@micha.bigler/ui-core-micha 2.2.3 → 2.2.5

package/dist/components/AllowedEmailDomainsManager.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import React, { useEffect, useState } from 'react';
+import { Alert, Box, Button, TextField, Typography, } from '@mui/material';
+import { useTranslation } from 'react-i18next';
+import { updateAuthPolicy } from '../auth/authApi';
+export function AllowedEmailDomainsManager({ domains = [], enabled = false, onPolicyChange, }) {
+    const { t } = useTranslation();
+    const [domainsText, setDomainsText] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState('');
+    const [success, setSuccess] = useState('');
+    useEffect(() => {
+        setDomainsText((domains || []).join('\n'));
+    }, [domains]);
+    const handleSave = async () => {
+        setBusy(true);
+        setError('');
+        setSuccess('');
+        try {
+            const allowedEmailDomains = domainsText
+                .split(/\r?\n/)
+                .map((value) => value.trim())
+                .filter(Boolean);
+            const next = await updateAuthPolicy({
+                allowed_email_domains: allowedEmailDomains,
+            });
+            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || allowedEmailDomains).join('\n'));
+            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
+            if (onPolicyChange)
+                onPolicyChange(next);
+        }
+        catch (err) {
+            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    if (!enabled) {
+        return null;
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.ALLOWED_EMAIL_DOMAINS_TITLE', 'Allowed Email Domains') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.ALLOWED_EMAIL_DOMAINS_CARD_HINT', 'Only addresses from these domains can use email-domain sign-up.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 4, fullWidth: true, value: domainsText, onChange: (event) => setDomainsText(event.target.value), disabled: busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: handleSave, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
+}

package/dist/components/QrSignupManager.js

@@ -1,32 +1,67 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import React, { useEffect, useRef, useState } from 'react';
-import { Alert, Box, Button, TextField, Typography, } from '@mui/material';
+import React, { useEffect, useMemo, useRef, useState } from 'react';
+import { Alert, Box, Button, Stack, Typography, } from '@mui/material';
 import { useTranslation } from 'react-i18next';
 import { QRCodeSVG } from 'qrcode.react';
 import { createSignupQr } from '../auth/authApi';
-export function QrSignupManager({ enabled = false }) {
+const DEFAULT_EXPIRY_DAYS = 90;
+function clampExpiryDays(value) {
+    const parsed = parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < 1) {
+        return DEFAULT_EXPIRY_DAYS;
+    }
+    return parsed;
+}
+function escapeHtml(value) {
+    return String(value !== null && value !== void 0 ? value : '')
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+export function QrSignupManager({ enabled = false, expiryDays = DEFAULT_EXPIRY_DAYS, }) {
     const { t } = useTranslation();
-    const [label, setLabel] = useState('');
+    const qrWrapperRef = useRef(null);
     const [busy, setBusy] = useState(false);
     const [error, setError] = useState('');
     const [success, setSuccess] = useState('');
     const [result, setResult] = useState(null);
+    const [copyState, setCopyState] = useState('idle');
     const hasGeneratedRef = useRef(false);
-    const generate = async () => {
+    const formattedExpiry = useMemo(() => {
+        if (!(result === null || result === void 0 ? void 0 : result.expires_at)) {
+            return '';
+        }
+        const parsed = new Date(result.expires_at);
+        if (Number.isNaN(parsed.getTime())) {
+            return result.expires_at;
+        }
+        return new Intl.DateTimeFormat(undefined, {
+            year: 'numeric',
+            month: '2-digit',
+            day: '2-digit',
+            hour: '2-digit',
+            minute: '2-digit',
+        }).format(parsed);
+    }, [result]);
+    const generate = async (daysOverride) => {
         if (!enabled) {
             setResult(null);
             return;
         }
+        const nextDays = clampExpiryDays(daysOverride !== null && daysOverride !== void 0 ? daysOverride : expiryDays);
         setBusy(true);
         setError('');
         setSuccess('');
+        setCopyState('idle');
         try {
             const data = await createSignupQr({
-                label,
+                expires_minutes: nextDays * 24 * 60,
             });
             setResult(data);
             hasGeneratedRef.current = true;
-            setSuccess(t('Auth.SIGNUP_QR_SAVE_SUCCESS', 'QR signup link updated.'));
+            setSuccess(t('Auth.SIGNUP_QR_CREATE_SUCCESS', 'New QR signup link created.'));
         }
         catch (err) {
             setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.SIGNUP_QR_CREATE_FAILED', 'Could not create signup QR.'));
@@ -40,6 +75,7 @@ export function QrSignupManager({ enabled = false }) {
             setResult(null);
             setError('');
             setSuccess('');
+            setCopyState('idle');
             hasGeneratedRef.current = false;
             return;
         }
@@ -51,15 +87,17 @@ export function QrSignupManager({ enabled = false }) {
             setBusy(true);
             setError('');
             setSuccess('');
+            setCopyState('idle');
             try {
+                const days = clampExpiryDays(expiryDays);
                 const data = await createSignupQr({
-                    label,
+                    expires_minutes: days * 24 * 60,
                 });
                 if (!active)
                     return;
                 setResult(data);
                 hasGeneratedRef.current = true;
-                setSuccess(t('Auth.SIGNUP_QR_SAVE_SUCCESS', 'QR signup link updated.'));
+                setSuccess(t('Auth.SIGNUP_QR_CREATE_SUCCESS', 'New QR signup link created.'));
             }
             catch (err) {
                 if (!active)
@@ -76,6 +114,152 @@ export function QrSignupManager({ enabled = false }) {
         return () => {
             active = false;
         };
-    }, [enabled, label, t]);
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'When QR signup is enabled, a signup QR code is shown here immediately.') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_POLICY_HINT', 'The default QR validity is configured in the authentication policy above.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), !enabled && (_jsx(Alert, { severity: "info", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_DISABLED_HINT', 'Enable self-signup by QR above to show a QR code here.') })), _jsx(TextField, { label: t('Common.LABEL', 'Label'), value: label, onChange: (event) => setLabel(event.target.value), fullWidth: true, disabled: !enabled || busy }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: generate, disabled: !enabled || busy, children: t('Common.SAVE', 'Save') }), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 3 }, children: [_jsx(QRCodeSVG, { value: result.signup_url, size: 180, includeMargin: true }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'), value: result.signup_url, fullWidth: true, multiline: true, minRows: 2, sx: { mt: 2 }, InputProps: { readOnly: true } }), (result === null || result === void 0 ? void 0 : result.expires_at) && (_jsxs(Typography, { variant: "body2", sx: { mt: 1.5, color: 'text.secondary' }, children: [t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'), ": ", result.expires_at] }))] }))] }));
+    }, [enabled, expiryDays, t]);
+    const handleCopyLink = async () => {
+        var _a;
+        const signupUrl = result === null || result === void 0 ? void 0 : result.signup_url;
+        if (!signupUrl || !((_a = navigator === null || navigator === void 0 ? void 0 : navigator.clipboard) === null || _a === void 0 ? void 0 : _a.writeText)) {
+            setCopyState('error');
+            return;
+        }
+        try {
+            await navigator.clipboard.writeText(signupUrl);
+            setCopyState('copied');
+        }
+        catch (_error) {
+            setCopyState('error');
+        }
+    };
+    const handleSavePdf = () => {
+        var _a;
+        if (!(result === null || result === void 0 ? void 0 : result.signup_url)) {
+            return;
+        }
+        const svgMarkup = (_a = qrWrapperRef.current) === null || _a === void 0 ? void 0 : _a.innerHTML;
+        if (!svgMarkup) {
+            setError(t('Auth.SIGNUP_QR_PDF_NOT_READY', 'The QR image is not ready yet. Please try again.'));
+            return;
+        }
+        const printWindow = window.open('', '_blank', 'width=960,height=900');
+        if (!printWindow) {
+            setError(t('Auth.SIGNUP_QR_PDF_BLOCKED', 'Popup blocked. Please allow popups to save the QR card as PDF.'));
+            return;
+        }
+        const safeUrl = escapeHtml(result.signup_url);
+        const safeExpiresAt = escapeHtml(formattedExpiry || result.expires_at || '');
+        printWindow.document.write(`
+      <!DOCTYPE html>
+      <html>
+        <head>
+          <meta charset="utf-8" />
+          <title>${escapeHtml(t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup'))}</title>
+          <style>
+            body {
+              margin: 0;
+              padding: 32px;
+              font-family: Arial, sans-serif;
+              background: #f5f7fb;
+              color: #122033;
+            }
+            .card {
+              max-width: 720px;
+              margin: 0 auto;
+              border: 1px solid #d9e2f2;
+              border-radius: 20px;
+              background: #ffffff;
+              padding: 32px;
+              box-sizing: border-box;
+            }
+            .eyebrow {
+              display: inline-block;
+              padding: 6px 10px;
+              border-radius: 999px;
+              background: #e8f0ff;
+              color: #23408e;
+              font-size: 12px;
+              font-weight: 700;
+              letter-spacing: 0.06em;
+              text-transform: uppercase;
+            }
+            h1 {
+              margin: 16px 0 8px;
+              font-size: 28px;
+              line-height: 1.2;
+            }
+            .qr-box {
+              display: flex;
+              justify-content: center;
+              align-items: center;
+              padding: 24px;
+              border-radius: 16px;
+              background: #ffffff;
+              border: 1px solid #d9e2f2;
+            }
+            .meta {
+              margin-top: 20px;
+              padding: 16px;
+              border-radius: 16px;
+              background: #f8faff;
+              border: 1px solid #d9e2f2;
+              word-break: break-word;
+              font-size: 14px;
+              line-height: 1.5;
+            }
+            @media print {
+              body {
+                background: #ffffff;
+                padding: 0;
+              }
+              .card {
+                border: 0;
+                border-radius: 0;
+                max-width: none;
+                padding: 0;
+              }
+            }
+          </style>
+        </head>
+        <body>
+          <div class="card">
+            <div class="eyebrow">${escapeHtml(t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup'))}</div>
+            <h1>${escapeHtml(t('Auth.SIGNUP_QR_PRINT_TITLE', 'Sign-Up Access'))}</h1>
+            <div class="qr-box">${svgMarkup}</div>
+            <div class="meta">
+              <strong>${escapeHtml(t('Auth.SIGNUP_QR_LINK_LABEL', 'Signup link'))}</strong><br />
+              <a href="${safeUrl}">${safeUrl}</a><br /><br />
+              <strong>${escapeHtml(t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'))}</strong>: ${safeExpiresAt}
+            </div>
+          </div>
+          <script>
+            window.addEventListener('load', function () {
+              window.focus();
+              window.print();
+            });
+          </script>
+        </body>
+      </html>
+    `);
+        printWindow.document.close();
+    };
+    if (!enabled) {
+        return null;
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_MANAGER_TITLE', 'QR Signup') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_MANAGER_HINT', 'Generate and share QR signup links below.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), copyState === 'copied' && (_jsx(Alert, { severity: "success", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_LINK_COPIED', 'Signup link copied.') })), copyState === 'error' && (_jsx(Alert, { severity: "warning", sx: { mb: 2 }, children: t('Auth.SIGNUP_QR_COPY_UNAVAILABLE', 'Copying the link is not available in this browser.') })), (result === null || result === void 0 ? void 0 : result.signup_url) && (_jsxs(Box, { sx: { mt: 1 }, children: [_jsx(Box, { sx: {
+                            display: 'flex',
+                            justifyContent: 'center',
+                            alignItems: 'center',
+                            borderRadius: 3,
+                            border: '1px solid',
+                            borderColor: 'divider',
+                            bgcolor: '#ffffff',
+                            py: 3,
+                            px: 2,
+                        }, children: _jsx(Box, { ref: qrWrapperRef, children: _jsx(QRCodeSVG, { value: result.signup_url, size: 220, includeMargin: true }) }) }), _jsxs(Box, { sx: {
+                            mt: 2,
+                            borderRadius: 3,
+                            p: 2,
+                            bgcolor: 'grey.50',
+                            border: '1px solid',
+                            borderColor: 'divider',
+                        }, children: [_jsx(Typography, { variant: "subtitle2", gutterBottom: true, children: t('Auth.SIGNUP_QR_ACCESS_TITLE', 'Signup Access') }), _jsxs(Typography, { variant: "body2", color: "text.secondary", children: [t('Auth.SIGNUP_QR_VALID_UNTIL', 'Valid until'), ": ", formattedExpiry || result.expires_at] })] }), _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1, sx: { mt: 2 }, children: [_jsx(Button, { variant: "outlined", onClick: () => generate(), disabled: busy, children: t('Auth.SIGNUP_QR_NEW_BUTTON', 'New QR-Code') }), _jsx(Button, { variant: "outlined", onClick: handleCopyLink, disabled: !(result === null || result === void 0 ? void 0 : result.signup_url) || busy, children: t('Auth.SIGNUP_QR_COPY_BUTTON', 'Copy Link') }), _jsx(Button, { variant: "outlined", onClick: handleSavePdf, disabled: !(result === null || result === void 0 ? void 0 : result.signup_url) || busy, children: t('Auth.SIGNUP_QR_PDF_BUTTON', 'Save as PDF') })] })] }))] }));
 }

package/dist/components/QrSignupValidityManager.js

@@ -0,0 +1,48 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import React, { useEffect, useState } from 'react';
+import { Alert, Box, Button, Stack, TextField, Typography, } from '@mui/material';
+import { useTranslation } from 'react-i18next';
+import { updateAuthPolicy } from '../auth/authApi';
+const DEFAULT_EXPIRY_DAYS = 90;
+function clampExpiryDays(value) {
+    const parsed = parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < 1) {
+        return DEFAULT_EXPIRY_DAYS;
+    }
+    return parsed;
+}
+export function QrSignupValidityManager({ enabled = false, expiryDays = DEFAULT_EXPIRY_DAYS, onPolicyChange, }) {
+    const { t } = useTranslation();
+    const [currentExpiryDays, setCurrentExpiryDays] = useState(String(expiryDays || DEFAULT_EXPIRY_DAYS));
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState('');
+    const [success, setSuccess] = useState('');
+    useEffect(() => {
+        setCurrentExpiryDays(String(expiryDays || DEFAULT_EXPIRY_DAYS));
+    }, [expiryDays]);
+    const handleSave = async () => {
+        const nextDays = clampExpiryDays(currentExpiryDays);
+        setBusy(true);
+        setError('');
+        setSuccess('');
+        try {
+            const next = await updateAuthPolicy({
+                signup_qr_expiry_days: nextDays,
+            });
+            setCurrentExpiryDays(String((next === null || next === void 0 ? void 0 : next.signup_qr_expiry_days) || nextDays));
+            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
+            if (onPolicyChange)
+                onPolicyChange(next);
+        }
+        catch (err) {
+            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    if (!enabled) {
+        return null;
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.SIGNUP_QR_VALIDITY_TITLE', 'QR Signup Validity') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.SIGNUP_QR_VALIDITY_HINT', 'Set the default validity for newly generated QR signup links.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1.5, alignItems: { sm: 'flex-start' }, children: [_jsx(TextField, { label: t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)'), helperText: t('Auth.SIGNUP_QR_EXPIRY_DAYS_HINT', 'Default validity for newly generated QR signup links.'), type: "number", value: currentExpiryDays, onChange: (event) => setCurrentExpiryDays(event.target.value), disabled: busy, sx: { flex: 1 } }), _jsx(Button, { variant: "contained", onClick: handleSave, disabled: busy, sx: { minWidth: 120, mt: { sm: '8px' } }, children: t('Common.SAVE', 'Save') })] })] }));
+}

package/dist/components/RegistrationMethodsManager.js

@@ -1,8 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import React, { useEffect, useState } from 'react';
-import { Alert, Box, Button, FormControlLabel, Stack, Switch, TextField, Typography, } from '@mui/material';
+import { Alert, Box, CircularProgress, FormControlLabel, Stack, Switch, Typography, } from '@mui/material';
 import { useTranslation } from 'react-i18next';
-import { fetchAuthPolicy, updateAuthPolicy } from '../auth/authApi';
+import { updateAuthPolicy } from '../auth/authApi';
 const EMPTY_POLICY = {
     allow_admin_invite: true,
     allow_self_signup_access_code: false,
@@ -10,92 +10,44 @@ const EMPTY_POLICY = {
     allow_self_signup_email_domain: false,
     allow_self_signup_qr: false,
     allowed_email_domains: [],
-    required_auth_factor_count: 1,
     signup_qr_expiry_days: 90,
+    required_auth_factor_count: 1,
 };
-export function RegistrationMethodsManager({ onPolicyChange }) {
+export function RegistrationMethodsManager({ policy: authPolicy, error = '', onPolicyChange, }) {
     const { t } = useTranslation();
-    const [policy, setPolicy] = useState(EMPTY_POLICY);
-    const [domainsText, setDomainsText] = useState('');
-    const [signupQrExpiryDays, setSignupQrExpiryDays] = useState(String(EMPTY_POLICY.signup_qr_expiry_days));
-    const [busy, setBusy] = useState(false);
+    const [policyState, setPolicyState] = useState(EMPTY_POLICY);
     const [busyField, setBusyField] = useState('');
-    const [error, setError] = useState('');
+    const [saveError, setSaveError] = useState('');
     const [success, setSuccess] = useState('');
     useEffect(() => {
-        let active = true;
-        (async () => {
-            try {
-                const data = await fetchAuthPolicy();
-                if (!active)
-                    return;
-                setPolicy((prev) => (Object.assign(Object.assign({}, prev), data)));
-                setDomainsText(((data === null || data === void 0 ? void 0 : data.allowed_email_domains) || []).join('\n'));
-                setSignupQrExpiryDays(String((data === null || data === void 0 ? void 0 : data.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
-                if (onPolicyChange)
-                    onPolicyChange(data);
-            }
-            catch (err) {
-                if (active) {
-                    setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_FETCH_FAILED', 'Could not load authentication policy.'));
-                }
-            }
-        })();
-        return () => {
-            active = false;
-        };
-    }, [onPolicyChange, t]);
+        if (!authPolicy) {
+            return;
+        }
+        setPolicyState(Object.assign(Object.assign({}, EMPTY_POLICY), authPolicy));
+    }, [authPolicy]);
     const toggle = (field) => async (_event, checked) => {
-        const previous = policy[field];
-        setPolicy((prev) => (Object.assign(Object.assign({}, prev), { [field]: checked })));
+        const previous = policyState[field];
+        setPolicyState((prev) => (Object.assign(Object.assign({}, prev), { [field]: checked })));
         setBusyField(field);
-        setError('');
+        setSaveError('');
         setSuccess('');
         try {
             const next = await updateAuthPolicy({ [field]: checked });
-            setPolicy((prev) => (Object.assign(Object.assign({}, prev), next)));
-            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || []).join('\n'));
+            setPolicyState((prev) => (Object.assign(Object.assign({}, prev), next)));
             setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
             if (onPolicyChange)
                 onPolicyChange(next);
         }
         catch (err) {
-            setPolicy((prev) => (Object.assign(Object.assign({}, prev), { [field]: previous })));
-            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
+            setPolicyState((prev) => (Object.assign(Object.assign({}, prev), { [field]: previous })));
+            setSaveError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
         }
         finally {
             setBusyField('');
         }
     };
-    const save = async () => {
-        setBusy(true);
-        setError('');
-        setSuccess('');
-        try {
-            const allowed_email_domains = domainsText
-                .split(/\r?\n/)
-                .map((value) => value.trim())
-                .filter(Boolean);
-            const parsedExpiryDays = parseInt(signupQrExpiryDays, 10);
-            const next = await updateAuthPolicy({
-                allowed_email_domains,
-                signup_qr_expiry_days: Number.isFinite(parsedExpiryDays) && parsedExpiryDays > 0
-                    ? parsedExpiryDays
-                    : EMPTY_POLICY.signup_qr_expiry_days,
-            });
-            setPolicy((prev) => (Object.assign(Object.assign({}, prev), next)));
-            setDomainsText(((next === null || next === void 0 ? void 0 : next.allowed_email_domains) || allowed_email_domains).join('\n'));
-            setSignupQrExpiryDays(String((next === null || next === void 0 ? void 0 : next.signup_qr_expiry_days) || EMPTY_POLICY.signup_qr_expiry_days));
-            setSuccess(t('Auth.AUTH_POLICY_SAVE_SUCCESS', 'Authentication settings saved.'));
-            if (onPolicyChange)
-                onPolicyChange(next);
-        }
-        catch (err) {
-            setError(t((err === null || err === void 0 ? void 0 : err.code) || 'Auth.AUTH_POLICY_UPDATE_FAILED', 'Could not save authentication settings.'));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policy.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policy.allow_self_signup_email_domain && !(policy.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') })), _jsx(TextField, { label: t('Auth.ALLOWED_EMAIL_DOMAINS_LABEL', 'Allowed email domains'), helperText: t('Auth.ALLOWED_EMAIL_DOMAINS_HINT', 'One domain per line, e.g. example.org. You can leave this empty temporarily.'), multiline: true, minRows: 3, fullWidth: true, sx: { mt: 2 }, value: domainsText, onChange: (event) => setDomainsText(event.target.value) }), _jsx(TextField, { label: t('Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL', 'QR signup validity (days)'), helperText: t('Auth.SIGNUP_QR_EXPIRY_DAYS_HINT', 'Default validity for newly generated QR signup links.'), type: "number", fullWidth: true, sx: { mt: 2 }, value: signupQrExpiryDays, onChange: (event) => setSignupQrExpiryDays(event.target.value) }), _jsx(Button, { variant: "contained", sx: { mt: 2 }, onClick: save, disabled: busy, children: t('Common.SAVE', 'Save') })] }));
+    if (!authPolicy && !error) {
+        return (_jsx(Box, { sx: { py: 3, display: 'flex', justifyContent: 'center' }, children: _jsx(CircularProgress, { size: 28 }) }));
+    }
+    return (_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", gutterBottom: true, children: t('Auth.REGISTRATION_METHODS_TITLE', 'Registration Methods') }), _jsx(Typography, { variant: "body2", sx: { mb: 2, color: 'text.secondary' }, children: t('Auth.REGISTRATION_METHODS_HINT', 'Choose which signup and invite flows are active for this app.') }), error && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error }), saveError && _jsx(Alert, { severity: "error", sx: { mb: 2 }, children: saveError }), success && _jsx(Alert, { severity: "success", sx: { mb: 2 }, children: success }), _jsxs(Stack, { spacing: 1, children: [_jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policyState.allow_admin_invite), onChange: toggle('allow_admin_invite'), disabled: Boolean(busyField) })), label: t('Auth.ADMIN_INVITE_LABEL', 'Admin invite') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policyState.allow_self_signup_access_code), onChange: toggle('allow_self_signup_access_code'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_ACCESS_CODE_LABEL', 'Self-signup with access code') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policyState.allow_self_signup_open), onChange: toggle('allow_self_signup_open'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_OPEN_LABEL', 'Open self-signup') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policyState.allow_self_signup_email_domain), onChange: toggle('allow_self_signup_email_domain'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_EMAIL_DOMAIN_LABEL', 'Self-signup by email domain') }), _jsx(FormControlLabel, { control: (_jsx(Switch, { checked: Boolean(policyState.allow_self_signup_qr), onChange: toggle('allow_self_signup_qr'), disabled: Boolean(busyField) })), label: t('Auth.SIGNUP_QR_LABEL', 'Self-signup by QR') })] }), policyState.allow_self_signup_email_domain && !(policyState.allowed_email_domains || []).length && (_jsx(Alert, { severity: "info", sx: { mt: 2 }, children: t('Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT', 'Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.') }))] }));
 }