Files
vitanovaPackages/packages/auth/CHANGELOG.md
sdarbinyan 3bc2a42488 feat(auth): add AdminAuthService.loginWithCredentials + rate_limited AuthFailure code
Convenience wrapper around MarketplacesAuthGateway.loginWithCredentials('admin', ...)
that activates the returned session in one call, for apps building a custom admin
login screen. AuthFailure gains a rate_limited code (HTTP 429, parsed Retry-After)
and an optional status field so 401/403/429 surface distinctly without new plumbing.

No credentials, no client-side comparison, no superadmin concept anywhere in this
package - same code path as any other admin credential login. Inert without a
backend implementing POST {credentialsPath} { login, password, mode: 'admin' }.

Additive, backward-compatible. QR/Yandex flows unmodified.
2026-08-23 21:33:52 +04:00

1.4 KiB

@marketplaces/auth

0.3.0

Minor Changes

  • Add AdminAuthService.loginWithCredentials(credentials), a convenience wrapper around the existing MarketplacesAuthGateway.loginWithCredentials('admin', credentials) call that activates the returned session on success. Lets a consuming app build a fully custom admin login screen with one call instead of wiring the gateway token directly.

    AuthFailure gained a rate_limited code (mapped from HTTP 429, with a parsed retryAfterSeconds from the Retry-After header) plus an optional status field, so a custom login UI can distinguish invalid credentials, rate-limiting/lockout, and other backend failures without new plumbing. Existing invalid_credentials/backend mapping is unchanged.

    This ships no credentials, no username/password comparison, and no notion of a privileged account anywhere in this package — it is the exact same code path as any other admin credential login. It is inert until a real backend implements POST {credentialsPath} with { login, password, mode: 'admin' } and returns a verified, audit-logged session for whatever account the backend chooses to treat specially. Additive and backward-compatible with the existing qr/credentials/yandex flows, which are unmodified.

0.2.0

Minor Changes

  • 5ffc1b1: Add standalone central-API Angular auth and payment components with domain project context.