.
+COPY --from=builder --chown=dyolink:nodejs /app/public ./public
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
# Windows git/build context may use CRLF; strip before chmod (fixes dumb-init "No such file or directory").
diff --git a/frontend/README.md b/frontend/README.md
index dfc623d..e7b5349 100644
--- a/frontend/README.md
+++ b/frontend/README.md
@@ -60,4 +60,4 @@ npm install
## Docker
-Image build and build-args (`NEXT_PUBLIC_*`) are documented in the **repository root `README.md`**.
+Image build and build-args (`NEXT_PUBLIC_*`) are documented in the **repository root `README.md`**. Next `standalone` does not include `public/` — `frontend/Dockerfile` copies it so `/prosthesis-catalog/*.svg` is served in production.
diff --git a/frontend/messages/en.json b/frontend/messages/en.json
index 0e05950..961fcbb 100644
--- a/frontend/messages/en.json
+++ b/frontend/messages/en.json
@@ -122,6 +122,9 @@
"labelCreatePassword": "Create password",
"labelConfirmPassword": "Confirm password",
"activateAccount": "Activate account",
+ "setPasswordTitle": "Set your password",
+ "setPasswordSubmit": "Set password",
+ "passwordSetupAlreadyDone": "This password setup link is no longer valid. You can log in now.",
"invitationAcceptedRedirect": "Invitation accepted. Opening your workspace...",
"invitationAcceptedSignInFailed": "Account activated, but sign-in failed. Please log in with your password.",
"errorAcceptInvitation": "Could not accept invitation",
@@ -156,9 +159,8 @@
"verifyFailed": "Invalid or expired verification code."
},
"landing": {
- "heroTitle": "Connect Dental Clinics & Labs",
- "heroHighlight": "Seamlessly",
- "heroSubtitle": "Streamline communication between dental professionals. Start with a 30-day free trial, no credit card required.",
+ "heroTitle": "Nudentic is a digital workflow platform for modern dentistry.",
+ "heroSubtitle": "It brings clinical and laboratory workflows, case information, communication, and patient records into one structured environment.",
"featureClinicsTitle": "For Clinics",
"featureClinicsDescription": "Manage patients, appointments, and send cases to labs instantly.",
"featureLabsTitle": "For Labs",
@@ -322,6 +324,18 @@
"disableBullet3": "Disabling frees one seat on your plan so you can invite someone else.",
"disableMemberButton": "Disable member",
"editModalTitle": "Edit member",
+ "removePassword": "Remove password",
+ "copyPasswordSetupLink": "Copy password setup link",
+ "removePasswordModalTitle": "Remove password",
+ "removePasswordConfirm": "Remove the password for {name} ({email})?",
+ "removePasswordBullet1": "They will not be able to sign in until they set a new password with the setup link.",
+ "removePasswordBullet2": "You cannot choose their new password. Share the setup link with them.",
+ "removePasswordBullet3": "This signs them out of every organization they belong to.",
+ "removePasswordButton": "Remove password and copy link",
+ "passwordSetupLinkHeading": "Password setup link",
+ "passwordSetupShareHint": "Share this link so they can set a new password. Login will fail until they finish.",
+ "successPasswordCleared": "Password removed for {name}. Share the setup link with them.",
+ "errorClearPassword": "Could not remove the password.",
"loadingWorkingHours": "Loading working hours…",
"errorLoadStaff": "Failed to load staff.",
"errorCopyInvite": "Could not copy invitation link.",
@@ -1214,6 +1228,7 @@
"APPOINTMENT_NOT_FOUND": "Appointment not found.",
"APPOINTMENT_NOT_PROVIDER": "You are not the provider for this appointment.",
"PATIENT_NOT_FOUND": "Patient not found.",
+ "PATIENT_MOBILE_UNAVAILABLE": "This mobile number cannot be added for this clinic.",
"WORKING_HOURS_INVALID": "Working hours are invalid. Check that shifts do not overlap.",
"WORKING_HOURS_OWNER_NOT_ALLOWED": "Set owner working hours from account settings.",
"WORKING_HOURS_CONFLICTS_WITH_APPOINTMENTS": "These hours conflict with upcoming appointments. Reschedule or remove those appointments first.",
@@ -1237,6 +1252,8 @@
"STAFF_CANNOT_ENABLE_OWNER": "The organization owner cannot be enabled this way.",
"STAFF_CANNOT_DISABLE_OWNER": "The organization owner cannot be disabled.",
"STAFF_CANNOT_REMOVE_OWNER": "The organization owner cannot be removed.",
+ "STAFF_CANNOT_CLEAR_OWN_PASSWORD": "You cannot remove your own password here. Use account settings or forgot password.",
+ "STAFF_PASSWORD_CLEAR_ACTIVE_ONLY": "Password can only be removed for active members. Pending members use the invitation link.",
"ORG_CANNOT_LINK_SELF": "You cannot link an organization to itself.",
"ORG_LINK_WRONG_TYPE": "You can only link to the matching organization type (clinic or lab).",
"ORG_TARGET_NO_SUBSCRIPTION": "The other organization does not have an active subscription.",
diff --git a/frontend/messages/fa.json b/frontend/messages/fa.json
index 23565fe..9023f7b 100644
--- a/frontend/messages/fa.json
+++ b/frontend/messages/fa.json
@@ -122,6 +122,9 @@
"labelCreatePassword": "ایجاد رمز عبور",
"labelConfirmPassword": "تأیید رمز عبور",
"activateAccount": "فعالسازی حساب",
+ "setPasswordTitle": "رمز عبور خود را تنظیم کنید",
+ "setPasswordSubmit": "تنظیم رمز عبور",
+ "passwordSetupAlreadyDone": "این لینک تنظیم رمز دیگر معتبر نیست. اکنون میتوانید وارد شوید.",
"invitationAcceptedRedirect": "دعوتنامه پذیرفته شد. در حال ورود به فضای کاری...",
"invitationAcceptedSignInFailed": "حساب فعال شد، اما ورود انجام نشد. لطفاً با رمز عبور خود وارد شوید.",
"errorAcceptInvitation": "پذیرش دعوتنامه امکانپذیر نبود",
@@ -156,9 +159,8 @@
"verifyFailed": "کد تأیید نامعتبر یا منقضی شده است."
},
"landing": {
- "heroTitle": "اتصال کلینیکها و لابراتوارهای دندانپزشکی",
- "heroHighlight": "بهصورت یکپارچه",
- "heroSubtitle": "ارتباط بین متخصصان دندانپزشکی را ساده و سریع کنید. با یک دوره آزمایشی رایگان ۳۰ روزه، بدون نیاز به کارت اعتباری، شروع کنید.",
+ "heroTitle": "Nudentic یک پلتفرم گردشکار دیجیتال برای دندانپزشکی مدرن است.",
+ "heroSubtitle": "این پلتفرم گردشکارهای بالینی و لابراتواری، اطلاعات پرونده، ارتباط و سوابق بیمار را در یک محیط ساختاریافته کنار هم میآورد.",
"featureClinicsTitle": "برای کلینیکها",
"featureClinicsDescription": "بیماران و نوبتها را مدیریت کنید و پروندهها را فوراً به لابراتوارها ارسال کنید.",
"featureLabsTitle": "برای لابراتوارها",
@@ -322,6 +324,18 @@
"disableBullet3": "غیرفعالسازی یک مجوز در طرح شما را آزاد میکند تا بتوانید شخص دیگری را دعوت کنید.",
"disableMemberButton": "غیرفعالسازی عضو",
"editModalTitle": "ویرایش عضو",
+ "removePassword": "حذف رمز عبور",
+ "copyPasswordSetupLink": "کپی لینک تنظیم رمز",
+ "removePasswordModalTitle": "حذف رمز عبور",
+ "removePasswordConfirm": "رمز عبور {name} ({email}) حذف شود؟",
+ "removePasswordBullet1": "تا وقتی با لینک تنظیم، رمز جدید نگذارند، نمیتوانند وارد شوند.",
+ "removePasswordBullet2": "شما رمز جدید را انتخاب نمیکنید. لینک تنظیم را برایشان بفرستید.",
+ "removePasswordBullet3": "از همه سازمانهایی که عضو آن هستند خارج میشوند.",
+ "removePasswordButton": "حذف رمز و کپی لینک",
+ "passwordSetupLinkHeading": "لینک تنظیم رمز عبور",
+ "passwordSetupShareHint": "این لینک را به اشتراک بگذارید تا رمز جدید بگذارند. تا تکمیل این کار ورود ناموفق است.",
+ "successPasswordCleared": "رمز {name} حذف شد. لینک تنظیم را برایشان بفرستید.",
+ "errorClearPassword": "حذف رمز عبور امکانپذیر نبود.",
"loadingWorkingHours": "در حال بارگذاری ساعات کاری...",
"errorLoadStaff": "بارگذاری کارکنان ناموفق بود.",
"errorCopyInvite": "کپی لینک دعوتنامه امکانپذیر نبود.",
@@ -1215,6 +1229,7 @@
"APPOINTMENT_NOT_FOUND": "نوبت یافت نشد.",
"APPOINTMENT_NOT_PROVIDER": "شما ارائهدهنده این نوبت نیستید.",
"PATIENT_NOT_FOUND": "بیمار یافت نشد.",
+ "PATIENT_MOBILE_UNAVAILABLE": "این شماره موبایل را نمیتوان برای این کلینیک ثبت کرد.",
"WORKING_HOURS_INVALID": "ساعات کاری نامعتبر است. همپوشانی شیفتها را بررسی کنید.",
"WORKING_HOURS_OWNER_NOT_ALLOWED": "ساعات کاری مالک را از تنظیمات حساب تنظیم کنید.",
"WORKING_HOURS_CONFLICTS_WITH_APPOINTMENTS": "این ساعات با نوبتهای آینده تداخل دارد. ابتدا آن نوبتها را تغییر دهید یا حذف کنید.",
@@ -1238,6 +1253,8 @@
"STAFF_CANNOT_ENABLE_OWNER": "مالک سازمان را نمیتوان اینگونه فعال کرد.",
"STAFF_CANNOT_DISABLE_OWNER": "مالک سازمان را نمیتوان غیرفعال کرد.",
"STAFF_CANNOT_REMOVE_OWNER": "مالک سازمان را نمیتوان حذف کرد.",
+ "STAFF_CANNOT_CLEAR_OWN_PASSWORD": "نمیتوانید رمز عبور خود را از اینجا حذف کنید. از تنظیمات حساب یا فراموشی رمز استفاده کنید.",
+ "STAFF_PASSWORD_CLEAR_ACTIVE_ONLY": "رمز عبور را فقط برای اعضای فعال میتوان حذف کرد. اعضای در انتظار از لینک دعوت استفاده میکنند.",
"ORG_CANNOT_LINK_SELF": "نمیتوانید سازمان را به خودش متصل کنید.",
"ORG_LINK_WRONG_TYPE": "فقط میتوانید به نوع سازمان متناظر (کلینیک یا لابراتوار) متصل شوید.",
"ORG_TARGET_NO_SUBSCRIPTION": "سازمان مقابل اشتراک فعال ندارد.",
diff --git a/frontend/messages/nl.json b/frontend/messages/nl.json
index 16f4b43..f3cc81e 100644
--- a/frontend/messages/nl.json
+++ b/frontend/messages/nl.json
@@ -122,6 +122,9 @@
"labelCreatePassword": "Wachtwoord aanmaken",
"labelConfirmPassword": "Bevestig wachtwoord",
"activateAccount": "Account activeren",
+ "setPasswordTitle": "Stel uw wachtwoord in",
+ "setPasswordSubmit": "Wachtwoord instellen",
+ "passwordSetupAlreadyDone": "Deze wachtwoordlink is niet meer geldig. U kunt nu inloggen.",
"invitationAcceptedRedirect": "Uitnodiging geaccepteerd. Uw werkruimte wordt geopend...",
"invitationAcceptedSignInFailed": "Account geactiveerd, maar aanmelden is mislukt. Log in met uw wachtwoord.",
"errorAcceptInvitation": "Kon uitnodiging niet accepteren",
@@ -156,9 +159,8 @@
"verifyFailed": "Ongeldige of verlopen verificatiecode."
},
"landing": {
- "heroTitle": "Verbind Tandheelkundige Klinieken & Laboratoria",
- "heroHighlight": "Naadloos",
- "heroSubtitle": "Stroomlijn de communicatie tussen tandheelkundige professionals. Start met een gratis proefperiode van 30 dagen, zonder creditcard.",
+ "heroTitle": "Nudentic is een digitaal workflowplatform voor de moderne tandheelkunde.",
+ "heroSubtitle": "Het brengt klinische en laboratoriumworkflows, casusinformatie, communicatie en patiëntendossiers samen in één gestructureerde omgeving.",
"featureClinicsTitle": "Voor Klinieken",
"featureClinicsDescription": "Beheer patiënten, afspraken en stuur casussen direct naar laboratoria.",
"featureLabsTitle": "Voor Laboratoria",
@@ -322,6 +324,18 @@
"disableBullet3": "Uitschakelen maakt één plaats vrij in uw abonnement, zodat u iemand anders kunt uitnodigen.",
"disableMemberButton": "Lid uitschakelen",
"editModalTitle": "Lid bewerken",
+ "removePassword": "Wachtwoord verwijderen",
+ "copyPasswordSetupLink": "Wachtwoordlink kopiëren",
+ "removePasswordModalTitle": "Wachtwoord verwijderen",
+ "removePasswordConfirm": "Wachtwoord van {name} ({email}) verwijderen?",
+ "removePasswordBullet1": "Zij kunnen niet inloggen tot ze via de instellink een nieuw wachtwoord kiezen.",
+ "removePasswordBullet2": "U kunt hun nieuwe wachtwoord niet kiezen. Deel de instellink met hen.",
+ "removePasswordBullet3": "Dit meldt hen af bij elke organisatie waar zij lid van zijn.",
+ "removePasswordButton": "Wachtwoord verwijderen en link kopiëren",
+ "passwordSetupLinkHeading": "Wachtwoord-instellink",
+ "passwordSetupShareHint": "Deel deze link zodat zij een nieuw wachtwoord kunnen instellen. Inloggen mislukt tot dat is afgerond.",
+ "successPasswordCleared": "Wachtwoord van {name} is verwijderd. Deel de instellink met hen.",
+ "errorClearPassword": "Kon het wachtwoord niet verwijderen.",
"loadingWorkingHours": "Werktijden laden...",
"errorLoadStaff": "Medewerkers laden mislukt.",
"errorCopyInvite": "Kon uitnodigingslink niet kopiëren.",
@@ -1214,6 +1228,7 @@
"APPOINTMENT_NOT_FOUND": "Afspraak niet gevonden.",
"APPOINTMENT_NOT_PROVIDER": "U bent niet de zorgverlener van deze afspraak.",
"PATIENT_NOT_FOUND": "Patiënt niet gevonden.",
+ "PATIENT_MOBILE_UNAVAILABLE": "Dit mobiele nummer kan niet voor deze kliniek worden toegevoegd.",
"WORKING_HOURS_INVALID": "De werktijden zijn ongeldig. Controleer of diensten niet overlappen.",
"WORKING_HOURS_OWNER_NOT_ALLOWED": "Stel werktijden van de eigenaar in via accountinstellingen.",
"WORKING_HOURS_CONFLICTS_WITH_APPOINTMENTS": "Deze tijden conflicteren met aankomende afspraken. Plan die eerst om of verwijder ze.",
@@ -1237,6 +1252,8 @@
"STAFF_CANNOT_ENABLE_OWNER": "De eigenaar kan op deze manier niet worden ingeschakeld.",
"STAFF_CANNOT_DISABLE_OWNER": "De eigenaar kan niet worden uitgeschakeld.",
"STAFF_CANNOT_REMOVE_OWNER": "De eigenaar kan niet worden verwijderd.",
+ "STAFF_CANNOT_CLEAR_OWN_PASSWORD": "U kunt hier uw eigen wachtwoord niet verwijderen. Gebruik accountinstellingen of wachtwoord vergeten.",
+ "STAFF_PASSWORD_CLEAR_ACTIVE_ONLY": "Het wachtwoord kan alleen voor actieve leden worden verwijderd. Leden in afwachting gebruiken de uitnodigingslink.",
"ORG_CANNOT_LINK_SELF": "U kunt een organisatie niet aan zichzelf koppelen.",
"ORG_LINK_WRONG_TYPE": "U kunt alleen koppelen aan het bijbehorende type (kliniek of lab).",
"ORG_TARGET_NO_SUBSCRIPTION": "De andere organisatie heeft geen actief abonnement.",
diff --git a/frontend/src/app/[locale]/(public)/accept-invite/page.tsx b/frontend/src/app/[locale]/(public)/accept-invite/page.tsx
index cf86a72..f69f07b 100644
--- a/frontend/src/app/[locale]/(public)/accept-invite/page.tsx
+++ b/frontend/src/app/[locale]/(public)/accept-invite/page.tsx
@@ -30,6 +30,7 @@ function AcceptInviteContent() {
organizationName: string;
expiresAt: string;
status: 'PENDING' | 'ACCEPTED';
+ mode: 'join' | 'password_setup';
} | null>(null);
const [name, setName] = useState('');
@@ -48,10 +49,17 @@ function AcceptInviteContent() {
setError('');
try {
const res = await staffApi.previewInvite(token);
- setInviteInfo(res.data);
+ setInviteInfo({
+ ...res.data,
+ mode: res.data.mode === 'password_setup' ? 'password_setup' : 'join',
+ });
setName(res.data.name || '');
if (res.data.status === 'ACCEPTED') {
- setSuccess(t('invitationAlreadyAccepted'));
+ setSuccess(
+ res.data.mode === 'password_setup'
+ ? t('passwordSetupAlreadyDone')
+ : t('invitationAlreadyAccepted'),
+ );
}
} catch (e: unknown) {
setError(getUserFacingError(e, tErrors, t('errorLoadInvitation')));
@@ -65,7 +73,9 @@ function AcceptInviteContent() {
if (!token) return;
setError('');
setSuccess('');
- if (!name.trim()) {
+ const isPasswordSetup = inviteInfo?.mode === 'password_setup';
+ const nameToSubmit = isPasswordSetup ? (inviteInfo?.name || '').trim() : name.trim();
+ if (!isPasswordSetup && !nameToSubmit) {
setError(t('nameRequired'));
return;
}
@@ -83,7 +93,7 @@ function AcceptInviteContent() {
try {
await staffApi.acceptInvite({
token,
- name: name.trim(),
+ name: nameToSubmit || inviteInfo?.name || '',
password,
});
accepted = true;
@@ -115,7 +125,9 @@ function AcceptInviteContent() {
return (
-
+
>({});
+ const [lastPasswordSetupInfo, setLastPasswordSetupInfo] = useState<{
+ membershipId: string;
+ name: string;
+ email: string;
+ invitationUrl: string;
+ } | null>(null);
const [editing, setEditing] = useState(null);
const [editStep, setEditStep] = useState<1 | 2>(1);
@@ -205,6 +215,8 @@ export function StaffPage() {
const [disablingMembershipId, setDisablingMembershipId] = useState(null);
const [enableTarget, setEnableTarget] = useState(null);
const [enablingMembershipId, setEnablingMembershipId] = useState(null);
+ const [clearPasswordTarget, setClearPasswordTarget] = useState(null);
+ const [clearingMembershipId, setClearingMembershipId] = useState(null);
const canEdit = useMemo(() => canEditStaff(currentOrganization), [currentOrganization]);
const highlightMembershipIds = useMemo(
@@ -520,6 +532,45 @@ export function StaffPage() {
}
}
+ async function issuePasswordSetupLink(member: StaffMemberDto, copyToClipboard: boolean) {
+ setClearingMembershipId(member.id);
+ toast.setError('');
+ try {
+ const res = await staffApi.clearPassword(member.id);
+ setLastPasswordSetupInfo({
+ membershipId: member.id,
+ name: member.name,
+ email: member.email,
+ invitationUrl: res.data.invitationUrl,
+ });
+ setClearPasswordTarget(null);
+ setEditing(null);
+ setEditStep(1);
+ await load();
+ toast.showSuccess(t('successPasswordCleared', { name: member.name }));
+ if (copyToClipboard) {
+ try {
+ await navigator.clipboard.writeText(res.data.invitationUrl);
+ setCopiedInviteMembershipId(member.id);
+ setTimeout(() => setCopiedInviteMembershipId(null), 1500);
+ } catch {
+ /* banner still shows the URL */
+ }
+ }
+ } catch (e) {
+ toast.showError(getUserFacingError(e, tErrors, t('errorClearPassword')));
+ } finally {
+ setClearingMembershipId(null);
+ }
+ }
+
+ async function confirmClearPassword() {
+ if (!clearPasswordTarget || !canIssuePasswordSetup(clearPasswordTarget, user?.id)) {
+ return;
+ }
+ await issuePasswordSetupLink(clearPasswordTarget, true);
+ }
+
if (!currentOrganization || !canViewStaff(currentOrganization)) {
return (
)}
+ {lastPasswordSetupInfo && (
+
+
{t('heroTitle')}
- {t('heroHighlight')}
-
+
{t('heroSubtitle')}
diff --git a/frontend/src/components/ui/staff/StaffPage.tsx b/frontend/src/components/ui/staff/StaffPage.tsx index fe4c64b..a90af2c 100644 --- a/frontend/src/components/ui/staff/StaffPage.tsx +++ b/frontend/src/components/ui/staff/StaffPage.tsx @@ -79,6 +79,10 @@ function canShareStaffInviteLink(member: StaffMemberDto): boolean { ); } +function canIssuePasswordSetup(member: StaffMemberDto, actorUserId?: string): boolean { + return !member.isOwner && member.isActive && member.userId !== actorUserId; +} + function canDisableStaff(member: StaffMemberDto): boolean { return !member.isOwner && member.isActive; } @@ -189,6 +193,12 @@ export function StaffPage() { invitationStatus: 'PENDING' | 'ACCEPTED'; } | null>(null); const [pendingInviteLinks, setPendingInviteLinks] = useState{t('redirecting')}
@@ -640,6 +691,54 @@ export function StaffPage() {
+
+
+ )}
+
{loading ? (
+ {t('successPasswordCleared', { name: lastPasswordSetupInfo.name })} +
+
+
+ + {t('passwordSetupLinkHeading')} +
+
+ {lastPasswordSetupInfo.invitationUrl}
+
+
+ {t('passwordSetupShareHint')}
+{t('loadingTeam')}
) : ( @@ -1061,6 +1160,59 @@ export function StaffPage() {