@micha.bigler/ui-core-micha 2.2.1 → 2.2.3

package/dist/components/QrSignupManager.js

@@ -77,5 +77,5 @@ export function QrSignupManager({ enabled = false }) {
             active = false;
         };
     }, [enabled, label, t]);
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'When QR signup is enabled, a signup QR code is shown here immediately.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), !enabled && (_jsx(Alert, { severity: "info", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_DISABLED_HINT', 'Enable self-signup by QR above to show a QR code here.') })), _jsx(TextField, { label: t('Common.LABEL', 'Label'), value: label, onChange: (event) => setLabel(event.target.value), fullWidth: true, disabled: !enabled || busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: generate, disabled: !enabled || busy, children: t('Common.SAVE', 'Save') }), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 3 }, children: [_jsx(QRCodeSVG, { value: result.signup_url, size: 180, includeMargin: true }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'), value: result.signup_url, fullWidth: true, multiline: true, minRows: 2, sx: { mt: 2 }, InputProps: { readOnly: true } })] }))] }));
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'When QR signup is enabled, a signup QR code is shown here immediately.') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_POLICY_HINT', 'The default QR validity is configured in the authentication policy above.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), !enabled && (_jsx(Alert, { severity: "info", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_DISABLED_HINT', 'Enable self-signup by QR above to show a QR code here.') })), _jsx(TextField, { label: t('Common.LABEL', 'Label'), value: label, onChange: (event) => setLabel(event.target.value), fullWidth: true, disabled: !enabled || busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: generate, disabled: !enabled || busy, children: t('Common.SAVE', 'Save') }), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 3 }, children: [_jsx(QRCodeSVG, { value: result.signup_url, size: 180, includeMargin: true }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'), value: result.signup_url, fullWidth: true, multiline: true, minRows: 2, sx: { mt: 2 }, InputProps: { readOnly: true } }), (result === null || result === void 0 ? void 0 : result.expires_at) && (_jsxs(Typography, { variant: "body2", sx: { mt: 1.5, color: 'text.secondary' }, children: [t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'), ": ", result.expires_at] }))] }))] }));
 }

package/dist/components/RegistrationMethodsManager.js

@@ -11,11 +11,13 @@ const EMPTY_POLICY = {
     allow_self_signup_qr: false,
     allowed_email_domains: [],
     required_auth_factor_count: 1,
+    signup_qr_expiry_days: 90,
 };
 export function RegistrationMethodsManager({ onPolicyChange }) {
     const { t } = useTranslation();
     const [policy, setPolicy] = useState(EMPTY_POLICY);
     const [domainsText, setDomainsText] = useState('');
+    const [signupQrExpiryDays, setSignupQrExpiryDays] = useState(String(EMPTY_POLICY.signup_qr_expiry_days));
     const [busy, setBusy] = useState(false);
     const [busyField, setBusyField] = useState('');
     const [error, setError] = useState('');
@@ -29,6 +31,7 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
                     return;
                 setPolicy((prev) => (Object.assign(Object.assign({}, prev), data)));
                 setDomainsText(((data === null || data === void 0 ? void 0 : data.allowed_email_domains) || []).join('\n'));
+                setSignupQrExpiryDays(String((data === null || data === void 0 ? void 0 : data.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
                 if (onPolicyChange)
                     onPolicyChange(data);
             }
@@ -73,9 +76,16 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
                 .split(/\r?\n/)
                 .map((value) => value.trim())
                 .filter(Boolean);
-            const next = await updateAuthPolicy({ allowed_email_domains });
+            const parsedExpiryDays = parseInt(signupQrExpiryDays, 10);
+            const next = await updateAuthPolicy({
+                allowed_email_domains,
+                signup_qr_expiry_days: Number.isFinite(parsedExpiryDays) && parsedExpiryDays > 0
+                    ? parsedExpiryDays
+                    : EMPTY_POLICY.signup_qr_expiry_days,
+            });
             setPolicy((prev) => (Object.assign(Object.assign({}, prev), next)));
             setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || allowed_email_domains).join('\n'));
+            setSignupQrExpiryDays(String((next === null || next === void 0 ? void 0 : next.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
             setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
             if (onPolicyChange)
                 onPolicyChange(next);
@@ -87,5 +97,5 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
             setBusy(false);
         }
     };
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policy.allow_self_signup_email_domain && !(policy.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') })), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 3, fullWidth: true, sx: { mt: 2 }, value: domainsText, onChange: (event) => setDomainsText(event.target.value) }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: save, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policy.allow_self_signup_email_domain && !(policy.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') })), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 3, fullWidth: true, sx: { mt: 2 }, value: domainsText, onChange: (event) => setDomainsText(event.target.value) }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)'), helperText: t('Auth.SIGNUP_QR_EXPIRY_DAYS_HINT', 'Default validity for newly generated QR signup links.'), type: "number", fullWidth: true, sx: { mt: 2 }, value: signupQrExpiryDays, onChange: (event) => setSignupQrExpiryDays(event.target.value) }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: save, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
 }

package/dist/i18n/authTranslations.js

@@ -295,10 +295,76 @@ export const authTranslations = {
         "sw": "Tafadhali ingiza anwani ya barua pepe."
     },
     "Auth.PAGE_SIGNUP_SUBTITLE": {
-        "de": "Geben Sie Ihre E-Mail-Adresse und den Zugangscode ein, um eine Einladung anzufordern.",
-        "fr": "Saisissez votre adresse e-mail et le code d'accès pour demander une invitation.",
-        "en": "Enter your email address and access code to request an invitation.",
-        "sw": "Ingiza barua pepe yako na msimbo wa ufikiaji ili kuomba mwaliko."
+        "de": "Wählen Sie eine Registrierungsart und geben Sie die benötigten Angaben ein.",
+        "fr": "Choisissez une méthode d'inscription et saisissez les informations requises.",
+        "en": "Choose a sign-up method and enter the required details.",
+        "sw": "Chagua njia ya kujisajili na uingize taarifa zinazohitajika."
+    },
+    "Auth.PAGE_SIGNUP_SUBTITLE_ACCESS_CODE": {
+        "de": "Geben Sie Ihre E-Mail-Adresse und den erhaltenen Zugangscode ein.",
+        "fr": "Saisissez votre adresse e-mail et le code d'accès reçu.",
+        "en": "Enter your email address and the access code you received.",
+        "sw": "Ingiza anwani yako ya barua pepe na msimbo wa ufikiaji uliopokea."
+    },
+    "Auth.PAGE_SIGNUP_SUBTITLE_OPEN": {
+        "de": "Geben Sie Ihre E-Mail-Adresse ein, um sich direkt zu registrieren.",
+        "fr": "Saisissez votre adresse e-mail pour vous inscrire directement.",
+        "en": "Enter your email address to sign up directly.",
+        "sw": "Ingiza anwani yako ya barua pepe ili kujisajili moja kwa moja."
+    },
+    "Auth.PAGE_SIGNUP_SUBTITLE_EMAIL_DOMAIN": {
+        "de": "Verwenden Sie eine E-Mail-Adresse aus einer freigegebenen Domain.",
+        "fr": "Utilisez une adresse e-mail provenant d'un domaine autorisé.",
+        "en": "Use an email address from an approved domain.",
+        "sw": "Tumia anwani ya barua pepe kutoka kwenye domeni iliyoidhinishwa."
+    },
+    "Auth.PAGE_SIGNUP_SUBTITLE_QR": {
+        "de": "Öffnen Sie diese Seite über einen gültigen QR-Link und geben Sie dann Ihre E-Mail-Adresse ein.",
+        "fr": "Ouvrez cette page via un lien QR valide, puis saisissez votre adresse e-mail.",
+        "en": "Open this page from a valid QR link, then enter your email address.",
+        "sw": "Fungua ukurasa huu kupitia kiungo halali cha QR, kisha ingiza anwani yako ya barua pepe."
+    },
+    "Auth.PAGE_SIGNUP_SUBTITLE_QR_READY": {
+        "de": "Geben Sie Ihre E-Mail-Adresse ein, um die Registrierung mit diesem QR-Link abzuschließen.",
+        "fr": "Saisissez votre adresse e-mail pour terminer l'inscription avec ce lien QR.",
+        "en": "Enter your email address to complete sign-up with this QR link.",
+        "sw": "Ingiza anwani yako ya barua pepe ili kukamilisha kujisajili kwa kutumia kiungo hiki cha QR."
+    },
+    "Auth.SIGNUP_ACCESS_CODE_TAB": {
+        "de": "Mit Zugangscode",
+        "fr": "Avec code d'accès",
+        "en": "With access code",
+        "sw": "Kwa msimbo wa ufikiaji"
+    },
+    "Auth.SIGNUP_OPEN_TAB": {
+        "de": "Direkte Registrierung",
+        "fr": "Inscription directe",
+        "en": "Direct sign-up",
+        "sw": "Kujisajili moja kwa moja"
+    },
+    "Auth.SIGNUP_EMAIL_DOMAIN_TAB": {
+        "de": "Mit E-Mail-Domain",
+        "fr": "Avec domaine e-mail",
+        "en": "With email domain",
+        "sw": "Kwa domeni ya barua pepe"
+    },
+    "Auth.SIGNUP_QR_TAB": {
+        "de": "Mit QR-Link",
+        "fr": "Avec lien QR",
+        "en": "With QR link",
+        "sw": "Kwa kiungo cha QR"
+    },
+    "Auth.SIGNUP_QR_INVALID": {
+        "de": "Dieser QR-Link ist ungültig oder fehlt.",
+        "fr": "Ce lien QR est invalide ou manquant.",
+        "en": "This QR link is invalid or missing.",
+        "sw": "Kiungo hiki cha QR si sahihi au hakipo."
+    },
+    "Auth.SIGNUP_QR_TOKEN_LABEL": {
+        "de": "QR-Token",
+        "fr": "Jeton QR",
+        "en": "QR token",
+        "sw": "Tokeni ya QR"
     },
     "Auth.EMAIL_LABEL": {
         "de": "E-Mail-Adresse",
@@ -774,6 +840,12 @@ export const authTranslations = {
         "en": "Profile updated successfully.",
         "sw": "Wasifu umesasishwa kwa mafanikio."
     },
+    "Profile.NAME_LABEL": {
+        "de": "Name",
+        "fr": "Nom",
+        "en": "Name",
+        "sw": "Jina"
+    },
     "Profile.USERNAME_LABEL": {
         "de": "Benutzername",
         "fr": "Nom d’utilisateur",

package/dist/pages/SignUpPage.js

@@ -13,11 +13,11 @@ const MODE_LABELS = {
     self_signup_email_domain: 'Auth.SIGNUP_EMAIL_DOMAIN_TAB',
     self_signup_qr: 'Auth.SIGNUP_QR_TAB',
 };
-const MODE_HINTS = {
-    self_signup_access_code: 'Auth.SIGNUP_ACCESS_CODE_HINT',
-    self_signup_open: 'Auth.SIGNUP_OPEN_HINT',
-    self_signup_email_domain: 'Auth.SIGNUP_EMAIL_DOMAIN_HINT',
-    self_signup_qr: 'Auth.SIGNUP_QR_HINT',
+const MODE_SUBTITLES = {
+    self_signup_access_code: 'Auth.PAGE_SIGNUP_SUBTITLE_ACCESS_CODE',
+    self_signup_open: 'Auth.PAGE_SIGNUP_SUBTITLE_OPEN',
+    self_signup_email_domain: 'Auth.PAGE_SIGNUP_SUBTITLE_EMAIL_DOMAIN',
+    self_signup_qr: 'Auth.PAGE_SIGNUP_SUBTITLE_QR',
 };
 export function SignUpPage() {
     const navigate = useNavigate();
@@ -47,33 +47,15 @@ export function SignUpPage() {
     const [submitting, setSubmitting] = useState(false);
     const [successKey, setSuccessKey] = useState(null);
     const [errorKey, setErrorKey] = useState(null);
-    const [qrHint, setQrHint] = useState('');
-    const modeHint = useMemo(() => {
-        if (mode === 'self_signup_access_code') {
-            return t(MODE_HINTS[mode], 'Use this option only if you were given an access code for signup.');
+    const pageSubtitle = useMemo(() => {
+        if (mode === 'self_signup_qr' && tokenFromUrl) {
+            return t('Auth.PAGE_SIGNUP_SUBTITLE_QR_READY', 'Enter your email address to complete sign-up with the QR link you opened.');
         }
-        if (mode === 'self_signup_open') {
-            return t(MODE_HINTS[mode], 'Use this option for direct signup without an access code.');
-        }
-        if (mode === 'self_signup_email_domain') {
-            return t(MODE_HINTS[mode], 'Use an email address from an allowed domain for this signup flow.');
-        }
-        if (mode === 'self_signup_qr') {
-            return qrHint || t(MODE_HINTS[mode], 'Use a valid QR signup link to continue.');
-        }
-        return '';
-    }, [mode, qrHint, t]);
+        return t(MODE_SUBTITLES[mode] || 'Auth.PAGE_SIGNUP_SUBTITLE', 'Choose a sign-up method and enter the required details.');
+    }, [mode, t, tokenFromUrl]);
     useEffect(() => {
         setMode(initialMode);
     }, [initialMode]);
-    useEffect(() => {
-        if (!tokenFromUrl || mode !== 'self_signup_qr') {
-            setQrHint('');
-            return undefined;
-        }
-        setQrHint(t('Auth.SIGNUP_QR_READY', 'QR signup token detected. You can complete your signup now.'));
-        return undefined;
-    }, [mode, tokenFromUrl, t]);
     const handleSubmit = async (event) => {
         event.preventDefault();
         setSuccessKey(null);
@@ -110,7 +92,7 @@ export function SignUpPage() {
     const handleGoToLogin = () => {
         navigate('/login');
     };
-    return (_jsxs(NarrowPage, { title: t('Auth.LOGIN_SIGNUP_BUTTON'), subtitle: t('Auth.PAGE_SIGNUP_SUBTITLE'), children: [_jsx(Helmet, { children: _jsxs("title", { children: [t('App.NAME'), " \u2013 ", t('Auth.LOGIN_SIGNUP_BUTTON')] }) }), successKey && (_jsx(Alert, { severity: "success", sx: { mb: 2 }, children: t(successKey, { email }) })), errorKey && (_jsx(Alert, { severity: "error", sx: { mb: 2 }, children: t(errorKey, t('Auth.INVITE_FAILED', 'Could not complete signup.')) })), signupModes.length > 1 && (_jsxs(Stack, { spacing: 1, sx: { mb: 2 }, children: [_jsx(Alert, { severity: "info", children: t('Auth.SIGNUP_MODE_SELECTOR_HINT', 'Choose the signup option that matches how you want to register.') }), _jsx(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1, flexWrap: "wrap", children: signupModes.map((entry) => (_jsx(Button, { variant: mode === entry ? 'contained' : 'outlined', onClick: () => setMode(entry), disabled: submitting, children: t(MODE_LABELS[entry] || entry, entry) }, entry))) })] })), _jsxs(Box, { component: "form", onSubmit: handleSubmit, sx: { display: 'flex', flexDirection: 'column', gap: 2 }, children: [modeHint && _jsx(Alert, { severity: "info", children: modeHint }), _jsx(TextField, { label: t('Auth.EMAIL_LABEL'), type: "email", required: true, fullWidth: true, value: email, onChange: (e) => setEmail(e.target.value), disabled: submitting }), mode === 'self_signup_access_code' && (_jsx(TextField, { label: t('Auth.ACCESS_CODE_LABEL'), type: "text", required: true, fullWidth: true, value: accessCode, onChange: (e) => setAccessCode(e.target.value), disabled: submitting })), mode === 'self_signup_qr' && (_jsx(Stack, { spacing: 1, children: _jsx(TextField, { label: t('Auth.SIGNUP_QR_TOKEN_LABEL', 'QR token'), value: tokenFromUrl, fullWidth: true, InputProps: { readOnly: true } }) })), _jsx(Button, { type: "submit", variant: "contained", disabled: submitting || signupModes.length === 0, children: submitting
+    return (_jsxs(NarrowPage, { title: t('Auth.LOGIN_SIGNUP_BUTTON'), subtitle: pageSubtitle, children: [_jsx(Helmet, { children: _jsxs("title", { children: [t('App.NAME'), " \u2013 ", t('Auth.LOGIN_SIGNUP_BUTTON')] }) }), successKey && (_jsx(Alert, { severity: "success", sx: { mb: 2 }, children: t(successKey, { email }) })), errorKey && (_jsx(Alert, { severity: "error", sx: { mb: 2 }, children: t(errorKey, t('Auth.INVITE_FAILED', 'Could not complete signup.')) })), signupModes.length > 1 && (_jsx(Stack, { spacing: 1, sx: { mb: 2 }, children: _jsx(Stack, { spacing: 1, children: signupModes.map((entry) => (_jsx(Button, { variant: mode === entry ? 'contained' : 'outlined', onClick: () => setMode(entry), disabled: submitting, fullWidth: true, children: t(MODE_LABELS[entry] || entry, entry) }, entry))) }) })), _jsxs(Box, { component: "form", onSubmit: handleSubmit, sx: { display: 'flex', flexDirection: 'column', gap: 2 }, children: [_jsx(TextField, { label: t('Auth.EMAIL_LABEL'), type: "email", required: true, fullWidth: true, value: email, onChange: (e) => setEmail(e.target.value), disabled: submitting }), mode === 'self_signup_access_code' && (_jsx(TextField, { label: t('Auth.ACCESS_CODE_LABEL'), type: "text", required: true, fullWidth: true, value: accessCode, onChange: (e) => setAccessCode(e.target.value), disabled: submitting })), _jsx(Button, { type: "submit", variant: "contained", disabled: submitting || signupModes.length === 0, children: submitting
                             ? t('Auth.SIGNUP_SUBMITTING')
                             : t('Auth.SIGNUP_SUBMIT') })] }), _jsx(Box, { sx: { mt: 3 }, children: _jsxs(Typography, { variant: "body2", children: [t('Auth.SIGNUP_ALREADY_HAVE_ACCOUNT'), ' ', _jsx(Button, { onClick: handleGoToLogin, variant: "text", size: "small", children: t('Auth.SIGNUP_GO_TO_LOGIN') })] }) })] }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@micha.bigler/ui-core-micha",
-  "version": "2.2.1",
+  "version": "2.2.3",
   "main": "dist/index.js",
   "module": "dist/index.js",
   "private": false,

package/src/components/QrSignupManager.jsx

@@ -88,6 +88,9 @@ export function QrSignupManager({ enabled = false }) {
       <Typography variant="body2" sx={{ mb: 2, color: 'text.secondary' }}>
         {t('Auth.SIGNUP_QR_MANAGER_HINT', 'When QR signup is enabled, a signup QR code is shown here immediately.')}
       </Typography>
+      <Typography variant="body2" sx={{ mb: 2, color: 'text.secondary' }}>
+        {t('Auth.SIGNUP_QR_POLICY_HINT', 'The default QR validity is configured in the authentication policy above.')}
+      </Typography>
       {error && <Alert severity="error" sx={{ mb: 2 }}>{error}</Alert>}
       {success && <Alert severity="success" sx={{ mb: 2 }}>{success}</Alert>}
 
@@ -121,6 +124,11 @@ export function QrSignupManager({ enabled = false }) {
             sx={{ mt: 2 }}
             InputProps={{ readOnly: true }}
           />
+          {result?.expires_at && (
+            <Typography variant="body2" sx={{ mt: 1.5, color: 'text.secondary' }}>
+              {t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until')}: {result.expires_at}
+            </Typography>
+          )}
         </Box>
       )}
     </Box>

package/src/components/RegistrationMethodsManager.jsx

@@ -20,12 +20,14 @@ const EMPTY_POLICY = {
   allow_self_signup_qr: false,
   allowed_email_domains: [],
   required_auth_factor_count: 1,
+  signup_qr_expiry_days: 90,
 };
 
 export function RegistrationMethodsManager({ onPolicyChange }) {
   const { t } = useTranslation();
   const [policy, setPolicy] = useState(EMPTY_POLICY);
   const [domainsText, setDomainsText] = useState('');
+  const [signupQrExpiryDays, setSignupQrExpiryDays] = useState(String(EMPTY_POLICY.signup_qr_expiry_days));
   const [busy, setBusy] = useState(false);
   const [busyField, setBusyField] = useState('');
   const [error, setError] = useState('');
@@ -39,6 +41,7 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
         if (!active) return;
         setPolicy((prev) => ({ ...prev, ...data }));
         setDomainsText((data?.allowed_email_domains || []).join('\n'));
+        setSignupQrExpiryDays(String(data?.signup_qr_expiry_days || EMPTY_POLICY.signup_qr_expiry_days));
         if (onPolicyChange) onPolicyChange(data);
       } catch (err) {
         if (active) {
@@ -80,9 +83,16 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
         .split(/\r?\n/)
         .map((value) => value.trim())
         .filter(Boolean);
-      const next = await updateAuthPolicy({ allowed_email_domains });
+      const parsedExpiryDays = parseInt(signupQrExpiryDays, 10);
+      const next = await updateAuthPolicy({
+        allowed_email_domains,
+        signup_qr_expiry_days: Number.isFinite(parsedExpiryDays) && parsedExpiryDays > 0
+          ? parsedExpiryDays
+          : EMPTY_POLICY.signup_qr_expiry_days,
+      });
       setPolicy((prev) => ({ ...prev, ...next }));
       setDomainsText((next?.allowed_email_domains || allowed_email_domains).join('\n'));
+      setSignupQrExpiryDays(String(next?.signup_qr_expiry_days || EMPTY_POLICY.signup_qr_expiry_days));
       setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
       if (onPolicyChange) onPolicyChange(next);
     } catch (err) {
@@ -176,6 +186,19 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
         onChange={(event) => setDomainsText(event.target.value)}
       />
 
+      <TextField
+        label={t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)')}
+        helperText={t(
+          'Auth.SIGNUP_QR_EXPIRY_DAYS_HINT',
+          'Default validity for newly generated QR signup links.',
+        )}
+        type="number"
+        fullWidth
+        sx={{ mt: 2 }}
+        value={signupQrExpiryDays}
+        onChange={(event) => setSignupQrExpiryDays(event.target.value)}
+      />
+
       <Button variant="contained" sx={{ mt: 2 }} onClick={save} disabled={busy}>
         {t('Common.SAVE', 'Save')}
       </Button>

package/src/i18n/authTranslations.ts

@@ -333,10 +333,76 @@ export const authTranslations = {
     "sw": "Tafadhali ingiza anwani ya barua pepe."
   },
   "Auth.PAGE_SIGNUP_SUBTITLE": {
-    "de": "Geben Sie Ihre E-Mail-Adresse und den Zugangscode ein, um eine Einladung anzufordern.",
-    "fr": "Saisissez votre adresse e-mail et le code d'accès pour demander une invitation.",
-    "en": "Enter your email address and access code to request an invitation.",
-    "sw": "Ingiza barua pepe yako na msimbo wa ufikiaji ili kuomba mwaliko."
+    "de": "Wählen Sie eine Registrierungsart und geben Sie die benötigten Angaben ein.",
+    "fr": "Choisissez une méthode d'inscription et saisissez les informations requises.",
+    "en": "Choose a sign-up method and enter the required details.",
+    "sw": "Chagua njia ya kujisajili na uingize taarifa zinazohitajika."
+  },
+  "Auth.PAGE_SIGNUP_SUBTITLE_ACCESS_CODE": {
+    "de": "Geben Sie Ihre E-Mail-Adresse und den erhaltenen Zugangscode ein.",
+    "fr": "Saisissez votre adresse e-mail et le code d'accès reçu.",
+    "en": "Enter your email address and the access code you received.",
+    "sw": "Ingiza anwani yako ya barua pepe na msimbo wa ufikiaji uliopokea."
+  },
+  "Auth.PAGE_SIGNUP_SUBTITLE_OPEN": {
+    "de": "Geben Sie Ihre E-Mail-Adresse ein, um sich direkt zu registrieren.",
+    "fr": "Saisissez votre adresse e-mail pour vous inscrire directement.",
+    "en": "Enter your email address to sign up directly.",
+    "sw": "Ingiza anwani yako ya barua pepe ili kujisajili moja kwa moja."
+  },
+  "Auth.PAGE_SIGNUP_SUBTITLE_EMAIL_DOMAIN": {
+    "de": "Verwenden Sie eine E-Mail-Adresse aus einer freigegebenen Domain.",
+    "fr": "Utilisez une adresse e-mail provenant d'un domaine autorisé.",
+    "en": "Use an email address from an approved domain.",
+    "sw": "Tumia anwani ya barua pepe kutoka kwenye domeni iliyoidhinishwa."
+  },
+  "Auth.PAGE_SIGNUP_SUBTITLE_QR": {
+    "de": "Öffnen Sie diese Seite über einen gültigen QR-Link und geben Sie dann Ihre E-Mail-Adresse ein.",
+    "fr": "Ouvrez cette page via un lien QR valide, puis saisissez votre adresse e-mail.",
+    "en": "Open this page from a valid QR link, then enter your email address.",
+    "sw": "Fungua ukurasa huu kupitia kiungo halali cha QR, kisha ingiza anwani yako ya barua pepe."
+  },
+  "Auth.PAGE_SIGNUP_SUBTITLE_QR_READY": {
+    "de": "Geben Sie Ihre E-Mail-Adresse ein, um die Registrierung mit diesem QR-Link abzuschließen.",
+    "fr": "Saisissez votre adresse e-mail pour terminer l'inscription avec ce lien QR.",
+    "en": "Enter your email address to complete sign-up with this QR link.",
+    "sw": "Ingiza anwani yako ya barua pepe ili kukamilisha kujisajili kwa kutumia kiungo hiki cha QR."
+  },
+  "Auth.SIGNUP_ACCESS_CODE_TAB": {
+    "de": "Mit Zugangscode",
+    "fr": "Avec code d'accès",
+    "en": "With access code",
+    "sw": "Kwa msimbo wa ufikiaji"
+  },
+  "Auth.SIGNUP_OPEN_TAB": {
+    "de": "Direkte Registrierung",
+    "fr": "Inscription directe",
+    "en": "Direct sign-up",
+    "sw": "Kujisajili moja kwa moja"
+  },
+  "Auth.SIGNUP_EMAIL_DOMAIN_TAB": {
+    "de": "Mit E-Mail-Domain",
+    "fr": "Avec domaine e-mail",
+    "en": "With email domain",
+    "sw": "Kwa domeni ya barua pepe"
+  },
+  "Auth.SIGNUP_QR_TAB": {
+    "de": "Mit QR-Link",
+    "fr": "Avec lien QR",
+    "en": "With QR link",
+    "sw": "Kwa kiungo cha QR"
+  },
+  "Auth.SIGNUP_QR_INVALID": {
+    "de": "Dieser QR-Link ist ungültig oder fehlt.",
+    "fr": "Ce lien QR est invalide ou manquant.",
+    "en": "This QR link is invalid or missing.",
+    "sw": "Kiungo hiki cha QR si sahihi au hakipo."
+  },
+  "Auth.SIGNUP_QR_TOKEN_LABEL": {
+    "de": "QR-Token",
+    "fr": "Jeton QR",
+    "en": "QR token",
+    "sw": "Tokeni ya QR"
   },
 
   "Auth.EMAIL_LABEL": {
@@ -819,6 +885,12 @@ export const authTranslations = {
     "en": "Profile updated successfully.",
     "sw": "Wasifu umesasishwa kwa mafanikio."
   },
+  "Profile.NAME_LABEL": {
+    "de": "Name",
+    "fr": "Nom",
+    "en": "Name",
+    "sw": "Jina"
+  },
   "Profile.USERNAME_LABEL": {
     "de": "Benutzername",
     "fr": "Nom d’utilisateur",

package/src/pages/SignUpPage.jsx

@@ -21,11 +21,11 @@ const MODE_LABELS = {
   self_signup_qr: 'Auth.SIGNUP_QR_TAB',
 };
 
-const MODE_HINTS = {
-  self_signup_access_code: 'Auth.SIGNUP_ACCESS_CODE_HINT',
-  self_signup_open: 'Auth.SIGNUP_OPEN_HINT',
-  self_signup_email_domain: 'Auth.SIGNUP_EMAIL_DOMAIN_HINT',
-  self_signup_qr: 'Auth.SIGNUP_QR_HINT',
+const MODE_SUBTITLES = {
+  self_signup_access_code: 'Auth.PAGE_SIGNUP_SUBTITLE_ACCESS_CODE',
+  self_signup_open: 'Auth.PAGE_SIGNUP_SUBTITLE_OPEN',
+  self_signup_email_domain: 'Auth.PAGE_SIGNUP_SUBTITLE_EMAIL_DOMAIN',
+  self_signup_qr: 'Auth.PAGE_SIGNUP_SUBTITLE_QR',
 };
 
 export function SignUpPage() {
@@ -60,46 +60,24 @@ export function SignUpPage() {
   const [submitting, setSubmitting] = useState(false);
   const [successKey, setSuccessKey] = useState(null);
   const [errorKey, setErrorKey] = useState(null);
-  const [qrHint, setQrHint] = useState('');
 
-  const modeHint = useMemo(() => {
-    if (mode === 'self_signup_access_code') {
+  const pageSubtitle = useMemo(() => {
+    if (mode === 'self_signup_qr' && tokenFromUrl) {
       return t(
-        MODE_HINTS[mode],
-        'Use this option only if you were given an access code for signup.',
+        'Auth.PAGE_SIGNUP_SUBTITLE_QR_READY',
+        'Enter your email address to complete sign-up with the QR link you opened.',
       );
     }
-    if (mode === 'self_signup_open') {
-      return t(
-        MODE_HINTS[mode],
-        'Use this option for direct signup without an access code.',
-      );
-    }
-    if (mode === 'self_signup_email_domain') {
-      return t(
-        MODE_HINTS[mode],
-        'Use an email address from an allowed domain for this signup flow.',
-      );
-    }
-    if (mode === 'self_signup_qr') {
-      return qrHint || t(MODE_HINTS[mode], 'Use a valid QR signup link to continue.');
-    }
-    return '';
-  }, [mode, qrHint, t]);
+    return t(
+      MODE_SUBTITLES[mode] || 'Auth.PAGE_SIGNUP_SUBTITLE',
+      'Choose a sign-up method and enter the required details.',
+    );
+  }, [mode, t, tokenFromUrl]);
 
   useEffect(() => {
     setMode(initialMode);
   }, [initialMode]);
 
-  useEffect(() => {
-    if (!tokenFromUrl || mode !== 'self_signup_qr') {
-      setQrHint('');
-      return undefined;
-    }
-    setQrHint(t('Auth.SIGNUP_QR_READY', 'QR signup token detected. You can complete your signup now.'));
-    return undefined;
-  }, [mode, tokenFromUrl, t]);
-
   const handleSubmit = async (event) => {
     event.preventDefault();
     setSuccessKey(null);
@@ -143,7 +121,7 @@ export function SignUpPage() {
   return (
     <NarrowPage
       title={t('Auth.LOGIN_SIGNUP_BUTTON')}
-      subtitle={t('Auth.PAGE_SIGNUP_SUBTITLE')}
+      subtitle={pageSubtitle}
     >
       <Helmet>
         <title>
@@ -165,19 +143,14 @@ export function SignUpPage() {
 
       {signupModes.length > 1 && (
         <Stack spacing={1} sx={{ mb: 2 }}>
-          <Alert severity="info">
-            {t(
-              'Auth.SIGNUP_MODE_SELECTOR_HINT',
-              'Choose the signup option that matches how you want to register.',
-            )}
-          </Alert>
-          <Stack direction={{ xs: 'column', sm: 'row' }} spacing={1} flexWrap="wrap">
+          <Stack spacing={1}>
             {signupModes.map((entry) => (
               <Button
                 key={entry}
                 variant={mode === entry ? 'contained' : 'outlined'}
                 onClick={() => setMode(entry)}
                 disabled={submitting}
+                fullWidth
               >
                 {t(MODE_LABELS[entry] || entry, entry)}
               </Button>
@@ -191,8 +164,6 @@ export function SignUpPage() {
         onSubmit={handleSubmit}
         sx={{ display: 'flex', flexDirection: 'column', gap: 2 }}
       >
-        {modeHint && <Alert severity="info">{modeHint}</Alert>}
-
         <TextField
           label={t('Auth.EMAIL_LABEL')}
           type="email"
@@ -215,17 +186,6 @@ export function SignUpPage() {
           />
         )}
 
-        {mode === 'self_signup_qr' && (
-          <Stack spacing={1}>
-            <TextField
-              label={t('Auth.SIGNUP_QR_TOKEN_LABEL', 'QR token')}
-              value={tokenFromUrl}
-              fullWidth
-              InputProps={{ readOnly: true }}
-            />
-          </Stack>
-        )}
-
         <Button
           type="submit"
           variant="contained"