@mcurros2/microm 1.1.167-0 → 1.1.170-0

package/dist/index.js

@@ -1345,6 +1345,8 @@ parcelRegister("dU7Zq", function(module, exports) {
 
 $parcel$export(module.exports, "MicroMClient", function () { return $16abd72d1aa9b62d$export$6118e57c65bf19ee; });
 
+var $lTNXP = parcelRequire("lTNXP");
+
 var $cfO6r = parcelRequire("cfO6r");
 
 var $hDJ3w = parcelRequire("hDJ3w");
@@ -1397,6 +1399,7 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
     getAPPID() {
         return this.#APP_ID;
     }
+    //*** Record access
     startRecordPaths() {
         this.#RECORD_PATHS = true;
     }
@@ -1441,6 +1444,9 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
             };
         }
     }
+    async #saveRecordedAccessData(data) {
+        await this.#DATA_STORAGE.saveData(this.#APP_ID, (0, $brSbF.RECORDED_ACCESS_DATA_STORAGE_KEY), data);
+    }
     async #saveAllRecordedAccess() {
         if (this.#RECORD_PATHS) {
             const result = (0, $brSbF.generateCSharpGetRoutePaths)(this.#RECORDED_PATHS);
@@ -1448,39 +1454,73 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
             console.log(result);
         }
     }
-    async localLogoff() {
-        await this.#removeToken();
-        await this.#deleteEnabledMenus();
+    //*** OIDC flows
+    async oidcLoginAndRedirect(options) {
+        const authorizeUrl = await this.#startOidcLogin(options);
+        window.location.href = authorizeUrl;
     }
-    async logoff() {
-        const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
+    async #startOidcLogin(options) {
+        const { targetLinkUri: targetLinkUri, extraParams: extraParams } = options;
+        const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'OIDC PAR request timed out');
         try {
-            await this.#removeToken();
-            await this.#deleteEnabledMenus();
-            if (this.#RECORD_PATHS) this.#saveAllRecordedAccess();
-            const response = await fetch(`${this.#API_URL}/${this.#APP_ID}/auth/logoff`, {
+            const localDeviceId = await this.#getLocalDeviceId();
+            // Prepare OIDC client PAR request parameters
+            // required OIDC parameters are server-managed
+            const params = new URLSearchParams();
+            if (targetLinkUri) params.set('target_link_uri', targetLinkUri);
+            params.set('local_device_id', localDeviceId);
+            params.set('client_id', this.#APP_ID);
+            if (extraParams) {
+                for (const [k, v] of Object.entries(extraParams))if (v != null) {
+                    // Avoid overriding security-related parameters that are server-managed.
+                    if ((0, $lTNXP.isIn)(k, 'response_type', 'scope', 'state', 'nonce', 'code_challenge', 'code_challenge_method', 'client_id', 'request_uri', 'redirect_uri')) {
+                        console.warn(`Ignoring OIDC extraParam '${k}' because it is server-managed.`);
+                        continue;
+                    }
+                    params.set(k, v);
+                }
+            }
+            const parUrl = `${this.#API_URL}/${this.#APP_ID}/oidc-client/par`;
+            const response = await fetch(parUrl, {
                 method: 'POST',
                 headers: {
-                    "Content-Type": "application/json; charset=utf-8",
-                    "Authorization": `Bearer ${this.#TOKEN?.access_token || ''}`
+                    "Content-Type": "application/x-www-form-urlencoded"
                 },
                 mode: this.#REQUEST_MODE,
                 cache: 'no-store',
                 credentials: 'include',
                 referrerPolicy: 'strict-origin-when-cross-origin',
                 signal: loginTimeout.signal,
-                body: JSON.stringify({})
+                body: params.toString()
             });
-            if (!response.ok) throw {
-                status: response.status,
-                statusMessage: response.statusText,
-                message: response.statusText,
-                url: response.url
+            if (!response.ok) {
+                const text = await response.text().catch(()=>'');
+                throw {
+                    status: response.status,
+                    statusMessage: response.statusText,
+                    message: text || response.statusText,
+                    url: response.url
+                };
+            }
+            const data = await response.json();
+            if (!data.authorize_url) throw {
+                status: 500,
+                statusMessage: 'invalid_par_response',
+                message: data.error_description || data.error || 'PAR response missing authorize_url',
+                url: parUrl
             };
+            return data.authorize_url;
         } finally{
             loginTimeout.clear();
         }
     }
+    //*** Local login/logout
+    get LOGGED_IN_USER() {
+        return this.#TOKEN?.claims;
+    }
+    async getRememberUser() {
+        return await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$REMEMBER_USER_DATA_KEY);
+    }
     async isLoggedIn() {
         const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
         try {
@@ -1515,27 +1555,6 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
         }
         return !!this.#TOKEN?.access_token && new Date() < new Date(this.#TOKEN.expiration);
     }
-    get LOGGED_IN_USER() {
-        return this.#TOKEN?.claims;
-    }
-    async updateClientClaims(claims) {
-        if (this.#TOKEN) {
-            this.#TOKEN.claims = claims;
-            await this.#setToken(this.#TOKEN);
-        }
-    }
-    async #getLocalDeviceId() {
-        const local_device = await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$LOCAL_DEVICE_ID_KEY);
-        if (local_device !== null) {
-            this.#LOCAL_DEVICE_ID = local_device;
-            return local_device;
-        }
-        // Generate a new local device ID if it doesn't exist
-        const randomId = "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c)=>(+c ^ crypto.getRandomValues(new Uint8Array(1))[0] & 15 >> +c / 4).toString(16));
-        await this.#DATA_STORAGE.saveData(this.#APP_ID, $16abd72d1aa9b62d$var$LOCAL_DEVICE_ID_KEY, randomId);
-        this.#LOCAL_DEVICE_ID = randomId;
-        return randomId;
-    }
     async login(username, password, rememberme) {
         //Intentionally not accounting for tokenRefreshInProgress (see refresh logic)
         const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
@@ -1598,6 +1617,45 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
             loginTimeout.clear();
         }
     }
+    async localLogoff() {
+        await this.#removeToken();
+        await this.#deleteEnabledMenus();
+    }
+    async logoff() {
+        const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
+        try {
+            await this.#removeToken();
+            await this.#deleteEnabledMenus();
+            if (this.#RECORD_PATHS) await this.#saveAllRecordedAccess();
+            const response = await fetch(`${this.#API_URL}/${this.#APP_ID}/auth/logoff`, {
+                method: 'POST',
+                headers: {
+                    "Content-Type": "application/json; charset=utf-8",
+                    "Authorization": `Bearer ${this.#TOKEN?.access_token || ''}`
+                },
+                mode: this.#REQUEST_MODE,
+                cache: 'no-store',
+                credentials: 'include',
+                referrerPolicy: 'strict-origin-when-cross-origin',
+                signal: loginTimeout.signal,
+                body: JSON.stringify({})
+            });
+            if (!response.ok) throw {
+                status: response.status,
+                statusMessage: response.statusText,
+                message: response.statusText,
+                url: response.url
+            };
+        } finally{
+            loginTimeout.clear();
+        }
+    }
+    async updateClientClaims(claims) {
+        if (this.#TOKEN) {
+            this.#TOKEN.claims = claims;
+            await this.#setToken(this.#TOKEN);
+        }
+    }
     async recoveryemail(username) {
         const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT * 4, 'Login request timed out');
         try {
@@ -1660,6 +1718,99 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
             loginTimeout.clear();
         }
     }
+    async #getLocalDeviceId() {
+        const local_device = await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$LOCAL_DEVICE_ID_KEY);
+        if (local_device !== null) {
+            this.#LOCAL_DEVICE_ID = local_device;
+            return local_device;
+        }
+        // Generate a new local device ID if it doesn't exist
+        const randomId = "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c)=>(+c ^ crypto.getRandomValues(new Uint8Array(1))[0] & 15 >> +c / 4).toString(16));
+        await this.#DATA_STORAGE.saveData(this.#APP_ID, $16abd72d1aa9b62d$var$LOCAL_DEVICE_ID_KEY, randomId);
+        this.#LOCAL_DEVICE_ID = randomId;
+        return randomId;
+    }
+    async #loadToken() {
+        if (!this.#TOKEN) this.#TOKEN = await this.#TOKEN_STORAGE.readToken(this.#APP_ID);
+    }
+    async #setToken(token) {
+        await this.#TOKEN_STORAGE.saveToken(this.#APP_ID, token);
+        this.#TOKEN = token;
+    }
+    async #removeToken() {
+        await this.#TOKEN_STORAGE.deleteToken(this.#APP_ID);
+        this.#TOKEN = null;
+    }
+    async #checkAndRefreshToken() {
+        await this.#loadToken();
+        await this.#readTimeZoneOffset();
+        if (!this.#TOKEN) return;
+        const renewalAheadPeriod = 60000;
+        const now = new Date();
+        const expiration = new Date(this.#TOKEN.expiration);
+        if (now > new Date(expiration.getTime() - renewalAheadPeriod)) await this.#refreshToken();
+    }
+    async #refreshToken() {
+        // Check if a token refresh is already in progress.
+        // If so, return that promise instead of starting a new request.
+        if (this.#tokenRefreshInProgress) {
+            console.warn('Token refresh already in progress');
+            return this.#tokenRefreshInProgress;
+        }
+        const _performTokenRefresh = async ()=>{
+            const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
+            try {
+                if (!this.#TOKEN) throw new Error('Token not found');
+                //console.log('Refreshing token');
+                const old_token = this.#TOKEN;
+                const response = await fetch(`${this.#API_URL}/${this.#APP_ID}/auth/refresh`, {
+                    method: 'POST',
+                    headers: {
+                        "Content-Type": "application/json; charset=utf-8"
+                    },
+                    mode: this.#REQUEST_MODE,
+                    cache: 'no-store',
+                    credentials: 'include',
+                    referrerPolicy: 'strict-origin-when-cross-origin',
+                    signal: loginTimeout.signal,
+                    body: JSON.stringify({
+                        Bearer: this.#TOKEN.access_token,
+                        RefreshToken: this.#TOKEN.refresh_token
+                    })
+                });
+                if (!response.ok) throw {
+                    status: response?.status,
+                    statusMessage: response?.statusText,
+                    message: response?.statusText,
+                    url: response?.url
+                };
+                const data = await response.json();
+                if (data && data.access_token) {
+                    const new_token = new (0, $78KzE.MicroMToken)(data.access_token, data.expires_in, data['refresh-token'], data.token_type, this.#TOKEN.claims);
+                    if (old_token !== this.#TOKEN) throw new Error("Current token was changed while refreshing.");
+                    await this.#setToken(new_token);
+                    //console.log('Token refreshed', new_token);
+                    return;
+                } else //console.log('Unexpected result', data);
+                throw {
+                    statusMessage: 'Unexpected result',
+                    url: response.url
+                };
+            } catch (error) {
+                //console.log('RefreshToken', error);
+                throw error;
+            } finally{
+                this.#tokenRefreshInProgress = null; // Clear the ongoing refresh promise once done.
+                loginTimeout.clear();
+            }
+        };
+        this.#tokenRefreshInProgress = _performTokenRefresh();
+        return this.#tokenRefreshInProgress;
+    }
+    //*** Timezone offset
+    get TIMEZONE_OFFSET() {
+        return this.#TIMEZONE_OFFSET;
+    }
     async #saveTimeZoneOffset(data) {
         await this.#DATA_STORAGE.saveData(this.#APP_ID, $16abd72d1aa9b62d$var$TIMEZONE_OFFSET_DATA_KEY, data);
     }
@@ -1684,8 +1835,13 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
         await this.#saveTimeZoneOffset(offset);
         return result;
     }
-    get TIMEZONE_OFFSET() {
-        return this.#TIMEZONE_OFFSET;
+    //*** Enabled menus
+    async getMenus() {
+        if (this.#ENABLED_MENUS.size === 0) {
+            const data = await this.#readEnabledMenus();
+            this.#ENABLED_MENUS = data ? new Set(data) : new Set();
+        }
+        return this.#ENABLED_MENUS;
     }
     async #getAPIEnabledMenus(username, abort_signal = null) {
         if (!this.#TOKEN) return;
@@ -1702,12 +1858,45 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
         await this.#saveEnabledMenus(menu_items);
         this.#ENABLED_MENUS = new Set(menu_items);
     }
-    async getMenus() {
-        if (this.#ENABLED_MENUS.size === 0) {
-            const data = await this.#readEnabledMenus();
-            this.#ENABLED_MENUS = data ? new Set(data) : new Set();
-        }
-        return this.#ENABLED_MENUS;
+    async #saveEnabledMenus(data) {
+        await this.#DATA_STORAGE.saveData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY, data);
+    }
+    async #readEnabledMenus() {
+        return await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY);
+    }
+    async #deleteEnabledMenus() {
+        await this.#DATA_STORAGE.deleteData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY);
+    }
+    //*** File upload/download
+    getDocumentURL(fileGuid) {
+        return fileGuid ? `${this.#API_URL}/${this.#APP_ID}/serve/${fileGuid}` : '';
+    }
+    getThumbnailURL(fileGuid, max_size = 150, quality = 75) {
+        return fileGuid ? `${this.#API_URL}/${this.#APP_ID}/thumbnail/${fileGuid}/${max_size}/${quality}` : '';
+    }
+    async upload(file, fileprocess_id, abort_signal = null, max_size = 150, quality = 75, onProgress = ()=>{}) {
+        return this.#uploadFile(file, fileprocess_id, abort_signal, max_size, quality, onProgress);
+    }
+    async downloadBlob(fileUrl, abort_signal = null) {
+        await this.#checkAndRefreshToken();
+        if (!this.#TOKEN) throw {
+            status: 401,
+            statusMessage: `Can't execute request: Not logged in`
+        };
+        const response = await fetch(fileUrl, {
+            headers: {
+                ...this.#TOKEN ? {
+                    "Authorization": `Bearer ${this.#TOKEN.access_token}`
+                } : {}
+            },
+            mode: this.#REQUEST_MODE,
+            cache: 'no-store',
+            credentials: 'include',
+            referrerPolicy: 'strict-origin-when-cross-origin',
+            signal: abort_signal
+        });
+        if (!response.ok) throw new Error(`Network error: ${response.status} - ${response.statusText}`);
+        return await response.blob();
     }
     async #uploadFile(file, fileprocess_id, abort_signal = null, max_size = 150, quality = 75, onProgress = ()=>{}) {
         await this.#checkAndRefreshToken();
@@ -1768,223 +1957,7 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
             xhr.send(file);
         });
     }
-    async #refreshToken() {
-        // Check if a token refresh is already in progress.
-        // If so, return that promise instead of starting a new request.
-        if (this.#tokenRefreshInProgress) {
-            console.warn('Token refresh already in progress');
-            return this.#tokenRefreshInProgress;
-        }
-        const _performTokenRefresh = async ()=>{
-            const loginTimeout = new (0, $dF8o7.TimeoutSignal)(this.#LOGIN_TIMEOUT, 'Login request timed out');
-            try {
-                if (!this.#TOKEN) throw new Error('Token not found');
-                //console.log('Refreshing token');
-                const old_token = this.#TOKEN;
-                const response = await fetch(`${this.#API_URL}/${this.#APP_ID}/auth/refresh`, {
-                    method: 'POST',
-                    headers: {
-                        "Content-Type": "application/json; charset=utf-8"
-                    },
-                    mode: this.#REQUEST_MODE,
-                    cache: 'no-store',
-                    credentials: 'include',
-                    referrerPolicy: 'strict-origin-when-cross-origin',
-                    signal: loginTimeout.signal,
-                    body: JSON.stringify({
-                        Bearer: this.#TOKEN.access_token,
-                        RefreshToken: this.#TOKEN.refresh_token
-                    })
-                });
-                if (!response.ok) throw {
-                    status: response?.status,
-                    statusMessage: response?.statusText,
-                    message: response?.statusText,
-                    url: response?.url
-                };
-                const data = await response.json();
-                if (data && data.access_token) {
-                    const new_token = new (0, $78KzE.MicroMToken)(data.access_token, data.expires_in, data['refresh-token'], data.token_type, this.#TOKEN.claims);
-                    if (old_token !== this.#TOKEN) throw new Error("Current token was changed while refreshing.");
-                    await this.#setToken(new_token);
-                    //console.log('Token refreshed', new_token);
-                    return;
-                } else //console.log('Unexpected result', data);
-                throw {
-                    statusMessage: 'Unexpected result',
-                    url: response.url
-                };
-            } catch (error) {
-                //console.log('RefreshToken', error);
-                throw error;
-            } finally{
-                this.#tokenRefreshInProgress = null; // Clear the ongoing refresh promise once done.
-                loginTimeout.clear();
-            }
-        };
-        this.#tokenRefreshInProgress = _performTokenRefresh();
-        return this.#tokenRefreshInProgress;
-    }
-    async getRememberUser() {
-        return await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$REMEMBER_USER_DATA_KEY);
-    }
-    async #saveRecordedAccessData(data) {
-        await this.#DATA_STORAGE.saveData(this.#APP_ID, (0, $brSbF.RECORDED_ACCESS_DATA_STORAGE_KEY), data);
-    }
-    async #saveEnabledMenus(data) {
-        await this.#DATA_STORAGE.saveData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY, data);
-    }
-    async #readEnabledMenus() {
-        return await this.#DATA_STORAGE.readData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY);
-    }
-    async #deleteEnabledMenus() {
-        await this.#DATA_STORAGE.deleteData(this.#APP_ID, $16abd72d1aa9b62d$var$ENABLED_MENUS_DATA_KEY);
-    }
-    async #loadToken() {
-        if (!this.#TOKEN) this.#TOKEN = await this.#TOKEN_STORAGE.readToken(this.#APP_ID);
-    }
-    async #setToken(token) {
-        await this.#TOKEN_STORAGE.saveToken(this.#APP_ID, token);
-        this.#TOKEN = token;
-    }
-    async #removeToken() {
-        await this.#TOKEN_STORAGE.deleteToken(this.#APP_ID);
-        this.#TOKEN = null;
-    }
-    async #checkAndRefreshToken() {
-        await this.#loadToken();
-        await this.#readTimeZoneOffset();
-        if (!this.#TOKEN) return;
-        const renewalAheadPeriod = 60000;
-        const now = new Date();
-        const expiration = new Date(this.#TOKEN.expiration);
-        if (now > new Date(expiration.getTime() - renewalAheadPeriod)) await this.#refreshToken();
-    }
-    async #submitToAPI(entity_name, parent_keys, values, recordsSelection, action, abort_signal = null, additional_route = null) {
-        const extra_route = additional_route !== null ? `/${additional_route}` : '';
-        const route = `${this.#API_URL}/${this.#APP_ID}/ent/${entity_name}/${action}${extra_route}`;
-        try {
-            await this.#checkAndRefreshToken();
-            if (!this.#TOKEN) throw {
-                status: 401,
-                statusMessage: `Can't execute request: Not logged in`,
-                url: route
-            };
-            const body = JSON.stringify({
-                ParentKeys: parent_keys,
-                Values: values,
-                RecordsSelection: recordsSelection
-            }, (0, $hDJ3w.JSONDateWithTimezoneReplacer));
-            const res = await fetch(route, {
-                method: 'POST',
-                headers: {
-                    "Content-Type": "application/json; charset=utf-8",
-                    "Authorization": `Bearer ${this.#TOKEN.access_token}`
-                },
-                mode: this.#REQUEST_MODE,
-                cache: 'no-store',
-                credentials: 'include',
-                referrerPolicy: 'strict-origin-when-cross-origin',
-                signal: abort_signal,
-                body: body
-            });
-            if (!res.ok) throw {
-                status: res?.status,
-                statusMessage: res?.statusText,
-                message: res?.statusText,
-                url: res?.url
-            };
-            const data = await res.json();
-            return data;
-        } catch (error) {
-            abort_signal = null;
-            if (this.#REDIRECT_ON_401) {
-                if (error.status === 401) {
-                    console.warn(`${route} 401, redirecting to login page: ${this.#REDIRECT_ON_401}`);
-                    await this.localLogoff();
-                    window.location.href = this.#REDIRECT_ON_401;
-                }
-            } else throw error;
-            throw error;
-        }
-    }
-    async #submitToPublicAPI(entity_name, parent_keys, values, recordsSelection, action, abort_signal = null, additional_route = null) {
-        const extra_route = additional_route !== null ? `/${additional_route}` : '';
-        const route = `${this.#API_URL}/${this.#APP_ID}/public/${entity_name}/${action}${extra_route}`;
-        const body = JSON.stringify({
-            ParentKeys: parent_keys,
-            Values: values,
-            RecordsSelection: recordsSelection
-        }, (0, $hDJ3w.JSONDateWithTimezoneReplacer));
-        const res = await fetch(route, {
-            method: 'POST',
-            headers: {
-                "Content-Type": "application/json; charset=utf-8"
-            },
-            mode: this.#REQUEST_MODE,
-            cache: 'no-store',
-            credentials: 'include',
-            referrerPolicy: 'strict-origin-when-cross-origin',
-            signal: abort_signal,
-            body: body
-        });
-        if (!res.ok) throw {
-            status: res?.status,
-            statusMessage: res?.statusText,
-            message: res?.statusText,
-            url: res?.url
-        };
-        const data = await res.json();
-        abort_signal = null;
-        return data;
-    }
-    async downloadBlob(fileUrl, abort_signal = null) {
-        await this.#checkAndRefreshToken();
-        if (!this.#TOKEN) throw {
-            status: 401,
-            statusMessage: `Can't execute request: Not logged in`
-        };
-        const response = await fetch(fileUrl, {
-            headers: {
-                ...this.#TOKEN ? {
-                    "Authorization": `Bearer ${this.#TOKEN.access_token}`
-                } : {}
-            },
-            mode: this.#REQUEST_MODE,
-            cache: 'no-store',
-            credentials: 'include',
-            referrerPolicy: 'strict-origin-when-cross-origin',
-            signal: abort_signal
-        });
-        if (!response.ok) throw new Error(`Network error: ${response.status} - ${response.statusText}`);
-        return await response.blob();
-    }
-    #isPublicAPI(entity_name, action, proc_name, action_name) {
-        const endpoint = this.#publicEndpoints[entity_name];
-        if (endpoint) switch(action){
-            case "get":
-                return (endpoint.AllowedAccess & 8) !== 0;
-            case "insert":
-                return (endpoint.AllowedAccess & 1) !== 0;
-            case "update":
-                return (endpoint.AllowedAccess & 2) !== 0;
-            case "delete":
-                return (endpoint.AllowedAccess & 4) !== 0;
-            case "lookup":
-                return (endpoint.AllowedAccess & 16) !== 0;
-            case "action":
-                return endpoint.AllowedActions && action_name && endpoint.AllowedActions.has(action_name) || false;
-            case "view":
-                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
-            case "proc":
-                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
-            case "process":
-                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
-            default:
-                return false;
-        }
-        return false;
-    }
+    //*** Entities API
     async get(entity_name, parent_keys, values, abort_signal = null) {
         this.#recordAccess({
             entityName: entity_name,
@@ -2090,14 +2063,108 @@ class $16abd72d1aa9b62d$export$6118e57c65bf19ee {
         });
         return this.#submitToAPI(entity_name, parent_keys, values, [], "import", abort_signal, import_procname);
     }
-    async upload(file, fileprocess_id, abort_signal = null, max_size = 150, quality = 75, onProgress = ()=>{}) {
-        return this.#uploadFile(file, fileprocess_id, abort_signal, max_size, quality, onProgress);
+    async #submitToAPI(entity_name, parent_keys, values, recordsSelection, action, abort_signal = null, additional_route = null) {
+        const extra_route = additional_route !== null ? `/${additional_route}` : '';
+        const route = `${this.#API_URL}/${this.#APP_ID}/ent/${entity_name}/${action}${extra_route}`;
+        try {
+            await this.#checkAndRefreshToken();
+            if (!this.#TOKEN) throw {
+                status: 401,
+                statusMessage: `Can't execute request: Not logged in`,
+                url: route
+            };
+            const body = JSON.stringify({
+                ParentKeys: parent_keys,
+                Values: values,
+                RecordsSelection: recordsSelection
+            }, (0, $hDJ3w.JSONDateWithTimezoneReplacer));
+            const res = await fetch(route, {
+                method: 'POST',
+                headers: {
+                    "Content-Type": "application/json; charset=utf-8",
+                    "Authorization": `Bearer ${this.#TOKEN.access_token}`
+                },
+                mode: this.#REQUEST_MODE,
+                cache: 'no-store',
+                credentials: 'include',
+                referrerPolicy: 'strict-origin-when-cross-origin',
+                signal: abort_signal,
+                body: body
+            });
+            if (!res.ok) throw {
+                status: res?.status,
+                statusMessage: res?.statusText,
+                message: res?.statusText,
+                url: res?.url
+            };
+            const data = await res.json();
+            return data;
+        } catch (error) {
+            if (this.#REDIRECT_ON_401 && error.status === 401) {
+                console.warn(`${route} 401, redirecting to login page: ${this.#REDIRECT_ON_401}`);
+                await this.localLogoff();
+                window.location.href = this.#REDIRECT_ON_401;
+            // return intentionally omitted
+            }
+            // MMC: this line should never execute if the redirect happens. 
+            // In case the browser, webview or environment for any reason fails to redirect, we still throw the error to the caller.
+            throw error;
+        }
     }
-    getDocumentURL(fileGuid) {
-        return fileGuid ? `${this.#API_URL}/${this.#APP_ID}/serve/${fileGuid}` : '';
+    async #submitToPublicAPI(entity_name, parent_keys, values, recordsSelection, action, abort_signal = null, additional_route = null) {
+        const extra_route = additional_route !== null ? `/${additional_route}` : '';
+        const route = `${this.#API_URL}/${this.#APP_ID}/public/${entity_name}/${action}${extra_route}`;
+        const body = JSON.stringify({
+            ParentKeys: parent_keys,
+            Values: values,
+            RecordsSelection: recordsSelection
+        }, (0, $hDJ3w.JSONDateWithTimezoneReplacer));
+        const res = await fetch(route, {
+            method: 'POST',
+            headers: {
+                "Content-Type": "application/json; charset=utf-8"
+            },
+            mode: this.#REQUEST_MODE,
+            cache: 'no-store',
+            credentials: 'include',
+            referrerPolicy: 'strict-origin-when-cross-origin',
+            signal: abort_signal,
+            body: body
+        });
+        if (!res.ok) throw {
+            status: res?.status,
+            statusMessage: res?.statusText,
+            message: res?.statusText,
+            url: res?.url
+        };
+        const data = await res.json();
+        return data;
     }
-    getThumbnailURL(fileGuid, max_size = 150, quality = 75) {
-        return fileGuid ? `${this.#API_URL}/${this.#APP_ID}/thumbnail/${fileGuid}/${max_size}/${quality}` : '';
+    #isPublicAPI(entity_name, action, proc_name, action_name) {
+        const endpoint = this.#publicEndpoints[entity_name];
+        if (endpoint) switch(action){
+            case "get":
+                return (endpoint.AllowedAccess & 8) !== 0;
+            case "insert":
+                return (endpoint.AllowedAccess & 1) !== 0;
+            case "update":
+                return (endpoint.AllowedAccess & 2) !== 0;
+            case "delete":
+                return (endpoint.AllowedAccess & 4) !== 0;
+            case "lookup":
+                return (endpoint.AllowedAccess & 16) !== 0;
+            case "action":
+                return endpoint.AllowedActions && action_name && endpoint.AllowedActions.has(action_name) || false;
+            case "view":
+                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
+            case "proc":
+                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
+            case "process":
+                return endpoint.AllowedProcs && proc_name && endpoint.AllowedProcs.has(proc_name) || false;
+            default:
+                return false;
+        }
+        return false;
     }
 }
 
@@ -3245,7 +3312,7 @@ var $hv0CN = parcelRequire("hv0CN");
 
 var $hxOxo = parcelRequire("hxOxo");
 
-var $8Lefr = parcelRequire("8Lefr");
+var $01mqs = parcelRequire("01mqs");
 
 var $lULWw = parcelRequire("lULWw");
 
@@ -3368,7 +3435,7 @@ $parcel$exportWildcard(module.exports, $bJhnF);
 $parcel$exportWildcard(module.exports, $RUzV3);
 $parcel$exportWildcard(module.exports, $hv0CN);
 $parcel$exportWildcard(module.exports, $hxOxo);
-$parcel$exportWildcard(module.exports, $8Lefr);
+$parcel$exportWildcard(module.exports, $01mqs);
 $parcel$exportWildcard(module.exports, $lULWw);
 $parcel$exportWildcard(module.exports, $3HRFn);
 $parcel$exportWildcard(module.exports, $3Zdna);
@@ -4600,17 +4667,17 @@ function $9dfe1d3e4dcf7b26$export$65ed9482db2257fa(props) {
 
 });
 
-parcelRegister("8Lefr", function(module, exports) {
+parcelRegister("01mqs", function(module, exports) {
 
-$parcel$export(module.exports, "useExecuteServerAction", function () { return $b7f0b54e18925026$export$5e89f28b2f6c2d01; });
+$parcel$export(module.exports, "useExecuteServerAction", function () { return $b401857d6bbb5b85$export$5e89f28b2f6c2d01; });
 
 parcelRequire("2eyXi");
 var $iKzSR = parcelRequire("iKzSR");
 parcelRequire("6Rdyz");
 var $98ddT = parcelRequire("98ddT");
-function $b7f0b54e18925026$export$5e89f28b2f6c2d01(entity, actionName) {
+function $b401857d6bbb5b85$export$5e89f28b2f6c2d01(entity, actionName) {
     const [status, setStatus] = (0, $b4te3$react.useState)({
-        loading: true
+        loading: false
     });
     const cancellation = (0, $b4te3$react.useRef)(new AbortController());
     const done = (0, $b4te3$react.useRef)(false);
@@ -35804,7 +35871,7 @@ function $404ec2751816fed2$export$a6c7ac8248d6e38a(props) {
     return /*#__PURE__*/ (0, $b4te3$reactjsxruntime.jsx)((0, $b4te3$mantinecore.Anchor), {
         href: to,
         onClick: (e)=>{
-            e.preventDefault;
+            e.preventDefault();
             navigate(to);
         },
         children: children