@acorex-platform/framework-client 0.0.37 → 0.0.38

package/fesm2022/acorex-platform-framework-client-common.mjs

@@ -9410,6 +9410,17 @@ class AXPMenuRouteAccessService {
         if (this.hasDeclaredRoutePolicy(route)) {
             return this.evaluateDeclaredRoutePolicy(route);
         }
+        return this.canAccessUrl(url);
+    }
+    /**
+     * Menu-policy check for a URL (no route snapshot). Used by Open Details before navigate.
+     * No matching menu item → allowed (lookup targets that are not in the menu).
+     */
+    async canAccessUrl(url) {
+        const normalizedUrl = this.normalizeUrl(url);
+        if (SKIP_ROUTE_PATHS.has(normalizedUrl) || SKIP_ROUTE_PREFIXES.some((prefix) => normalizedUrl.startsWith(prefix))) {
+            return true;
+        }
         // Avoid building/caching a shell-less menu tree before session is Authorized.
         if (!this.sessionService.isAuthorized) {
             return true;
@@ -9419,10 +9430,7 @@ class AXPMenuRouteAccessService {
         if (!menuMatch) {
             return true;
         }
-        if (this.menuVisibility.isMenuBranchVisible(menuMatch.item, menuMatch.ancestors)) {
-            return true;
-        }
-        return false;
+        return this.menuVisibility.isMenuBranchVisible(menuMatch.item, menuMatch.ancestors);
     }
     //#endregion
     //#region ----   Utility Methods   ----
@@ -9493,6 +9501,15 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
         }] });
 
 const APP_CHOOSER_ROUTE = '/auth/account/app-chooser';
+/** In-app navigations (e.g. Open Details) stay put instead of redirecting to 401. */
+function axpShouldStayOnCurrentPage(router, targetUrl) {
+    const currentPath = router.url.split('#')[0]?.split('?')[0] ?? '';
+    const targetPath = targetUrl.split('#')[0]?.split('?')[0] ?? '';
+    if (!currentPath || currentPath === '/' || currentPath === targetPath) {
+        return false;
+    }
+    return !currentPath.startsWith('/auth') && !currentPath.startsWith('/error');
+}
 /**
 
  * Blocks navigation when the target route is not accessible for the current user.
@@ -9519,6 +9536,9 @@ const AXPMenuRouteGuard = (route, state) => {
         if (isAllowed instanceof UrlTree) {
             return isAllowed;
         }
+        if (axpShouldStayOnCurrentPage(router, state.url)) {
+            return false;
+        }
         return router.parseUrl(AXP_UNAUTHORIZED_ROUTE);
     }));
 };