@progalaxyelabs/ngx-stonescriptphp-client 1.4.0 → 1.5.0

package/fesm2022/progalaxyelabs-ngx-stonescriptphp-client.mjs

@@ -166,10 +166,23 @@ class MyEnvironmentModel {
      */
     platformCode = '';
     /**
-     * Accounts platform URL for centralized authentication
+     * Accounts platform URL for centralized authentication (single-server mode)
      * @example 'https://accounts.progalaxyelabs.com'
+     * @deprecated Use authServers for multi-server support
      */
     accountsUrl = '';
+    /**
+     * Multiple authentication servers configuration
+     * Enables platforms to authenticate against different identity providers
+     * @example
+     * ```typescript
+     * authServers: {
+     *   customer: { url: 'https://auth.progalaxyelabs.com', default: true },
+     *   employee: { url: 'https://admin-auth.progalaxyelabs.com' }
+     * }
+     * ```
+     */
+    authServers;
     firebase = {
         projectId: '',
         appId: '',
@@ -583,15 +596,157 @@ class AuthService {
     signinStatus;
     environment;
     USER_STORAGE_KEY = 'progalaxyapi_user';
+    ACTIVE_AUTH_SERVER_KEY = 'progalaxyapi_active_auth_server';
     // Observable user state
     userSubject = new BehaviorSubject(null);
     user$ = this.userSubject.asObservable();
+    // Current active auth server name (for multi-server mode)
+    activeAuthServer = null;
     constructor(tokens, signinStatus, environment) {
         this.tokens = tokens;
         this.signinStatus = signinStatus;
         this.environment = environment;
         // Restore user from localStorage on initialization
         this.restoreUser();
+        // Restore active auth server
+        this.restoreActiveAuthServer();
+    }
+    // ===== Multi-Server Support Methods =====
+    /**
+     * Get the current accounts URL based on configuration
+     * Supports both single-server (accountsUrl) and multi-server (authServers) modes
+     * @param serverName - Optional server name for multi-server mode
+     */
+    getAccountsUrl(serverName) {
+        // Multi-server mode
+        if (this.environment.authServers && Object.keys(this.environment.authServers).length > 0) {
+            const targetServer = serverName || this.activeAuthServer || this.getDefaultAuthServer();
+            if (!targetServer) {
+                throw new Error('No auth server specified and no default server configured');
+            }
+            const serverConfig = this.environment.authServers[targetServer];
+            if (!serverConfig) {
+                throw new Error(`Auth server '${targetServer}' not found in configuration`);
+            }
+            return serverConfig.url;
+        }
+        // Single-server mode (backward compatibility)
+        if (this.environment.accountsUrl) {
+            return this.environment.accountsUrl;
+        }
+        throw new Error('No authentication server configured. Set either accountsUrl or authServers in environment config.');
+    }
+    /**
+     * Get the default auth server name
+     */
+    getDefaultAuthServer() {
+        if (!this.environment.authServers) {
+            return null;
+        }
+        // Find server marked as default
+        for (const [name, config] of Object.entries(this.environment.authServers)) {
+            if (config.default) {
+                return name;
+            }
+        }
+        // If no default is marked, use the first server
+        const firstServer = Object.keys(this.environment.authServers)[0];
+        return firstServer || null;
+    }
+    /**
+     * Restore active auth server from localStorage
+     */
+    restoreActiveAuthServer() {
+        try {
+            const savedServer = localStorage.getItem(this.ACTIVE_AUTH_SERVER_KEY);
+            if (savedServer && this.environment.authServers?.[savedServer]) {
+                this.activeAuthServer = savedServer;
+            }
+            else {
+                // Set to default if saved server is invalid
+                this.activeAuthServer = this.getDefaultAuthServer();
+            }
+        }
+        catch (error) {
+            console.error('Failed to restore active auth server:', error);
+            this.activeAuthServer = this.getDefaultAuthServer();
+        }
+    }
+    /**
+     * Save active auth server to localStorage
+     */
+    saveActiveAuthServer(serverName) {
+        try {
+            localStorage.setItem(this.ACTIVE_AUTH_SERVER_KEY, serverName);
+            this.activeAuthServer = serverName;
+        }
+        catch (error) {
+            console.error('Failed to save active auth server:', error);
+        }
+    }
+    /**
+     * Get available auth servers
+     * @returns Array of server names or empty array if using single-server mode
+     */
+    getAvailableAuthServers() {
+        if (!this.environment.authServers) {
+            return [];
+        }
+        return Object.keys(this.environment.authServers);
+    }
+    /**
+     * Get current active auth server name
+     * @returns Server name or null if using single-server mode
+     */
+    getActiveAuthServer() {
+        return this.activeAuthServer;
+    }
+    /**
+     * Switch to a different auth server
+     * @param serverName - Name of the server to switch to
+     * @throws Error if server not found in configuration
+     */
+    switchAuthServer(serverName) {
+        if (!this.environment.authServers) {
+            throw new Error('Multi-server mode not configured. Use authServers in environment config.');
+        }
+        if (!this.environment.authServers[serverName]) {
+            throw new Error(`Auth server '${serverName}' not found in configuration`);
+        }
+        this.saveActiveAuthServer(serverName);
+    }
+    /**
+     * Get auth server configuration
+     * @param serverName - Optional server name (uses active server if not specified)
+     */
+    getAuthServerConfig(serverName) {
+        if (!this.environment.authServers) {
+            return null;
+        }
+        const targetServer = serverName || this.activeAuthServer || this.getDefaultAuthServer();
+        if (!targetServer) {
+            return null;
+        }
+        return this.environment.authServers[targetServer] || null;
+    }
+    /**
+     * Check if multi-server mode is enabled
+     */
+    isMultiServerMode() {
+        return !!(this.environment.authServers && Object.keys(this.environment.authServers).length > 0);
+    }
+    /**
+     * Hash UUID to numeric ID for backward compatibility
+     * Converts UUID string to a consistent numeric ID for legacy code
+     */
+    hashUUID(uuid) {
+        let hash = 0;
+        for (let i = 0; i < uuid.length; i++) {
+            const char = uuid.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash = hash & hash; // Convert to 32bit integer
+        }
+        return Math.abs(hash);
     }
     /**
      * Restore user from localStorage
@@ -628,15 +783,19 @@ class AuthService {
      * Update user subject and persist to localStorage
      */
     updateUser(user) {
-        this.updateUser(user);
+        this.userSubject.next(user);
         this.saveUser(user);
     }
     /**
      * Login with email and password
+     * @param email - User email
+     * @param password - User password
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithEmail(email, password) {
+    async loginWithEmail(email, password, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/login`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/login`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 credentials: 'include', // Include cookies for refresh token
@@ -650,8 +809,17 @@ class AuthService {
             if (data.success && data.access_token) {
                 this.tokens.setAccessToken(data.access_token);
                 this.signinStatus.setSigninStatus(true);
-                this.updateUser(data.user);
-                return { success: true, user: data.user };
+                // Normalize user object to handle both response formats
+                const normalizedUser = {
+                    user_id: data.user.user_id ?? (data.user.id ? this.hashUUID(data.user.id) : 0),
+                    id: data.user.id ?? String(data.user.user_id),
+                    email: data.user.email,
+                    display_name: data.user.display_name ?? data.user.email.split('@')[0],
+                    photo_url: data.user.photo_url,
+                    is_email_verified: data.user.is_email_verified ?? false
+                };
+                this.updateUser(normalizedUser);
+                return { success: true, user: normalizedUser };
             }
             return {
                 success: false,
@@ -667,55 +835,71 @@ class AuthService {
     }
     /**
      * Login with Google OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithGoogle() {
-        return this.loginWithOAuth('google');
+    async loginWithGoogle(serverName) {
+        return this.loginWithOAuth('google', serverName);
     }
     /**
      * Login with GitHub OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithGitHub() {
-        return this.loginWithOAuth('github');
+    async loginWithGitHub(serverName) {
+        return this.loginWithOAuth('github', serverName);
     }
     /**
      * Login with LinkedIn OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithLinkedIn() {
-        return this.loginWithOAuth('linkedin');
+    async loginWithLinkedIn(serverName) {
+        return this.loginWithOAuth('linkedin', serverName);
     }
     /**
      * Login with Apple OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithApple() {
-        return this.loginWithOAuth('apple');
+    async loginWithApple(serverName) {
+        return this.loginWithOAuth('apple', serverName);
     }
     /**
      * Login with Microsoft OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithMicrosoft() {
-        return this.loginWithOAuth('microsoft');
+    async loginWithMicrosoft(serverName) {
+        return this.loginWithOAuth('microsoft', serverName);
+    }
+    /**
+     * Login with Zoho OAuth (popup window)
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
+     */
+    async loginWithZoho(serverName) {
+        return this.loginWithOAuth('zoho', serverName);
     }
     /**
      * Generic provider-based login (supports all OAuth providers)
      * @param provider - The provider identifier
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithProvider(provider) {
+    async loginWithProvider(provider, serverName) {
         if (provider === 'emailPassword') {
             throw new Error('Use loginWithEmail() for email/password authentication');
         }
-        return this.loginWithOAuth(provider);
+        return this.loginWithOAuth(provider, serverName);
     }
     /**
      * Generic OAuth login handler
      * Opens popup window and listens for postMessage
+     * @param provider - OAuth provider name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async loginWithOAuth(provider) {
+    async loginWithOAuth(provider, serverName) {
         return new Promise((resolve) => {
             const width = 500;
             const height = 600;
             const left = (window.screen.width - width) / 2;
             const top = (window.screen.height - height) / 2;
-            const oauthUrl = `${this.environment.accountsUrl}/oauth/${provider}?` +
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const oauthUrl = `${accountsUrl}/oauth/${provider}?` +
                 `platform=${this.environment.platformCode}&` +
                 `mode=popup`;
             const popup = window.open(oauthUrl, `${provider}_login`, `width=${width},height=${height},left=${left},top=${top}`);
@@ -729,18 +913,27 @@ class AuthService {
             // Listen for message from popup
             const messageHandler = (event) => {
                 // Verify origin
-                if (event.origin !== new URL(this.environment.accountsUrl).origin) {
+                if (event.origin !== new URL(accountsUrl).origin) {
                     return;
                 }
                 if (event.data.type === 'oauth_success') {
                     this.tokens.setAccessToken(event.data.access_token);
                     this.signinStatus.setSigninStatus(true);
-                    this.updateUser(event.data.user);
+                    // Normalize user object to handle both response formats
+                    const normalizedUser = {
+                        user_id: event.data.user.user_id ?? (event.data.user.id ? this.hashUUID(event.data.user.id) : 0),
+                        id: event.data.user.id ?? String(event.data.user.user_id),
+                        email: event.data.user.email,
+                        display_name: event.data.user.display_name ?? event.data.user.email.split('@')[0],
+                        photo_url: event.data.user.photo_url,
+                        is_email_verified: event.data.user.is_email_verified ?? false
+                    };
+                    this.updateUser(normalizedUser);
                     window.removeEventListener('message', messageHandler);
                     popup.close();
                     resolve({
                         success: true,
-                        user: event.data.user
+                        user: normalizedUser
                     });
                 }
                 else if (event.data.type === 'oauth_error') {
@@ -768,10 +961,15 @@ class AuthService {
     }
     /**
      * Register new user
+     * @param email - User email
+     * @param password - User password
+     * @param displayName - Display name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async register(email, password, displayName) {
+    async register(email, password, displayName, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/register`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/register`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 credentials: 'include',
@@ -786,10 +984,19 @@ class AuthService {
             if (data.success && data.access_token) {
                 this.tokens.setAccessToken(data.access_token);
                 this.signinStatus.setSigninStatus(true);
-                this.updateUser(data.user);
+                // Normalize user object to handle both response formats
+                const normalizedUser = {
+                    user_id: data.user.user_id ?? (data.user.id ? this.hashUUID(data.user.id) : 0),
+                    id: data.user.id ?? String(data.user.user_id),
+                    email: data.user.email,
+                    display_name: data.user.display_name ?? data.user.email.split('@')[0],
+                    photo_url: data.user.photo_url,
+                    is_email_verified: data.user.is_email_verified ?? false
+                };
+                this.updateUser(normalizedUser);
                 return {
                     success: true,
-                    user: data.user,
+                    user: normalizedUser,
                     message: data.needs_verification ? 'Please verify your email' : undefined
                 };
             }
@@ -807,12 +1014,14 @@ class AuthService {
     }
     /**
      * Sign out user
+     * @param serverName - Optional: Specify which auth server to logout from (for multi-server mode)
      */
-    async signout() {
+    async signout(serverName) {
         try {
             const refreshToken = this.tokens.getRefreshToken();
             if (refreshToken) {
-                await fetch(`${this.environment.accountsUrl}/api/auth/logout`, {
+                const accountsUrl = this.getAccountsUrl(serverName);
+                await fetch(`${accountsUrl}/api/auth/logout`, {
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/json'
@@ -835,15 +1044,17 @@ class AuthService {
     }
     /**
      * Check for active session (call on app init)
+     * @param serverName - Optional: Specify which auth server to check (for multi-server mode)
      */
-    async checkSession() {
+    async checkSession(serverName) {
         if (this.tokens.hasValidAccessToken()) {
             this.signinStatus.setSigninStatus(true);
             return true;
         }
         // Try to refresh using httpOnly cookie
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/refresh`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/refresh`, {
                 method: 'POST',
                 credentials: 'include'
             });
@@ -854,7 +1065,18 @@ class AuthService {
             const data = await response.json();
             if (data.access_token) {
                 this.tokens.setAccessToken(data.access_token);
-                this.updateUser(data.user);
+                // Normalize user object to handle both response formats
+                if (data.user) {
+                    const normalizedUser = {
+                        user_id: data.user.user_id ?? (data.user.id ? this.hashUUID(data.user.id) : 0),
+                        id: data.user.id ?? String(data.user.user_id),
+                        email: data.user.email,
+                        display_name: data.user.display_name ?? data.user.email.split('@')[0],
+                        photo_url: data.user.photo_url,
+                        is_email_verified: data.user.is_email_verified ?? false
+                    };
+                    this.updateUser(normalizedUser);
+                }
                 this.signinStatus.setSigninStatus(true);
                 return true;
             }
@@ -889,7 +1111,8 @@ class AuthService {
                 return await this.registerTenantWithOAuth(data.tenantName, data.tenantSlug, data.provider);
             }
             // Email/password registration
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/register-tenant`, {
+            const accountsUrl = this.getAccountsUrl();
+            const response = await fetch(`${accountsUrl}/api/auth/register-tenant`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 credentials: 'include',
@@ -908,7 +1131,16 @@ class AuthService {
                 this.tokens.setAccessToken(result.access_token);
                 this.signinStatus.setSigninStatus(true);
                 if (result.user) {
-                    this.updateUser(result.user);
+                    // Normalize user object to handle both response formats
+                    const normalizedUser = {
+                        user_id: result.user.user_id ?? (result.user.id ? this.hashUUID(result.user.id) : 0),
+                        id: result.user.id ?? String(result.user.user_id),
+                        email: result.user.email,
+                        display_name: result.user.display_name ?? result.user.email.split('@')[0],
+                        photo_url: result.user.photo_url,
+                        is_email_verified: result.user.is_email_verified ?? false
+                    };
+                    this.updateUser(normalizedUser);
                 }
             }
             return result;
@@ -931,7 +1163,8 @@ class AuthService {
             const left = (window.screen.width - width) / 2;
             const top = (window.screen.height - height) / 2;
             // Build OAuth URL with tenant registration params
-            const oauthUrl = `${this.environment.accountsUrl}/oauth/${provider}?` +
+            const accountsUrl = this.getAccountsUrl();
+            const oauthUrl = `${accountsUrl}/oauth/${provider}?` +
                 `platform=${this.environment.platformCode}&` +
                 `mode=popup&` +
                 `action=register_tenant&` +
@@ -948,7 +1181,7 @@ class AuthService {
             // Listen for message from popup
             const messageHandler = (event) => {
                 // Verify origin
-                if (event.origin !== new URL(this.environment.accountsUrl).origin) {
+                if (event.origin !== new URL(accountsUrl).origin) {
                     return;
                 }
                 if (event.data.type === 'tenant_register_success') {
@@ -958,7 +1191,16 @@ class AuthService {
                         this.signinStatus.setSigninStatus(true);
                     }
                     if (event.data.user) {
-                        this.updateUser(event.data.user);
+                        // Normalize user object to handle both response formats
+                        const normalizedUser = {
+                            user_id: event.data.user.user_id ?? (event.data.user.id ? this.hashUUID(event.data.user.id) : 0),
+                            id: event.data.user.id ?? String(event.data.user.user_id),
+                            email: event.data.user.email,
+                            display_name: event.data.user.display_name ?? event.data.user.email.split('@')[0],
+                            photo_url: event.data.user.photo_url,
+                            is_email_verified: event.data.user.is_email_verified ?? false
+                        };
+                        this.updateUser(normalizedUser);
                     }
                     window.removeEventListener('message', messageHandler);
                     popup.close();
@@ -993,10 +1235,12 @@ class AuthService {
     }
     /**
      * Get all tenant memberships for the authenticated user
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    async getTenantMemberships() {
+    async getTenantMemberships(serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/memberships`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/memberships`, {
                 method: 'GET',
                 headers: {
                     'Authorization': `Bearer ${this.tokens.getAccessToken()}`,
@@ -1016,10 +1260,13 @@ class AuthService {
     /**
      * Select a tenant for the current session
      * Updates the JWT token with tenant context
+     * @param tenantId - Tenant ID to select
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async selectTenant(tenantId) {
+    async selectTenant(tenantId, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/select-tenant`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/select-tenant`, {
                 method: 'POST',
                 headers: {
                     'Authorization': `Bearer ${this.tokens.getAccessToken()}`,
@@ -1050,10 +1297,13 @@ class AuthService {
     }
     /**
      * Check if a tenant slug is available
+     * @param slug - Tenant slug to check
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    async checkTenantSlugAvailable(slug) {
+    async checkTenantSlugAvailable(slug, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/check-tenant-slug/${slug}`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/check-tenant-slug/${slug}`, {
                 method: 'GET',
                 headers: { 'Content-Type': 'application/json' }
             });
@@ -1136,9 +1386,10 @@ class AuthService {
     /**
      * @deprecated Check if user exists by calling /api/auth/check-email endpoint
      */
-    async getUserProfile(email) {
+    async getUserProfile(email, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/check-email`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/check-email`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 body: JSON.stringify({ email })
@@ -1152,10 +1403,13 @@ class AuthService {
     }
     /**
      * Check if user has completed onboarding (has a tenant)
+     * @param identityId - User identity ID
+     * @param serverName - Optional: Specify which auth server to query (for multi-server mode)
      */
-    async checkOnboardingStatus(identityId) {
+    async checkOnboardingStatus(identityId, serverName) {
         try {
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/onboarding/status?platform_code=${this.environment.platformCode}&identity_id=${identityId}`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/onboarding/status?platform_code=${this.environment.platformCode}&identity_id=${identityId}`, {
                 method: 'GET',
                 headers: { 'Content-Type': 'application/json' },
                 credentials: 'include'
@@ -1171,14 +1425,18 @@ class AuthService {
     }
     /**
      * Complete tenant onboarding (create tenant with country + org name)
+     * @param countryCode - Country code
+     * @param tenantName - Tenant organization name
+     * @param serverName - Optional: Specify which auth server to use (for multi-server mode)
      */
-    async completeTenantOnboarding(countryCode, tenantName) {
+    async completeTenantOnboarding(countryCode, tenantName, serverName) {
         try {
             const accessToken = this.tokens.getAccessToken();
             if (!accessToken) {
                 throw new Error('Not authenticated');
             }
-            const response = await fetch(`${this.environment.accountsUrl}/api/auth/register-tenant`, {
+            const accountsUrl = this.getAccountsUrl(serverName);
+            const response = await fetch(`${accountsUrl}/api/auth/register-tenant`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
@@ -1321,12 +1579,16 @@ class TenantLoginComponent {
             apple: 'Sign in with Apple',
             microsoft: 'Sign in with Microsoft',
             github: 'Sign in with GitHub',
+            zoho: 'Sign in with Zoho',
             emailPassword: 'Sign in with Email'
         };
         return labels[provider];
     }
     getProviderIcon(provider) {
-        return undefined;
+        const icons = {
+            zoho: '🔶'
+        };
+        return icons[provider];
     }
     toggleAuthMethod(event) {
         event.preventDefault();
@@ -1650,7 +1912,7 @@ class TenantLoginComponent {
                 </div>
             }
         </div>
-    `, isInline: true, styles: [".tenant-login-dialog{padding:24px;max-width:450px;position:relative}.login-title{margin:0 0 24px;font-size:24px;font-weight:500;text-align:center}.welcome-message{margin-bottom:16px;padding:12px;background:#e8f5e9;border-radius:4px;text-align:center;font-size:14px;color:#2e7d32}.selector-description{margin-bottom:20px;font-size:14px;color:#666;text-align:center}.email-form,.form-group{margin-bottom:16px}.password-group{position:relative}.form-control{width:100%;padding:12px;border:1px solid #ddd;border-radius:4px;font-size:14px;box-sizing:border-box}.password-input{padding-right:45px}.password-toggle{position:absolute;right:8px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;font-size:18px;padding:8px;line-height:1;opacity:.6;transition:opacity .2s}.password-toggle:hover{opacity:1}.password-toggle:focus{outline:2px solid #4285f4;outline-offset:2px;border-radius:4px}.form-control:focus{outline:none;border-color:#4285f4}.btn{padding:12px 24px;border:none;border-radius:4px;font-size:14px;font-weight:500;cursor:pointer;transition:background-color .2s}.btn:disabled{opacity:.6;cursor:not-allowed}.btn-block{width:100%}.btn-primary{background-color:#4285f4;color:#fff}.btn-primary:hover:not(:disabled){background-color:#357ae8}.divider{margin:16px 0;text-align:center;position:relative}.divider:before{content:\"\";position:absolute;top:50%;left:0;right:0;height:1px;background:#ddd}.divider span{background:#fff;padding:0 12px;position:relative;color:#666;font-size:12px}.oauth-buttons{display:flex;flex-direction:column;gap:12px}.btn-oauth{width:100%;background:#fff;color:#333;border:1px solid #ddd;display:flex;align-items:center;justify-content:center;gap:8px}.btn-oauth:hover:not(:disabled){background:#f8f8f8}.btn-google{border-color:#4285f4}.btn-linkedin{border-color:#0077b5}.btn-apple{border-color:#000}.btn-microsoft{border-color:#00a4ef}.btn-github{border-color:#333}.oauth-icon{font-size:18px}.switch-method{margin-top:12px;text-align:center;font-size:14px}.switch-method a{color:#4285f4;text-decoration:none}.switch-method a:hover{text-decoration:underline}.tenant-list{margin-bottom:20px;display:flex;flex-direction:column;gap:12px}.tenant-item{display:flex;align-items:flex-start;gap:12px;padding:16px;border:2px solid #e0e0e0;border-radius:6px;cursor:pointer;transition:all .2s}.tenant-item:hover{border-color:#4285f4;background:#f8f9ff}.tenant-item.selected{border-color:#4285f4;background:#e8f0fe}.tenant-radio{flex-shrink:0;padding-top:2px}.tenant-radio input[type=radio]{width:18px;height:18px;cursor:pointer}.tenant-info{flex:1}.tenant-name{font-size:16px;font-weight:500;color:#333;margin-bottom:4px}.tenant-meta{font-size:13px;color:#666}.tenant-role{font-weight:500;color:#4285f4}.tenant-separator{margin:0 6px}.error-message{margin-top:16px;padding:12px;background:#fee;color:#c33;border-radius:4px;font-size:14px}.loading-overlay{position:absolute;inset:0;background:#fffc;display:flex;align-items:center;justify-content:center}.spinner{width:40px;height:40px;border:4px solid #f3f3f3;border-top:4px solid #4285f4;border-radius:50%;animation:spin 1s linear infinite}@keyframes spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.register-link{margin-top:16px;text-align:center;font-size:14px;color:#666}.register-link a{color:#4285f4;text-decoration:none}.register-link a:hover{text-decoration:underline}.create-tenant-link{margin-top:16px;padding-top:16px;border-top:1px solid #e0e0e0;text-align:center;font-size:14px;color:#666}.create-tenant-link a{color:#4285f4;text-decoration:none;font-weight:500}.create-tenant-link a:hover{text-decoration:underline}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i2.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i2.DefaultValueAccessor, selector: "input:not([type=checkbox])[formControlName],textarea[formControlName],input:not([type=checkbox])[formControl],textarea[formControl],input:not([type=checkbox])[ngModel],textarea[ngModel],[ngDefaultControl]" }, { kind: "directive", type: i2.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i2.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i2.RequiredValidator, selector: ":not([type=checkbox])[required][formControlName],:not([type=checkbox])[required][formControl],:not([type=checkbox])[required][ngModel]", inputs: ["required"] }, { kind: "directive", type: i2.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "directive", type: i2.NgForm, selector: "form:not([ngNoForm]):not([formGroup]),ng-form,[ngForm]", inputs: ["ngFormOptions"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }] });
+    `, isInline: true, styles: [".tenant-login-dialog{padding:24px;max-width:450px;position:relative}.login-title{margin:0 0 24px;font-size:24px;font-weight:500;text-align:center}.welcome-message{margin-bottom:16px;padding:12px;background:#e8f5e9;border-radius:4px;text-align:center;font-size:14px;color:#2e7d32}.selector-description{margin-bottom:20px;font-size:14px;color:#666;text-align:center}.email-form,.form-group{margin-bottom:16px}.password-group{position:relative}.form-control{width:100%;padding:12px;border:1px solid #ddd;border-radius:4px;font-size:14px;box-sizing:border-box}.password-input{padding-right:45px}.password-toggle{position:absolute;right:8px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;font-size:18px;padding:8px;line-height:1;opacity:.6;transition:opacity .2s}.password-toggle:hover{opacity:1}.password-toggle:focus{outline:2px solid #4285f4;outline-offset:2px;border-radius:4px}.form-control:focus{outline:none;border-color:#4285f4}.btn{padding:12px 24px;border:none;border-radius:4px;font-size:14px;font-weight:500;cursor:pointer;transition:background-color .2s}.btn:disabled{opacity:.6;cursor:not-allowed}.btn-block{width:100%}.btn-primary{background-color:#4285f4;color:#fff}.btn-primary:hover:not(:disabled){background-color:#357ae8}.divider{margin:16px 0;text-align:center;position:relative}.divider:before{content:\"\";position:absolute;top:50%;left:0;right:0;height:1px;background:#ddd}.divider span{background:#fff;padding:0 12px;position:relative;color:#666;font-size:12px}.oauth-buttons{display:flex;flex-direction:column;gap:12px}.btn-oauth{width:100%;background:#fff;color:#333;border:1px solid #ddd;display:flex;align-items:center;justify-content:center;gap:8px}.btn-oauth:hover:not(:disabled){background:#f8f8f8}.btn-google{border-color:#4285f4}.btn-linkedin{border-color:#0077b5}.btn-apple{border-color:#000}.btn-microsoft{border-color:#00a4ef}.btn-github{border-color:#333}.btn-zoho{background-color:#f0483e;color:#fff;border:1px solid #d63b32}.btn-zoho:hover{background-color:#d63b32}.oauth-icon{font-size:18px}.switch-method{margin-top:12px;text-align:center;font-size:14px}.switch-method a{color:#4285f4;text-decoration:none}.switch-method a:hover{text-decoration:underline}.tenant-list{margin-bottom:20px;display:flex;flex-direction:column;gap:12px}.tenant-item{display:flex;align-items:flex-start;gap:12px;padding:16px;border:2px solid #e0e0e0;border-radius:6px;cursor:pointer;transition:all .2s}.tenant-item:hover{border-color:#4285f4;background:#f8f9ff}.tenant-item.selected{border-color:#4285f4;background:#e8f0fe}.tenant-radio{flex-shrink:0;padding-top:2px}.tenant-radio input[type=radio]{width:18px;height:18px;cursor:pointer}.tenant-info{flex:1}.tenant-name{font-size:16px;font-weight:500;color:#333;margin-bottom:4px}.tenant-meta{font-size:13px;color:#666}.tenant-role{font-weight:500;color:#4285f4}.tenant-separator{margin:0 6px}.error-message{margin-top:16px;padding:12px;background:#fee;color:#c33;border-radius:4px;font-size:14px}.loading-overlay{position:absolute;inset:0;background:#fffc;display:flex;align-items:center;justify-content:center}.spinner{width:40px;height:40px;border:4px solid #f3f3f3;border-top:4px solid #4285f4;border-radius:50%;animation:spin 1s linear infinite}@keyframes spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.register-link{margin-top:16px;text-align:center;font-size:14px;color:#666}.register-link a{color:#4285f4;text-decoration:none}.register-link a:hover{text-decoration:underline}.create-tenant-link{margin-top:16px;padding-top:16px;border-top:1px solid #e0e0e0;text-align:center;font-size:14px;color:#666}.create-tenant-link a{color:#4285f4;text-decoration:none;font-weight:500}.create-tenant-link a:hover{text-decoration:underline}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i2.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i2.DefaultValueAccessor, selector: "input:not([type=checkbox])[formControlName],textarea[formControlName],input:not([type=checkbox])[formControl],textarea[formControl],input:not([type=checkbox])[ngModel],textarea[ngModel],[ngDefaultControl]" }, { kind: "directive", type: i2.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i2.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i2.RequiredValidator, selector: ":not([type=checkbox])[required][formControlName],:not([type=checkbox])[required][formControl],:not([type=checkbox])[required][ngModel]", inputs: ["required"] }, { kind: "directive", type: i2.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "directive", type: i2.NgForm, selector: "form:not([ngNoForm]):not([formGroup]),ng-form,[ngForm]", inputs: ["ngFormOptions"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }] });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.15", ngImport: i0, type: TenantLoginComponent, decorators: [{
             type: Component,
@@ -1819,7 +2081,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.15", ngImpo
                 </div>
             }
         </div>
-    `, styles: [".tenant-login-dialog{padding:24px;max-width:450px;position:relative}.login-title{margin:0 0 24px;font-size:24px;font-weight:500;text-align:center}.welcome-message{margin-bottom:16px;padding:12px;background:#e8f5e9;border-radius:4px;text-align:center;font-size:14px;color:#2e7d32}.selector-description{margin-bottom:20px;font-size:14px;color:#666;text-align:center}.email-form,.form-group{margin-bottom:16px}.password-group{position:relative}.form-control{width:100%;padding:12px;border:1px solid #ddd;border-radius:4px;font-size:14px;box-sizing:border-box}.password-input{padding-right:45px}.password-toggle{position:absolute;right:8px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;font-size:18px;padding:8px;line-height:1;opacity:.6;transition:opacity .2s}.password-toggle:hover{opacity:1}.password-toggle:focus{outline:2px solid #4285f4;outline-offset:2px;border-radius:4px}.form-control:focus{outline:none;border-color:#4285f4}.btn{padding:12px 24px;border:none;border-radius:4px;font-size:14px;font-weight:500;cursor:pointer;transition:background-color .2s}.btn:disabled{opacity:.6;cursor:not-allowed}.btn-block{width:100%}.btn-primary{background-color:#4285f4;color:#fff}.btn-primary:hover:not(:disabled){background-color:#357ae8}.divider{margin:16px 0;text-align:center;position:relative}.divider:before{content:\"\";position:absolute;top:50%;left:0;right:0;height:1px;background:#ddd}.divider span{background:#fff;padding:0 12px;position:relative;color:#666;font-size:12px}.oauth-buttons{display:flex;flex-direction:column;gap:12px}.btn-oauth{width:100%;background:#fff;color:#333;border:1px solid #ddd;display:flex;align-items:center;justify-content:center;gap:8px}.btn-oauth:hover:not(:disabled){background:#f8f8f8}.btn-google{border-color:#4285f4}.btn-linkedin{border-color:#0077b5}.btn-apple{border-color:#000}.btn-microsoft{border-color:#00a4ef}.btn-github{border-color:#333}.oauth-icon{font-size:18px}.switch-method{margin-top:12px;text-align:center;font-size:14px}.switch-method a{color:#4285f4;text-decoration:none}.switch-method a:hover{text-decoration:underline}.tenant-list{margin-bottom:20px;display:flex;flex-direction:column;gap:12px}.tenant-item{display:flex;align-items:flex-start;gap:12px;padding:16px;border:2px solid #e0e0e0;border-radius:6px;cursor:pointer;transition:all .2s}.tenant-item:hover{border-color:#4285f4;background:#f8f9ff}.tenant-item.selected{border-color:#4285f4;background:#e8f0fe}.tenant-radio{flex-shrink:0;padding-top:2px}.tenant-radio input[type=radio]{width:18px;height:18px;cursor:pointer}.tenant-info{flex:1}.tenant-name{font-size:16px;font-weight:500;color:#333;margin-bottom:4px}.tenant-meta{font-size:13px;color:#666}.tenant-role{font-weight:500;color:#4285f4}.tenant-separator{margin:0 6px}.error-message{margin-top:16px;padding:12px;background:#fee;color:#c33;border-radius:4px;font-size:14px}.loading-overlay{position:absolute;inset:0;background:#fffc;display:flex;align-items:center;justify-content:center}.spinner{width:40px;height:40px;border:4px solid #f3f3f3;border-top:4px solid #4285f4;border-radius:50%;animation:spin 1s linear infinite}@keyframes spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.register-link{margin-top:16px;text-align:center;font-size:14px;color:#666}.register-link a{color:#4285f4;text-decoration:none}.register-link a:hover{text-decoration:underline}.create-tenant-link{margin-top:16px;padding-top:16px;border-top:1px solid #e0e0e0;text-align:center;font-size:14px;color:#666}.create-tenant-link a{color:#4285f4;text-decoration:none;font-weight:500}.create-tenant-link a:hover{text-decoration:underline}\n"] }]
+    `, styles: [".tenant-login-dialog{padding:24px;max-width:450px;position:relative}.login-title{margin:0 0 24px;font-size:24px;font-weight:500;text-align:center}.welcome-message{margin-bottom:16px;padding:12px;background:#e8f5e9;border-radius:4px;text-align:center;font-size:14px;color:#2e7d32}.selector-description{margin-bottom:20px;font-size:14px;color:#666;text-align:center}.email-form,.form-group{margin-bottom:16px}.password-group{position:relative}.form-control{width:100%;padding:12px;border:1px solid #ddd;border-radius:4px;font-size:14px;box-sizing:border-box}.password-input{padding-right:45px}.password-toggle{position:absolute;right:8px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;font-size:18px;padding:8px;line-height:1;opacity:.6;transition:opacity .2s}.password-toggle:hover{opacity:1}.password-toggle:focus{outline:2px solid #4285f4;outline-offset:2px;border-radius:4px}.form-control:focus{outline:none;border-color:#4285f4}.btn{padding:12px 24px;border:none;border-radius:4px;font-size:14px;font-weight:500;cursor:pointer;transition:background-color .2s}.btn:disabled{opacity:.6;cursor:not-allowed}.btn-block{width:100%}.btn-primary{background-color:#4285f4;color:#fff}.btn-primary:hover:not(:disabled){background-color:#357ae8}.divider{margin:16px 0;text-align:center;position:relative}.divider:before{content:\"\";position:absolute;top:50%;left:0;right:0;height:1px;background:#ddd}.divider span{background:#fff;padding:0 12px;position:relative;color:#666;font-size:12px}.oauth-buttons{display:flex;flex-direction:column;gap:12px}.btn-oauth{width:100%;background:#fff;color:#333;border:1px solid #ddd;display:flex;align-items:center;justify-content:center;gap:8px}.btn-oauth:hover:not(:disabled){background:#f8f8f8}.btn-google{border-color:#4285f4}.btn-linkedin{border-color:#0077b5}.btn-apple{border-color:#000}.btn-microsoft{border-color:#00a4ef}.btn-github{border-color:#333}.btn-zoho{background-color:#f0483e;color:#fff;border:1px solid #d63b32}.btn-zoho:hover{background-color:#d63b32}.oauth-icon{font-size:18px}.switch-method{margin-top:12px;text-align:center;font-size:14px}.switch-method a{color:#4285f4;text-decoration:none}.switch-method a:hover{text-decoration:underline}.tenant-list{margin-bottom:20px;display:flex;flex-direction:column;gap:12px}.tenant-item{display:flex;align-items:flex-start;gap:12px;padding:16px;border:2px solid #e0e0e0;border-radius:6px;cursor:pointer;transition:all .2s}.tenant-item:hover{border-color:#4285f4;background:#f8f9ff}.tenant-item.selected{border-color:#4285f4;background:#e8f0fe}.tenant-radio{flex-shrink:0;padding-top:2px}.tenant-radio input[type=radio]{width:18px;height:18px;cursor:pointer}.tenant-info{flex:1}.tenant-name{font-size:16px;font-weight:500;color:#333;margin-bottom:4px}.tenant-meta{font-size:13px;color:#666}.tenant-role{font-weight:500;color:#4285f4}.tenant-separator{margin:0 6px}.error-message{margin-top:16px;padding:12px;background:#fee;color:#c33;border-radius:4px;font-size:14px}.loading-overlay{position:absolute;inset:0;background:#fffc;display:flex;align-items:center;justify-content:center}.spinner{width:40px;height:40px;border:4px solid #f3f3f3;border-top:4px solid #4285f4;border-radius:50%;animation:spin 1s linear infinite}@keyframes spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.register-link{margin-top:16px;text-align:center;font-size:14px;color:#666}.register-link a{color:#4285f4;text-decoration:none}.register-link a:hover{text-decoration:underline}.create-tenant-link{margin-top:16px;padding-top:16px;border-top:1px solid #e0e0e0;text-align:center;font-size:14px;color:#666}.create-tenant-link a{color:#4285f4;text-decoration:none;font-weight:500}.create-tenant-link a:hover{text-decoration:underline}\n"] }]
         }], ctorParameters: () => [{ type: AuthService }], propDecorators: { title: [{
                 type: Input
             }], providers: [{
@@ -2372,6 +2634,7 @@ class LoginDialogComponent {
             apple: 'Sign in with Apple',
             microsoft: 'Sign in with Microsoft',
             github: 'Sign in with GitHub',
+            zoho: 'Sign in with Zoho',
             emailPassword: 'Sign in with Email'
         };
         return labels[provider];
@@ -2678,6 +2941,7 @@ class TenantRegisterComponent {
             apple: 'Sign up with Apple',
             microsoft: 'Sign up with Microsoft',
             github: 'Sign up with GitHub',
+            zoho: 'Sign up with Zoho',
             emailPassword: 'Sign up with Email'
         };
         return labels[provider];