@micha.bigler/ui-core-micha 2.2.3 → 2.2.5

package/src/i18n/authTranslations.ts

@@ -497,6 +497,12 @@ export const authTranslations = {
     "en": "Add code manually",
     "sw": "Ongeza msimbo mwenyewe"
   },
+  "Auth.ACCESS_CODE_MANAGER_TITLE": {
+    "de": "Zugangscodes",
+    "fr": "Codes d'accès",
+    "en": "Access Codes",
+    "sw": "Misimbo ya ufikiaji"
+  },
   "Auth.ACCESS_CODE_LABEL": {
     "de": "Zugangscode",
     "fr": "Code d'accès",
@@ -509,6 +515,24 @@ export const authTranslations = {
     "en": "Add",
     "sw": "Ongeza"
   },
+  "Auth.ACCESS_CODE_COPY_BUTTON": {
+    "de": "Kopieren",
+    "fr": "Copier",
+    "en": "Copy",
+    "sw": "Nakili"
+  },
+  "Auth.ACCESS_CODE_COPY_SUCCESS": {
+    "de": "Code kopiert.",
+    "fr": "Code copié.",
+    "en": "Code copied.",
+    "sw": "Msimbo umenakiliwa."
+  },
+  "Auth.ACCESS_CODE_COPY_FALLBACK": {
+    "de": "Code markieren und mit Strg+C kopieren.",
+    "fr": "Sélectionnez le code et copiez-le avec Ctrl+C.",
+    "en": "Select the code and copy it with Ctrl+C.",
+    "sw": "Chagua msimbo na unakili kwa Ctrl+C."
+  },
   "Auth.ACCESS_CODE_LIST_FAILED": {
     "de": "Zugangscodes konnten nicht geladen werden.",
     "fr": "Impossible de charger les codes d'accès.",
@@ -1295,6 +1319,216 @@ export const authTranslations = {
     "en": "Expired",
     "sw": "Muda umekwisha"
   },
+  "Auth.AUTH_POLICY_FETCH_FAILED": {
+    "de": "Die Authentifizierungsrichtlinie konnte nicht geladen werden.",
+    "fr": "Impossible de charger la politique d'authentification.",
+    "en": "Could not load authentication policy.",
+    "sw": "Haikuweza kupakia sera ya uthibitishaji."
+  },
+  "Auth.AUTH_POLICY_UPDATE_FAILED": {
+    "de": "Die Authentifizierungseinstellungen konnten nicht gespeichert werden.",
+    "fr": "Impossible d'enregistrer les paramètres d'authentification.",
+    "en": "Could not save authentication settings.",
+    "sw": "Haikuweza kuhifadhi mipangilio ya uthibitishaji."
+  },
+  "Auth.AUTH_POLICY_SAVE_SUCCESS": {
+    "de": "Die Authentifizierungseinstellungen wurden gespeichert.",
+    "fr": "Les paramètres d'authentification ont été enregistrés.",
+    "en": "Authentication settings saved.",
+    "sw": "Mipangilio ya uthibitishaji imehifadhiwa."
+  },
+  "Auth.REGISTRATION_METHODS_TITLE": {
+    "de": "Registrierungsmethoden",
+    "fr": "Méthodes d'inscription",
+    "en": "Registration Methods",
+    "sw": "Mbinu za kujisajili"
+  },
+  "Auth.REGISTRATION_METHODS_HINT": {
+    "de": "Wählen Sie aus, welche Registrierungs- und Einladungswege für diese App aktiv sind.",
+    "fr": "Choisissez quels flux d'inscription et d'invitation sont actifs pour cette application.",
+    "en": "Choose which signup and invite flows are active for this app.",
+    "sw": "Chagua njia zipi za kujisajili na za mwaliko zimewashwa kwa programu hii."
+  },
+  "Auth.ADMIN_INVITE_LABEL": {
+    "de": "Admin-Einladung",
+    "fr": "Invitation admin",
+    "en": "Admin invite",
+    "sw": "Mwaliko wa msimamizi"
+  },
+  "Auth.SIGNUP_ACCESS_CODE_LABEL": {
+    "de": "Selbstregistrierung mit Zugangscode",
+    "fr": "Auto-inscription avec code d'accès",
+    "en": "Self-signup with access code",
+    "sw": "Kujisajili mwenyewe kwa msimbo wa ufikiaji"
+  },
+  "Auth.SIGNUP_OPEN_LABEL": {
+    "de": "Offene Selbstregistrierung",
+    "fr": "Auto-inscription ouverte",
+    "en": "Open self-signup",
+    "sw": "Kujisajili mwenyewe kwa wazi"
+  },
+  "Auth.SIGNUP_EMAIL_DOMAIN_LABEL": {
+    "de": "Selbstregistrierung per E-Mail-Domain",
+    "fr": "Auto-inscription par domaine e-mail",
+    "en": "Self-signup by email domain",
+    "sw": "Kujisajili mwenyewe kwa domeni ya barua pepe"
+  },
+  "Auth.SIGNUP_QR_LABEL": {
+    "de": "Selbstregistrierung per QR",
+    "fr": "Auto-inscription par QR",
+    "en": "Self-signup by QR",
+    "sw": "Kujisajili mwenyewe kwa QR"
+  },
+  "Auth.EMAIL_DOMAIN_CURRENTLY_BLOCKED_HINT": {
+    "de": "Die Registrierung per E-Mail-Domain ist aktiviert, bleibt aber gesperrt, bis mindestens eine erlaubte Domain gespeichert ist.",
+    "fr": "L'inscription par domaine e-mail est activée, mais reste bloquée tant qu'au moins un domaine autorisé n'est pas enregistré.",
+    "en": "Email-domain signup is enabled, but it stays blocked until at least one allowed domain is saved.",
+    "sw": "Usajili wa domeni ya barua pepe umewashwa, lakini unabaki kuzuiwa hadi angalau domeni moja iliyoidhinishwa ihifadhiwe."
+  },
+  "Auth.ALLOWED_EMAIL_DOMAINS_TITLE": {
+    "de": "Erlaubte E-Mail-Domains",
+    "fr": "Domaines e-mail autorisés",
+    "en": "Allowed Email Domains",
+    "sw": "Domeni za barua pepe zinazoruhusiwa"
+  },
+  "Auth.ALLOWED_EMAIL_DOMAINS_CARD_HINT": {
+    "de": "Nur Adressen aus diesen Domains dürfen die Registrierung per E-Mail-Domain verwenden.",
+    "fr": "Seules les adresses de ces domaines peuvent utiliser l'inscription par domaine e-mail.",
+    "en": "Only addresses from these domains can use email-domain sign-up.",
+    "sw": "Ni anwani kutoka kwenye domeni hizi tu zinaweza kutumia kujisajili kwa domeni ya barua pepe."
+  },
+  "Auth.ALLOWED_EMAIL_DOMAINS_LABEL": {
+    "de": "Erlaubte E-Mail-Domains",
+    "fr": "Domaines e-mail autorisés",
+    "en": "Allowed email domains",
+    "sw": "Domeni za barua pepe zinazoruhusiwa"
+  },
+  "Auth.ALLOWED_EMAIL_DOMAINS_HINT": {
+    "de": "Eine Domain pro Zeile, z. B. example.org. Sie können das Feld vorübergehend leer lassen.",
+    "fr": "Un domaine par ligne, p. ex. example.org. Vous pouvez laisser ce champ vide temporairement.",
+    "en": "One domain per line, e.g. example.org. You can leave this empty temporarily.",
+    "sw": "Domeni moja kwa kila mstari, kwa mfano example.org. Unaweza kuiacha tupu kwa muda."
+  },
+  "Auth.SIGNUP_QR_MANAGER_TITLE": {
+    "de": "QR-Registrierung",
+    "fr": "Inscription par QR",
+    "en": "QR Signup",
+    "sw": "Usajili wa QR"
+  },
+  "Auth.SIGNUP_QR_MANAGER_HINT": {
+    "de": "Erzeugen und teilen Sie hier QR-Registrierungslinks.",
+    "fr": "Générez et partagez ici des liens d'inscription QR.",
+    "en": "Generate and share QR signup links below.",
+    "sw": "Tengeneza na ushiriki viungo vya usajili wa QR hapa chini."
+  },
+  "Auth.SIGNUP_QR_VALIDITY_TITLE": {
+    "de": "QR-Registrierung Gültigkeit",
+    "fr": "Validité de l'inscription QR",
+    "en": "QR Signup Validity",
+    "sw": "Uhalali wa usajili wa QR"
+  },
+  "Auth.SIGNUP_QR_VALIDITY_HINT": {
+    "de": "Legen Sie die Standard-Gültigkeit für neu erzeugte QR-Registrierungslinks fest.",
+    "fr": "Définissez la validité par défaut des nouveaux liens d'inscription QR générés.",
+    "en": "Set the default validity for newly generated QR signup links.",
+    "sw": "Weka muda wa kawaida wa uhalali wa viungo vipya vya usajili wa QR."
+  },
+  "Auth.SIGNUP_QR_EXPIRY_DAYS_LABEL": {
+    "de": "QR-Registrierung gültig (Tage)",
+    "fr": "Validité de l'inscription QR (jours)",
+    "en": "QR signup validity (days)",
+    "sw": "Uhalali wa usajili wa QR (siku)"
+  },
+  "Auth.SIGNUP_QR_EXPIRY_DAYS_HINT": {
+    "de": "Standard-Gültigkeit für neu erzeugte QR-Registrierungslinks.",
+    "fr": "Validité par défaut des nouveaux liens d'inscription QR générés.",
+    "en": "Default validity for newly generated QR signup links.",
+    "sw": "Muda wa kawaida wa uhalali wa viungo vipya vya usajili wa QR."
+  },
+  "Auth.SIGNUP_QR_CREATE_SUCCESS": {
+    "de": "Ein neuer QR-Registrierungslink wurde erstellt.",
+    "fr": "Un nouveau lien d'inscription QR a été créé.",
+    "en": "New QR signup link created.",
+    "sw": "Kiungo kipya cha usajili wa QR kimetengenezwa."
+  },
+  "Auth.SIGNUP_QR_CREATE_FAILED": {
+    "de": "Der QR-Registrierungslink konnte nicht erstellt werden.",
+    "fr": "Impossible de créer le lien d'inscription QR.",
+    "en": "Could not create signup QR.",
+    "sw": "Haikuweza kuunda QR ya usajili."
+  },
+  "Auth.SIGNUP_QR_ACCESS_TITLE": {
+    "de": "Registrierungszugang",
+    "fr": "Accès à l'inscription",
+    "en": "Signup Access",
+    "sw": "Ufikiaji wa usajili"
+  },
+  "Auth.SIGNUP_QR_LINK_LABEL": {
+    "de": "Registrierungslink",
+    "fr": "Lien d'inscription",
+    "en": "Signup link",
+    "sw": "Kiungo cha usajili"
+  },
+  "Auth.SIGNUP_QR_VALID_UNTIL": {
+    "de": "Gültig bis",
+    "fr": "Valable jusqu'au",
+    "en": "Valid until",
+    "sw": "Halali hadi"
+  },
+  "Auth.SIGNUP_QR_NEW_BUTTON": {
+    "de": "Neuer QR-Code",
+    "fr": "Nouveau code QR",
+    "en": "New QR-Code",
+    "sw": "Msimbo mpya wa QR"
+  },
+  "Auth.SIGNUP_QR_COPY_BUTTON": {
+    "de": "Link kopieren",
+    "fr": "Copier le lien",
+    "en": "Copy Link",
+    "sw": "Nakili kiungo"
+  },
+  "Auth.SIGNUP_QR_PDF_BUTTON": {
+    "de": "Als PDF speichern",
+    "fr": "Enregistrer en PDF",
+    "en": "Save as PDF",
+    "sw": "Hifadhi kama PDF"
+  },
+  "Auth.SIGNUP_QR_LINK_COPIED": {
+    "de": "Der Registrierungslink wurde kopiert.",
+    "fr": "Le lien d'inscription a été copié.",
+    "en": "Signup link copied.",
+    "sw": "Kiungo cha usajili kimenakiliwa."
+  },
+  "Auth.SIGNUP_QR_COPY_UNAVAILABLE": {
+    "de": "Das Kopieren des Links ist in diesem Browser nicht verfügbar.",
+    "fr": "La copie du lien n'est pas disponible dans ce navigateur.",
+    "en": "Copying the link is not available in this browser.",
+    "sw": "Kunakili kiungo hakupatikani katika kivinjari hiki."
+  },
+  "Auth.SIGNUP_QR_PDF_NOT_READY": {
+    "de": "Das QR-Bild ist noch nicht bereit. Bitte versuchen Sie es erneut.",
+    "fr": "L'image QR n'est pas encore prête. Veuillez réessayer.",
+    "en": "The QR image is not ready yet. Please try again.",
+    "sw": "Picha ya QR bado haijawa tayari. Tafadhali jaribu tena."
+  },
+  "Auth.SIGNUP_QR_PDF_BLOCKED": {
+    "de": "Popup blockiert. Bitte erlauben Sie Popups, um die QR-Karte als PDF zu speichern.",
+    "fr": "Fenêtre contextuelle bloquée. Veuillez autoriser les popups pour enregistrer la carte QR en PDF.",
+    "en": "Popup blocked. Please allow popups to save the QR card as PDF.",
+    "sw": "Dirisha ibukizi limezuiwa. Tafadhali ruhusu madirisha ibukizi ili kuhifadhi kadi ya QR kama PDF."
+  },
+  "Auth.SIGNUP_QR_PRINT_TITLE": {
+    "de": "Registrierungszugang",
+    "fr": "Accès à l'inscription",
+    "en": "Sign-Up Access",
+    "sw": "Ufikiaji wa kujisajili"
+  },
+  "Auth.SAVE_BUTTON_LOADING": {
+    "de": "Speichern…",
+    "fr": "Enregistrement…",
+    "en": "Saving…",
+    "sw": "Inahifadhi..."
+  },
   "Common.YES": {
     "de": "Ja",
     "fr": "Oui",

package/src/pages/AccountPage.jsx

@@ -1,4 +1,4 @@
-import React, { useContext, useMemo, useState } from 'react';
+import React, { useContext, useEffect, useMemo, useState } from 'react';
 import { Helmet } from 'react-helmet';
 import { useSearchParams } from 'react-router-dom';
 import { 
@@ -23,12 +23,14 @@ import { SecurityComponent } from '../components/SecurityComponent';
 import { UserListComponent } from '../components/UserListComponent';
 import { UserInviteComponent } from '../components/UserInviteComponent';
 import { AccessCodeManager } from '../components/AccessCodeManager';
+import { AllowedEmailDomainsManager } from '../components/AllowedEmailDomainsManager';
 import { RegistrationMethodsManager } from '../components/RegistrationMethodsManager';
 import { AuthFactorRequirementCard } from '../components/AuthFactorRequirementCard';
 import { QrSignupManager } from '../components/QrSignupManager';
+import { QrSignupValidityManager } from '../components/QrSignupValidityManager';
 import { SupportRecoveryRequestsTab } from '../components/SupportRecoveryRequestsTab';
 import { BulkInviteCsvTab } from '../components/BulkInviteCsvTab';
-import { updateUserProfile } from '../auth/authApi'; // Ggf. Pfad anpassen
+import { fetchAuthPolicy, updateUserProfile } from '../auth/authApi'; // Ggf. Pfad anpassen
 
 export function AccountPage({
   userListExtraColumns = [],
@@ -44,6 +46,7 @@ export function AccountPage({
   const { user, login, loading } = useContext(AuthContext);
   const [searchParams, setSearchParams] = useSearchParams();
   const [authPolicy, setAuthPolicy] = useState(null);
+  const [authPolicyError, setAuthPolicyError] = useState('');
 
   // 1. URL State Management
   const currentTabRaw = searchParams.get('tab') || 'profile';
@@ -69,6 +72,38 @@ export function AccountPage({
     login(updatedUser);
   };
 
+  useEffect(() => {
+    let active = true;
+    const canLoadPolicy = Boolean(user) && (isSuperUser || perms.can_invite || perms.can_manage_access_codes);
+
+    if (!canLoadPolicy) {
+      setAuthPolicy(null);
+      setAuthPolicyError('');
+      return undefined;
+    }
+
+    const loadPolicy = async () => {
+      try {
+        const data = await fetchAuthPolicy();
+        if (!active) return;
+        setAuthPolicy(data);
+        setAuthPolicyError('');
+      } catch (err) {
+        if (!active) return;
+        setAuthPolicy(null);
+        setAuthPolicyError(
+          t(err?.code || 'Auth.AUTH_POLICY_FETCH_FAILED', 'Could not load authentication policy.'),
+        );
+      }
+    };
+
+    loadPolicy();
+
+    return () => {
+      active = false;
+    };
+  }, [user, isSuperUser, perms.can_invite, perms.can_manage_access_codes, t]);
+
   // 3. Dynamic Tabs (angepasst für Superuser)
   const tabs = useMemo(() => {
     if (!user) return [];
@@ -194,7 +229,11 @@ export function AccountPage({
           <Stack spacing={2.5}>
             {(isSuperUser || perms.can_invite) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
-                <RegistrationMethodsManager onPolicyChange={setAuthPolicy} />
+                <RegistrationMethodsManager
+                  policy={authPolicy}
+                  error={authPolicyError}
+                  onPolicyChange={setAuthPolicy}
+                />
               </Paper>
             )}
 
@@ -204,14 +243,17 @@ export function AccountPage({
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && (
+            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_admin_invite) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <UserInviteComponent />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_manage_access_codes) && (
+            {(isSuperUser || perms.can_manage_access_codes) && Boolean(authPolicy?.allow_self_signup_access_code) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
+                <Typography variant="h6" gutterBottom>
+                  {t('Auth.ACCESS_CODE_MANAGER_TITLE', 'Access Codes')}
+                </Typography>
                 <Typography variant="body2" sx={{ mb: 2, color: 'text.secondary' }}>
                   {t('Account.ACCESS_CODES_HINT', 'Manage access codes for self-registration.')}
                 </Typography>
@@ -219,15 +261,38 @@ export function AccountPage({
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && showBulkInviteCsvTab && (
+            {(isSuperUser || perms.can_invite) && showBulkInviteCsvTab && Boolean(authPolicy?.allow_admin_invite) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <BulkInviteCsvTab {...bulkInviteCsvProps} />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && (
+            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_email_domain) && (
+              <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
+                <AllowedEmailDomainsManager
+                  enabled={Boolean(authPolicy?.allow_self_signup_email_domain)}
+                  domains={authPolicy?.allowed_email_domains || []}
+                  onPolicyChange={setAuthPolicy}
+                />
+              </Paper>
+            )}
+
+            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_qr) && (
+              <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
+                <QrSignupValidityManager
+                  enabled={Boolean(authPolicy?.allow_self_signup_qr)}
+                  expiryDays={authPolicy?.signup_qr_expiry_days}
+                  onPolicyChange={setAuthPolicy}
+                />
+              </Paper>
+            )}
+
+            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_qr) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
-                <QrSignupManager enabled={Boolean(authPolicy?.allow_self_signup_qr)} />
+                <QrSignupManager
+                  enabled={Boolean(authPolicy?.allow_self_signup_qr)}
+                  expiryDays={authPolicy?.signup_qr_expiry_days}
+                />
               </Paper>
             )}
           </Stack>