@sd-angular/core 19.0.0-beta.71 → 19.0.0-beta.73

package/fesm2022/sd-angular-core-modules-permission.mjs

@@ -1,67 +1,144 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, Inject, Injectable, Input, Directive } from '@angular/core';
+import { InjectionToken, inject, Injectable, TemplateRef, ViewContainerRef, input, effect, Directive, Inject } from '@angular/core';
+import { SdCacheService } from '@sd-angular/core/services/cache';
 import { ArrayUtilities } from '@sd-angular/core/utilities/extensions';
 import { SdResolveMaybeAsync } from '@sd-angular/core/utilities';
-import * as i1 from '@sd-angular/core/services/cache';
 
+/**
+ * InjectionToken cho cấu hình permission.
+ *
+ * Ví dụ provider:
+ * {
+ *   provide: SD_PERMISSION_CONFIGURATION,
+ *   useValue: {
+ *     disabled: false,
+ *     loadPermissions: () => ['SAMPLE_C_EMPLOYEE_VIEW'],
+ *     onForbiden: () => router.navigateByUrl('/layout/forbidden')
+ *   }
+ * }
+ */
 const SD_PERMISSION_CONFIGURATION = new InjectionToken('sd-permission.configuration');
 
 class SdPermissionService {
-    configuration;
-    cacheService;
-    #permission = {};
-    #permissions;
-    #loaded = false;
-    constructor(configuration, cacheService) {
-        this.configuration = configuration;
-        this.cacheService = cacheService;
-        this.#permissions = this.cacheService.create('212a51fa-38d5-43b2-bd46-922d85950ba3', {
-            type: 'session',
-            default: [],
-        });
+    #permissionMapByKey = {};
+    #configuration = inject(SD_PERMISSION_CONFIGURATION);
+    #cacheService = inject(SdCacheService);
+    #permissionsByKey = this.#cacheService.create('212a51fa-38d5-43b2-bd46-922d85950ba3', {
+        type: 'session',
+        default: {},
+    });
+    #loadedKeys = new Set();
+    constructor() {
+        this.#validateDuplicateConfigKeys();
     }
-    loadPermissions = async () => {
-        if (!this.#loaded) {
-            try {
-                // Trả về Promise<string[]> nhưng chấp nhận mọi kiểu MaybeAsync
-                const permissions = await SdResolveMaybeAsync(this.configuration.loadPermissions());
-                const distinctPermissions = ArrayUtilities.distinct(permissions);
-                this.#permissions.set(ArrayUtilities.distinct(permissions));
-                // Chuyển sang dạng map để kiểm tra nhanh hơn
-                this.#permission = {};
-                distinctPermissions.forEach(p => (this.#permission[p] = true));
-                this.#loaded = true;
-            }
-            catch (err) {
-                console.error(err);
-                this.#permissions.set([]);
-                this.#permission = {};
-                this.#loaded = true;
+    #getConfigurations = () => {
+        const config = this.#configuration;
+        if (!config) {
+            return [];
+        }
+        return Array.isArray(config) ? config : [config];
+    };
+    #normalizeKey = (key) => {
+        return key === undefined ? '__undefined__' : key;
+    };
+    #validateDuplicateConfigKeys = () => {
+        const seen = new Set();
+        for (const config of this.#getConfigurations()) {
+            const normalizedKey = this.#normalizeKey(config.key);
+            if (seen.has(normalizedKey)) {
+                const keyLabel = config.key === undefined ? 'undefined' : config.key;
+                throw new Error(`[Permission] Duplicate permission configuration key: ${keyLabel}`);
             }
+            seen.add(normalizedKey);
         }
     };
-    hasPermission = (permission) => {
+    #getConfigurationByKey = (key) => {
+        return this.#getConfigurations().find(config => config.key === key);
+    };
+    #getEffectivePermissionKey = (key) => {
+        if (this.#getConfigurationByKey(key)) {
+            return key;
+        }
+        // Portal-level config uses key = undefined and acts as default fallback
+        if (key !== undefined && this.#getConfigurationByKey(undefined)) {
+            return undefined;
+        }
+        return key;
+    };
+    #setPermissionsForKey = (normalizedKey, permissions) => {
+        const distinctPermissions = ArrayUtilities.distinct(permissions || []);
+        const current = this.#permissionsByKey.get() || {};
+        this.#permissionsByKey.set({
+            ...current,
+            [normalizedKey]: distinctPermissions,
+        });
+        const permissionMap = {};
+        distinctPermissions.forEach(permission => {
+            permissionMap[permission] = true;
+        });
+        this.#permissionMapByKey[normalizedKey] = permissionMap;
+    };
+    loadPermissions = async (key) => {
+        const effectiveKey = this.#getEffectivePermissionKey(key);
+        const normalizedKey = this.#normalizeKey(effectiveKey);
+        if (this.#loadedKeys.has(normalizedKey)) {
+            return this.#permissionsByKey.get()?.[normalizedKey] || [];
+        }
+        const configuration = this.#getConfigurationByKey(effectiveKey);
+        if (!configuration) {
+            this.#setPermissionsForKey(normalizedKey, []);
+            this.#loadedKeys.add(normalizedKey);
+            return [];
+        }
+        try {
+            const permissions = await SdResolveMaybeAsync(configuration.loadPermissions());
+            this.#setPermissionsForKey(normalizedKey, permissions || []);
+        }
+        catch (err) {
+            console.error(err);
+            this.#setPermissionsForKey(normalizedKey, []);
+        }
+        finally {
+            this.#loadedKeys.add(normalizedKey);
+        }
+        return this.#permissionsByKey.get()?.[normalizedKey] || [];
+    };
+    loadAllPermissions = async () => {
+        const configurations = this.#getConfigurations();
+        if (!configurations.length) {
+            await this.loadPermissions(undefined);
+            return;
+        }
+        await Promise.all(configurations.map(config => this.loadPermissions(config.key)));
+    };
+    hasPermission = (permission, key) => {
         if (!permission?.toString()) {
             return true;
         }
-        if (this.configuration.disabled) {
+        const effectiveKey = this.#getEffectivePermissionKey(key);
+        const configuration = this.#getConfigurationByKey(effectiveKey);
+        if (configuration?.disabled) {
             return true;
         }
+        const normalizedKey = this.#normalizeKey(effectiveKey);
+        const permissionMap = this.#permissionMapByKey[normalizedKey] || {};
         const permissions = Array.isArray(permission) ? permission : [permission];
-        return permissions.some(permission => this.#permission[permission]);
+        return permissions.some(val => permissionMap[val]);
     };
-    getToken = async () => {
-        if (!this.configuration.getToken) {
+    getToken = async (key) => {
+        const effectiveKey = this.#getEffectivePermissionKey(key);
+        const getToken = this.#getConfigurationByKey(effectiveKey)?.getToken;
+        if (!getToken) {
             throw new Error('[Permission] Method getToken');
         }
-        const token = this.configuration.getToken();
-        if (token instanceof Promise) {
-            return await token;
+        const token = await SdResolveMaybeAsync(getToken());
+        if (token === '') {
+            return undefined;
         }
         return token;
     };
-    decodeToken = async () => {
-        const token = await this.getToken();
+    decodeToken = async (key) => {
+        const token = await this.getToken(key);
         if (!token) {
             return null;
         }
@@ -79,49 +156,46 @@ class SdPermissionService {
             return null;
         }
     };
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionService, deps: [{ token: SD_PERMISSION_CONFIGURATION }, { token: i1.SdCacheService }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
     static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionService, providedIn: 'root' });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionService, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
-        }], ctorParameters: () => [{ type: undefined, decorators: [{
-                    type: Inject,
-                    args: [SD_PERMISSION_CONFIGURATION]
-                }] }, { type: i1.SdCacheService }] });
+        }], ctorParameters: () => [] });
 
 class SdPermissionDirective {
-    templateRef;
-    viewContainerRef;
-    permissionService;
+    #templateRef = inject(TemplateRef);
+    #viewContainerRef = inject(ViewContainerRef);
+    #permissionService = inject(SdPermissionService);
     // Nếu là mảng thì chỉ cần có 1 permission trong mảng đó xem như có quyền
-    set sdPermission(permission) {
-        // Nếu không gắn permisison thì render
-        if (!permission?.toString()) {
-            this.viewContainerRef.createEmbeddedView(this.templateRef);
-            return;
-        }
-        // Kiểm tra permisison
-        if (this.permissionService.hasPermission(permission)) {
-            this.viewContainerRef.createEmbeddedView(this.templateRef);
-        }
-    }
-    constructor(templateRef, viewContainerRef, permissionService) {
-        this.templateRef = templateRef;
-        this.viewContainerRef = viewContainerRef;
-        this.permissionService = permissionService;
+    sdPermission = input(undefined);
+    sdPermissionKey = input(undefined);
+    constructor() {
+        effect(() => {
+            const permission = this.sdPermission();
+            const permissionKey = this.sdPermissionKey();
+            this.#viewContainerRef.clear();
+            // Nếu không gắn permission thì render
+            if (!permission?.toString()) {
+                this.#viewContainerRef.createEmbeddedView(this.#templateRef);
+                return;
+            }
+            // Kiểm tra permission theo key (nếu có)
+            if (this.#permissionService.hasPermission(permission, permissionKey)) {
+                this.#viewContainerRef.createEmbeddedView(this.#templateRef);
+            }
+        });
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionDirective, deps: [{ token: i0.TemplateRef }, { token: i0.ViewContainerRef }, { token: SdPermissionService }], target: i0.ɵɵFactoryTarget.Directive });
-    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "19.2.17", type: SdPermissionDirective, isStandalone: true, selector: "[sdPermission]", inputs: { sdPermission: "sdPermission" }, ngImport: i0 });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionDirective, deps: [], target: i0.ɵɵFactoryTarget.Directive });
+    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "17.1.0", version: "19.2.17", type: SdPermissionDirective, isStandalone: true, selector: "[sdPermission]", inputs: { sdPermission: { classPropertyName: "sdPermission", publicName: "sdPermission", isSignal: true, isRequired: false, transformFunction: null }, sdPermissionKey: { classPropertyName: "sdPermissionKey", publicName: "sdPermissionKey", isSignal: true, isRequired: false, transformFunction: null } }, ngImport: i0 });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionDirective, decorators: [{
             type: Directive,
             args: [{
                     selector: '[sdPermission]',
                 }]
-        }], ctorParameters: () => [{ type: i0.TemplateRef }, { type: i0.ViewContainerRef }, { type: SdPermissionService }], propDecorators: { sdPermission: [{
-                type: Input
-            }] } });
+        }], ctorParameters: () => [] });
 
 class SdPermissionGuard {
     configuration;
@@ -130,18 +204,30 @@ class SdPermissionGuard {
         this.configuration = configuration;
         this.permissionService = permissionService;
     }
+    #getConfigurations = () => {
+        const config = this.configuration;
+        if (!config) {
+            return [];
+        }
+        return Array.isArray(config) ? config : [config];
+    };
     canActivate = async (next, state) => {
-        // Đảm bảo permission đã được loaded
-        await this.permissionService.loadPermissions().catch(console.error);
+        // Guard ở layer portal: preload toàn bộ permission theo tất cả key đã cấu hình
+        await this.permissionService.loadAllPermissions().catch(console.error);
         return true;
     };
     canActivateChild = async (activatedRoute, state) => {
         const permission = activatedRoute.data['permission'];
-        if (this.permissionService.hasPermission(permission)) {
+        const permissionKey = activatedRoute.data?.['permissionKey'];
+        if (this.permissionService.hasPermission(permission, permissionKey)) {
             return true;
         }
-        //
-        this.configuration?.onForbiden?.();
+        const configurations = this.#getConfigurations();
+        const onForbiden = configurations
+            .filter(config => config.key === permissionKey || (permissionKey !== undefined && config.key === undefined))
+            .map(config => config.onForbiden)
+            .find(val => !!val);
+        onForbiden?.();
         return false;
     };
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPermissionGuard, deps: [{ token: SD_PERMISSION_CONFIGURATION }, { token: SdPermissionService }], target: i0.ɵɵFactoryTarget.Injectable });

package/fesm2022/sd-angular-core-modules-permission.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sd-angular-core-modules-permission.mjs","sources":["../../../projects/sd-angular/modules/permission/src/configurations/permission.configuration.ts","../../../projects/sd-angular/modules/permission/src/services/permission.service.ts","../../../projects/sd-angular/modules/permission/src/directives/permission.directive.ts","../../../projects/sd-angular/modules/permission/src/guards/permission.guard.ts","../../../projects/sd-angular/modules/permission/sd-angular-core-modules-permission.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\nimport { SdMaybeAsync } from '@sd-angular/core/utilities';\r\n\r\nexport interface ISdPermissionConfiguration {\r\n  disabled?: boolean; // Vô hiệu việc kiểm tra permission, mục đích để test chức năng khi chưa có permisison\r\n  loadPermissions: () => SdMaybeAsync<string[]>;\r\n  onForbiden?: () => void; // Xử lý khi không có quyền truy cập vào URL\r\n  getToken?: () => Promise<string | undefined | null> | string | undefined | null; // Lấy thông tin token\r\n}\r\n\r\nexport const SD_PERMISSION_CONFIGURATION = new InjectionToken<ISdPermissionConfiguration>('sd-permission.configuration');\r\n","import { Inject, Injectable } from '@angular/core';\r\nimport { SdCache, SdCacheService } from '@sd-angular/core/services/cache';\r\nimport { ArrayUtilities } from '@sd-angular/core/utilities/extensions';\r\nimport { ISdPermissionConfiguration, SD_PERMISSION_CONFIGURATION } from '../configurations';\r\nimport { SdResolveMaybeAsync } from '@sd-angular/core/utilities';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdPermissionService {\r\n  #permission: Record<string, boolean> = {};\r\n  #permissions: SdCache<string[]>;\r\n  #loaded = false;\r\n  constructor(\r\n    @Inject(SD_PERMISSION_CONFIGURATION) private configuration: ISdPermissionConfiguration,\r\n    private cacheService: SdCacheService\r\n  ) {\r\n    this.#permissions = this.cacheService.create<string[]>('212a51fa-38d5-43b2-bd46-922d85950ba3', {\r\n      type: 'session',\r\n      default: [],\r\n    });\r\n  }\r\n\r\n  loadPermissions = async () => {\r\n    if (!this.#loaded) {\r\n      try {\r\n        // Trả về Promise<string[]> nhưng chấp nhận mọi kiểu MaybeAsync\r\n        const permissions: string[] = await SdResolveMaybeAsync(this.configuration.loadPermissions());\r\n        const distinctPermissions = ArrayUtilities.distinct(permissions);\r\n        this.#permissions.set(ArrayUtilities.distinct(permissions));\r\n        // Chuyển sang dạng map để kiểm tra nhanh hơn\r\n        this.#permission = {};\r\n        distinctPermissions.forEach(p => (this.#permission[p] = true));\r\n        this.#loaded = true;\r\n      } catch (err) {\r\n        console.error(err);\r\n        this.#permissions.set([]);\r\n        this.#permission = {};\r\n        this.#loaded = true;\r\n      }\r\n    }\r\n  };\r\n\r\n  hasPermission = (permission: string | string[]) => {\r\n    if (!permission?.toString()) {\r\n      return true;\r\n    }\r\n    if (this.configuration.disabled) {\r\n      return true;\r\n    }\r\n    const permissions = Array.isArray(permission) ? permission : [permission];\r\n    return permissions.some(permission => this.#permission[permission]);\r\n  };\r\n\r\n  getToken = async () => {\r\n    if (!this.configuration.getToken) {\r\n      throw new Error('[Permission] Method getToken');\r\n    }\r\n    const token = this.configuration.getToken();\r\n    if (token instanceof Promise) {\r\n      return await token;\r\n    }\r\n    return token;\r\n  };\r\n\r\n  decodeToken = async <T>(): Promise<T | null> => {\r\n    const token = await this.getToken();\r\n    if (!token) {\r\n      return null;\r\n    }\r\n    try {\r\n      const payload = token.split('.')[1];\r\n      const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\r\n      const jsonPayload = decodeURIComponent(\r\n        atob(base64)\r\n          .split('')\r\n          .map(c => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2))\r\n          .join('')\r\n      );\r\n      return JSON.parse(jsonPayload);\r\n    } catch (error) {\r\n      console.error('Invalid token', error);\r\n      return null;\r\n    }\r\n  };\r\n}\r\n","import { Directive, Input, TemplateRef, ViewContainerRef } from '@angular/core';\r\nimport { SdPermissionService } from '../services';\r\n\r\n@Directive({\r\n  selector: '[sdPermission]',\r\n})\r\nexport class SdPermissionDirective {\r\n  // Nếu là mảng thì chỉ cần có 1 permission trong mảng đó xem như có quyền\r\n  @Input() set sdPermission(permission: string | string[] | undefined | null) {\r\n    // Nếu không gắn permisison thì render\r\n    if (!permission?.toString()) {\r\n      this.viewContainerRef.createEmbeddedView(this.templateRef);\r\n      return;\r\n    }\r\n    // Kiểm tra permisison\r\n    if (this.permissionService.hasPermission(permission)) {\r\n      this.viewContainerRef.createEmbeddedView(this.templateRef);\r\n    }\r\n  }\r\n\r\n  constructor(\r\n    private templateRef: TemplateRef<any>,\r\n    private viewContainerRef: ViewContainerRef,\r\n    private permissionService: SdPermissionService\r\n  ) {}\r\n}\r\n","import { Inject, Injectable } from '@angular/core';\r\nimport { ActivatedRouteSnapshot, CanActivate, CanActivateChild, RouterStateSnapshot } from '@angular/router';\r\nimport { ISdPermissionConfiguration, SD_PERMISSION_CONFIGURATION } from '../configurations';\r\nimport { SdPermissionService } from '../services';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdPermissionGuard implements CanActivate, CanActivateChild {\r\n  constructor(\r\n    @Inject(SD_PERMISSION_CONFIGURATION)\r\n    private configuration: ISdPermissionConfiguration,\r\n    private permissionService: SdPermissionService\r\n  ) {}\r\n\r\n  canActivate = async (next: ActivatedRouteSnapshot, state: RouterStateSnapshot) => {\r\n    // Đảm bảo permission đã được loaded\r\n    await this.permissionService.loadPermissions().catch(console.error);\r\n    return true;\r\n  };\r\n\r\n  canActivateChild = async (activatedRoute: ActivatedRouteSnapshot, state: RouterStateSnapshot) => {\r\n    const permission = activatedRoute.data['permission'];\r\n    if (this.permissionService.hasPermission(permission)) {\r\n      return true;\r\n    }\r\n    //\r\n    this.configuration?.onForbiden?.();\r\n    return false;\r\n  };\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":["i1.SdPermissionService"],"mappings":";;;;;;MAUa,2BAA2B,GAAG,IAAI,cAAc,CAA6B,6BAA6B;;MCH1G,mBAAmB,CAAA;AAKiB,IAAA,aAAA;AACrC,IAAA,YAAA;IALV,WAAW,GAA4B,EAAE;AACzC,IAAA,YAAY;IACZ,OAAO,GAAG,KAAK;IACf,WAAA,CAC+C,aAAyC,EAC9E,YAA4B,EAAA;QADS,IAAA,CAAA,aAAa,GAAb,aAAa;QAClD,IAAA,CAAA,YAAY,GAAZ,YAAY;QAEpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAW,sCAAsC,EAAE;AAC7F,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,OAAO,EAAE,EAAE;AACZ,SAAA,CAAC;IACJ;IAEA,eAAe,GAAG,YAAW;AAC3B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACjB,YAAA,IAAI;;AAEF,gBAAA,MAAM,WAAW,GAAa,MAAM,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;gBAC7F,MAAM,mBAAmB,GAAG,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;AAChE,gBAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;;AAE3D,gBAAA,IAAI,CAAC,WAAW,GAAG,EAAE;AACrB,gBAAA,mBAAmB,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,gBAAA,IAAI,CAAC,OAAO,GAAG,IAAI;YACrB;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;AAClB,gBAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AACzB,gBAAA,IAAI,CAAC,WAAW,GAAG,EAAE;AACrB,gBAAA,IAAI,CAAC,OAAO,GAAG,IAAI;YACrB;QACF;AACF,IAAA,CAAC;AAED,IAAA,aAAa,GAAG,CAAC,UAA6B,KAAI;AAChD,QAAA,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;AAC3B,YAAA,OAAO,IAAI;QACb;AACA,QAAA,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE;AAC/B,YAAA,OAAO,IAAI;QACb;AACA,QAAA,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,UAAU,CAAC;AACzE,QAAA,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AACrE,IAAA,CAAC;IAED,QAAQ,GAAG,YAAW;AACpB,QAAA,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE;AAChC,YAAA,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC;QACjD;QACA,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE;AAC3C,QAAA,IAAI,KAAK,YAAY,OAAO,EAAE;YAC5B,OAAO,MAAM,KAAK;QACpB;AACA,QAAA,OAAO,KAAK;AACd,IAAA,CAAC;IAED,WAAW,GAAG,YAAiC;AAC7C,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;QACnC,IAAI,CAAC,KAAK,EAAE;AACV,YAAA,OAAO,IAAI;QACb;AACA,QAAA,IAAI;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnC,YAAA,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC5D,YAAA,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,CAAC,MAAM;iBACR,KAAK,CAAC,EAAE;AACR,iBAAA,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,iBAAA,IAAI,CAAC,EAAE,CAAC,CACZ;AACD,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC;AACrC,YAAA,OAAO,IAAI;QACb;AACF,IAAA,CAAC;AA3EU,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,mBAAmB,kBAKpB,2BAA2B,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,cAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAL1B,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,mBAAmB,cADN,MAAM,EAAA,CAAA;;4FACnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAD/B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;0BAM7B,MAAM;2BAAC,2BAA2B;;;MCN1B,qBAAqB,CAAA;AAetB,IAAA,WAAA;AACA,IAAA,gBAAA;AACA,IAAA,iBAAA;;IAfV,IAAa,YAAY,CAAC,UAAgD,EAAA;;AAExE,QAAA,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YAC3B,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;YAC1D;QACF;;QAEA,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE;YACpD,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5D;IACF;AAEA,IAAA,WAAA,CACU,WAA6B,EAC7B,gBAAkC,EAClC,iBAAsC,EAAA;QAFtC,IAAA,CAAA,WAAW,GAAX,WAAW;QACX,IAAA,CAAA,gBAAgB,GAAhB,gBAAgB;QAChB,IAAA,CAAA,iBAAiB,GAAjB,iBAAiB;IACxB;wGAlBQ,qBAAqB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,WAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAA,mBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;4FAArB,qBAAqB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,EAAA,YAAA,EAAA,cAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;4FAArB,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBAHjC,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;8IAGc,YAAY,EAAA,CAAA;sBAAxB;;;MCFU,iBAAiB,CAAA;AAGlB,IAAA,aAAA;AACA,IAAA,iBAAA;IAHV,WAAA,CAEU,aAAyC,EACzC,iBAAsC,EAAA;QADtC,IAAA,CAAA,aAAa,GAAb,aAAa;QACb,IAAA,CAAA,iBAAiB,GAAjB,iBAAiB;IACxB;AAEH,IAAA,WAAW,GAAG,OAAO,IAA4B,EAAE,KAA0B,KAAI;;AAE/E,QAAA,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;AACnE,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;AAED,IAAA,gBAAgB,GAAG,OAAO,cAAsC,EAAE,KAA0B,KAAI;QAC9F,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC;QACpD,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI;QACb;;AAEA,QAAA,IAAI,CAAC,aAAa,EAAE,UAAU,IAAI;AAClC,QAAA,OAAO,KAAK;AACd,IAAA,CAAC;AArBU,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,kBAElB,2BAA2B,EAAA,EAAA,EAAA,KAAA,EAAAA,mBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAF1B,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;0BAG7B,MAAM;2BAAC,2BAA2B;;;ACRvC;;AAEG;;;;"}
+{"version":3,"file":"sd-angular-core-modules-permission.mjs","sources":["../../../projects/sd-angular/modules/permission/src/configurations/permission.configuration.ts","../../../projects/sd-angular/modules/permission/src/services/permission.service.ts","../../../projects/sd-angular/modules/permission/src/directives/permission.directive.ts","../../../projects/sd-angular/modules/permission/src/guards/permission.guard.ts","../../../projects/sd-angular/modules/permission/sd-angular-core-modules-permission.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\nimport { SdMaybeAsync } from '@sd-angular/core/utilities';\r\n\r\n/**\r\n * Cấu hình trung tâm cho module permission.\r\n *\r\n * Luồng hoạt động chính:\r\n * 1. `loadPermissions(key?)` ở service được gọi để lấy danh sách mã quyền theo từng `key` cấu hình.\r\n * 2. Guard/service đối chiếu mã quyền theo route metadata.\r\n * 3. Khi không đủ quyền, callback `onForbiden()` sẽ được gọi (nếu có).\r\n *\r\n * Lưu ý:\r\n * - `SD_PERMISSION_CONFIGURATION` hỗ trợ cả cấu hình đơn và mảng cấu hình (`multi: true`).\r\n * - Nếu cần tạm bỏ qua kiểm tra quyền (POC/UAT cục bộ), đặt `disabled = true`.\r\n */\r\nexport interface ISdPermissionConfiguration {\r\n  /**\r\n   * Khóa định danh cấu hình.\r\n    * Dùng để phân biệt khi hệ thống mở rộng theo nhiều profile permission.\r\n    *\r\n    * Lưu ý: `undefined` cũng được xem là một key hợp lệ (cấu hình mặc định).\r\n   */\r\n  key?: string;\r\n\r\n  /**\r\n   * Bật/tắt kiểm tra permission toàn cục.\r\n   * - `true`: bỏ qua kiểm tra quyền.\r\n   * - `false | undefined`: kiểm tra quyền theo cấu hình route.\r\n   */\r\n  disabled?: boolean;\r\n\r\n  /**\r\n   * Trả về danh sách mã quyền của user hiện tại.\r\n   * Có thể đồng bộ hoặc bất đồng bộ.\r\n   *\r\n   * Ví dụ giá trị trả về:\r\n   * - `['PRODUCT_C_EMPLOYEE_VIEW', 'PRODUCT_C_EMPLOYEE_UPDATE']`\r\n   */\r\n  loadPermissions: () => SdMaybeAsync<string[]>;\r\n\r\n  /**\r\n   * Callback xử lý khi user không có quyền truy cập URL hiện tại.\r\n   * Thường dùng để điều hướng sang trang forbidden hoặc hiển thị thông báo.\r\n   *\r\n   * Giữ nguyên tên `onForbiden` để tương thích API hiện tại.\r\n   */\r\n  onForbiden?: () => void;\r\n\r\n  /**\r\n   * Cung cấp access token hiện tại cho các tác vụ liên quan permission.\r\n   * Hỗ trợ trả về đồng bộ, Promise hoặc Observable.\r\n   */\r\n  getToken?: () => SdMaybeAsync<string | undefined | null>;\r\n}\r\n\r\n/**\r\n * InjectionToken cho cấu hình permission.\r\n *\r\n * Ví dụ provider:\r\n * {\r\n *   provide: SD_PERMISSION_CONFIGURATION,\r\n *   useValue: {\r\n *     disabled: false,\r\n *     loadPermissions: () => ['SAMPLE_C_EMPLOYEE_VIEW'],\r\n *     onForbiden: () => router.navigateByUrl('/layout/forbidden')\r\n *   }\r\n * }\r\n */\r\nexport const SD_PERMISSION_CONFIGURATION =\r\n  new InjectionToken<ISdPermissionConfiguration | ISdPermissionConfiguration[]>('sd-permission.configuration');\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { SdCache, SdCacheService } from '@sd-angular/core/services/cache';\r\nimport { ArrayUtilities } from '@sd-angular/core/utilities/extensions';\r\nimport { ISdPermissionConfiguration, SD_PERMISSION_CONFIGURATION } from '../configurations';\r\nimport { SdMaybeAsync, SdResolveMaybeAsync } from '@sd-angular/core/utilities';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdPermissionService {\r\n  #permissionMapByKey: Record<string, Record<string, boolean>> = {};\r\n  readonly #configuration = inject<ISdPermissionConfiguration | ISdPermissionConfiguration[]>(SD_PERMISSION_CONFIGURATION);\r\n  readonly #cacheService = inject(SdCacheService);\r\n  #permissionsByKey: SdCache<Record<string, string[]>> = this.#cacheService.create<Record<string, string[]>>('212a51fa-38d5-43b2-bd46-922d85950ba3', {\r\n    type: 'session',\r\n    default: {},\r\n  });\r\n  readonly #loadedKeys = new Set<string>();\r\n\r\n  constructor() {\r\n    this.#validateDuplicateConfigKeys();\r\n  }\r\n\r\n  #getConfigurations = (): ISdPermissionConfiguration[] => {\r\n    const config = this.#configuration;\r\n    if (!config) {\r\n      return [];\r\n    }\r\n    return Array.isArray(config) ? config : [config];\r\n  };\r\n\r\n  #normalizeKey = (key?: string): string => {\r\n    return key === undefined ? '__undefined__' : key;\r\n  };\r\n\r\n  #validateDuplicateConfigKeys = (): void => {\r\n    const seen = new Set<string>();\r\n    for (const config of this.#getConfigurations()) {\r\n      const normalizedKey = this.#normalizeKey(config.key);\r\n      if (seen.has(normalizedKey)) {\r\n        const keyLabel = config.key === undefined ? 'undefined' : config.key;\r\n        throw new Error(`[Permission] Duplicate permission configuration key: ${keyLabel}`);\r\n      }\r\n      seen.add(normalizedKey);\r\n    }\r\n  };\r\n\r\n  #getConfigurationByKey = (key?: string): ISdPermissionConfiguration | undefined => {\r\n    return this.#getConfigurations().find(config => config.key === key);\r\n  };\r\n\r\n  #getEffectivePermissionKey = (key?: string): string | undefined => {\r\n    if (this.#getConfigurationByKey(key)) {\r\n      return key;\r\n    }\r\n\r\n    // Portal-level config uses key = undefined and acts as default fallback\r\n    if (key !== undefined && this.#getConfigurationByKey(undefined)) {\r\n      return undefined;\r\n    }\r\n\r\n    return key;\r\n  };\r\n\r\n  #setPermissionsForKey = (normalizedKey: string, permissions: string[]): void => {\r\n    const distinctPermissions = ArrayUtilities.distinct(permissions || []);\r\n    const current = this.#permissionsByKey.get() || {};\r\n    this.#permissionsByKey.set({\r\n      ...current,\r\n      [normalizedKey]: distinctPermissions,\r\n    });\r\n\r\n    const permissionMap: Record<string, boolean> = {};\r\n    distinctPermissions.forEach(permission => {\r\n      permissionMap[permission] = true;\r\n    });\r\n    this.#permissionMapByKey[normalizedKey] = permissionMap;\r\n  };\r\n\r\n  loadPermissions = async (key?: string): Promise<string[]> => {\r\n    const effectiveKey = this.#getEffectivePermissionKey(key);\r\n    const normalizedKey = this.#normalizeKey(effectiveKey);\r\n    if (this.#loadedKeys.has(normalizedKey)) {\r\n      return this.#permissionsByKey.get()?.[normalizedKey] || [];\r\n    }\r\n\r\n    const configuration = this.#getConfigurationByKey(effectiveKey);\r\n    if (!configuration) {\r\n      this.#setPermissionsForKey(normalizedKey, []);\r\n      this.#loadedKeys.add(normalizedKey);\r\n      return [];\r\n    }\r\n\r\n    try {\r\n      const permissions: string[] = await SdResolveMaybeAsync(configuration.loadPermissions());\r\n      this.#setPermissionsForKey(normalizedKey, permissions || []);\r\n    } catch (err) {\r\n      console.error(err);\r\n      this.#setPermissionsForKey(normalizedKey, []);\r\n    } finally {\r\n      this.#loadedKeys.add(normalizedKey);\r\n    }\r\n\r\n    return this.#permissionsByKey.get()?.[normalizedKey] || [];\r\n  };\r\n\r\n  loadAllPermissions = async (): Promise<void> => {\r\n    const configurations = this.#getConfigurations();\r\n    if (!configurations.length) {\r\n      await this.loadPermissions(undefined);\r\n      return;\r\n    }\r\n\r\n    await Promise.all(configurations.map(config => this.loadPermissions(config.key)));\r\n  };\r\n\r\n  hasPermission = (permission: string | string[], key?: string) => {\r\n    if (!permission?.toString()) {\r\n      return true;\r\n    }\r\n\r\n    const effectiveKey = this.#getEffectivePermissionKey(key);\r\n    const configuration = this.#getConfigurationByKey(effectiveKey);\r\n    if (configuration?.disabled) {\r\n      return true;\r\n    }\r\n\r\n    const normalizedKey = this.#normalizeKey(effectiveKey);\r\n    const permissionMap = this.#permissionMapByKey[normalizedKey] || {};\r\n    const permissions = Array.isArray(permission) ? permission : [permission];\r\n    return permissions.some(val => permissionMap[val]);\r\n  };\r\n\r\n  getToken = async (key?: string) => {\r\n    const effectiveKey = this.#getEffectivePermissionKey(key);\r\n    const getToken = this.#getConfigurationByKey(effectiveKey)?.getToken as (() => SdMaybeAsync<string | undefined | null>) | undefined;\r\n    if (!getToken) {\r\n      throw new Error('[Permission] Method getToken');\r\n    }\r\n\r\n    const token = await SdResolveMaybeAsync(getToken());\r\n    if (token === '') {\r\n      return undefined;\r\n    }\r\n    return token;\r\n  };\r\n\r\n  decodeToken = async <T>(key?: string): Promise<T | null> => {\r\n    const token = await this.getToken(key);\r\n    if (!token) {\r\n      return null;\r\n    }\r\n    try {\r\n      const payload = token.split('.')[1];\r\n      const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\r\n      const jsonPayload = decodeURIComponent(\r\n        atob(base64)\r\n          .split('')\r\n          .map(c => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2))\r\n          .join('')\r\n      );\r\n      return JSON.parse(jsonPayload);\r\n    } catch (error) {\r\n      console.error('Invalid token', error);\r\n      return null;\r\n    }\r\n  };\r\n}\r\n","import { Directive, effect, inject, input, TemplateRef, ViewContainerRef } from '@angular/core';\r\nimport { SdPermissionService } from '../services';\r\n\r\n@Directive({\r\n  selector: '[sdPermission]',\r\n})\r\nexport class SdPermissionDirective {\r\n  readonly #templateRef = inject<TemplateRef<any>>(TemplateRef);\r\n  readonly #viewContainerRef = inject(ViewContainerRef);\r\n  readonly #permissionService = inject(SdPermissionService);\r\n\r\n  // Nếu là mảng thì chỉ cần có 1 permission trong mảng đó xem như có quyền\r\n  readonly sdPermission = input<string | string[] | undefined | null>(undefined);\r\n  readonly sdPermissionKey = input<string | undefined>(undefined);\r\n\r\n  constructor() {\r\n    effect(() => {\r\n      const permission = this.sdPermission();\r\n      const permissionKey = this.sdPermissionKey();\r\n\r\n      this.#viewContainerRef.clear();\r\n\r\n      // Nếu không gắn permission thì render\r\n      if (!permission?.toString()) {\r\n        this.#viewContainerRef.createEmbeddedView(this.#templateRef);\r\n        return;\r\n      }\r\n\r\n      // Kiểm tra permission theo key (nếu có)\r\n      if (this.#permissionService.hasPermission(permission, permissionKey)) {\r\n        this.#viewContainerRef.createEmbeddedView(this.#templateRef);\r\n      }\r\n    });\r\n  }\r\n}\r\n","import { Inject, Injectable } from '@angular/core';\r\nimport { ActivatedRouteSnapshot, CanActivate, CanActivateChild, RouterStateSnapshot } from '@angular/router';\r\nimport { ISdPermissionConfiguration, SD_PERMISSION_CONFIGURATION } from '../configurations';\r\nimport { SdPermissionService } from '../services';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdPermissionGuard implements CanActivate, CanActivateChild {\r\n  constructor(\r\n    @Inject(SD_PERMISSION_CONFIGURATION)\r\n    private configuration: ISdPermissionConfiguration | ISdPermissionConfiguration[],\r\n    private permissionService: SdPermissionService\r\n  ) {}\r\n\r\n  #getConfigurations = (): ISdPermissionConfiguration[] => {\r\n    const config = this.configuration;\r\n    if (!config) {\r\n      return [];\r\n    }\r\n    return Array.isArray(config) ? config : [config];\r\n  };\r\n\r\n  canActivate = async (next: ActivatedRouteSnapshot, state: RouterStateSnapshot) => {\r\n    // Guard ở layer portal: preload toàn bộ permission theo tất cả key đã cấu hình\r\n    await this.permissionService.loadAllPermissions().catch(console.error);\r\n    return true;\r\n  };\r\n\r\n  canActivateChild = async (activatedRoute: ActivatedRouteSnapshot, state: RouterStateSnapshot) => {\r\n    const permission = activatedRoute.data['permission'];\r\n    const permissionKey = activatedRoute.data?.['permissionKey'] as string | undefined;\r\n    if (this.permissionService.hasPermission(permission, permissionKey)) {\r\n      return true;\r\n    }\r\n\r\n    const configurations = this.#getConfigurations();\r\n    const onForbiden = configurations\r\n      .filter(config => config.key === permissionKey || (permissionKey !== undefined && config.key === undefined))\r\n      .map(config => config.onForbiden)\r\n      .find(val => !!val);\r\n    onForbiden?.();\r\n    return false;\r\n  };\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":["i1.SdPermissionService"],"mappings":";;;;;;AAuDA;;;;;;;;;;;;AAYG;MACU,2BAA2B,GACtC,IAAI,cAAc,CAA4D,6BAA6B;;MC9DhG,mBAAmB,CAAA;IAC9B,mBAAmB,GAA4C,EAAE;AACxD,IAAA,cAAc,GAAG,MAAM,CAA4D,2BAA2B,CAAC;AAC/G,IAAA,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;IAC/C,iBAAiB,GAAsC,IAAI,CAAC,aAAa,CAAC,MAAM,CAA2B,sCAAsC,EAAE;AACjJ,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,OAAO,EAAE,EAAE;AACZ,KAAA,CAAC;AACO,IAAA,WAAW,GAAG,IAAI,GAAG,EAAU;AAExC,IAAA,WAAA,GAAA;QACE,IAAI,CAAC,4BAA4B,EAAE;IACrC;IAEA,kBAAkB,GAAG,MAAmC;AACtD,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc;QAClC,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,EAAE;QACX;AACA,QAAA,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;AAClD,IAAA,CAAC;AAED,IAAA,aAAa,GAAG,CAAC,GAAY,KAAY;QACvC,OAAO,GAAG,KAAK,SAAS,GAAG,eAAe,GAAG,GAAG;AAClD,IAAA,CAAC;IAED,4BAA4B,GAAG,MAAW;AACxC,QAAA,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,EAAE;YAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;AACpD,YAAA,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;AAC3B,gBAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,KAAK,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC,GAAG;AACpE,gBAAA,MAAM,IAAI,KAAK,CAAC,wDAAwD,QAAQ,CAAA,CAAE,CAAC;YACrF;AACA,YAAA,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;QACzB;AACF,IAAA,CAAC;AAED,IAAA,sBAAsB,GAAG,CAAC,GAAY,KAA4C;AAChF,QAAA,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC;AACrE,IAAA,CAAC;AAED,IAAA,0BAA0B,GAAG,CAAC,GAAY,KAAwB;AAChE,QAAA,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE;AACpC,YAAA,OAAO,GAAG;QACZ;;QAGA,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE;AAC/D,YAAA,OAAO,SAAS;QAClB;AAEA,QAAA,OAAO,GAAG;AACZ,IAAA,CAAC;AAED,IAAA,qBAAqB,GAAG,CAAC,aAAqB,EAAE,WAAqB,KAAU;QAC7E,MAAM,mBAAmB,GAAG,cAAc,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;AAClD,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;AACzB,YAAA,GAAG,OAAO;YACV,CAAC,aAAa,GAAG,mBAAmB;AACrC,SAAA,CAAC;QAEF,MAAM,aAAa,GAA4B,EAAE;AACjD,QAAA,mBAAmB,CAAC,OAAO,CAAC,UAAU,IAAG;AACvC,YAAA,aAAa,CAAC,UAAU,CAAC,GAAG,IAAI;AAClC,QAAA,CAAC,CAAC;AACF,QAAA,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,GAAG,aAAa;AACzD,IAAA,CAAC;AAED,IAAA,eAAe,GAAG,OAAO,GAAY,KAAuB;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;AACvC,YAAA,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE;QAC5D;QAEA,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC;QAC/D,IAAI,CAAC,aAAa,EAAE;AAClB,YAAA,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,CAAC;AAC7C,YAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;AACnC,YAAA,OAAO,EAAE;QACX;AAEA,QAAA,IAAI;YACF,MAAM,WAAW,GAAa,MAAM,mBAAmB,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YACxF,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE,CAAC;QAC9D;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;AAClB,YAAA,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,CAAC;QAC/C;gBAAU;AACR,YAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;QACrC;AAEA,QAAA,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE;AAC5D,IAAA,CAAC;IAED,kBAAkB,GAAG,YAA0B;AAC7C,QAAA,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE;AAChD,QAAA,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;AAC1B,YAAA,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;YACrC;QACF;QAEA,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACnF,IAAA,CAAC;AAED,IAAA,aAAa,GAAG,CAAC,UAA6B,EAAE,GAAY,KAAI;AAC9D,QAAA,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;AAC3B,YAAA,OAAO,IAAI;QACb;QAEA,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC;AAC/D,QAAA,IAAI,aAAa,EAAE,QAAQ,EAAE;AAC3B,YAAA,OAAO,IAAI;QACb;QAEA,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,EAAE;AACnE,QAAA,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,UAAU,CAAC;AACzE,QAAA,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;AACpD,IAAA,CAAC;AAED,IAAA,QAAQ,GAAG,OAAO,GAAY,KAAI;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,QAAuE;QACnI,IAAI,CAAC,QAAQ,EAAE;AACb,YAAA,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC;QACjD;QAEA,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,CAAC;AACnD,QAAA,IAAI,KAAK,KAAK,EAAE,EAAE;AAChB,YAAA,OAAO,SAAS;QAClB;AACA,QAAA,OAAO,KAAK;AACd,IAAA,CAAC;AAED,IAAA,WAAW,GAAG,OAAU,GAAY,KAAuB;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE;AACV,YAAA,OAAO,IAAI;QACb;AACA,QAAA,IAAI;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnC,YAAA,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC5D,YAAA,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,CAAC,MAAM;iBACR,KAAK,CAAC,EAAE;AACR,iBAAA,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,iBAAA,IAAI,CAAC,EAAE,CAAC,CACZ;AACD,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC;AACrC,YAAA,OAAO,IAAI;QACb;AACF,IAAA,CAAC;wGA7JU,mBAAmB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAnB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,mBAAmB,cADN,MAAM,EAAA,CAAA;;4FACnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAD/B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;MCArB,qBAAqB,CAAA;AACvB,IAAA,YAAY,GAAG,MAAM,CAAmB,WAAW,CAAC;AACpD,IAAA,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAC5C,IAAA,kBAAkB,GAAG,MAAM,CAAC,mBAAmB,CAAC;;AAGhD,IAAA,YAAY,GAAG,KAAK,CAAuC,SAAS,CAAC;AACrE,IAAA,eAAe,GAAG,KAAK,CAAqB,SAAS,CAAC;AAE/D,IAAA,WAAA,GAAA;QACE,MAAM,CAAC,MAAK;AACV,YAAA,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE;AACtC,YAAA,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE;AAE5C,YAAA,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE;;AAG9B,YAAA,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;gBAC5D;YACF;;YAGA,IAAI,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE;gBACpE,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9D;AACF,QAAA,CAAC,CAAC;IACJ;wGA3BW,qBAAqB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;4FAArB,qBAAqB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,EAAA,YAAA,EAAA,EAAA,iBAAA,EAAA,cAAA,EAAA,UAAA,EAAA,cAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,eAAA,EAAA,EAAA,iBAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,iBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;4FAArB,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBAHjC,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;;;MCCY,iBAAiB,CAAA;AAGlB,IAAA,aAAA;AACA,IAAA,iBAAA;IAHV,WAAA,CAEU,aAAwE,EACxE,iBAAsC,EAAA;QADtC,IAAA,CAAA,aAAa,GAAb,aAAa;QACb,IAAA,CAAA,iBAAiB,GAAjB,iBAAiB;IACxB;IAEH,kBAAkB,GAAG,MAAmC;AACtD,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa;QACjC,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,EAAE;QACX;AACA,QAAA,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;AAClD,IAAA,CAAC;AAED,IAAA,WAAW,GAAG,OAAO,IAA4B,EAAE,KAA0B,KAAI;;AAE/E,QAAA,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;AACtE,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;AAED,IAAA,gBAAgB,GAAG,OAAO,cAAsC,EAAE,KAA0B,KAAI;QAC9F,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC;QACpD,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,GAAG,eAAe,CAAuB;QAClF,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE;AACnE,YAAA,OAAO,IAAI;QACb;AAEA,QAAA,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE;QAChD,MAAM,UAAU,GAAG;aAChB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,KAAK,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;aAC1G,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU;aAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;QACrB,UAAU,IAAI;AACd,QAAA,OAAO,KAAK;AACd,IAAA,CAAC;AAnCU,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,kBAElB,2BAA2B,EAAA,EAAA,EAAA,KAAA,EAAAA,mBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAF1B,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;0BAG7B,MAAM;2BAAC,2BAA2B;;;ACRvC;;AAEG;;;;"}

package/fesm2022/sd-angular-core-utilities-extensions.mjs

@@ -72,6 +72,13 @@ const format = (template, ...arr) => {
     }
     return template;
 };
+const getValueByPath = (entity, key) => {
+    let value = entity;
+    for (const part of key.split('.')) {
+        value = value?.[part];
+    }
+    return value;
+};
 // Convert: `[${code}] ${name}` => `[Mã] Tên`;
 const templateToDisplay = (template, entity) => {
     if (!template) {
@@ -82,54 +89,39 @@ const templateToDisplay = (template, entity) => {
     for (const match of matches) {
         const key = match.slice(2, match.length - 1);
         if (key) {
-            template = template.replace(match, entity?.[key] || '');
+            template = template.replace(match, getValueByPath(entity, key) ?? '');
         }
     }
     return template;
 };
-// Convert: `${name} === "Tên"` => true/false;
+const EXACT_TEMPLATE_REGEX = /^\$\{([A-Za-z0-9._-]*)\}$/;
+const NUMBER_LITERAL_REGEX = /^-?\d+(\.\d+)?$/;
+// Convert placeholder/literal an toàn, không thực thi JavaScript động.
 const parseExpression = (template, entity) => {
     if (!template) {
         return undefined;
     }
-    const regex = /\$\{([A-Za-z0-9._-]*)\}/g;
-    const matches = template.match(regex) || [];
-    for (const match of matches) {
-        const key = match.slice(2, match.length - 1);
-        if (key) {
-            // Xử lý trong trường hợp key có định dạng a.b.c ...
-            let val = entity;
-            const strs = key.split('.');
-            for (const str of strs) {
-                val = val?.[str];
-            }
-            if (typeof val === 'string') {
-                // Nếu là chuỗi thì thêm dấu nháy khi replace giá trị để so sánh, ví dụ 'a' === 'a'
-                // Nếu là số hay boolean thì không cần, ví dụ 121 === 121
-                template = template.replace(match, `'${val}'`);
-            }
-            else {
-                // Nếu là object/array thì phải dùng JSON.stringify
-                if (typeof val === 'object' && !!val) {
-                    template = template.replace(match, JSON.stringify(val) ?? `undefined`);
-                }
-                else {
-                    template = template.replace(match, val ?? `undefined`);
-                }
-            }
-        }
+    const trimmedTemplate = template.trim();
+    const exactTemplateMatch = trimmedTemplate.match(EXACT_TEMPLATE_REGEX);
+    if (exactTemplateMatch?.[1]) {
+        return getValueByPath(entity, exactTemplateMatch[1]);
     }
-    if (!template) {
-        return undefined;
+    if (trimmedTemplate === 'true') {
+        return true;
     }
-    try {
-        const result = new Function('return ' + template)();
-        return result;
+    if (trimmedTemplate === 'false') {
+        return false;
     }
-    catch (ex) {
-        console.error(ex);
+    if (trimmedTemplate === 'null') {
+        return null;
+    }
+    if (trimmedTemplate === 'undefined') {
         return undefined;
     }
+    if (NUMBER_LITERAL_REGEX.test(trimmedTemplate)) {
+        return Number(trimmedTemplate);
+    }
+    return templateToDisplay(template, entity);
 };
 const SALT = 'cb9f4b2a-d26c-4787-a66e-e7130ee00f95';
 const encrypt = (obj) => {