@meshmakers/octo-services 3.4.670 → 3.4.730

package/fesm2022/meshmakers-octo-services.mjs

@@ -4375,6 +4375,25 @@ class AssetRepoService {
         }
         return null;
     }
+    /**
+     * Returns the tenant the caller is currently signed into, including its database name.
+     *
+     * The tenants list only contains child tenants, and a tenant's own registry entry lives in
+     * its parent's database — so the current tenant's database name is not derivable client-side
+     * and comes from this dedicated endpoint (AB#4601). Needed by any operation that has to name
+     * the database of the current tenant, such as restoring it from a backup.
+     */
+    async getOwnTenant() {
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
+            const r = await firstValueFrom(this.httpClient
+                .get(`${baseUrl}/self`, {
+                observe: 'response'
+            }));
+            return r.body;
+        }
+        return null;
+    }
     async createTenant(tenantDto) {
         const params = new HttpParams().set('childTenantId', tenantDto.tenantId).set('databaseName', tenantDto.database);
         const baseUrl = await this.getTenantApiBaseUrl();
@@ -5378,6 +5397,69 @@ class IdentityService {
             }));
         }
     }
+    /**
+     * Searches provisionable users from the target tenant's ancestor (parent) tenants. Powers the
+     * cross-tenant user picker on the Admin Provisioning page. Matches on username or email; an empty
+     * search returns the first users. Cross-tenant shadow users (xt_) are excluded server-side.
+     */
+    async getProvisioningSourceUsers(targetTenantId, search, take = 20) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            let params = new HttpParams().set('take', take.toString());
+            if (search) {
+                params = params.set('search', search);
+            }
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/sourceUsers`, {
+                params,
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    /**
+     * Returns the roles defined in the target tenant, offered as assignable options when creating a
+     * cross-tenant user mapping.
+     */
+    async getProvisioningRoles(targetTenantId) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/roles`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    /**
+     * Returns the groups defined in the target tenant, offered as assignable options when creating a
+     * cross-tenant user mapping. Assigning a group makes the mapping a GroupMember (group-based role
+     * inheritance) — the idiomatic grant, consistent with provisionCurrentUser.
+     */
+    async getProvisioningGroups(targetTenantId) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/groups`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    /**
+     * Creates a cross-tenant user mapping and makes it a member of the given target-tenant groups, so
+     * the user inherits the groups' roles.
+     */
+    async createAdminProvisioningWithGroups(targetTenantId, dto) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/withGroups`, dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.5", ngImport: i0, type: IdentityService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
     static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.0.5", ngImport: i0, type: IdentityService, providedIn: 'root' });
 }