@progalaxyelabs/ngx-stonescriptphp-client 1.3.1 → 1.5.0

package/index.d.ts

@@ -97,6 +97,17 @@ interface AuthConfig {
      */
     csrfHeaderName?: string;
 }
+/**
+ * Authentication server configuration
+ */
+interface AuthServerConfig {
+    /** Server URL (e.g., 'https://accounts.progalaxyelabs.com') */
+    url: string;
+    /** JWKS endpoint for token validation (optional, defaults to /api/auth/jwks) */
+    jwksEndpoint?: string;
+    /** Whether this is the default server */
+    default?: boolean;
+}
 declare class MyEnvironmentModel {
     production: boolean;
     /**
@@ -105,10 +116,23 @@ declare class MyEnvironmentModel {
      */
     platformCode: string;
     /**
-     * Accounts platform URL for centralized authentication
+     * Accounts platform URL for centralized authentication (single-server mode)
      * @example 'https://accounts.progalaxyelabs.com'
+     * @deprecated Use authServers for multi-server support
      */
     accountsUrl: string;
+    /**
+     * Multiple authentication servers configuration
+     * Enables platforms to authenticate against different identity providers
+     * @example
+     * ```typescript
+     * authServers: {
+     *   customer: { url: 'https://auth.progalaxyelabs.com', default: true },
+     *   employee: { url: 'https://admin-auth.progalaxyelabs.com' }
+     * }
+     * ```
+     */
+    authServers?: Record<string, AuthServerConfig>;
     firebase: {
         projectId: string;
         appId: string;
@@ -131,6 +155,24 @@ declare class MyEnvironmentModel {
      * @default { mode: 'cookie', refreshEndpoint: '/auth/refresh', useCsrf: true }
      */
     auth?: AuthConfig;
+    /**
+     * Branding configuration for auth components
+     * Allows platforms to customize login/register pages without creating wrappers
+     */
+    branding?: {
+        /** Application name displayed on auth pages */
+        appName: string;
+        /** URL to logo image */
+        logo?: string;
+        /** Primary brand color (hex) */
+        primaryColor?: string;
+        /** Gradient start color (hex) */
+        gradientStart?: string;
+        /** Gradient end color (hex) */
+        gradientEnd?: string;
+        /** Subtitle text displayed on auth pages */
+        subtitle?: string;
+    };
 }
 
 /**
@@ -199,13 +241,14 @@ declare class ApiConnectionService {
     static ɵprov: i0.ɵɵInjectableDeclaration<ApiConnectionService>;
 }
 
-type AuthProvider = 'google' | 'linkedin' | 'apple' | 'microsoft' | 'github' | 'emailPassword';
+type AuthProvider = 'google' | 'linkedin' | 'apple' | 'microsoft' | 'github' | 'zoho' | 'emailPassword';
 interface User {
-    user_id: number;
+    user_id?: number;
+    id?: string;
     email: string;
-    display_name: string;
+    display_name?: string;
     photo_url?: string;
-    is_email_verified: boolean;
+    is_email_verified?: boolean;
 }
 interface AuthResult {
     success: boolean;
@@ -217,9 +260,59 @@ declare class AuthService {
     private signinStatus;
     private environment;
     private readonly USER_STORAGE_KEY;
+    private readonly ACTIVE_AUTH_SERVER_KEY;
     private userSubject;
     user$: Observable<User | null>;
+    private activeAuthServer;
     constructor(tokens: TokenService, signinStatus: SigninStatusService, environment: MyEnvironmentModel);
+    /**
+     * Get the current accounts URL based on configuration
+     * Supports both single-server (accountsUrl) and multi-server (authServers) modes
+     * @param serverName - Optional server name for multi-server mode
+     */
+    private getAccountsUrl;
+    /**
+     * Get the default auth server name
+     */
+    private getDefaultAuthServer;
+    /**
+     * Restore active auth server from localStorage
+     */
+    private restoreActiveAuthServer;
+    /**
+     * Save active auth server to localStorage
+     */
+    private saveActiveAuthServer;
+    /**
+     * Get available auth servers
+     * @returns Array of server names or empty array if using single-server mode
+     */
+    getAvailableAuthServers(): string[];
+    /**
+     * Get current active auth server name
+     * @returns Server name or null if using single-server mode
+     */
+    getActiveAuthServer(): string | null;
+    /**
+     * Switch to a different auth server
+     * @param serverName - Name of the server to switch to
+     * @throws Error if server not found in configuration
+     */
+    switchAuthServer(serverName: string): void;
+    /**
+     * Get auth server configuration
+     * @param serverName - Optional server name (uses active server if not specified)
+     */
+    getAuthServerConfig(serverName?: string): AuthServerConfig | null;
+    /**
+     * Check if multi-server mode is enabled
+     */
+    isMultiServerMode(): boolean;
+    /**
+     * Hash UUID to numeric ID for backward compatibility
+     * Converts UUID string to a consistent numeric ID for legacy code
+     */
+    private hashUUID;
     /**
      * Restore user from localStorage
      */
@@ -234,50 +327,72 @@ declare class AuthService {
     private updateUser;
     /**
      * Login with email and password
+     * @param email - User email
+     * @param password - User password
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithEmail(email: string, password: string): Promise<AuthResult>;
+    loginWithEmail(email: string, password: string, serverName?: string): Promise<AuthResult>;
     /**
      * Login with Google OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithGoogle(): Promise<AuthResult>;
+    loginWithGoogle(serverName?: string): Promise<AuthResult>;
     /**
      * Login with GitHub OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithGitHub(): Promise<AuthResult>;
+    loginWithGitHub(serverName?: string): Promise<AuthResult>;
     /**
      * Login with LinkedIn OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithLinkedIn(): Promise<AuthResult>;
+    loginWithLinkedIn(serverName?: string): Promise<AuthResult>;
     /**
      * Login with Apple OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithApple(): Promise<AuthResult>;
+    loginWithApple(serverName?: string): Promise<AuthResult>;
     /**
      * Login with Microsoft OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithMicrosoft(): Promise<AuthResult>;
+    loginWithMicrosoft(serverName?: string): Promise<AuthResult>;
+    /**
+     * Login with Zoho OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
+     */
+    loginWithZoho(serverName?: string): Promise<AuthResult>;
     /**
      * Generic provider-based login (supports all OAuth providers)
      * @param provider - The provider identifier
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    loginWithProvider(provider: AuthProvider): Promise<AuthResult>;
+    loginWithProvider(provider: AuthProvider, serverName?: string): Promise<AuthResult>;
     /**
      * Generic OAuth login handler
      * Opens popup window and listens for postMessage
+     * @param provider - OAuth provider name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
     private loginWithOAuth;
     /**
      * Register new user
+     * @param email - User email
+     * @param password - User password
+     * @param displayName - Display name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    register(email: string, password: string, displayName: string): Promise<AuthResult>;
+    register(email: string, password: string, displayName: string, serverName?: string): Promise<AuthResult>;
     /**
      * Sign out user
+     * @param serverName - Optional: Specify which auth server to logout from (for multi-server mode)
      */
-    signout(): Promise<void>;
+    signout(serverName?: string): Promise<void>;
     /**
      * Check for active session (call on app init)
+     * @param serverName - Optional: Specify which auth server to check (for multi-server mode)
      */
-    checkSession(): Promise<boolean>;
+    checkSession(serverName?: string): Promise<boolean>;
     /**
      * Check if user is authenticated
      */
@@ -319,8 +434,9 @@ declare class AuthService {
     private registerTenantWithOAuth;
     /**
      * Get all tenant memberships for the authenticated user
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    getTenantMemberships(): Promise<{
+    getTenantMemberships(serverName?: string): Promise<{
         memberships: Array<{
             tenant_id: string;
             slug: string;
@@ -333,16 +449,20 @@ declare class AuthService {
     /**
      * Select a tenant for the current session
      * Updates the JWT token with tenant context
+     * @param tenantId - Tenant ID to select
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    selectTenant(tenantId: string): Promise<{
+    selectTenant(tenantId: string, serverName?: string): Promise<{
         success: boolean;
         message?: string;
         access_token?: string;
     }>;
     /**
      * Check if a tenant slug is available
+     * @param slug - Tenant slug to check
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    checkTenantSlugAvailable(slug: string): Promise<{
+    checkTenantSlugAvailable(slug: string, serverName?: string): Promise<{
         available: boolean;
         suggestion?: string;
     }>;
@@ -389,11 +509,13 @@ declare class AuthService {
     /**
      * @deprecated Check if user exists by calling /api/auth/check-email endpoint
      */
-    getUserProfile(email: string): Promise<User | null>;
+    getUserProfile(email: string, serverName?: string): Promise<User | null>;
     /**
      * Check if user has completed onboarding (has a tenant)
+     * @param identityId - User identity ID
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    checkOnboardingStatus(identityId: string): Promise<{
+    checkOnboardingStatus(identityId: string, serverName?: string): Promise<{
         onboarded: boolean;
         tenant_slug?: string;
         tenant_name?: string;
@@ -401,8 +523,11 @@ declare class AuthService {
     }>;
     /**
      * Complete tenant onboarding (create tenant with country + org name)
+     * @param countryCode - Country code
+     * @param tenantName - Tenant organization name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    completeTenantOnboarding(countryCode: string, tenantName: string): Promise<{
+    completeTenantOnboarding(countryCode: string, tenantName: string, serverName?: string): Promise<{
         tenant: {
             id: string;
             slug: string;
@@ -428,46 +553,6 @@ declare class NgxStoneScriptPhpClientModule {
     static ɵinj: i0.ɵɵInjectorDeclaration<NgxStoneScriptPhpClientModule>;
 }
 
-declare class LoginDialogComponent implements OnInit {
-    private auth;
-    /**
-     * REQUIRED: Which authentication providers to show in this dialog
-     * @example ['google', 'linkedin', 'emailPassword']
-     */
-    providers: AuthProvider[];
-    email: string;
-    password: string;
-    error: string;
-    loading: boolean;
-    oauthProviders: AuthProvider[];
-    constructor(auth: AuthService);
-    ngOnInit(): void;
-    isProviderEnabled(provider: AuthProvider): boolean;
-    getProviderLabel(provider: AuthProvider): string;
-    getProviderIcon(provider: AuthProvider): string | undefined;
-    onEmailLogin(): Promise<void>;
-    onOAuthLogin(provider: AuthProvider): Promise<void>;
-    onRegisterClick(event: Event): void;
-    static ɵfac: i0.ɵɵFactoryDeclaration<LoginDialogComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<LoginDialogComponent, "lib-login-dialog", never, { "providers": { "alias": "providers"; "required": false; }; }, {}, never, never, true, never>;
-}
-
-declare class RegisterComponent {
-    private auth;
-    displayName: string;
-    email: string;
-    password: string;
-    confirmPassword: string;
-    error: string;
-    success: string;
-    loading: boolean;
-    constructor(auth: AuthService);
-    onRegister(): Promise<void>;
-    onLoginClick(event: Event): void;
-    static ɵfac: i0.ɵɵFactoryDeclaration<RegisterComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<RegisterComponent, "lib-register", never, {}, {}, never, never, true, never>;
-}
-
 interface TenantMembership {
     tenant_id: string;
     slug: string;
@@ -487,6 +572,7 @@ declare class TenantLoginComponent implements OnInit {
     providers: AuthProvider[];
     showTenantSelector: boolean;
     autoSelectSingleTenant: boolean;
+    prefillEmail?: string;
     allowTenantCreation: boolean;
     tenantSelectorTitle: string;
     tenantSelectorDescription: string;
@@ -501,6 +587,7 @@ declare class TenantLoginComponent implements OnInit {
     password: string;
     error: string;
     loading: boolean;
+    showPassword: boolean;
     useOAuth: boolean;
     oauthProviders: AuthProvider[];
     showingTenantSelector: boolean;
@@ -523,7 +610,78 @@ declare class TenantLoginComponent implements OnInit {
     formatLastAccessed(dateStr: string): string;
     onCreateTenantClick(event: Event): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<TenantLoginComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<TenantLoginComponent, "lib-tenant-login", never, { "title": { "alias": "title"; "required": false; }; "providers": { "alias": "providers"; "required": false; }; "showTenantSelector": { "alias": "showTenantSelector"; "required": false; }; "autoSelectSingleTenant": { "alias": "autoSelectSingleTenant"; "required": false; }; "allowTenantCreation": { "alias": "allowTenantCreation"; "required": false; }; "tenantSelectorTitle": { "alias": "tenantSelectorTitle"; "required": false; }; "tenantSelectorDescription": { "alias": "tenantSelectorDescription"; "required": false; }; "continueButtonText": { "alias": "continueButtonText"; "required": false; }; "registerLinkText": { "alias": "registerLinkText"; "required": false; }; "registerLinkAction": { "alias": "registerLinkAction"; "required": false; }; "createTenantLinkText": { "alias": "createTenantLinkText"; "required": false; }; "createTenantLinkAction": { "alias": "createTenantLinkAction"; "required": false; }; }, { "tenantSelected": "tenantSelected"; "createTenant": "createTenant"; }, never, never, true, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<TenantLoginComponent, "lib-tenant-login", never, { "title": { "alias": "title"; "required": false; }; "providers": { "alias": "providers"; "required": false; }; "showTenantSelector": { "alias": "showTenantSelector"; "required": false; }; "autoSelectSingleTenant": { "alias": "autoSelectSingleTenant"; "required": false; }; "prefillEmail": { "alias": "prefillEmail"; "required": false; }; "allowTenantCreation": { "alias": "allowTenantCreation"; "required": false; }; "tenantSelectorTitle": { "alias": "tenantSelectorTitle"; "required": false; }; "tenantSelectorDescription": { "alias": "tenantSelectorDescription"; "required": false; }; "continueButtonText": { "alias": "continueButtonText"; "required": false; }; "registerLinkText": { "alias": "registerLinkText"; "required": false; }; "registerLinkAction": { "alias": "registerLinkAction"; "required": false; }; "createTenantLinkText": { "alias": "createTenantLinkText"; "required": false; }; "createTenantLinkAction": { "alias": "createTenantLinkAction"; "required": false; }; }, { "tenantSelected": "tenantSelected"; "createTenant": "createTenant"; }, never, never, true, never>;
+}
+
+declare class AuthPageComponent implements OnInit {
+    private environment;
+    providers: AuthProvider[];
+    authenticated: EventEmitter<TenantSelectedEvent>;
+    mode: 'login' | 'register';
+    appName: string;
+    logo?: string;
+    subtitle?: string;
+    gradientStyle: string;
+    constructor(environment: MyEnvironmentModel);
+    ngOnInit(): void;
+    onAuthenticated(event: TenantSelectedEvent): void;
+    /**
+     * Adjust color brightness (simple implementation)
+     * @param color Hex color (e.g., '#667eea')
+     * @param percent Percentage to darken (negative) or lighten (positive)
+     */
+    private adjustColor;
+    static ɵfac: i0.ɵɵFactoryDeclaration<AuthPageComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<AuthPageComponent, "lib-auth-page", never, { "providers": { "alias": "providers"; "required": false; }; }, { "authenticated": "authenticated"; }, never, never, true, never>;
+}
+
+declare class LoginDialogComponent implements OnInit {
+    private auth;
+    /**
+     * REQUIRED: Which authentication providers to show in this dialog
+     * @example ['google', 'linkedin', 'emailPassword']
+     */
+    providers: AuthProvider[];
+    email: string;
+    password: string;
+    error: string;
+    loading: boolean;
+    showPassword: boolean;
+    oauthProviders: AuthProvider[];
+    constructor(auth: AuthService);
+    ngOnInit(): void;
+    isProviderEnabled(provider: AuthProvider): boolean;
+    getProviderLabel(provider: AuthProvider): string;
+    getProviderIcon(provider: AuthProvider): string | undefined;
+    onEmailLogin(): Promise<void>;
+    onOAuthLogin(provider: AuthProvider): Promise<void>;
+    onRegisterClick(event: Event): void;
+    static ɵfac: i0.ɵɵFactoryDeclaration<LoginDialogComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<LoginDialogComponent, "lib-login-dialog", never, { "providers": { "alias": "providers"; "required": false; }; }, {}, never, never, true, never>;
+}
+
+declare class RegisterComponent {
+    private auth;
+    private environment;
+    navigateToLogin: EventEmitter<string>;
+    displayName: string;
+    email: string;
+    password: string;
+    confirmPassword: string;
+    error: string;
+    success: string;
+    loading: boolean;
+    showAccountLinkPrompt: boolean;
+    existingEmail: string;
+    showPassword: boolean;
+    showConfirmPassword: boolean;
+    constructor(auth: AuthService, environment: MyEnvironmentModel);
+    onRegister(): Promise<void>;
+    onLoginClick(event: Event): void;
+    linkExistingAccount(): void;
+    cancelLinking(): void;
+    static ɵfac: i0.ɵɵFactoryDeclaration<RegisterComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<RegisterComponent, "lib-register", never, {}, { "navigateToLogin": "navigateToLogin"; }, never, never, true, never>;
 }
 
 interface TenantCreatedEvent {
@@ -574,6 +732,8 @@ declare class TenantRegisterComponent implements OnInit {
     slugError: string;
     useEmailPassword: boolean;
     oauthProviders: AuthProvider[];
+    showPassword: boolean;
+    showConfirmPassword: boolean;
     constructor(auth: AuthService);
     ngOnInit(): void;
     isProviderEnabled(provider: AuthProvider): boolean;
@@ -666,5 +826,5 @@ declare class TenantRegisterDialogComponent {
     static ɵcmp: i0.ɵɵComponentDeclaration<TenantRegisterDialogComponent, "lib-tenant-register-dialog", never, {}, {}, never, never, true, never>;
 }
 
-export { ApiConnectionService, ApiResponse, AuthService, CsrfService, DbService, LoginDialogComponent, MyEnvironmentModel, NgxStoneScriptPhpClientModule, RegisterComponent, SigninStatusService, TenantLoginComponent, TenantLoginDialogComponent, TenantRegisterComponent, TenantRegisterDialogComponent, TokenService, VerifyStatus };
-export type { AuthConfig, AuthMode, AuthProvider, AuthResult, TenantCreatedEvent, TenantMembership, TenantSelectedEvent, User };
+export { ApiConnectionService, ApiResponse, AuthPageComponent, AuthService, CsrfService, DbService, LoginDialogComponent, MyEnvironmentModel, NgxStoneScriptPhpClientModule, RegisterComponent, SigninStatusService, TenantLoginComponent, TenantLoginDialogComponent, TenantRegisterComponent, TenantRegisterDialogComponent, TokenService, VerifyStatus };
+export type { AuthConfig, AuthMode, AuthProvider, AuthResult, AuthServerConfig, TenantCreatedEvent, TenantMembership, TenantSelectedEvent, User };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@progalaxyelabs/ngx-stonescriptphp-client",
-  "version": "1.3.1",
+  "version": "1.5.0",
   "description": "Angular client library for StoneScriptPHP backend framework",
   "keywords": [
     "angular",