packages/auth/CHANGELOG.md

# @marketplaces/auth

## 0.3.0

### Minor Changes

- Add `AdminAuthService.loginWithCredentials(credentials)`, a convenience wrapper around the existing `MarketplacesAuthGateway.loginWithCredentials('admin', credentials)` call that activates the returned session on success. Lets a consuming app build a fully custom admin login screen with one call instead of wiring the gateway token directly.

  `AuthFailure` gained a `rate_limited` code (mapped from HTTP 429, with a parsed `retryAfterSeconds` from the `Retry-After` header) plus an optional `status` field, so a custom login UI can distinguish invalid credentials, rate-limiting/lockout, and other backend failures without new plumbing. Existing `invalid_credentials`/`backend` mapping is unchanged.

  This ships **no credentials, no username/password comparison, and no notion of a privileged account** anywhere in this package — it is the exact same code path as any other admin credential login. It is inert until a real backend implements `POST {credentialsPath}` with `{ login, password, mode: 'admin' }` and returns a verified, audit-logged session for whatever account the backend chooses to treat specially. Additive and backward-compatible with the existing `qr`/`credentials`/`yandex` flows, which are unmodified.

## 0.2.0

### Minor Changes

- 5ffc1b1: Add standalone central-API Angular auth and payment components with domain project context.
chore(release): version packages at 0.2.0 2026-08-21 08:14:06 +04:00			`# @marketplaces/auth`

feat(auth): add AdminAuthService.loginWithCredentials + rate_limited AuthFailure code Convenience wrapper around MarketplacesAuthGateway.loginWithCredentials('admin', ...) that activates the returned session in one call, for apps building a custom admin login screen. AuthFailure gains a rate_limited code (HTTP 429, parsed Retry-After) and an optional status field so 401/403/429 surface distinctly without new plumbing. No credentials, no client-side comparison, no superadmin concept anywhere in this package - same code path as any other admin credential login. Inert without a backend implementing POST {credentialsPath} { login, password, mode: 'admin' }. Additive, backward-compatible. QR/Yandex flows unmodified. 2026-08-23 21:33:52 +04:00			`## 0.3.0`

			`### Minor Changes`

			- Add `AdminAuthService.loginWithCredentials(credentials)`, a convenience wrapper around the existing `MarketplacesAuthGateway.loginWithCredentials('admin', credentials)` call that activates the returned session on success. Lets a consuming app build a fully custom admin login screen with one call instead of wiring the gateway token directly.

			`AuthFailure` gained a `rate_limited` code (mapped from HTTP 429, with a parsed `retryAfterSeconds` from the `Retry-After` header) plus an optional `status` field, so a custom login UI can distinguish invalid credentials, rate-limiting/lockout, and other backend failures without new plumbing. Existing `invalid_credentials`/`backend` mapping is unchanged.

			This ships no credentials, no username/password comparison, and no notion of a privileged account anywhere in this package — it is the exact same code path as any other admin credential login. It is inert until a real backend implements `POST {credentialsPath}` with `{ login, password, mode: 'admin' }` and returns a verified, audit-logged session for whatever account the backend chooses to treat specially. Additive and backward-compatible with the existing `qr`/`credentials`/`yandex` flows, which are unmodified.

chore(release): version packages at 0.2.0 2026-08-21 08:14:06 +04:00			`## 0.2.0`

			`### Minor Changes`

			`- 5ffc1b1: Add standalone central-API Angular auth and payment components with domain project context.`