@things-factory/auth-ui 10.1.232 → 10.1.234

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-ui",
-  "version": "10.1.232",
+  "version": "10.1.234",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -42,12 +42,12 @@
     "@operato/shell": "^10.29.39",
     "@operato/styles": "^10.0.0",
     "@operato/utils": "^10.29.39",
-    "@things-factory/apptool-base": "^10.1.228",
-    "@things-factory/auth-base": "^10.1.232",
-    "@things-factory/component-ui": "^10.1.232",
-    "@things-factory/more-base": "^10.1.228",
+    "@things-factory/apptool-base": "^10.1.234",
+    "@things-factory/auth-base": "^10.1.234",
+    "@things-factory/component-ui": "^10.1.234",
+    "@things-factory/more-base": "^10.1.234",
     "base64url": "^3.0.1",
     "clipboard": "^2.0.6"
   },
-  "gitHead": "9307e1db833f13018e3f0ca9b1050f947cbefd68"
+  "gitHead": "92f29853680fff527a5f1d167ab3ad9b27837ba9"
 }

package/tests/domain-words.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Inline help audit 2026-10-30: the domain popup's refusal key held a ':' - i18next's namespace separator - so its
+ * Korean was never reached; typing and sending checked two different rules; the theme column offered `ocean-blue`.
+ */
+import { readFileSync } from 'fs'
+import { join } from 'path'
+
+const ROOT = join(__dirname, '..')
+const read = (file: string) => readFileSync(join(ROOT, file), 'utf8')
+const ko: Record<string, string> = JSON.parse(read('translations/ko.json'))
+
+test('★ the domain name refusal is a key i18next can reach, and typing and sending check one rule', () => {
+  const popup = read('client/components/create-domain-popup.ts')
+  expect(Object.keys(ko).filter(key => /^error: /.test(key))).toEqual([])
+  expect(popup).toMatch(/i18next\.t\('error\.domain-name-characters'\)/)
+  expect(popup.match(/DOMAIN_NAME\.test\(/g)?.length).toBe(2)
+  expect(popup).toMatch(/const DOMAIN_NAME = \/\^\[a-zA-Z0-9- \]\+\$\/\n/)
+  expect(ko['error.domain-name-characters']).toBeTruthy()
+})
+
+test('★ the theme column shows the theme’s name, not its id', () => {
+  const page = read('client/pages/domain/domain-management.ts')
+  expect(page).not.toMatch(/options: \['', 'ocean-blue'/)
+  for (const theme of ['ocean-blue', 'forest-green', 'sunset-orange', 'royal-purple', 'cherry-red']) expect([theme, !!ko[`label.theme-${theme}`]]).toEqual([theme, true])
+})

package/tests/password-rule-shown.test.ts

@@ -0,0 +1,42 @@
+import { readFileSync } from 'fs'
+import path from 'path'
+
+/**
+ * The rule a person reads under the new password is the server's rule.
+ *
+ * The profile handed the change-password form the whole query answer (`{ passwordRule }`) instead of the rule,
+ * so every field read as missing and the form drew the default rule - uppercase required, no repeats - which
+ * the server did not enforce. The form also copied the rule into plain fields in updated(), after its render
+ * had read them.
+ */
+
+const read = (file: string) => readFileSync(path.resolve(__dirname, '..', file), 'utf-8')
+
+describe('the password rule shown is the server rule', () => {
+  it('★ the profile hands over the rule, not the query answer', () => {
+    const source = read('client/components/profile-component.ts')
+    expect(source).toMatch(/this\.passwordRule = response\.data\?\.passwordRule\b/)
+    expect(source).not.toMatch(/this\.passwordRule = response\.data\s*$/m)
+  })
+
+  it('★ the form draws the pattern and the help from the rule in render', () => {
+    const source = read('client/components/change-password.ts')
+    const render = source.match(/\n  render\(\) \{([\s\S]*?)\n  \}\n/)![1]
+    expect(render).toMatch(/generatePasswordPatternRegExp\(this\.passwordRule\)/)
+    expect(render).toMatch(/generatePasswordPatternHelp\(this\.passwordRule\)/)
+    expect(source).not.toMatch(/this\.passwordPattern|this\.passwordHelp/)
+  })
+
+  it('★ "no repeats" says what the server refuses: the same character 3 times in a row', () => {
+    const server = read('../auth-base/server/controllers/utils/password-rule.ts')
+    const repeat = server.match(/!allowRepeat \? '([^']+)'/)![1].replace(/\\\\/g, '\\')
+    const pattern = new RegExp(`^${repeat}.*$`)
+    expect(pattern.test('ab1aa')).toBe(true)
+    expect(pattern.test('ab1aaa')).toBe(false)
+
+    for (const locale of ['en', 'ko', 'ja', 'zh', 'ms', 'es']) {
+      const sentences = JSON.parse(read(`../auth-base/translations/${locale}.json`))
+      expect([locale, sentences['text.pattern_not_allowed']]).toEqual([locale, expect.stringContaining('3')])
+    }
+  })
+})

package/translations/en.json

@@ -53,7 +53,6 @@
   "error.user-locked": "user account is locked",
   "error.value is empty": "{value} is empty",
   "error.x already exists in y": "{x} already exists in {y}",
-  "error: domain name should consist only of letters or dashes": "a domain name can use letters and dashes only",
   "field.accepted at": "accepted at",
   "field.access token url": "access token url",
   "field.accessed-at": "accessed at",
@@ -118,7 +117,6 @@
   "label.all": "All",
   "label.application": "application",
   "label.banned-user": "banned",
-  "label.blacklist": "blacklist",
   "label.category": "category",
   "label.change password": "change password",
   "label.client-id": "client id",
@@ -146,7 +144,6 @@
   "label.password": "password",
   "label.privilege": "privilege",
   "label.protected-request-ip": "safe request IP",
-  "label.protectedlist": "protected IP list",
   "label.read": "Read",
   "label.redirect_uri": "redirect uri",
   "label.refresh token": "refresh token",
@@ -162,7 +159,6 @@
   "label.user": "user",
   "label.user-id": "user ID",
   "label.vendors": "vendors",
-  "label.whitelist": "whitelist",
   "label.write": "Write",
   "label.x description": "{x} description",
   "label.x name": "{x} name",
@@ -538,5 +534,11 @@
   "label.no template": "no template",
   "text.an empty role with no privileges": "an empty role with no privileges",
   "text.add starts the role as the template is": "Press {add} to start the new role with the picked template's tasks and privileges. Change them later with {edit} in the list.",
-  "text.add starts an empty role": "Press {add} to start an empty role with no privileges. Give it privileges with {edit} in the list."
+  "text.add starts an empty role": "Press {add} to start an empty role with no privileges. Give it privileges with {edit} in the list.",
+  "error.domain-name-characters": "a domain name can use letters, digits, dashes and spaces only",
+  "label.theme-ocean-blue": "ocean blue",
+  "label.theme-forest-green": "forest green",
+  "label.theme-sunset-orange": "sunset orange",
+  "label.theme-royal-purple": "royal purple",
+  "label.theme-cherry-red": "cherry red"
 }

package/translations/es.json

@@ -53,7 +53,6 @@
   "error.user-locked": "la cuenta de usuario está bloqueada",
   "error.value is empty": "{value} está vacío",
   "error.x already exists in y": "{x} ya existe en {y}",
-  "error: domain name should consist only of letters or dashes": "el nombre de dominio solo puede contener letras y guiones",
   "field.accepted at": "fecha de aceptación",
   "field.access token url": "URL del token de acceso",
   "field.accessed-at": "fecha de acceso",
@@ -118,7 +117,6 @@
   "label.all": "Todos",
   "label.application": "aplicación",
   "label.banned-user": "vetado",
-  "label.blacklist": "lista de bloqueo",
   "label.category": "categoría",
   "label.change password": "cambiar contraseña",
   "label.client-id": "ID de cliente",
@@ -146,7 +144,6 @@
   "label.password": "contraseña",
   "label.privilege": "privilegio",
   "label.protected-request-ip": "IP de solicitud segura",
-  "label.protectedlist": "lista de IP protegidas",
   "label.read": "Lectura",
   "label.redirect_uri": "URI de redirección",
   "label.refresh token": "token de actualización",
@@ -162,7 +159,6 @@
   "label.user": "usuario",
   "label.user-id": "ID de usuario",
   "label.vendors": "proveedores",
-  "label.whitelist": "lista de permitidos",
   "label.write": "Escritura",
   "label.x description": "descripción de {x}",
   "label.x name": "nombre de {x}",
@@ -538,5 +534,11 @@
   "label.no template": "sin plantilla",
   "text.an empty role with no privileges": "un rol vacío sin privilegios",
   "text.add starts the role as the template is": "Pulse {add} para iniciar el nuevo rol con las tareas y privilegios de la plantilla elegida. Cámbielos después con {edit} en la lista.",
-  "text.add starts an empty role": "Pulse {add} para iniciar un rol vacío sin privilegios. Asígnelos después con {edit} en la lista."
+  "text.add starts an empty role": "Pulse {add} para iniciar un rol vacío sin privilegios. Asígnelos después con {edit} en la lista.",
+  "error.domain-name-characters": "el nombre de dominio solo puede contener letras, números, guiones y espacios",
+  "label.theme-ocean-blue": "azul océano",
+  "label.theme-forest-green": "verde bosque",
+  "label.theme-sunset-orange": "naranja atardecer",
+  "label.theme-royal-purple": "púrpura real",
+  "label.theme-cherry-red": "rojo cereza"
 }

package/translations/ja.json

@@ -47,7 +47,6 @@
   "error.user-locked": "アカウントがロックされました. メールで再アクティブ化してください.",
   "error.value is empty": "{value}の値が存在しません.",
   "error.x already exists in y": "{x}が既に{y}に存在します.",
-  "error: domain name should consist only of letters or dashes": "$t(term.domain)名には英字とハイフンのみ使えます",
   "field.accepted at": "承諾日時",
   "field.access token url": "access token url",
   "field.accessed-at": "ログイン日時",
@@ -101,7 +100,6 @@
   "label.admin-user": "管理者",
   "label.application": "応用プログラム",
   "label.banned-user": "使用禁止",
-  "label.blacklist": "ブラックリスト",
   "label.category": "カテゴリー",
   "label.change password": "パスワード変更",
   "label.client-id": "クライアントID",
@@ -124,7 +122,6 @@
   "label.password": "パスワード",
   "label.privilege": "特権",
   "label.protected-request-ip": "安全なリクエスト IP",
-  "label.protectedlist": "保護された IP リスト",
   "label.redirect_uri": "リダイレクトuri",
   "label.refresh token": "リフレッシュトークン",
   "label.resend": "再送信",
@@ -139,7 +136,6 @@
   "label.user": "ユーザー",
   "label.user-id": "ユーザーID",
   "label.vendors": "ベンダー",
-  "label.whitelist": "ホワイトリスト",
   "label.x description": "{x}説明",
   "label.x name": "{x}名前",
   "text.a role of this name exists and will be added to": "A role of this name already exists. It will be used as it stands and these privileges added to it.",
@@ -538,5 +534,11 @@
   "label.no template": "テンプレートなし",
   "text.an empty role with no privileges": "権限のない空のロール",
   "text.add starts the role as the template is": "「{add}」を押すと、選択したテンプレートと同じ業務・権限で新しいロールが始まります。変更は一覧の「{edit}」で行います。",
-  "text.add starts an empty role": "「{add}」を押すと、権限のない空のロールが始まります。権限は一覧の「{edit}」で付与します。"
+  "text.add starts an empty role": "「{add}」を押すと、権限のない空のロールが始まります。権限は一覧の「{edit}」で付与します。",
+  "error.domain-name-characters": "$t(term.domain)名には英字・数字・ハイフン・空白のみ使えます",
+  "label.theme-ocean-blue": "オーシャンブルー",
+  "label.theme-forest-green": "フォレストグリーン",
+  "label.theme-sunset-orange": "サンセットオレンジ",
+  "label.theme-royal-purple": "ロイヤルパープル",
+  "label.theme-cherry-red": "チェリーレッド"
 }

package/translations/ko.json

@@ -53,7 +53,6 @@
   "error.user-locked": "계정이 잠겼습니다. 이메일을 통해 재활성화하세요.",
   "error.value is empty": "{value}의 값이 존재하지 않습니다.",
   "error.x already exists in y": "{x}이/가 이미 {y}에 존재합니다.",
-  "error: domain name should consist only of letters or dashes": "$t(term.domain) 이름에는 영문자와 붙임표만 사용할 수 있습니다",
   "field.accepted at": "수락 시점",
   "field.access token url": "access token url",
   "field.accessed-at": "로그인 일시",
@@ -118,7 +117,6 @@
   "label.all": "전체",
   "label.application": "응용프로그램",
   "label.banned-user": "사용금지",
-  "label.blacklist": "블랙리스트",
   "label.category": "카테고리",
   "label.change password": "비밀번호 변경",
   "label.client-id": "클라이언트 아이디",
@@ -146,7 +144,6 @@
   "label.password": "비밀번호",
   "label.privilege": "권한",
   "label.protected-request-ip": "안전한 요청 IP",
-  "label.protectedlist": "보호 IP 리스트",
   "label.read": "읽기",
   "label.redirect_uri": "리디렉션 uri",
   "label.refresh token": "리프레시 토큰",
@@ -162,7 +159,6 @@
   "label.user": "사용자",
   "label.user-id": "사용자 아이디",
   "label.vendors": "공급 업체",
-  "label.whitelist": "화이트리스트",
   "label.write": "쓰기",
   "label.x description": "{x} 설명",
   "label.x name": "{x} 이름",
@@ -538,5 +534,11 @@
   "label.no template": "템플릿 없이",
   "text.an empty role with no privileges": "권한이 없는 빈 역할",
   "text.add starts the role as the template is": "「{add}」를 누르면 선택한 템플릿과 같은 업무 · 권한으로 새 역할이 시작됩니다. 고치는 것은 목록의 「{edit}」에서 합니다.",
-  "text.add starts an empty role": "「{add}」를 누르면 권한이 없는 빈 역할이 시작됩니다. 권한은 목록의 「{edit}」에서 줍니다."
+  "text.add starts an empty role": "「{add}」를 누르면 권한이 없는 빈 역할이 시작됩니다. 권한은 목록의 「{edit}」에서 줍니다.",
+  "error.domain-name-characters": "$t(term.domain) 이름에는 영문자·숫자·붙임표(-)·공백만 쓸 수 있습니다",
+  "label.theme-ocean-blue": "바다 파랑",
+  "label.theme-forest-green": "숲 초록",
+  "label.theme-sunset-orange": "노을 주황",
+  "label.theme-royal-purple": "로열 보라",
+  "label.theme-cherry-red": "체리 빨강"
 }

package/translations/ms.json

@@ -47,7 +47,6 @@
   "error.user-locked": "pengguna dikunci",
   "error.value is empty": "{value} kosong",
   "error.x already exists in y": "{x} telah wujud dalam {y}",
-  "error: domain name should consist only of letters or dashes": "nama domain hanya boleh menggunakan huruf dan sengkang",
   "field.accepted at": "diterima pada",
   "field.access token url": "access token url",
   "field.accessed-at": "diakses pada",
@@ -101,7 +100,6 @@
   "label.admin-user": "admin",
   "label.application": "aplikasi",
   "label.banned-user": "disenarai hitam",
-  "label.blacklist": "senarai hitam",
   "label.category": "kategori",
   "label.change password": "tukar kata laluan",
   "label.client-id": "id pelanggan",
@@ -124,7 +122,6 @@
   "label.password": "kata laluan",
   "label.privilege": "keistimewaan",
   "label.protected-request-ip": "IP permintaan yang selamat",
-  "label.protectedlist": "senarai IP yang dilindungi",
   "label.redirect_uri": "redirect uri",
   "label.refresh token": "token segar semula",
   "label.resend": "hantar semula",
@@ -139,7 +136,6 @@
   "label.user": "pengguna",
   "label.user-id": "ID pengguna",
   "label.vendors": "penjual",
-  "label.whitelist": "senarai putih",
   "label.x description": "{x} penerangan",
   "label.x name": "{x} nama",
   "text.a role of this name exists and will be added to": "A role of this name already exists. It will be used as it stands and these privileges added to it.",
@@ -538,5 +534,11 @@
   "label.no template": "tanpa templat",
   "text.an empty role with no privileges": "peranan kosong tanpa keistimewaan",
   "text.add starts the role as the template is": "Tekan {add} untuk memulakan peranan baharu dengan tugas dan keistimewaan templat yang dipilih. Ubahnya kemudian dengan {edit} dalam senarai.",
-  "text.add starts an empty role": "Tekan {add} untuk memulakan peranan kosong tanpa keistimewaan. Berikan keistimewaan dengan {edit} dalam senarai."
+  "text.add starts an empty role": "Tekan {add} untuk memulakan peranan kosong tanpa keistimewaan. Berikan keistimewaan dengan {edit} dalam senarai.",
+  "error.domain-name-characters": "nama domain hanya boleh menggunakan huruf, angka, sengkang dan ruang",
+  "label.theme-ocean-blue": "biru lautan",
+  "label.theme-forest-green": "hijau hutan",
+  "label.theme-sunset-orange": "jingga senja",
+  "label.theme-royal-purple": "ungu diraja",
+  "label.theme-cherry-red": "merah ceri"
 }

package/translations/zh.json

@@ -47,7 +47,6 @@
   "error.user-locked": "用户帐户已锁定",
   "error.value is empty": "{value}为空",
   "error.x already exists in y": "{x}已存在于{y}",
-  "error: domain name should consist only of letters or dashes": "$t(term.domain)名只能使用字母和连字符",
   "field.accepted at": "接受时间",
   "field.access token url": "access token url",
   "field.accessed-at": "访问于",
@@ -101,7 +100,6 @@
   "label.admin-user": "管理用户",
   "label.application": "应用程序",
   "label.banned-user": "黑名单用户",
-  "label.blacklist": "黑名单",
   "label.category": "类别",
   "label.change password": "更改密码",
   "label.client-id": "客户端id",
@@ -124,7 +122,6 @@
   "label.password": "密码",
   "label.privilege": "特权",
   "label.protected-request-ip": "安全请求 IP",
-  "label.protectedlist": "受保护的 IP 列表",
   "label.redirect_uri": "重定向URI",
   "label.refresh token": "刷新令牌",
   "label.resend": "发过验证邮件",
@@ -139,7 +136,6 @@
   "label.user": "用户",
   "label.user-id": "用户ID",
   "label.vendors": "供应商",
-  "label.whitelist": "白名单",
   "label.x description": "{x} 描述",
   "label.x name": "{x} 名称",
   "text.a role of this name exists and will be added to": "A role of this name already exists. It will be used as it stands and these privileges added to it.",
@@ -538,5 +534,11 @@
   "label.no template": "不使用模板",
   "text.an empty role with no privileges": "没有权限的空角色",
   "text.add starts the role as the template is": "按「{add}」将以所选模板相同的业务与权限创建新角色。之后在列表的「{edit}」中修改。",
-  "text.add starts an empty role": "按「{add}」将创建没有权限的空角色。之后在列表的「{edit}」中授予权限。"
+  "text.add starts an empty role": "按「{add}」将创建没有权限的空角色。之后在列表的「{edit}」中授予权限。",
+  "error.domain-name-characters": "$t(term.domain)名只能使用字母、数字、连字符和空格",
+  "label.theme-ocean-blue": "海洋蓝",
+  "label.theme-forest-green": "森林绿",
+  "label.theme-sunset-orange": "日落橙",
+  "label.theme-royal-purple": "皇家紫",
+  "label.theme-cherry-red": "樱桃红"
 }