@orangelogic/orange-dam-content-browser-sdk 2.3.5 → 2.3.6-beta-2

package/build/index.mjs

@@ -5933,6 +5933,7 @@ let CxContentBrowserBrowser = class extends CortexElement {
     this.minQueryLength = 2;
     this.token = "";
     this.baseUrl = "";
+    this.useSiteSession = false;
     this.searchTerm = "";
     this.isPersistent = false;
     this.collectionsOpen = false;
@@ -6125,6 +6126,7 @@ let CxContentBrowserBrowser = class extends CortexElement {
                 selected-label=${o$5(this.folderTitle || void 0)}
                 auto-page-size
                 .token=${this.token}
+                .api=${this.useSiteSession ? apiGetFolders : E}
                 .baseUrl=${this.baseUrl}
                 .form=${this.closest("form")}
                 .firstFetchCallback=${this.handleFirstFetchCallback}
@@ -6226,6 +6228,9 @@ __decorateClass$g([
 __decorateClass$g([
   n$6({ attribute: "base-url", type: String })
 ], CxContentBrowserBrowser.prototype, "baseUrl", 2);
+__decorateClass$g([
+  n$6({ attribute: "use-site-session", type: Boolean })
+], CxContentBrowserBrowser.prototype, "useSiteSession", 2);
 __decorateClass$g([
   r$6()
 ], CxContentBrowserBrowser.prototype, "searchTerm", 2);
@@ -13625,6 +13630,26 @@ function apiGetContentBrowserParameters() {
     }
   });
 }
+const SITE_SESSION_EXPIRED_MESSAGE = "Your Cortex site session has expired. Sign in to the site and reopen the content browser.";
+const resolveSiteSessionUrl = (baseUrl) => {
+  const url = new URL(baseUrl || window.location.origin, window.location.origin);
+  if (!["http:", "https:"].includes(url.protocol) || url.origin !== window.location.origin || url.username || url.password || url.search || url.hash) {
+    throw new Error("Site session mode requires an HTTP(S) baseUrl on the current page origin, without credentials, query, or fragment.");
+  }
+  return url.href.replace(/\/$/, "");
+};
+const getSiteSessionRequestUrl = (baseUrl, resource) => {
+  const url = new URL(resource, `${resolveSiteSessionUrl(baseUrl)}/`);
+  if (url.origin !== window.location.origin || url.username || url.password) {
+    throw new Error("Site session requests must use the current page origin.");
+  }
+  for (const key of Array.from(url.searchParams.keys())) {
+    if (["token", "usesession"].includes(key.toLowerCase())) {
+      url.searchParams.delete(key);
+    }
+  }
+  return url.href;
+};
 var nativeMin = Math.min;
 function baseIntersection(arrays, iteratee, comparator) {
   var includes = arrayIncludes, length2 = arrays[0].length, othLength = arrays.length, othIndex = othLength, caches = Array(othLength), maxLength = Infinity, result = [];
@@ -13748,7 +13773,8 @@ class FetchAndMergeAssetsController {
     defaultSortDirection,
     defaultSortOrderName,
     token: token2,
-    useSession
+    useSession,
+    useSiteSession = false
   }) {
     __privateAdd(this, _lastGetDataParameters);
     __privateAdd(this, _lastMappedAvailableExtensions);
@@ -13785,10 +13811,23 @@ class FetchAndMergeAssetsController {
     this.defaultSelectedFacets = defaultSelectedFacets;
     this.defaultSortOrderName = defaultSortOrderName;
     this.defaultSortDirection = defaultSortDirection;
-    this.token = token2;
-    this.useSession = useSession;
-    http.defaults.baseURL = baseUrl;
+    this.applyTransportMode(useSiteSession, baseUrl, token2, useSession);
     this.requestInterceptorId = http.interceptors.request.use((config) => {
+      var _a3;
+      if (this.useSiteSession) {
+        config.baseURL = this.baseUrl;
+        config.url = getSiteSessionRequestUrl(this.baseUrl, (_a3 = config.url) != null ? _a3 : "");
+        config.withCredentials = true;
+        config.auth = void 0;
+        ["Authorization", "Token", "UseSession"].forEach((name) => config.headers.delete(name));
+        config.params = __spreadValues({}, config.params);
+        for (const key of Object.keys(config.params)) {
+          if (["token", "usesession"].includes(key.toLowerCase())) {
+            delete config.params[key];
+          }
+        }
+        return config;
+      }
       if (config.url && ![
         AssetApiEndpoint.GET_AVAILABLE_EXTENSIONS,
         AssetApiEndpoint.GET_ASSET_VERSION_HISTORY,
@@ -13807,8 +13846,8 @@ class FetchAndMergeAssetsController {
       ].includes(config.url.split("?")[0])) {
         return config;
       }
-      if (baseUrl) {
-        config.baseURL = baseUrl;
+      if (this.baseUrl) {
+        config.baseURL = this.baseUrl;
       }
       config.params = __spreadProps(__spreadValues({}, config.params), {
         Token: this.token || void 0,
@@ -13818,16 +13857,21 @@ class FetchAndMergeAssetsController {
     });
     this.responseInterceptorId = http.interceptors.response.use(
       (response) => {
-        if (response.status >= 200 && response.status < 300 && !this.isLoggedIn) {
+        if (!this.useSiteSession && response.status >= 200 && response.status < 300 && !this.isLoggedIn) {
           this.isLoggedIn = true;
           this.host.requestUpdate();
         }
         return response;
       },
       (error) => __async(this, null, function* () {
-        var _a3;
+        var _a3, _b3;
+        if (this.useSiteSession && ((_a3 = error == null ? void 0 : error.response) == null ? void 0 : _a3.status) === 401) {
+          this.isLoggedIn = false;
+          this.host.requestUpdate();
+          return Promise.reject(error);
+        }
         const originalConfig = error == null ? void 0 : error.config;
-        if (((_a3 = error == null ? void 0 : error.response) == null ? void 0 : _a3.status) === 401 && originalConfig && !originalConfig._retry) {
+        if (((_b3 = error == null ? void 0 : error.response) == null ? void 0 : _b3.status) === 401 && originalConfig && !originalConfig._retry) {
           originalConfig._retry = true;
           const newToken = yield this.waitForNewToken();
           if (!newToken) {
@@ -13858,7 +13902,43 @@ class FetchAndMergeAssetsController {
     }
     return this.pendingTokenRefresh;
   }
+  /**
+   * Site-session mode decides the transport (cookies on the Cortex origin vs. Token/UseSession
+   * params), so it has to be applied to the interceptor state and base URL, not just captured once.
+   */
+  applyTransportMode(useSiteSession, baseUrl, token2, useSession) {
+    this.useSiteSession = useSiteSession;
+    this.baseUrl = useSiteSession ? resolveSiteSessionUrl(baseUrl) : baseUrl;
+    this.token = useSiteSession ? "" : token2;
+    this.useSession = useSiteSession ? "" : useSession;
+    http.defaults.baseURL = this.baseUrl;
+  }
+  /**
+   * `setSiteSession(...)` can flip the mode while the host stays mounted, so keep the transport in
+   * step with the UI instead of serving requests through the mode the controller was built with.
+   */
+  updateSiteSession(useSiteSession, baseUrl, token2, useSession) {
+    if (useSiteSession === this.useSiteSession) {
+      return;
+    }
+    this.applyTransportMode(useSiteSession, baseUrl, token2, useSession);
+    if (this.resolvePendingTokenRefresh) {
+      this.resolvePendingTokenRefresh(null);
+      this.pendingTokenRefresh = null;
+      this.resolvePendingTokenRefresh = null;
+    }
+    this.isLoggedIn = true;
+    __privateSet(this, _hasFetchedOnce, false);
+    this.fetchInitialData();
+    if (this.lastRequest) {
+      this.fetchAndMergeAssets(this.lastRequest);
+    }
+    this.host.requestUpdate();
+  }
   updateAuth(token2, useSession) {
+    if (this.useSiteSession) {
+      return;
+    }
     const tokenChanged = this.token !== token2;
     const wasLoggedOut = !this.isLoggedIn;
     this.token = token2;
@@ -14028,8 +14108,8 @@ class FetchAndMergeAssetsController {
   }
   fetchAssetByID(id, options) {
     return __async(this, null, function* () {
-      var _a2, _b2, _c2, _d2, _e3, _f2, _g, _h, _i, _j, _k, _l, _m, _n;
-      const { allowedExtensions = [], canFavorite = false } = options != null ? options : {};
+      var _a2, _b2, _c2, _d2, _e3, _f2, _g, _h, _i, _j, _k, _l, _m, _n, _o;
+      const { allowedExtensions = [], canFavorite = false, simplePick = false } = options != null ? options : {};
       const promises = [
         apiGetAssetsByIDs({
           extraFields: [
@@ -14049,7 +14129,9 @@ class FetchAndMergeAssetsController {
           ],
           recordIds: [id]
         }),
-        apiGetAvailableProxies({
+        // Simple-pick mode never offers a proxy or a transformation, so the only thing this response
+        // would still supply is the preview image -- which getcontent already returns as LargeSizePreview.
+        simplePick ? Promise.resolve(void 0) : apiGetAvailableProxies({
           assetRecordId: id
         })
       ];
@@ -14080,15 +14162,15 @@ class FetchAndMergeAssetsController {
           inColdStorage: Boolean(item.inColdStorage),
           name: (_f2 = item[FIELD_TITLE_WITH_FALLBACK]) != null ? _f2 : "",
           originalUrl: (_g = item[ORIGINAL_VIEW_SIZE]) != null ? _g : "",
-          previewUrl: (_h = proxyData == null ? void 0 : proxyData.previewUrl) != null ? _h : "",
-          recordId: (_i = item[FIELD_RECORD_ID]) != null ? _i : "",
-          scrubUrl: (_j = item[FIELD_SCRUB_URL]) != null ? _j : "",
-          size: (_k = item[FIELD_FILE_SIZE]) != null ? _k : "0 MB",
-          tags: (_l = item[FIELD_KEYWORDS]) != null ? _l : "",
-          width: (_m = item[FIELD_MAX_WIDTH]) != null ? _m : "0"
+          previewUrl: (_i = (_h = proxyData == null ? void 0 : proxyData.previewUrl) != null ? _h : item[DEFAULT_VIEW_SIZE]) != null ? _i : "",
+          recordId: (_j = item[FIELD_RECORD_ID]) != null ? _j : "",
+          scrubUrl: (_k = item[FIELD_SCRUB_URL]) != null ? _k : "",
+          size: (_l = item[FIELD_FILE_SIZE]) != null ? _l : "0 MB",
+          tags: (_m = item[FIELD_KEYWORDS]) != null ? _m : "",
+          width: (_n = item[FIELD_MAX_WIDTH]) != null ? _n : "0"
         },
         isFavorite,
-        proxies: ((_n = proxyData == null ? void 0 : proxyData.proxies) != null ? _n : []).filter((proxy) => {
+        proxies: ((_o = proxyData == null ? void 0 : proxyData.proxies) != null ? _o : []).filter((proxy) => {
           var _a3;
           if (!allowedExtensions || allowedExtensions.length === 0) {
             return true;
@@ -14135,7 +14217,7 @@ class FetchAndMergeAssetsController {
     return __async(this, null, function* () {
       var _a2;
       const response = yield apiGetAssetLinks(__spreadProps(__spreadValues({}, payload), {
-        useSession: (_a2 = payload.useSession) != null ? _a2 : this.useSession
+        useSession: this.useSiteSession ? void 0 : (_a2 = payload.useSession) != null ? _a2 : this.useSession
       }));
       if (!payload.useRepresentative) {
         return response;
@@ -14292,10 +14374,12 @@ let CxContentBrowser = class extends CortexElement {
     this.showFavoriteFolder = false;
     this.showCloseButton = false;
     this.useSession = "";
+    this.useSiteSession = false;
     this.canPin = false;
     this.canFavorite = false;
     this.canPinAsset = false;
     this.canUseProxies = false;
+    this.simplePick = false;
     this.canViewVersions = false;
     this.canTrack = false;
     this.canLogout = false;
@@ -14348,6 +14432,9 @@ let CxContentBrowser = class extends CortexElement {
     }
   }
   runFirstUpdated() {
+    if (this.useSiteSession) {
+      this.baseUrl = resolveSiteSessionUrl(this.baseUrl);
+    }
     switch (this.view) {
       case GridView$1.Large:
         this.defaultPageSize = 15;
@@ -14378,7 +14465,8 @@ let CxContentBrowser = class extends CortexElement {
         defaultSortDirection: this.defaultSortDirection,
         defaultSortOrderName: this.defaultSortOrderName,
         token: this.token,
-        useSession: this.useSession
+        useSession: this.useSession,
+        useSiteSession: this.useSiteSession
       });
       this.requestUpdate();
     });
@@ -14410,7 +14498,8 @@ let CxContentBrowser = class extends CortexElement {
       this.selectedAssetId = id;
       try {
         const asset = yield this.fetchAndMergeAssetsController.fetchAssetByID(id, {
-          canFavorite: this.canFavorite
+          canFavorite: this.canFavorite,
+          simplePick: this.simplePick
         });
         if (!asset) {
           this.selectedAssetId = void 0;
@@ -14443,6 +14532,18 @@ let CxContentBrowser = class extends CortexElement {
     var _a2;
     (_a2 = this.fetchAndMergeAssetsController) == null ? void 0 : _a2.updateAuth(this.token, this.useSession);
   }
+  handleSiteSessionChange() {
+    var _a2;
+    if (this.useSiteSession) {
+      this.baseUrl = resolveSiteSessionUrl(this.baseUrl);
+    }
+    (_a2 = this.fetchAndMergeAssetsController) == null ? void 0 : _a2.updateSiteSession(
+      this.useSiteSession,
+      this.baseUrl,
+      this.token,
+      this.useSession
+    );
+  }
   handleSortOrderChange(event) {
     return __async(this, null, function* () {
       const { sortDirection, sortOrderName } = event.detail;
@@ -14606,6 +14707,16 @@ let CxContentBrowser = class extends CortexElement {
   }
   handleProxyConfirm(event) {
     return __async(this, null, function* () {
+      var _a2;
+      if (this.simplePick) {
+        this.handleSelectedAsset({
+          asset: event.detail.asset,
+          images: [{ imageUrl: (_a2 = event.detail.asset.imageUrl) != null ? _a2 : "" }],
+          selectedProxyMetadata: event.detail.selectedProxyMetadata
+        });
+        this.formatDialog.hide();
+        return;
+      }
       try {
         const response = yield this.fetchAndMergeAssetsController.getAssetLink(__spreadProps(__spreadValues({}, event.detail), {
           assets: [event.detail.asset],
@@ -14730,13 +14841,16 @@ let CxContentBrowser = class extends CortexElement {
     });
     if (!isLoggedIn) {
       return b`
+        ${n$5(this.useSiteSession && this.showCloseButton, () => b`
+          <cx-content-browser-header show-close-button></cx-content-browser-header>
+        `)}
         <cx-space class="content-browser__message" align-items="center" justify-content="center" spacing="small" direction="vertical">
           <cx-icon name="warning" class="content-browser__message__icon"></cx-icon>
           ${n$5(
-        this.errorMessage,
+        this.useSiteSession || this.errorMessage,
         () => b`
               <cx-typography class="content-browser__message__text">
-                ${this.errorMessage}
+                ${this.useSiteSession ? SITE_SESSION_EXPIRED_MESSAGE : this.errorMessage}
               </cx-typography>
             `,
         () => A$1
@@ -14753,9 +14867,10 @@ let CxContentBrowser = class extends CortexElement {
             favorite-folder-id=${o$5(userInfo == null ? void 0 : userInfo.favoriteFolderRecordID)}
             folder-id=${o$5(this.lastRequest.folderId || void 0)}
             folder-title=${o$5(this.folderTitle || void 0)}
-            token=${this.token}
+            token=${this.useSiteSession ? "" : this.token}
             base-url=${this.baseUrl}
-            use-session=${this.useSession}
+            use-session=${this.useSiteSession ? "" : this.useSession}
+            ?use-site-session=${this.useSiteSession}
             ?can-favorite=${this.canFavorite}
             ?can-pin=${this.canPin && this.canPinLayout}
             ?force-overlay=${this.forceOverlay}
@@ -14777,7 +14892,7 @@ let CxContentBrowser = class extends CortexElement {
             avatar=${o$5(userInfo == null ? void 0 : userInfo.avatar)}
             full-name=${o$5(userInfo == null ? void 0 : userInfo.fullName)}
             folder-title=${o$5(this.folderTitle || void 0)}
-            ?can-logout=${this.canLogout}
+            ?can-logout=${!this.useSiteSession && this.canLogout}
             ?show-close-button=${this.showCloseButton}
           ></cx-content-browser-header>
           <cx-content-browser-control-bar
@@ -14827,12 +14942,12 @@ let CxContentBrowser = class extends CortexElement {
           cta-text=${this.ctaText}
           cta-text-transform=${this.ctaTextTransform}
           variant=${this.isMobile ? ContentBrowserFormatDialogVariant.Drawer : ContentBrowserFormatDialogVariant.Dialog}
-          token=${this.token}
+          token=${this.useSiteSession ? "" : this.token}
           ?can-custom-format=${!!(parameters == null ? void 0 : parameters.ATSEnabled)}
           ?can-favorite=${this.canFavorite}
           ?can-pin-asset=${this.canPinAsset}
           ?can-track=${this.canTrack}
-          ?can-use-proxies=${this.canUseProxies}
+          ?can-use-proxies=${this.canUseProxies && !this.simplePick}
           ?can-view-versions=${this.canViewVersions}
           @cx-content-browser-format-dialog-version-history-open=${this.handleVersionHistoryOpen}
           @cx-content-browser-format-dialog-favorite-change=${this.handleFavoriteChange}
@@ -14930,6 +15045,9 @@ __decorateClass([
 __decorateClass([
   n$6({ attribute: "use-session", reflect: false, type: String })
 ], CxContentBrowser.prototype, "useSession", 2);
+__decorateClass([
+  n$6({ attribute: "use-site-session", type: Boolean })
+], CxContentBrowser.prototype, "useSiteSession", 2);
 __decorateClass([
   n$6({ attribute: "can-pin", reflect: true, type: Boolean })
 ], CxContentBrowser.prototype, "canPin", 2);
@@ -14942,6 +15060,9 @@ __decorateClass([
 __decorateClass([
   n$6({ attribute: "can-use-proxies", reflect: true, type: Boolean })
 ], CxContentBrowser.prototype, "canUseProxies", 2);
+__decorateClass([
+  n$6({ attribute: "simple-pick", reflect: true, type: Boolean })
+], CxContentBrowser.prototype, "simplePick", 2);
 __decorateClass([
   n$6({ attribute: "can-view-versions", reflect: true, type: Boolean })
 ], CxContentBrowser.prototype, "canViewVersions", 2);
@@ -15040,6 +15161,9 @@ __decorateClass([
 __decorateClass([
   watch(["token", "useSession"], { waitUntilFirstUpdate: true })
 ], CxContentBrowser.prototype, "handleAuthChange", 1);
+__decorateClass([
+  watch("useSiteSession", { waitUntilFirstUpdate: true })
+], CxContentBrowser.prototype, "handleSiteSessionChange", 1);
 CxContentBrowser = __decorateClass([
   customElement("cx-content-browser")
 ], CxContentBrowser);
@@ -29208,6 +29332,7 @@ const GlobalConfigContext = reactExports.createContext({
   allowLogout: true,
   allowTracking: true,
   allowProxy: false,
+  simplePick: false,
   allowFavorites: false,
   allowPin: false,
   allowFormatDialogPin: false,
@@ -31608,6 +31733,9 @@ class Mutex {
 const mutex = new Mutex();
 const refreshAccessToken = () => __async(null, null, function* () {
   var _a2;
+  if (store.getState()[AUTH_FEATURE_KEY].useSiteSession) {
+    return null;
+  }
   yield mutex.waitForUnlock();
   if (mutex.isLocked()) {
     yield mutex.waitForUnlock();
@@ -31616,12 +31744,18 @@ const refreshAccessToken = () => __async(null, null, function* () {
   const release = yield mutex.acquire();
   try {
     const authState = store.getState()[AUTH_FEATURE_KEY];
+    if (authState.useSiteSession) {
+      return null;
+    }
     if (!authState.accessKey || !authState.siteUrl) {
       store.dispatch(logout());
       return null;
     }
     try {
       const tokenResp = yield getAccessTokenService(authState.accessKey);
+      if (store.getState()[AUTH_FEATURE_KEY].useSiteSession) {
+        return null;
+      }
       if (tokenResp.accessToken) {
         store.dispatch(setAccessToken(tokenResp.accessToken));
         return tokenResp.accessToken;
@@ -31629,7 +31763,9 @@ const refreshAccessToken = () => __async(null, null, function* () {
       store.dispatch(logout());
       return null;
     } catch (e2) {
-      store.dispatch(logout());
+      if (!store.getState()[AUTH_FEATURE_KEY].useSiteSession) {
+        store.dispatch(logout());
+      }
       return null;
     }
   } finally {
@@ -31662,6 +31798,14 @@ const fetchWithTimeout = (resource, options) => __async(null, null, function* ()
 const cortexFetch = (resource, options) => __async(null, null, function* () {
   const { retryWhenUnauthorize = true } = options || {};
   const authState = store.getState()[AUTH_FEATURE_KEY];
+  if (authState.useSiteSession) {
+    const headers = new Headers(options == null ? void 0 : options.headers);
+    ["Authorization", "Token", "UseSession"].forEach((name) => headers.delete(name));
+    return fetchWithTimeout(getSiteSessionRequestUrl(authState.siteUrl, resource), __spreadProps(__spreadValues({}, options), {
+      credentials: "same-origin",
+      headers
+    }));
+  }
   resource = getRequestUrl(authState.siteUrl, resource, authState.accessToken);
   const response = yield fetchWithTimeout(resource, options);
   if (retryWhenUnauthorize && !response.ok && response.status === 401) {
@@ -31740,6 +31884,14 @@ const authSlice = createSlice({
   name: AUTH_FEATURE_KEY,
   initialState,
   reducers: {
+    setSiteSession: (state, action) => {
+      if (action.payload !== void 0) {
+        return __spreadProps(__spreadValues({}, initialState), { useSiteSession: true, siteUrl: action.payload, status: "authenticated" });
+      }
+      if (state.useSiteSession) {
+        return __spreadValues({}, initialState);
+      }
+    },
     setAccessToken: (state, action) => {
       state.accessToken = action.payload;
     },
@@ -31799,6 +31951,7 @@ const authSlice = createSlice({
       // eslint-disable-next-line @typescript-eslint/no-use-before-define
       oAuth.fulfilled,
       (state, { payload }) => {
+        if (state.useSiteSession) return;
         if (payload) {
           const { accessKey, accessToken, siteUrl } = payload;
           state.accessKey = accessKey;
@@ -31810,16 +31963,18 @@ const authSlice = createSlice({
         }
       }
     ).addCase(oAuth.rejected, (state, action) => {
+      if (state.useSiteSession) return;
       state.error = action.payload;
       state.status = "unauthenticated";
       deleteData(AUTH_FEATURE_ACCESS_KEY_KEY);
     }).addCase(oAuth.pending, (state) => {
+      if (state.useSiteSession) return;
       state.error = "";
     });
   }
 });
 const authReducer = authSlice.reducer;
-const { logout, setAccessToken, generateNonce, setSiteUrl, setUserConfigSiteUrl, setUseSession, setUseHeaders, setAuthStatus } = authSlice.actions;
+const { logout, setAccessToken, generateNonce, setSiteUrl, setUserConfigSiteUrl, setUseSession, setUseHeaders, setAuthStatus, setSiteSession } = authSlice.actions;
 const authenticatedSelector = (rootState) => rootState[AUTH_FEATURE_KEY].status == "authenticated";
 const accessTokenSelector = (rootState) => rootState[AUTH_FEATURE_KEY].accessToken;
 const siteUrlSelector = (rootState) => rootState[AUTH_FEATURE_KEY].siteUrl;
@@ -31829,6 +31984,7 @@ const nonceSelector = (rootState) => rootState[AUTH_FEATURE_KEY].nonce;
 const authStateSelector = (rootState) => rootState[AUTH_FEATURE_KEY].status;
 const applySessionSelector = (rootState) => rootState[AUTH_FEATURE_KEY].useSession;
 const applyHeadersSelector = (rootState) => !!rootState[AUTH_FEATURE_KEY].useHeaders;
+const siteSessionSelector = (rootState) => !!rootState[AUTH_FEATURE_KEY].useSiteSession;
 const appAuthUrlSelector = (rootState) => {
   const siteUrl = rootState[AUTH_FEATURE_KEY].siteUrl;
   return siteUrl ? getRequestUrl(siteUrl, `AppAuth?RID=${rootState[AUTH_FEATURE_KEY].nonce}`) : "";
@@ -31848,7 +32004,7 @@ const oAuth = createAsyncThunk(
       dispatch(generateNonce());
       const nonce = nonceSelector(getState());
       const resp = yield requestAuthorizeService(nonce != null ? nonce : "");
-      if (authAbortController.controller.signal.aborted) {
+      if (authAbortController.controller.signal.aborted || siteSessionSelector(getState())) {
         throw Error(CANCEL_AUTH_MESSAGE);
       }
       const requestID = resp.requestID;
@@ -31857,6 +32013,9 @@ const oAuth = createAsyncThunk(
       if (callbackFn) callbackFn(popupUrl);
       else window.open(popupUrl, "_blank");
       const getAccessKeyData = yield getAccessKeyService(requestID);
+      if (siteSessionSelector(getState())) {
+        throw Error(CANCEL_AUTH_MESSAGE);
+      }
       if (getAccessKeyData.accessKey) {
         const tokenResp = yield getAccessTokenService(getAccessKeyData.accessKey);
         if (tokenResp.accessToken) {
@@ -31890,12 +32049,15 @@ const oAuth = createAsyncThunk(
 const initAuthInfoFromCache = createAsyncThunk(
   `${AUTH_FEATURE_KEY}/initAuthInfoFromCache`,
   (_0, _1) => __async(null, [_0, _1], function* (_2, { dispatch, rejectWithValue, getState }) {
+    const usingSiteSession = () => siteSessionSelector(getState());
+    if (usingSiteSession()) return;
     dispatch(authSlice.actions.setAuthStatus("restoreSession"));
     const useHeaders = applyHeadersSelector(getState());
     const execute = () => __async(null, null, function* () {
       var _a2, _b2, _c2, _d2;
       if (useHeaders && ((_a2 = window.OrangeDAMContentBrowser) == null ? void 0 : _a2._onRequestToken)) {
         const result = yield (_b2 = window.OrangeDAMContentBrowser) == null ? void 0 : _b2._onRequestToken();
+        if (usingSiteSession()) return true;
         if (result) {
           dispatch(
             // eslint-disable-next-line @typescript-eslint/no-use-before-define
@@ -31912,6 +32074,7 @@ const initAuthInfoFromCache = createAsyncThunk(
         let siteUrl = siteUrlSelector(getState());
         if (!siteUrl) {
           siteUrl = (_c2 = yield getData(AUTH_FEATURE_SITE_URL_KEY)) != null ? _c2 : "";
+          if (usingSiteSession()) return true;
           if (!siteUrl) {
             siteUrl = (_d2 = userConfigSiteUrlSelector(getState())) != null ? _d2 : "";
           }
@@ -31923,6 +32086,7 @@ const initAuthInfoFromCache = createAsyncThunk(
           return false;
         }
         const accessKey = yield getData(AUTH_FEATURE_ACCESS_KEY_KEY);
+        if (usingSiteSession()) return true;
         if (accessKey) {
           if (useHeaders) {
             dispatch(
@@ -31933,6 +32097,7 @@ const initAuthInfoFromCache = createAsyncThunk(
             );
           } else {
             const accessToken = (yield getAccessTokenService(accessKey)).accessToken;
+            if (usingSiteSession()) return true;
             if (accessToken) {
               dispatch(
                 // eslint-disable-next-line @typescript-eslint/no-use-before-define
@@ -31960,7 +32125,7 @@ const initAuthInfoFromCache = createAsyncThunk(
     } catch (exception) {
       return rejectWithValue(exception.message);
     } finally {
-      if (!isSuccess) {
+      if (!isSuccess && !usingSiteSession()) {
         dispatch(logout());
       }
     }
@@ -32019,6 +32184,7 @@ function parseLegacyLastLocation(lastLocation) {
 const AssetsPicker = reactExports.forwardRef(function AssetsPicker2({ accessToken, siteUrl, multiSelect }, ref) {
   const appDispatch = useAppDispatch();
   const useSession = useAppSelector(applySessionSelector);
+  const useSiteSession = useAppSelector(siteSessionSelector);
   const {
     allowFavorites,
     allowFormatDialogPin,
@@ -32026,6 +32192,7 @@ const AssetsPicker = reactExports.forwardRef(function AssetsPicker2({ accessToke
     allowPin,
     allowProxy,
     allowTracking,
+    simplePick,
     allowedExtensions,
     // list of allowed extensions from runtime properties. e.g. ['.jpg', '.png', '.mp4']
     allowedFolders,
@@ -32265,6 +32432,7 @@ const AssetsPicker = reactExports.forwardRef(function AssetsPicker2({ accessToke
       token: accessToken != null ? accessToken : "",
       "base-url": siteUrl != null ? siteUrl : "",
       "use-session": useSession,
+      "use-site-session": useSiteSession,
       "extra-fields": extraFields,
       "error-message": "Unauthorized",
       "can-pin": allowPin,
@@ -32272,6 +32440,7 @@ const AssetsPicker = reactExports.forwardRef(function AssetsPicker2({ accessToke
       "can-favorite": allowFavorites,
       "can-logout": allowLogout,
       "can-use-proxies": allowProxy,
+      "simple-pick": simplePick,
       "can-track": allowTracking,
       "can-view-versions": showVersions,
       "cta-text": ctaText,
@@ -32965,6 +33134,7 @@ const ContentBrowser = {
     allowLogout,
     allowProxy,
     allowTracking,
+    simplePick,
     availableDocTypes,
     availableRepresentativeSubtypes,
     baseUrl,
@@ -32988,9 +33158,11 @@ const ContentBrowser = {
     showFavoriteFolder,
     showVersions,
     useSession,
+    useSiteSession = false,
     defaultGridView
   }) {
     var _a2;
+    const siteSessionUrl = useSiteSession ? resolveSiteSessionUrl(baseUrl) : void 0;
     const customStorageHandlers = typeof customStorage === "object" && !!customStorage && typeof customStorage.delete === "function" && !!customStorage.delete && typeof customStorage.get === "function" && !!customStorage.get && typeof customStorage.set === "function" && !!customStorage.set ? customStorage : void 0;
     window.OrangeDAMContentBrowser._customStorage = customStorageHandlers;
     let container = containerId && document.getElementById(containerId);
@@ -33015,23 +33187,28 @@ const ContentBrowser = {
       container.appendChild(pickerRoot);
     }
     const root2 = clientExports.createRoot(pickerRoot);
-    if (onRequestToken) {
+    window.OrangeDAMContentBrowser._onRequestToken = void 0;
+    if (!useSiteSession && onRequestToken) {
       window.OrangeDAMContentBrowser._onRequestToken = () => {
         return onRequestToken().then((token2) => {
           return { token: token2, siteUrl: baseUrl };
         });
       };
     }
-    if (baseUrl) {
-      store.dispatch(setUserConfigSiteUrl(baseUrl));
+    if (useSiteSession) {
+      abortAuthService();
     }
-    if (onRequestToken) {
-      store.dispatch(setUseHeaders(true));
+    store.dispatch(setSiteSession(siteSessionUrl));
+    if (!useSiteSession && baseUrl) {
+      store.dispatch(setUserConfigSiteUrl(baseUrl));
     }
-    if (useSession) {
+    store.dispatch(setUseHeaders(!useSiteSession && !!onRequestToken));
+    if (!useSiteSession && useSession) {
       store.dispatch(setUseSession(useSession));
     }
-    store.dispatch(initAuthInfoFromCache());
+    if (!useSiteSession) {
+      store.dispatch(initAuthInfoFromCache());
+    }
     const errorHandler = typeof onError === "function" && !!onError ? onError : console.log;
     const assetActionHandler = typeof onAssetAction === "function" && !!onAssetAction ? onAssetAction : () => {
     };
@@ -33082,12 +33259,13 @@ const ContentBrowser = {
             showCollections: !!showCollections,
             showFavoriteFolder: showFavoriteFolder !== false,
             showVersions: !!showVersions,
-            useSession,
+            useSession: useSiteSession ? void 0 : useSession,
             allowPin: !!allowPin,
             allowFormatDialogPin: !!allowFormatDialogPin,
-            allowLogout: allowLogout !== void 0 ? !!allowLogout : true,
+            allowLogout: !useSiteSession && (allowLogout !== void 0 ? !!allowLogout : true),
             allowTracking: allowTracking !== void 0 ? !!allowTracking : true,
-            allowProxy: allowProxy !== void 0 ? !!allowProxy : true,
+            allowProxy: simplePick ? false : allowProxy !== void 0 ? !!allowProxy : true,
+            simplePick: !!simplePick,
             allowFavorites: !!allowFavorites,
             defaultGridView: defaultGridView != null ? defaultGridView : ""
           },