@micha.bigler/ui-core-micha 2.2.3 → 2.2.4

package/dist/components/AllowedEmailDomainsManager.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import React, { useEffect, useState } from 'react';
+import { Alert, Box, Button, TextField, Typography, } from '@mui/material';
+import { useTranslation } from 'react-i18next';
+import { updateAuthPolicy } from '../auth/authApi';
+export function AllowedEmailDomainsManager({ domains = [], enabled = false, onPolicyChange, }) {
+    const { t } = useTranslation();
+    const [domainsText, setDomainsText] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState('');
+    const [success, setSuccess] = useState('');
+    useEffect(() => {
+        setDomainsText((domains || []).join('\n'));
+    }, [domains]);
+    const handleSave = async () => {
+        setBusy(true);
+        setError('');
+        setSuccess('');
+        try {
+            const allowedEmailDomains = domainsText
+                .split(/\r?\n/)
+                .map((value) => value.trim())
+                .filter(Boolean);
+            const next = await updateAuthPolicy({
+                allowed_email_domains: allowedEmailDomains,
+            });
+            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || allowedEmailDomains).join('\n'));
+            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
+            if (onPolicyChange)
+                onPolicyChange(next);
+        }
+        catch (err) {
+            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    if (!enabled) {
+        return null;
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.ALLOWED_EMAIL_DOMAINS_TITLE', 'Allowed Email Domains') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.ALLOWED_EMAIL_DOMAINS_CARD_HINT', 'Only addresses from these domains can use email-domain sign-up.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 4, fullWidth: true, value: domainsText, onChange: (event) => setDomainsText(event.target.value), disabled: busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: handleSave, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
+}

package/dist/components/QrSignupManager.js

@@ -1,32 +1,72 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import React, { useEffect, useRef, useState } from 'react';
-import { Alert, Box, Button, TextField, Typography, } from '@mui/material';
+import React, { useEffect, useMemo, useRef, useState } from 'react';
+import { Alert, Box, Button, Stack, TextField, Typography, } from '@mui/material';
 import { useTranslation } from 'react-i18next';
 import { QRCodeSVG } from 'qrcode.react';
-import { createSignupQr } from '../auth/authApi';
-export function QrSignupManager({ enabled = false }) {
+import { createSignupQr, updateAuthPolicy } from '../auth/authApi';
+const DEFAULT_EXPIRY_DAYS = 90;
+function clampExpiryDays(value) {
+    const parsed = parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < 1) {
+        return DEFAULT_EXPIRY_DAYS;
+    }
+    return parsed;
+}
+function escapeHtml(value) {
+    return String(value !== null && value !== void 0 ? value : '')
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+export function QrSignupManager({ enabled = false, expiryDays = DEFAULT_EXPIRY_DAYS, onPolicyChange, }) {
     const { t } = useTranslation();
-    const [label, setLabel] = useState('');
+    const qrWrapperRef = useRef(null);
+    const [currentExpiryDays, setCurrentExpiryDays] = useState(String(expiryDays || DEFAULT_EXPIRY_DAYS));
     const [busy, setBusy] = useState(false);
+    const [savingPolicy, setSavingPolicy] = useState(false);
     const [error, setError] = useState('');
     const [success, setSuccess] = useState('');
     const [result, setResult] = useState(null);
+    const [copyState, setCopyState] = useState('idle');
     const hasGeneratedRef = useRef(false);
-    const generate = async () => {
+    useEffect(() => {
+        setCurrentExpiryDays(String(expiryDays || DEFAULT_EXPIRY_DAYS));
+    }, [expiryDays]);
+    const formattedExpiry = useMemo(() => {
+        if (!(result === null || result === void 0 ? void 0 : result.expires_at)) {
+            return '';
+        }
+        const parsed = new Date(result.expires_at);
+        if (Number.isNaN(parsed.getTime())) {
+            return result.expires_at;
+        }
+        return new Intl.DateTimeFormat(undefined, {
+            year: 'numeric',
+            month: '2-digit',
+            day: '2-digit',
+            hour: '2-digit',
+            minute: '2-digit',
+        }).format(parsed);
+    }, [result]);
+    const generate = async (daysOverride) => {
         if (!enabled) {
             setResult(null);
             return;
         }
+        const nextDays = clampExpiryDays(daysOverride !== null && daysOverride !== void 0 ? daysOverride : currentExpiryDays);
         setBusy(true);
         setError('');
         setSuccess('');
+        setCopyState('idle');
         try {
             const data = await createSignupQr({
-                label,
+                expires_minutes: nextDays * 24 * 60,
             });
             setResult(data);
             hasGeneratedRef.current = true;
-            setSuccess(t('Auth.SIGNUP_QR_SAVE_SUCCESS', 'QR signup link updated.'));
+            setSuccess(t('Auth.SIGNUP_QR_CREATE_SUCCESS', 'New QR signup link created.'));
         }
         catch (err) {
             setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.SIGNUP_QR_CREATE_FAILED', 'Could not create signup QR.'));
@@ -40,6 +80,7 @@ export function QrSignupManager({ enabled = false }) {
             setResult(null);
             setError('');
             setSuccess('');
+            setCopyState('idle');
             hasGeneratedRef.current = false;
             return;
         }
@@ -51,15 +92,17 @@ export function QrSignupManager({ enabled = false }) {
             setBusy(true);
             setError('');
             setSuccess('');
+            setCopyState('idle');
             try {
+                const days = clampExpiryDays(expiryDays);
                 const data = await createSignupQr({
-                    label,
+                    expires_minutes: days * 24 * 60,
                 });
                 if (!active)
                     return;
                 setResult(data);
                 hasGeneratedRef.current = true;
-                setSuccess(t('Auth.SIGNUP_QR_SAVE_SUCCESS', 'QR signup link updated.'));
+                setSuccess(t('Auth.SIGNUP_QR_CREATE_SUCCESS', 'New QR signup link created.'));
             }
             catch (err) {
                 if (!active)
@@ -76,6 +119,173 @@ export function QrSignupManager({ enabled = false }) {
         return () => {
             active = false;
         };
-    }, [enabled, label, t]);
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'When QR signup is enabled, a signup QR code is shown here immediately.') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_POLICY_HINT', 'The default QR validity is configured in the authentication policy above.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), !enabled && (_jsx(Alert, { severity: "info", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_DISABLED_HINT', 'Enable self-signup by QR above to show a QR code here.') })), _jsx(TextField, { label: t('Common.LABEL', 'Label'), value: label, onChange: (event) => setLabel(event.target.value), fullWidth: true, disabled: !enabled || busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: generate, disabled: !enabled || busy, children: t('Common.SAVE', 'Save') }), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 3 }, children: [_jsx(QRCodeSVG, { value: result.signup_url, size: 180, includeMargin: true }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'), value: result.signup_url, fullWidth: true, multiline: true, minRows: 2, sx: { mt: 2 }, InputProps: { readOnly: true } }), (result === null || result === void 0 ? void 0 : result.expires_at) && (_jsxs(Typography, { variant: "body2", sx: { mt: 1.5, color: 'text.secondary' }, children: [t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'), ": ", result.expires_at] }))] }))] }));
+    }, [enabled, expiryDays, t]);
+    const handleSavePolicy = async () => {
+        const nextDays = clampExpiryDays(currentExpiryDays);
+        setSavingPolicy(true);
+        setError('');
+        setSuccess('');
+        try {
+            const next = await updateAuthPolicy({
+                signup_qr_expiry_days: nextDays,
+            });
+            setCurrentExpiryDays(String((next === null || next === void 0 ? void 0 : next.signup_qr_expiry_days) || nextDays));
+            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
+            if (onPolicyChange)
+                onPolicyChange(next);
+        }
+        catch (err) {
+            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
+        }
+        finally {
+            setSavingPolicy(false);
+        }
+    };
+    const handleCopyLink = async () => {
+        var _a;
+        const signupUrl = result === null || result === void 0 ? void 0 : result.signup_url;
+        if (!signupUrl || !((_a = navigator === null || navigator === void 0 ? void 0 : navigator.clipboard) === null || _a === void 0 ? void 0 : _a.writeText)) {
+            setCopyState('error');
+            return;
+        }
+        try {
+            await navigator.clipboard.writeText(signupUrl);
+            setCopyState('copied');
+        }
+        catch (_error) {
+            setCopyState('error');
+        }
+    };
+    const handleSavePdf = () => {
+        var _a;
+        if (!(result === null || result === void 0 ? void 0 : result.signup_url)) {
+            return;
+        }
+        const svgMarkup = (_a = qrWrapperRef.current) === null || _a === void 0 ? void 0 : _a.innerHTML;
+        if (!svgMarkup) {
+            setError(t('Auth.SIGNUP_QR_PDF_NOT_READY', 'The QR image is not ready yet. Please try again.'));
+            return;
+        }
+        const printWindow = window.open('', '_blank', 'width=960,height=900');
+        if (!printWindow) {
+            setError(t('Auth.SIGNUP_QR_PDF_BLOCKED', 'Popup blocked. Please allow popups to save the QR card as PDF.'));
+            return;
+        }
+        const safeUrl = escapeHtml(result.signup_url);
+        const safeExpiresAt = escapeHtml(formattedExpiry || result.expires_at || '');
+        printWindow.document.write(`
+      <!DOCTYPE html>
+      <html>
+        <head>
+          <meta charset="utf-8" />
+          <title>${escapeHtml(t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup'))}</title>
+          <style>
+            body {
+              margin: 0;
+              padding: 32px;
+              font-family: Arial, sans-serif;
+              background: #f5f7fb;
+              color: #122033;
+            }
+            .card {
+              max-width: 720px;
+              margin: 0 auto;
+              border: 1px solid #d9e2f2;
+              border-radius: 20px;
+              background: #ffffff;
+              padding: 32px;
+              box-sizing: border-box;
+            }
+            .eyebrow {
+              display: inline-block;
+              padding: 6px 10px;
+              border-radius: 999px;
+              background: #e8f0ff;
+              color: #23408e;
+              font-size: 12px;
+              font-weight: 700;
+              letter-spacing: 0.06em;
+              text-transform: uppercase;
+            }
+            h1 {
+              margin: 16px 0 8px;
+              font-size: 28px;
+              line-height: 1.2;
+            }
+            .qr-box {
+              display: flex;
+              justify-content: center;
+              align-items: center;
+              padding: 24px;
+              border-radius: 16px;
+              background: #ffffff;
+              border: 1px solid #d9e2f2;
+            }
+            .meta {
+              margin-top: 20px;
+              padding: 16px;
+              border-radius: 16px;
+              background: #f8faff;
+              border: 1px solid #d9e2f2;
+              word-break: break-word;
+              font-size: 14px;
+              line-height: 1.5;
+            }
+            @media print {
+              body {
+                background: #ffffff;
+                padding: 0;
+              }
+              .card {
+                border: 0;
+                border-radius: 0;
+                max-width: none;
+                padding: 0;
+              }
+            }
+          </style>
+        </head>
+        <body>
+          <div class="card">
+            <div class="eyebrow">${escapeHtml(t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup'))}</div>
+            <h1>${escapeHtml(t('Auth.SIGNUP_QR_PRINT_TITLE', 'Sign-Up Access'))}</h1>
+            <div class="qr-box">${svgMarkup}</div>
+            <div class="meta">
+              <strong>${escapeHtml(t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'))}</strong><br />
+              <a href="${safeUrl}">${safeUrl}</a><br /><br />
+              <strong>${escapeHtml(t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'))}</strong>: ${safeExpiresAt}
+            </div>
+          </div>
+          <script>
+            window.addEventListener('load', function () {
+              window.focus();
+              window.print();
+            });
+          </script>
+        </body>
+      </html>
+    `);
+        printWindow.document.close();
+    };
+    if (!enabled) {
+        return null;
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'Save the default validity, then generate and share QR signup links below.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), copyState === 'copied' && (_jsx(Alert, { severity: "success", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_LINK_COPIED', 'Signup link copied.') })), copyState === 'error' && (_jsx(Alert, { severity: "warning", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_COPY_UNAVAILABLE', 'Copying the link is not available in this browser.') })), _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1.5, alignItems: { sm: 'flex-start' }, children: [_jsx(TextField, { label: t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)'), helperText: t('Auth.SIGNUP_QR_EXPIRY_DAYS_HINT', 'Default validity for newly generated QR signup links.'), type: "number", value: currentExpiryDays, onChange: (event) => setCurrentExpiryDays(event.target.value), disabled: savingPolicy || busy, sx: { flex: 1 } }), _jsx(Button, { variant: "contained", onClick: handleSavePolicy, disabled: savingPolicy || busy, sx: { minWidth: 120, mt: { sm: '8px' } }, children: t('Common.SAVE', 'Save') })] }), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 3 }, children: [_jsx(Box, { sx: {
+                            display: 'flex',
+                            justifyContent: 'center',
+                            alignItems: 'center',
+                            borderRadius: 3,
+                            border: '1px solid',
+                            borderColor: 'divider',
+                            bgcolor: '#ffffff',
+                            py: 3,
+                            px: 2,
+                        }, children: _jsx(Box, { ref: qrWrapperRef, children: _jsx(QRCodeSVG, { value: result.signup_url, size: 220, includeMargin: true }) }) }), _jsxs(Box, { sx: {
+                            mt: 2,
+                            borderRadius: 3,
+                            p: 2,
+                            bgcolor: 'grey.50',
+                            border: '1px solid',
+                            borderColor: 'divider',
+                        }, children: [_jsx(Typography, { variant: "subtitle2", gutterBottom: true, children: t('Auth.SIGNUP_QR_ACCESS_TITLE', 'Signup Access') }), _jsxs(Typography, { variant: "body2", color: "text.secondary", children: [t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'), ": ", formattedExpiry || result.expires_at] })] }), _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1, sx: { mt: 2 }, children: [_jsx(Button, { variant: "outlined", onClick: () => generate(), disabled: busy || savingPolicy, children: t('Auth.SIGNUP_QR_NEW_BUTTON', 'New QR-Code') }), _jsx(Button, { variant: "outlined", onClick: handleCopyLink, disabled: !(result === null || result === void 0 ? void 0 : result.signup_url) || busy, children: t('Auth.SIGNUP_QR_COPY_BUTTON', 'Copy Link') }), _jsx(Button, { variant: "outlined", onClick: handleSavePdf, disabled: !(result === null || result === void 0 ? void 0 : result.signup_url) || busy, children: t('Auth.SIGNUP_QR_PDF_BUTTON', 'Save as PDF') })] })] }))] }));
 }

package/dist/components/RegistrationMethodsManager.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import React, { useEffect, useState } from 'react';
-import { Alert, Box, Button, FormControlLabel, Stack, Switch, TextField, Typography, } from '@mui/material';
+import { Alert, Box, FormControlLabel, Stack, Switch, Typography, } from '@mui/material';
 import { useTranslation } from 'react-i18next';
 import { fetchAuthPolicy, updateAuthPolicy } from '../auth/authApi';
 const EMPTY_POLICY = {
@@ -9,16 +9,11 @@ const EMPTY_POLICY = {
     allow_self_signup_open: false,
     allow_self_signup_email_domain: false,
     allow_self_signup_qr: false,
-    allowed_email_domains: [],
     required_auth_factor_count: 1,
-    signup_qr_expiry_days: 90,
 };
 export function RegistrationMethodsManager({ onPolicyChange }) {
     const { t } = useTranslation();
     const [policy, setPolicy] = useState(EMPTY_POLICY);
-    const [domainsText, setDomainsText] = useState('');
-    const [signupQrExpiryDays, setSignupQrExpiryDays] = useState(String(EMPTY_POLICY.signup_qr_expiry_days));
-    const [busy, setBusy] = useState(false);
     const [busyField, setBusyField] = useState('');
     const [error, setError] = useState('');
     const [success, setSuccess] = useState('');
@@ -30,8 +25,6 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
                 if (!active)
                     return;
                 setPolicy((prev) => (Object.assign(Object.assign({}, prev), data)));
-                setDomainsText(((data === null || data === void 0 ? void 0 : data.allowed_email_domains) || []).join('\n'));
-                setSignupQrExpiryDays(String((data === null || data === void 0 ? void 0 : data.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
                 if (onPolicyChange)
                     onPolicyChange(data);
             }
@@ -54,7 +47,6 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
         try {
             const next = await updateAuthPolicy({ [field]: checked });
             setPolicy((prev) => (Object.assign(Object.assign({}, prev), next)));
-            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || []).join('\n'));
             setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
             if (onPolicyChange)
                 onPolicyChange(next);
@@ -67,35 +59,5 @@ export function RegistrationMethodsManager({ onPolicyChange }) {
             setBusyField('');
         }
     };
-    const save = async () => {
-        setBusy(true);
-        setError('');
-        setSuccess('');
-        try {
-            const allowed_email_domains = domainsText
-                .split(/\r?\n/)
-                .map((value) => value.trim())
-                .filter(Boolean);
-            const parsedExpiryDays = parseInt(signupQrExpiryDays, 10);
-            const next = await updateAuthPolicy({
-                allowed_email_domains,
-                signup_qr_expiry_days: Number.isFinite(parsedExpiryDays) && parsedExpiryDays > 0
-                    ? parsedExpiryDays
-                    : EMPTY_POLICY.signup_qr_expiry_days,
-            });
-            setPolicy((prev) => (Object.assign(Object.assign({}, prev), next)));
-            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || allowed_email_domains).join('\n'));
-            setSignupQrExpiryDays(String((next === null || next === void 0 ? void 0 : next.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
-            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
-            if (onPolicyChange)
-                onPolicyChange(next);
-        }
-        catch (err) {
-            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policy.allow_self_signup_email_domain && !(policy.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') })), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 3, fullWidth: true, sx: { mt: 2 }, value: domainsText, onChange: (event) => setDomainsText(event.target.value) }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)'), helperText: t('Auth.SIGNUP_QR_EXPIRY_DAYS_HINT', 'Default validity for newly generated QR signup links.'), type: "number", fullWidth: true, sx: { mt: 2 }, value: signupQrExpiryDays, onChange: (event) => setSignupQrExpiryDays(event.target.value) }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: save, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policy.allow_self_signup_email_domain && !(policy.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') }))] }));
 }

package/dist/i18n/authTranslations.js

@@ -1248,6 +1248,198 @@ export const authTranslations = {
         "en": "Expired",
         "sw": "Muda umekwisha"
     },
+    "Auth.AUTH_POLICY_FETCH_FAILED": {
+        "de": "Die Authentifizierungsrichtlinie konnte nicht geladen werden.",
+        "fr": "Impossible de charger la politique d'authentification.",
+        "en": "Could not load authentication policy.",
+        "sw": "Haikuweza kupakia sera ya uthibitishaji."
+    },
+    "Auth.AUTH_POLICY_UPDATE_FAILED": {
+        "de": "Die Authentifizierungseinstellungen konnten nicht gespeichert werden.",
+        "fr": "Impossible d'enregistrer les paramètres d'authentification.",
+        "en": "Could not save authentication settings.",
+        "sw": "Haikuweza kuhifadhi mipangilio ya uthibitishaji."
+    },
+    "Auth.AUTH_POLICY_SAVE_SUCCESS": {
+        "de": "Die Authentifizierungseinstellungen wurden gespeichert.",
+        "fr": "Les paramètres d'authentification ont été enregistrés.",
+        "en": "Authentication settings saved.",
+        "sw": "Mipangilio ya uthibitishaji imehifadhiwa."
+    },
+    "Auth.REGISTRATION_METHODS_TITLE": {
+        "de": "Registrierungsmethoden",
+        "fr": "Méthodes d'inscription",
+        "en": "Registration Methods",
+        "sw": "Mbinu za kujisajili"
+    },
+    "Auth.REGISTRATION_METHODS_HINT": {
+        "de": "Wählen Sie aus, welche Registrierungs- und Einladungswege für diese App aktiv sind.",
+        "fr": "Choisissez quels flux d'inscription et d'invitation sont actifs pour cette application.",
+        "en": "Choose which signup and invite flows are active for this app.",
+        "sw": "Chagua njia zipi za kujisajili na za mwaliko zimewashwa kwa programu hii."
+    },
+    "Auth.ADMIN_INVITE_LABEL": {
+        "de": "Admin-Einladung",
+        "fr": "Invitation admin",
+        "en": "Admin invite",
+        "sw": "Mwaliko wa msimamizi"
+    },
+    "Auth.SIGNUP_ACCESS_CODE_LABEL": {
+        "de": "Selbstregistrierung mit Zugangscode",
+        "fr": "Auto-inscription avec code d'accès",
+        "en": "Self-signup with access code",
+        "sw": "Kujisajili mwenyewe kwa msimbo wa ufikiaji"
+    },
+    "Auth.SIGNUP_OPEN_LABEL": {
+        "de": "Offene Selbstregistrierung",
+        "fr": "Auto-inscription ouverte",
+        "en": "Open self-signup",
+        "sw": "Kujisajili mwenyewe kwa wazi"
+    },
+    "Auth.SIGNUP_EMAIL_DOMAIN_LABEL": {
+        "de": "Selbstregistrierung per E-Mail-Domain",
+        "fr": "Auto-inscription par domaine e-mail",
+        "en": "Self-signup by email domain",
+        "sw": "Kujisajili mwenyewe kwa domeni ya barua pepe"
+    },
+    "Auth.SIGNUP_QR_LABEL": {
+        "de": "Selbstregistrierung per QR",
+        "fr": "Auto-inscription par QR",
+        "en": "Self-signup by QR",
+        "sw": "Kujisajili mwenyewe kwa QR"
+    },
+    "Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT": {
+        "de": "Die Registrierung per E-Mail-Domain ist aktiviert, bleibt aber gesperrt, bis mindestens eine erlaubte Domain gespeichert ist.",
+        "fr": "L'inscription par domaine e-mail est activée, mais reste bloquée tant qu'au moins un domaine autorisé n'est pas enregistré.",
+        "en": "Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.",
+        "sw": "Usajili wa domeni ya barua pepe umewashwa, lakini unabaki kuzuiwa hadi angalau domeni moja iliyoidhinishwa ihifadhiwe."
+    },
+    "Auth.ALLOWED_EMAIL_DOMAINS_TITLE": {
+        "de": "Erlaubte E-Mail-Domains",
+        "fr": "Domaines e-mail autorisés",
+        "en": "Allowed Email Domains",
+        "sw": "Domeni za barua pepe zinazoruhusiwa"
+    },
+    "Auth.ALLOWED_EMAIL_DOMAINS_CARD_HINT": {
+        "de": "Nur Adressen aus diesen Domains dürfen die Registrierung per E-Mail-Domain verwenden.",
+        "fr": "Seules les adresses de ces domaines peuvent utiliser l'inscription par domaine e-mail.",
+        "en": "Only addresses from these domains can use email-domain sign-up.",
+        "sw": "Ni anwani kutoka kwenye domeni hizi tu zinaweza kutumia kujisajili kwa domeni ya barua pepe."
+    },
+    "Auth.ALLOWED_EMAIL_DOMAINS_LABEL": {
+        "de": "Erlaubte E-Mail-Domains",
+        "fr": "Domaines e-mail autorisés",
+        "en": "Allowed email domains",
+        "sw": "Domeni za barua pepe zinazoruhusiwa"
+    },
+    "Auth.ALLOWED_EMAIL_DOMAINS_HINT": {
+        "de": "Eine Domain pro Zeile, z. B. example.org. Sie können das Feld vorübergehend leer lassen.",
+        "fr": "Un domaine par ligne, p. ex. example.org. Vous pouvez laisser ce champ vide temporairement.",
+        "en": "One domain per line, e.g. example.org. You can leave this empty temporarily.",
+        "sw": "Domeni moja kwa kila mstari, kwa mfano example.org. Unaweza kuiacha tupu kwa muda."
+    },
+    "Auth.SIGNUP_QR_MANAGER_TITLE": {
+        "de": "QR-Registrierung",
+        "fr": "Inscription par QR",
+        "en": "QR Signup",
+        "sw": "Usajili wa QR"
+    },
+    "Auth.SIGNUP_QR_MANAGER_HINT": {
+        "de": "Speichern Sie zuerst die Standard-Gültigkeit und erzeugen Sie darunter neue QR-Registrierungslinks.",
+        "fr": "Enregistrez d'abord la validité par défaut, puis générez ci-dessous de nouveaux liens d'inscription QR.",
+        "en": "Save the default validity, then generate and share QR signup links below.",
+        "sw": "Hifadhi muda wa kawaida wa uhalali kwanza, kisha tengeneza na ushiriki viungo vya usajili wa QR hapa chini."
+    },
+    "Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL": {
+        "de": "QR-Registrierung gültig (Tage)",
+        "fr": "Validité de l'inscription QR (jours)",
+        "en": "QR signup validity (days)",
+        "sw": "Uhalali wa usajili wa QR (siku)"
+    },
+    "Auth.SIGNUP_QR_EXPIRY_DAYS_HINT": {
+        "de": "Standard-Gültigkeit für neu erzeugte QR-Registrierungslinks.",
+        "fr": "Validité par défaut des nouveaux liens d'inscription QR générés.",
+        "en": "Default validity for newly generated QR signup links.",
+        "sw": "Muda wa kawaida wa uhalali wa viungo vipya vya usajili wa QR."
+    },
+    "Auth.SIGNUP_QR_CREATE_SUCCESS": {
+        "de": "Ein neuer QR-Registrierungslink wurde erstellt.",
+        "fr": "Un nouveau lien d'inscription QR a été créé.",
+        "en": "New QR signup link created.",
+        "sw": "Kiungo kipya cha usajili wa QR kimetengenezwa."
+    },
+    "Auth.SIGNUP_QR_CREATE_FAILED": {
+        "de": "Der QR-Registrierungslink konnte nicht erstellt werden.",
+        "fr": "Impossible de créer le lien d'inscription QR.",
+        "en": "Could not create signup QR.",
+        "sw": "Haikuweza kuunda QR ya usajili."
+    },
+    "Auth.SIGNUP_QR_ACCESS_TITLE": {
+        "de": "Registrierungszugang",
+        "fr": "Accès à l'inscription",
+        "en": "Signup Access",
+        "sw": "Ufikiaji wa usajili"
+    },
+    "Auth.SIGNUP_QR_LINK_LABEL": {
+        "de": "Registrierungslink",
+        "fr": "Lien d'inscription",
+        "en": "Signup link",
+        "sw": "Kiungo cha usajili"
+    },
+    "Auth.SIGNUP_QR_VALID_UNTIL": {
+        "de": "Gültig bis",
+        "fr": "Valable jusqu'au",
+        "en": "Valid until",
+        "sw": "Halali hadi"
+    },
+    "Auth.SIGNUP_QR_NEW_BUTTON": {
+        "de": "Neuer QR-Code",
+        "fr": "Nouveau code QR",
+        "en": "New QR-Code",
+        "sw": "Msimbo mpya wa QR"
+    },
+    "Auth.SIGNUP_QR_COPY_BUTTON": {
+        "de": "Link kopieren",
+        "fr": "Copier le lien",
+        "en": "Copy Link",
+        "sw": "Nakili kiungo"
+    },
+    "Auth.SIGNUP_QR_PDF_BUTTON": {
+        "de": "Als PDF speichern",
+        "fr": "Enregistrer en PDF",
+        "en": "Save as PDF",
+        "sw": "Hifadhi kama PDF"
+    },
+    "Auth.SIGNUP_QR_LINK_COPIED": {
+        "de": "Der Registrierungslink wurde kopiert.",
+        "fr": "Le lien d'inscription a été copié.",
+        "en": "Signup link copied.",
+        "sw": "Kiungo cha usajili kimenakiliwa."
+    },
+    "Auth.SIGNUP_QR_COPY_UNAVAILABLE": {
+        "de": "Das Kopieren des Links ist in diesem Browser nicht verfügbar.",
+        "fr": "La copie du lien n'est pas disponible dans ce navigateur.",
+        "en": "Copying the link is not available in this browser.",
+        "sw": "Kunakili kiungo hakupatikani katika kivinjari hiki."
+    },
+    "Auth.SIGNUP_QR_PDF_NOT_READY": {
+        "de": "Das QR-Bild ist noch nicht bereit. Bitte versuchen Sie es erneut.",
+        "fr": "L'image QR n'est pas encore prête. Veuillez réessayer.",
+        "en": "The QR image is not ready yet. Please try again.",
+        "sw": "Picha ya QR bado haijawa tayari. Tafadhali jaribu tena."
+    },
+    "Auth.SIGNUP_QR_PDF_BLOCKED": {
+        "de": "Popup blockiert. Bitte erlauben Sie Popups, um die QR-Karte als PDF zu speichern.",
+        "fr": "Fenêtre contextuelle bloquée. Veuillez autoriser les popups pour enregistrer la carte QR en PDF.",
+        "en": "Popup blocked. Please allow popups to save the QR card as PDF.",
+        "sw": "Dirisha ibukizi limezuiwa. Tafadhali ruhusu madirisha ibukizi ili kuhifadhi kadi ya QR kama PDF."
+    },
+    "Auth.SIGNUP_QR_PRINT_TITLE": {
+        "de": "Registrierungszugang",
+        "fr": "Accès à l'inscription",
+        "en": "Sign-Up Access",
+        "sw": "Ufikiaji wa kujisajili"
+    },
     "Common.YES": {
         "de": "Ja",
         "fr": "Oui",

package/dist/pages/AccountPage.js

@@ -13,6 +13,7 @@ import { SecurityComponent } from '../components/SecurityComponent';
 import { UserListComponent } from '../components/UserListComponent';
 import { UserInviteComponent } from '../components/UserInviteComponent';
 import { AccessCodeManager } from '../components/AccessCodeManager';
+import { AllowedEmailDomainsManager } from '../components/AllowedEmailDomainsManager';
 import { RegistrationMethodsManager } from '../components/RegistrationMethodsManager';
 import { AuthFactorRequirementCard } from '../components/AuthFactorRequirementCard';
 import { QrSignupManager } from '../components/QrSignupManager';
@@ -91,5 +92,5 @@ export function AccountPage({ userListExtraColumns = [], userListExtraRowActions
     const activeExtraTab = builtInTabValues.has(safeTab)
         ? null
         : extraTabs.find((tab) => tab.value === safeTab);
-    return (_jsxs(WidePage, { title: t('Account.TITLE', 'Account & Administration'), children: [_jsx(Helmet, { children: _jsxs("title", { children: [t('Account.PAGE_TITLE', 'Account'), " \u2013 ", user.email] }) }), _jsx(Tabs, { value: safeTab, onChange: handleTabChange, variant: "scrollable", scrollButtons: "auto", sx: { mb: 3, borderBottom: 1, borderColor: 'divider' }, children: tabs.map((tab) => (_jsx(Tab, { label: tab.label, value: tab.value }, tab.value))) }), safeTab === 'profile' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(ProfileComponent, { onSubmit: handleProfileSubmit, showName: true, showPrivacy: true, showCookies: true }) })), safeTab === 'security' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(SecurityComponent, { fromRecovery: fromRecovery, fromWeakLogin: fromWeakLogin }) })), safeTab === 'users' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(UserListComponent, { roles: activeRoles, currentUser: user, extraColumns: userListExtraColumns, extraRowActions: userListExtraRowActions, extraContext: userListExtraContext, refreshTrigger: userListRefreshTrigger, canEditUser: userListCanEditUser }) })), safeTab === 'invite' && (_jsx(Box, { sx: { mt: 2 }, children: _jsxs(Stack, { spacing: 2.5, children: [(isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(RegistrationMethodsManager, { onPolicyChange: setAuthPolicy }) })), (isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(AuthFactorRequirementCard, {}) })), (isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(UserInviteComponent, {}) })), (isSuperUser || perms.can_manage_access_codes) && (_jsxs(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: [_jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Account.ACCESS_CODES_HINT', 'Manage access codes for self-registration.') }), _jsx(AccessCodeManager, {})] })), (isSuperUser || perms.can_invite) && showBulkInviteCsvTab && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(BulkInviteCsvTab, Object.assign({}, bulkInviteCsvProps)) })), (isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(QrSignupManager, { enabled: Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_qr) }) }))] }) })), safeTab === 'support' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(SupportRecoveryRequestsTab, {}) })), activeExtraTab && (_jsx(Box, { sx: { mt: 2 }, children: (_a = activeExtraTab.render) === null || _a === void 0 ? void 0 : _a.call(activeExtraTab, { user, perms, isSuperUser, t }) }))] }));
+    return (_jsxs(WidePage, { title: t('Account.TITLE', 'Account & Administration'), children: [_jsx(Helmet, { children: _jsxs("title", { children: [t('Account.PAGE_TITLE', 'Account'), " \u2013 ", user.email] }) }), _jsx(Tabs, { value: safeTab, onChange: handleTabChange, variant: "scrollable", scrollButtons: "auto", sx: { mb: 3, borderBottom: 1, borderColor: 'divider' }, children: tabs.map((tab) => (_jsx(Tab, { label: tab.label, value: tab.value }, tab.value))) }), safeTab === 'profile' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(ProfileComponent, { onSubmit: handleProfileSubmit, showName: true, showPrivacy: true, showCookies: true }) })), safeTab === 'security' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(SecurityComponent, { fromRecovery: fromRecovery, fromWeakLogin: fromWeakLogin }) })), safeTab === 'users' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(UserListComponent, { roles: activeRoles, currentUser: user, extraColumns: userListExtraColumns, extraRowActions: userListExtraRowActions, extraContext: userListExtraContext, refreshTrigger: userListRefreshTrigger, canEditUser: userListCanEditUser }) })), safeTab === 'invite' && (_jsx(Box, { sx: { mt: 2 }, children: _jsxs(Stack, { spacing: 2.5, children: [(isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(RegistrationMethodsManager, { onPolicyChange: setAuthPolicy }) })), (isSuperUser || perms.can_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(AuthFactorRequirementCard, {}) })), (isSuperUser || perms.can_invite) && Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_admin_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(UserInviteComponent, {}) })), (isSuperUser || perms.can_manage_access_codes) && Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_access_code) && (_jsxs(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: [_jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Account.ACCESS_CODES_HINT', 'Manage access codes for self-registration.') }), _jsx(AccessCodeManager, {})] })), (isSuperUser || perms.can_invite) && showBulkInviteCsvTab && Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_admin_invite) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(BulkInviteCsvTab, Object.assign({}, bulkInviteCsvProps)) })), (isSuperUser || perms.can_invite) && Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_email_domain) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(AllowedEmailDomainsManager, { enabled: Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_email_domain), domains: (authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allowed_email_domains) || [], onPolicyChange: setAuthPolicy }) })), (isSuperUser || perms.can_invite) && Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_qr) && (_jsx(Paper, { variant: "outlined", sx: { p: 2.5, borderRadius: 2 }, children: _jsx(QrSignupManager, { enabled: Boolean(authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.allow_self_signup_qr), expiryDays: authPolicy === null || authPolicy === void 0 ? void 0 : authPolicy.signup_qr_expiry_days, onPolicyChange: setAuthPolicy }) }))] }) })), safeTab === 'support' && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(SupportRecoveryRequestsTab, {}) })), activeExtraTab && (_jsx(Box, { sx: { mt: 2 }, children: (_a = activeExtraTab.render) === null || _a === void 0 ? void 0 : _a.call(activeExtraTab, { user, perms, isSuperUser, t }) }))] }));
 }