for FLUSYS Angular applications",
   "license": "MIT",
   "peerDependencies": {
@@ -8,10 +8,10 @@
     "@angular/core": ">=22.0.0",
     "@angular/forms": ">=22.0.0",
     "@angular/router": ">=22.0.0",
-    "@flusys/ng-core": ">=8.1.5",
-    "@flusys/ng-layout": ">=8.1.5",
-    "@flusys/ng-shared": ">=8.1.5",
-    "@flusys/ng-ui": ">=8.1.5",
+    "@flusys/ng-core": ">=9.0.1",
+    "@flusys/ng-layout": ">=9.0.1",
+    "@flusys/ng-shared": ">=9.0.1",
+    "@flusys/ng-ui": ">=9.0.1",
     "rxjs": "^7.8.0"
   },
   "sideEffects": false,

package/types/flusys-ng-auth.d.ts

@@ -329,7 +329,7 @@ declare class AuthApiService {
     resendVerification(email: string): Observable<IMessageResponse>;
     verifyEmail(token: string): Observable<IMessageResponse | IRegistrationResponse>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 declare class AuthInitService {
@@ -341,7 +341,7 @@ declare class AuthInitService {
     private initializationCache$;
     initialize(): Observable<boolean>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthInitService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthInitService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -404,7 +404,7 @@ declare class AuthStateService {
     private get;
     private remove;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthStateService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthStateService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -415,7 +415,7 @@ declare class BranchApiService extends ApiResourceService<ICreateBranchRequest |
     constructor();
     fetchByCompany(companyId: string, search?: string): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<BranchApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<BranchApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -425,7 +425,7 @@ declare class BranchApiService extends ApiResourceService<ICreateBranchRequest |
 declare class CompanyApiService extends ApiResourceService<ICreateCompanyRequest | IUpdateCompanyRequest, ICompany> {
     constructor();
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<CompanyApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<CompanyApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /** Round-trips the pre-login returnUrl through the OAuth redirect, which cannot carry it itself. */
@@ -444,13 +444,13 @@ declare class SocialAuthApiService {
     authorize(provider: SocialProviderEnum): Observable<ISingleResponse<ISocialAuthorization>>;
     callback(request: ISocialCallbackRequest): Observable<AuthResponse>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 declare class SocialAuthConfigApiService extends ApiResourceService<ICreateSocialAuthConfigDto | IUpdateSocialAuthConfigDto, ISocialAuthConfig> {
     constructor();
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<SocialAuthConfigApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SocialAuthConfigApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -467,7 +467,26 @@ declare class TokenRefreshStateService {
     completeRefresh(newToken: string): void;
     failRefresh(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<TokenRefreshStateService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<TokenRefreshStateService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
+}
+
+declare class PasswordPolicyService {
+    private readonly config;
+    private readonly translateAdapter;
+    private readonly rules;
+    readonly minLength: number;
+    private readonly maxLength;
+    validate(password: string): string | null;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<PasswordPolicyService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
+}
+
+declare class EmailPolicyService {
+    private readonly config;
+    private readonly translateAdapter;
+    validate(email: string): string | null;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<EmailPolicyService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -479,7 +498,7 @@ declare class UserApiService extends ApiResourceService<ICreateUserRequest | IUp
     updateProfile(data: IUpdateUserRequest): Observable<ISingleResponse<IUser>>;
     lookup(filter: IFilterData, search?: string): Observable<IListResponse<IUserBasicInfo>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<UserApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /**
@@ -502,7 +521,7 @@ declare class UserPermissionApiService {
     getCompanyUsers(companyId: string): Observable<ISingleResponse<ICompanyPermittedUser[]>>;
     getBranchUsers(branchId: string): Observable<ISingleResponse<IBranchPermittedUser[]>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserPermissionApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<UserPermissionApiService>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /** Protects routes requiring authentication */
@@ -560,7 +579,7 @@ declare class AuthLayoutStateAdapter implements ILayoutAuthState {
     readonly currentBranchInfo: Signal<IBranchInfo$1 | null>;
     readonly loginUserData: Signal<IUserInfo$1 | null>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthLayoutStateAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthLayoutStateAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 declare class AuthLayoutApiAdapter implements ILayoutAuthApi {
     private readonly authApi;
@@ -575,7 +594,7 @@ declare class AuthLayoutApiAdapter implements ILayoutAuthApi {
     getMyCompanies(): Observable<ICompanyInfo$1[]>;
     getMyCompanyBranches(companyId: string): Observable<IBranchInfo$1[]>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthLayoutApiAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthLayoutApiAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 declare class AuthUserProviderAdapter implements IUserProvider {
@@ -589,7 +608,7 @@ declare class AuthUserProviderAdapter implements IUserProvider {
     }): Observable<IListResponse<IUserBasicInfo>>;
     getUsersByIds(ids: string[]): Observable<IListResponse<IUserBasicInfo>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthUserProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthUserProviderAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 declare class AuthCompanyApiProviderAdapter implements ICompanyApiProvider {
     private readonly companyApi;
@@ -602,14 +621,14 @@ declare class AuthCompanyApiProviderAdapter implements ICompanyApiProvider {
     getCompaniesByIds(ids: string[]): Observable<IListResponse<ICompanyBasicInfo>>;
     getBranchesByIds(ids: string[]): Observable<IListResponse<IBranchBasicInfo>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthCompanyApiProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthCompanyApiProviderAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 declare class AuthUserPermissionProviderAdapter implements IUserPermissionProvider {
     private readonly userPermissionApi;
     getUserBranchPermissions(userId: string, companyId?: string): Observable<ISingleResponse<IUserBranchPermission$1[]>>;
     getUserCompanyPermissions(userId: string): Observable<ISingleResponse<IUserCompanyInfo[]>>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthUserPermissionProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthUserPermissionProviderAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 declare class AuthStateProviderAdapter implements IAuthStateProvider {
     private readonly authState;
@@ -617,7 +636,7 @@ declare class AuthStateProviderAdapter implements IAuthStateProvider {
     get isAuthenticated(): Signal<boolean>;
     initialize(): Observable<void>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<AuthStateProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<AuthStateProviderAdapter>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<any>;
 }
 
 /** Provides auth integration for ng-layout */
@@ -821,7 +840,16 @@ interface IUserDetailViewConfig {
     }>;
 }
 declare const AUTH_USER_DETAIL_CONFIG: InjectionToken<IUserDetailViewConfig>;
-declare function validatePassword(password: string, config: IPasswordValidationConfig): string | null;
+declare const DEFAULT_PASSWORD_VALIDATION: {
+    readonly minLength: 8;
+    readonly maxLength: 128;
+    readonly requireUppercase: true;
+    readonly requireLowercase: true;
+    readonly requireNumbers: true;
+    readonly requireSpecialChars: true;
+};
+declare function resolvePasswordValidation(config?: IPasswordValidationConfig | null): IPasswordValidationConfig;
+declare function validatePassword(password: string, config?: IPasswordValidationConfig): string | null;
 declare function validateEmail(email: string, config?: IEmailValidationConfig): string | null;
 
 /**
@@ -1055,7 +1083,7 @@ declare class LoginPageComponent {
     private readonly authApi;
     private readonly authState;
     private readonly translateAdapter;
-    private readonly validationConfig;
+    private readonly emailPolicy;
     private translate;
     readonly returnUrl: _angular_core.InputSignal<string>;
     readonly currentStep: _angular_core.WritableSignal<LoginStep>;
@@ -1064,12 +1092,8 @@ declare class LoginPageComponent {
     readonly savedUserName: _angular_core.WritableSignal<string | null>;
     readonly welcomeBackText: _angular_core.Signal<string>;
     readonly loginFormModel: _angular_core.WritableSignal<ILoginFormModel>;
-    private readonly emailErrorMessage;
-    private readonly passwordMinLength;
-    private readonly passwordErrorMessage;
     readonly loginForm: _angular_forms_signals.FieldTree<ILoginFormModel, string | number, "writable">;
     readonly emailValidationError: _angular_core.Signal<string | null>;
-    readonly passwordValidationError: _angular_core.Signal<string | null>;
     readonly isLoginFormValid: _angular_core.Signal<boolean>;
     readonly selectionFormModel: _angular_core.WritableSignal<ISelectionFormModel>;
     readonly selectionForm: _angular_forms_signals.FieldTree<ISelectionFormModel, string | number, "writable">;
@@ -1109,6 +1133,7 @@ declare class ProfilePageComponent {
     private readonly authState;
     private readonly userService;
     private readonly authApiService;
+    protected readonly passwordPolicy: PasswordPolicyService;
     private readonly fileUrlService;
     private readonly fileProvider;
     private readonly permissionProvider;
@@ -1162,6 +1187,7 @@ declare class ProfilePageComponent {
     readonly passwordModel: _angular_core.WritableSignal<IPasswordFormModel>;
     readonly passwordForm: _angular_forms_signals.FieldTree<IPasswordFormModel, string | number, "writable">;
     readonly isPasswordLoading: _angular_core.WritableSignal<boolean>;
+    readonly newPasswordError: _angular_core.Signal<string | null>;
     readonly isPasswordFormValid: _angular_core.Signal<boolean>;
     readonly passwordsMatch: _angular_core.Signal<boolean>;
     readonly profileUploadOptions: {
@@ -1212,7 +1238,8 @@ declare class RegisterPageComponent {
     private readonly authState;
     private readonly route;
     private readonly router;
-    private readonly validationConfig;
+    private readonly emailPolicy;
+    protected readonly passwordPolicy: PasswordPolicyService;
     private readonly registrationExtension;
     private readonly translateAdapter;
     private translate;
@@ -1227,9 +1254,6 @@ declare class RegisterPageComponent {
     readonly hasDefaultBranch: _angular_core.Signal<boolean>;
     readonly extraFields: _angular_core.Signal<IRegistrationExtraField[]>;
     readonly extraFieldsModel: _angular_core.WritableSignal<Record<string, unknown>>;
-    private readonly emailErrorMessage;
-    readonly passwordMinLength: _angular_core.Signal<number>;
-    private readonly passwordErrorMessage;
     readonly userFormModel: _angular_core.WritableSignal<IUserFormModel$1>;
     readonly userForm: _angular_forms_signals.FieldTree<IUserFormModel$1, string | number, "writable">;
     readonly companyFormModel: _angular_core.WritableSignal<ICompanyFormModel>;
@@ -1246,7 +1270,7 @@ declare class RegisterPageComponent {
     private readonly fieldInjectors;
     getFieldInjector(field: IRegistrationExtraField): Injector;
     constructor();
-    onCreateCompanyToggle(): void;
+    onCreateCompanyToggle(createNew: boolean): void;
     onSubmit(): void;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<RegisterPageComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<RegisterPageComponent, "lib-register-page", never, { "returnUrl": { "alias": "returnUrl"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
@@ -1262,6 +1286,7 @@ declare class ResetPasswordPageComponent {
     private readonly route;
     private readonly messageService;
     private readonly authApi;
+    private readonly passwordPolicy;
     private readonly translateAdapter;
     private translate;
     private readonly queryParams;
@@ -1272,6 +1297,7 @@ declare class ResetPasswordPageComponent {
     readonly formModel: _angular_core.WritableSignal<IResetPasswordFormModel>;
     readonly resetForm: _angular_forms_signals.FieldTree<IResetPasswordFormModel, string | number, "writable">;
     readonly passwordMismatch: _angular_core.Signal<boolean>;
+    readonly passwordValidationError: _angular_core.Signal<string | null>;
     readonly canSubmit: _angular_core.Signal<boolean>;
     constructor();
     onSubmit(event: Event): void;
@@ -1349,6 +1375,7 @@ declare class UserFormComponent {
     private readonly userService;
     private readonly permissionService;
     private readonly authState;
+    private readonly passwordPolicy;
     private readonly translateAdapter;
     private readonly userFormExtension;
     private readonly parentInjector;
@@ -1375,6 +1402,7 @@ declare class UserFormComponent {
     getFieldTemplateContext(field: IUserFormExtraField): IUserFormFieldTemplateContext;
     private readonly fieldInjectors;
     getFieldInjector(field: IUserFormExtraField): Injector;
+    readonly passwordError: _angular_core.Signal<string | null>;
     readonly isFormValid: _angular_core.Signal<boolean>;
     constructor();
     loadUser(id: string): Promise<void>;
@@ -1634,5 +1662,5 @@ declare class UserCompanyPermissionDialogComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserCompanyPermissionDialogComponent, "lib-user-company-permission-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "user": { "alias": "user"; "required": true; "isSignal": true; }; }, { "closed": "closed"; "permissionsChanged": "permissionsChanged"; }, never, never, true, never>;
 }
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, BranchPermittedUsersDialogComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, CompanyPermittedUsersDialogComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, BranchPermittedUsersDialogComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, CompanyPermittedUsersDialogComponent, DEFAULT_PASSWORD_VALIDATION, EmailPolicyService, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, PasswordPolicyService, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, resolvePasswordValidation, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
 export type { AuthResponse, IAssignUserBranchRequest, IAssignUserCompanyRequest, IAuthValidationConfig, IBranch, IBranchInfo, IBranchPermittedUser, IBranchSelectionInfo, IChangePasswordRequest, ICompany, ICompanyInfo, ICompanyPermittedUser, ICompanySelectionData, ICompanySelectionResponse, ICompanyWithBranches, ICreateBranchRequest, ICreateCompanyRequest, ICreateSocialAuthConfigDto, ICreateUserRequest, IEmailValidationConfig, IEmailVerificationData, ILoginData, ILoginRequest, ILoginRequiresEmailVerification, ILoginResponse, IMeData, IMeResponse, IPasswordValidationConfig, IPermissionItem, IProfileExtensionProvider, IProfileExtraField, IProfileExtraSection, IProfileFieldTemplateContext, IRefreshTokenResponse, IRegistrationData, IRegistrationExtensionProvider, IRegistrationExtraField, IRegistrationFieldTemplateContext, IRegistrationRequest, IRegistrationResponse, ISelectRequest, ISocialAuthConfig, ISocialAuthorization, ISocialCallbackRequest, ISocialProviderInfo, ISwitchCompanyRequest, IUpdateBranchRequest, IUpdateCompanyRequest, IUpdateSocialAuthConfigDto, IUpdateUserRequest, IUser, IUserBranchPermission, IUserCompanyPermission, IUserDetailViewConfig, IUserFormExtensionProvider, IUserFormExtraField, IUserFormFieldTemplateContext, IUserInfo, IUserListExtensionProvider, IUserListExtraAction, IUserListExtraColumn, UserDetailViewMode };