@vitormnm/node-red-simple-opcua 1.6.2 → 1.7.0

package/server/opcua-server-io.html

@@ -170,6 +170,8 @@
             <option value="events">Events Server</option>
             <option value="status">Status Server</option>
             <option value="activeAlarms">Active Alarms</option>
+            <option value="getSessions">Get Sessions</option>
+            <option value="deleteSessions">Delete Sessions</option>
             <option value="method-input">Method Input</option>
             <option value="method-output">Method Output</option>
         </select>
@@ -341,6 +343,80 @@ msg.payload = [
 ]
 </code></pre>
 
+    <h3>Get Sessions</h3>
+    <p>Returns a JSON array of all currently active OPC UA sessions on the server.</p>
+    <p><b>Input</b>: any message triggers a session snapshot.</p>
+    <p><b>Output</b>: <code>msg.payload</code> is an array of session objects:</p>
+    <pre><code>[
+  {
+    "sessionId": "ns=1;g=...",
+    "sessionName": "UaExpert@hostname",
+    "status": "active",
+    "creationDate": "2024-01-01T00:00:00.000Z",
+    "sessionTimeout": 30000,
+    "clientLastContactTime": 1234567890,
+    "channelId": 1,
+    "clientDescription": {
+      "applicationUri": "urn:hostname:client",
+      "productUri": "urn:hostname:client",
+      "applicationName": "UaExpert",
+      "applicationType": "1"
+    },
+    "userIdentityToken": {
+      "policyId": "anonymous",
+      "userName": null,
+      "tokenType": "AnonymousIdentityToken"
+    },
+    "channel": {
+      "channelId": 1,
+      "remoteAddress": "127.0.0.1",
+      "remotePort": 54321,
+      "bytesRead": 500,
+      "bytesWritten": 300,
+      "transactionsCount": 10,
+      "securityMode": "None",
+      "securityPolicy": "None"
+    },
+    "currentSubscriptionCount": 1,
+    "cumulatedSubscriptionCount": 2,
+    "currentMonitoredItemCount": 5,
+    "aborted": false
+  }
+]</code></pre>
+    <p>The node also fetches sessions automatically on deploy, just like <b>Status Server</b> mode.</p>
+
+    <h3>Delete Sessions</h3>
+    <p>Forces the server to close one or more active OPC UA sessions by their <code>sessionId</code>.</p>
+    <p><b>Input</b>: <code>msg.payload</code> must be an array of objects, each containing a <code>sessionId</code>
+    (the GUID string returned by <b>Get Sessions</b>):</p>
+    <pre><code>[
+  { "sessionId": "ns=1;g=F4F511E2-664B-2191-89A7-46EE461DB86C" },
+  { "sessionId": "ns=1;g=A1B2C3D4-1234-5678-ABCD-EF0123456789" }
+]</code></pre>
+    <p><b>Output</b>: <code>msg.payload</code> is an array of result objects, one per requested session.  
+    The node status badge summarises deleted / not found / error counts:</p>
+    <pre><code>[
+  {
+    "sessionId": "ns=1;g=F4F511E2-664B-2191-89A7-46EE461DB86C",
+    "status": "deleted"
+  },
+  {
+    "sessionId": "ns=1;g=AAAAAAAA-0000-0000-0000-000000000000",
+    "status": "not_found"
+  },
+  {
+    "sessionId": "ns=1;g=BBBBBBBB-0000-0000-0000-000000000000",
+    "status": "error",
+    "error": "cannot find session …"
+  }
+]</code></pre>
+    <p>Possible <code>status</code> values:</p>
+    <ul>
+        <li><b>deleted</b> — session was found and successfully closed with reason <code>Forcing</code>.</li>
+        <li><b>not_found</b> — no active session with that <code>sessionId</code> exists.</li>
+        <li><b>error</b> — the session was found but <code>engine.closeSession()</code> threw; the
+        <code>error</code> field contains the message.</li>
+    </ul>
 
 
 

package/server/opcua-server-io.js

@@ -36,6 +36,8 @@ module.exports = function (RED) {
         node._childListenerAttached = false;
         node._attachedChild = null;
         node._childListenerRetry = null;
+        node._pendingDoneCallbacks = new Map();
+        node._pendingMessages = new Map();
 
         const handler = (msg) => {
             onMessage(msg, node);
@@ -49,10 +51,13 @@ module.exports = function (RED) {
             registerMethodInput(node);
         }
         if (node.mode === "events") {
-            registerEvents(node, { throwOnError: false, waitForServer: true, timeoutMs: 5000 });
+            registerEvents(node, { throwOnError: false, waitForServer: true, timeoutMs: 5000, silentOnError: true });
         }
         if (node.mode === "status") {
-            requestSnapshot(node, null, { throwOnError: false, waitForServer: true, timeoutMs: 5000 });
+            requestSnapshot(node, null, { throwOnError: false, waitForServer: true, timeoutMs: 5000, silentOnError: true });
+        }
+        if (node.mode === "getSessions") {
+            requestSessions(node, null, { throwOnError: false, waitForServer: true, timeoutMs: 5000, silentOnError: true });
         }
 
 
@@ -62,38 +67,69 @@ module.exports = function (RED) {
                     node.send.apply(node, arguments);
                 };
 
+                if (msg && msg._msgid) {
+                    node._pendingDoneCallbacks.set(msg._msgid, done);
+                    node._pendingMessages.set(msg._msgid, msg);
+                }
+
                 if (node.mode === "read") {
                     await handleRead(node, msg, send);
                 }
-
-                if (node.mode === "write") {
+                else if (node.mode === "write") {
                     await handleWrite(node, msg, send);
                 }
-
-                if (node.mode === "event") {
+                else if (node.mode === "event") {
                     await handleEvent(node, msg, send);
                 }
-
-                if (node.mode === "activeAlarms") {
+                else if (node.mode === "activeAlarms") {
                     await handleActiveAlarms(node, msg, send);
                 }
-
-                if (node.mode === "method-output") {
+                else if (node.mode === "method-output") {
                     await handleMethodOutput(node, msg, send);
                     done();
-                    return;
+                    if (msg && msg._msgid) {
+                        node._pendingDoneCallbacks.delete(msg._msgid);
+                    }
                 }
-                if (node.mode === "events") {
+                else if (node.mode === "events") {
                     await registerEvents(node, { waitForServer: true, timeoutMs: 5000 });
+                    done();
+                    if (msg && msg._msgid) {
+                        node._pendingDoneCallbacks.delete(msg._msgid);
+                    }
                 }
-                if (node.mode === "status") {
+                else if (node.mode === "status") {
                     await requestSnapshot(node, msg, { waitForServer: true, timeoutMs: 5000 });
+                    done();
+                    if (msg && msg._msgid) {
+                        node._pendingDoneCallbacks.delete(msg._msgid);
+                    }
+                }
+                else if (node.mode === "getSessions") {
+                    await requestSessions(node, msg, { waitForServer: true, timeoutMs: 5000 });
+                    done();
+                    if (msg && msg._msgid) {
+                        node._pendingDoneCallbacks.delete(msg._msgid);
+                    }
+                }
+                else if (node.mode === "deleteSessions") {
+                    await handleDeleteSessions(node, msg, { waitForServer: true, timeoutMs: 5000 });
+                    done();
+                    if (msg && msg._msgid) {
+                        node._pendingDoneCallbacks.delete(msg._msgid);
+                    }
                 }
 
-                done();
             } catch (error) {
                 node.status({ fill: "red", shape: "ring", text: node.mode + " failed" });
-                done(error);
+                node.error(error.message || String(error), msg);
+                if (done) {
+                    done();
+                }
+                if (msg && msg._msgid) {
+                    node._pendingDoneCallbacks.delete(msg._msgid);
+                    node._pendingMessages.delete(msg._msgid);
+                }
             }
         });
 
@@ -104,6 +140,8 @@ module.exports = function (RED) {
             }
 
             detachChildListener(node, handler);
+            node._pendingDoneCallbacks.clear();
+            node._pendingMessages.clear();
 
 
             if (node.mode === "method-input") {
@@ -144,12 +182,63 @@ module.exports = function (RED) {
                     data.payload = restoreBuffers(data.payload);
                 }
 
-                node.send(data);
+                const originalMsgId = data && data._msgid;
+                let actualMsg = data;
+                if (originalMsgId && node._pendingMessages.has(originalMsgId)) {
+                    actualMsg = node._pendingMessages.get(originalMsgId);
+                    actualMsg.payload = data.payload;
+                    actualMsg.opcua = data.opcua;
+                    actualMsg.topic = data.topic;
+                    node._pendingMessages.delete(originalMsgId);
+                }
+
+                node.send(actualMsg);
+
+                if (originalMsgId && node._pendingDoneCallbacks.has(originalMsgId)) {
+                    const pendingDone = node._pendingDoneCallbacks.get(originalMsgId);
+                    pendingDone();
+                    node._pendingDoneCallbacks.delete(originalMsgId);
+                }
             }
 
             if (msg.type === "error") {
                 node.status(msg.data);
-                node.error(msg.error);
+
+                const originalMsgId = msg.originalMsg && msg.originalMsg._msgid;
+                let catchMsg = msg.originalMsg || {};
+                if (originalMsgId && node._pendingMessages.has(originalMsgId)) {
+                    catchMsg = node._pendingMessages.get(originalMsgId);
+                    node._pendingMessages.delete(originalMsgId);
+                }
+                catchMsg.error = msg.error;
+
+                node.error(msg.error, catchMsg);
+
+                if (originalMsgId && node._pendingDoneCallbacks.has(originalMsgId)) {
+                    const pendingDone = node._pendingDoneCallbacks.get(originalMsgId);
+                    pendingDone();
+                    node._pendingDoneCallbacks.delete(originalMsgId);
+                }
+            }
+
+            if (msg.type === "partialError") {
+                // Route failed items to catch node without changing the node status
+                const originalMsgId = msg.originalMsg && msg.originalMsg._msgid;
+                let catchMsg = msg.originalMsg || {};
+                if (originalMsgId && node._pendingMessages.has(originalMsgId)) {
+                    catchMsg = node._pendingMessages.get(originalMsgId);
+                    node._pendingMessages.delete(originalMsgId);
+                }
+                catchMsg.payload = msg.failed;
+                catchMsg.error = msg.error;
+
+                node.error(msg.error, catchMsg);
+
+                if (originalMsgId && node._pendingDoneCallbacks.has(originalMsgId)) {
+                    const pendingDone = node._pendingDoneCallbacks.get(originalMsgId);
+                    pendingDone();
+                    node._pendingDoneCallbacks.delete(originalMsgId);
+                }
             }
 
             if (msg.type === "sendMethod") {
@@ -214,16 +303,20 @@ module.exports = function (RED) {
     async function registerMethodInput(node) {
         await sendToChild(node, {
             type: "registerMethodInput",
-            node: node,
+            node: {
+                methodName: node.methodName
+            },
             nodeId: node.id
 
-        }, { throwOnError: false, waitForServer: true, timeoutMs: 5000 });
+        }, { throwOnError: false, waitForServer: true, timeoutMs: 5000, silentOnError: true });
     }
 
     async function registerEvents(node, options) {
         return sendToChild(node, {
             type: "eventsServer",
-            node: node,
+            node: {
+                intervalMs: node.intervalMs
+            },
             nodeId: node.id
         }, options);
     }
@@ -231,7 +324,22 @@ module.exports = function (RED) {
     async function requestSnapshot(node, msg, options) {
         return sendToChild(node, {
             type: "buildServerSnapshot",
-            node: node,
+            msg: msg,
+            nodeId: node.id
+        }, options);
+    }
+
+    async function requestSessions(node, msg, options) {
+        return sendToChild(node, {
+            type: "readActiveSessions",
+            msg: msg,
+            nodeId: node.id
+        }, options);
+    }
+
+    async function handleDeleteSessions(node, msg, options) {
+        return sendToChild(node, {
+            type: "deleteActiveSessions",
             msg: msg,
             nodeId: node.id
         }, options);
@@ -446,7 +554,9 @@ module.exports = function (RED) {
             const error = new Error("OPC UA server child process is not available for serverRef: " + node.serverRef);
             node.status({ fill: "red", shape: "ring", text: "server unavailable" });
             if (options.throwOnError === false) {
-                node.error(error.message);
+                if (!options.silentOnError) {
+                    node.error(error.message);
+                }
                 return false;
             }
             throw error;
@@ -464,7 +574,9 @@ module.exports = function (RED) {
             node._attachedChild = null;
             ensureChildListener(node, handler);
             if (options.throwOnError === false) {
-                node.error(error.message);
+                if (!options.silentOnError) {
+                    node.error(error.message);
+                }
                 return false;
             }
             throw error;

package/server/opcua-server.css

@@ -263,3 +263,55 @@
             margin-left: 0;
         }
     }
+
+/* Standardized configuration card styling */
+.opcua-config-card {
+    padding: 14px;
+    background: var(--red-ui-form-input-background, #fcfcfc);
+    border: 1px solid var(--red-ui-form-input-border-color, #d9d9d9);
+    border-radius: 6px;
+    box-shadow: 0 1px 3px rgba(0,0,0,0.05);
+}
+
+.opcua-config-card .opcua-card-title {
+    margin-top: 0;
+    margin-bottom: 12px;
+    font-weight: bold;
+    border-bottom: 1px solid var(--red-ui-form-input-border-color, #eee);
+    padding-bottom: 6px;
+}
+
+.opcua-config-form {
+    display: flex;
+    flex-direction: column;
+    gap: 10px;
+}
+
+.opcua-config-row {
+    margin: 0 !important;
+    display: flex;
+    align-items: center;
+}
+
+.opcua-config-row--checkbox {
+    height: 34px;
+}
+
+.opcua-config-label {
+    width: 240px;
+    margin: 0 !important;
+    font-weight: 500;
+    flex-shrink: 0;
+    display: inline-block;
+    vertical-align: middle;
+}
+
+.opcua-config-input {
+    width: 300px !important;
+    margin: 0 !important;
+}
+
+.opcua-config-input[type="checkbox"] {
+    width: auto !important;
+    display: inline-block;
+}

package/server/opcua-server.html

@@ -7,45 +7,21 @@
         <label for="node-input-serverName"><i class="fa fa-server"></i> Server name</label>
         <input type="text" id="node-input-serverName" placeholder="Node-RED OPC UA Server">
     </div>
-    <div class="form-row">
-        <label for="node-input-resourcePath"><i class="fa fa-server"></i> Resource path</label>
-        <input type="text" id="node-input-resourcePath" placeholder="Resource path OPC UA Server">
-    </div>
     <div class="form-row">
         <label for="node-input-port"><i class="fa fa-plug"></i> Port</label>
         <input type="number" id="node-input-port" min="1" placeholder="4840">
     </div>
     <div class="form-row">
-        <label for="node-input-maxConnections"><i class="fa fa-users"></i> Number connections</label>
-        <input type="number" id="node-input-maxConnections" min="1" placeholder="10">
-    </div>
-    <div class="form-row">
-        <label for="node-input-securityPolicy"><i class="fa fa-lock"></i> Security</label>
-        <select id="node-input-securityPolicy">
-            <option value="None">None</option>
-            <option value="Basic128Rsa15">Basic128Rsa15</option>
-            <option value="Basic256">Basic256</option>
-            <option value="Basic256Sha256">Basic256Sha256</option>
-            <option value="Aes128_Sha256_RsaOaep">Aes128_Sha256_RsaOaep</option>
-            <option value="Aes256_Sha256_RsaPss">Aes256_Sha256_RsaPss</option>
-        </select>
-    </div>
-    <div class="form-row">
-        <label for="node-input-securityMode"><i class="fa fa-shield"></i> Security mode</label>
-        <select id="node-input-securityMode">
-            <option value="None">None</option>
-            <option value="Sign">Sign</option>
-            <option value="SignAndEncrypt">SignAndEncrypt</option>
-        </select>
+        <label style="width: auto;"><i class="fa fa-cogs"></i> Settings</label>
+        <a href="#" id="node-input-open-settings-modal" class="editor-button"><i class="fa fa-cog"></i> Open server settings</a>
     </div>
     <div class="form-row">
-        <label for="node-input-allowAnonymous"><i class="fa fa-user-secret"></i> Anonymous</label>
-        <input type="checkbox" id="node-input-allowAnonymous" style="display:inline-block; width:auto; vertical-align:top; margin-top:8px;">
-        <span style="margin-left: 8px;">Allow anonymous login</span>
+        <label style="width: auto;"><i class="fa fa-shield"></i> Security</label>
+        <a href="#" id="node-input-open-auth-modal" class="editor-button"><i class="fa fa-lock"></i> Manage security and users</a>
     </div>
     <div class="form-row">
-        <label style="width: auto;"><i class="fa fa-users"></i> Users</label>
-        <a href="#" id="node-input-open-auth-modal" class="editor-button"><i class="fa fa-user-plus"></i> Manage users and groups</a>
+        <label style="width: auto;"><i class="fa fa-certificate"></i> Certificates</label>
+        <a href="#" id="node-input-open-cert-modal" class="editor-button"><i class="fa fa-folder-open"></i> Manage client certificates</a>
     </div>
 
 
@@ -71,15 +47,38 @@
     <div id="node-input-auth-modal" class="opcua-tree-modal" style="display:none;">
         <div class="opcua-tree-modal__dialog">
             <div class="opcua-tree-modal__header">
-                <div class="opcua-tree-modal__title"><i class="fa fa-users"></i> User And Group Management</div>
+                <div class="opcua-tree-modal__title"><i class="fa fa-shield"></i> Security & User Management</div>
                 <a href="#" id="node-input-close-auth-modal" class="editor-button editor-button-small"><i class="fa fa-times"></i> Close</a>
             </div>
-            <div class="opcua-tree-modal__toolbar">
-                <a href="#" id="node-input-add-auth-group" class="editor-button editor-button-small"><i class="fa fa-plus"></i> Add group</a>
-                <a href="#" id="node-input-add-auth-user" class="editor-button editor-button-small"><i class="fa fa-plus"></i> Add user</a>
-            </div>
-            <div class="opcua-tree-modal__body">
-                <div class="opcua-auth-layout">
+            <div class="opcua-tree-modal__body" style="display: flex; flex-direction: column; gap: 14px;">
+                <div class="opcua-config-card">
+                    <div class="opcua-tree-details-title opcua-card-title"><i class="fa fa-shield"></i> Security Settings</div>
+                    <div class="opcua-config-form">
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-securityPolicy"><i class="fa fa-lock"></i> Security Policy</label>
+                            <input class="opcua-config-input" type="text" id="node-input-securityPolicy">
+                        </div>
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-securityMode"><i class="fa fa-shield"></i> Security Mode</label>
+                            <input class="opcua-config-input" type="text" id="node-input-securityMode">
+                        </div>
+                        <div class="opcua-config-row opcua-config-row--checkbox">
+                            <label class="opcua-config-label" for="node-input-allowAnonymous"><i class="fa fa-user-secret"></i> Allow anonymous login</label>
+                            <input class="opcua-config-input" type="checkbox" id="node-input-allowAnonymous">
+                        </div>
+                        <div class="opcua-config-row opcua-config-row--checkbox">
+                            <label class="opcua-config-label" for="node-input-automaticallyAcceptUnknownCertificate"><i class="fa fa-certificate"></i> Automatically accept unknown certificates</label>
+                            <input class="opcua-config-input" type="checkbox" id="node-input-automaticallyAcceptUnknownCertificate">
+                        </div>
+                    </div>
+                </div>
+
+                <div style="display: flex; gap: 10px; margin-bottom: 2px;">
+                    <a href="#" id="node-input-add-auth-group" class="editor-button editor-button-small"><i class="fa fa-plus"></i> Add group</a>
+                    <a href="#" id="node-input-add-auth-user" class="editor-button editor-button-small"><i class="fa fa-plus"></i> Add user</a>
+                </div>
+
+                <div class="opcua-auth-layout" style="flex: 1 1 auto;">
                     <div class="opcua-auth-panel">
                         <div class="opcua-tree-details-title">Groups</div>
                         <div id="opcua-auth-groups" class="opcua-auth-list"></div>
@@ -93,6 +92,83 @@
         </div>
     </div>
 
+    <div id="node-input-settings-modal" class="opcua-tree-modal" style="display:none;">
+        <div class="opcua-tree-modal__dialog">
+            <div class="opcua-tree-modal__header">
+                <div class="opcua-tree-modal__title"><i class="fa fa-cogs"></i> Server Settings</div>
+                <a href="#" id="node-input-close-settings-modal" class="editor-button editor-button-small"><i class="fa fa-times"></i> Close</a>
+            </div>
+            <div class="opcua-tree-modal__body" style="display: flex; flex-direction: column; gap: 14px;">
+                <div class="opcua-config-card">
+                    <div class="opcua-tree-details-title opcua-card-title"><i class="fa fa-cogs"></i> General Settings</div>
+                    <div class="opcua-config-form">
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-resourcePath"><i class="fa fa-server"></i> Resource path</label>
+                            <input class="opcua-config-input" type="text" id="node-input-resourcePath" placeholder="Resource path OPC UA Server">
+                        </div>
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-maxConnections"><i class="fa fa-users"></i> Number connections</label>
+                            <input class="opcua-config-input" type="number" id="node-input-maxConnections" min="1" placeholder="10">
+                        </div>
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-minSessionTimeout"><i class="fa fa-clock-o"></i> Min Session Timeout (ms)</label>
+                            <input class="opcua-config-input" type="number" id="node-input-minSessionTimeout" min="0" placeholder="100">
+                        </div>
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-defaultSessionTimeout"><i class="fa fa-clock-o"></i> Default Session Timeout (ms)</label>
+                            <input class="opcua-config-input" type="number" id="node-input-defaultSessionTimeout" min="0" placeholder="30000">
+                        </div>
+                        <div class="opcua-config-row">
+                            <label class="opcua-config-label" for="node-input-maxSessionTimeout"><i class="fa fa-clock-o"></i> Max Session Timeout (ms)</label>
+                            <input class="opcua-config-input" type="number" id="node-input-maxSessionTimeout" min="0" placeholder="3000000">
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <div id="node-input-cert-modal" class="opcua-tree-modal" style="display:none;">
+        <div class="opcua-tree-modal__dialog">
+            <div class="opcua-tree-modal__header">
+                <div class="opcua-tree-modal__title"><i class="fa fa-certificate"></i> Client Certificate Management</div>
+                <a href="#" id="node-input-close-cert-modal" class="editor-button editor-button-small"><i class="fa fa-times"></i> Close</a>
+            </div>
+            <div class="opcua-tree-modal__body">
+                <div class="opcua-auth-layout">
+                    <div class="opcua-auth-panel">
+                        <div class="opcua-tree-details-title">Folders</div>
+                        <div id="opcua-cert-folders" class="opcua-auth-list">
+                            <div class="opcua-cert-item is-selected" data-folder="rejected">
+                                <i class="fa fa-ban" style="color: #d9534f; width: 16px; text-align: center;"></i> Rejected Certificates
+                            </div>
+                            <div class="opcua-cert-item" data-folder="trusted">
+                                <i class="fa fa-check-circle" style="color: #5cb85c; width: 16px; text-align: center;"></i> Trusted Certificates
+                            </div>
+                        </div>
+                    </div>
+                    <div class="opcua-auth-panel">
+                        <div class="opcua-tree-details-title">Certificates</div>
+                        <div id="opcua-cert-files" class="opcua-auth-list" style="display: flex; flex-direction: column; gap: 2px;">
+                            <!-- List of certificates -->
+                        </div>
+                        <div id="opcua-cert-details" class="opcua-auth-card" style="margin-top: 10px; display: none;">
+                            <div class="form-row" style="margin-bottom: 8px;">
+                                <label style="width: auto; font-weight: bold;"><i class="fa fa-certificate"></i> Selected Certificate:</label>
+                                <span id="opcua-selected-cert-name" style="word-break: break-all; margin-left: 8px;"></span>
+                            </div>
+                            <div class="form-row" style="margin-bottom: 0; display: flex; align-items: center; gap: 8px;">
+                                <label style="width: auto;">Move to:</label>
+                                <select id="opcua-cert-target-folder" style="width: 150px; margin: 0;"></select>
+                                <a href="#" id="opcua-cert-move-btn" class="editor-button"><i class="fa fa-exchange"></i> Move</a>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
     <div id="node-input-tree-modal" class="opcua-tree-modal" style="display:none;">
         <div class="opcua-tree-modal__dialog">
             <div class="opcua-tree-modal__header">
@@ -148,12 +224,58 @@
 
 
 <script type="text/html" data-help-name="opc-ua-server">
-    <p>Creates a configurable OPC UA server using <code>node-opcua</code>.</p>
-    <p>The node starts an OPC UA server when deployed and exposes a dynamic tree under the configured namespace.</p>
+    <p>Creates a fully dynamic, configurable OPC UA server using <code>node-opcua</code>.</p>
+    <p>The server parses a JSON tree structure defined in the modal editor or provided dynamically to construct the OPC UA Address Space at runtime without manual coding.</p>
+
     <h3>Inputs</h3>
-    <p><code>msg.payload</code>: JSON object describing the OPC UA tree. When provided, the node validates the structure and rebuilds the dynamic namespace.</p>
-    <h3>Details</h3>
-    <p>Supported variable types: <code>Int16</code>, <code>Int32</code>, <code>Int64</code>, <code>Float</code>, <code>Boolean</code>, <code>String</code>.</p>
-    <p>Supported access modes: <code>readonly</code> and <code>readwrite</code>.</p>
-    <p>Authentication can be configured in the editor with multiple local users and groups stored in Node-RED credentials, and anonymous login can be disabled.</p>
+    <dl class="message-properties">
+        <dt>payload <span class="property-type">object | string</span></dt>
+        <dd>A JSON object or string describing the target OPC UA tree configuration. The server will validate the payload and dynamically rebuild the entire address space.</dd>
+    </dl>
+
+    <h3>Address Space Categories</h3>
+    
+    <h4>1. Folders & Objects</h4>
+    <ul>
+        <li><strong>Folders:</strong> Standard structural directories used to group objects and variables.</li>
+        <li><strong>Objects:</strong> Real-world component representations. Objects and folders can be nested hierarchically.</li>
+    </ul>
+
+    <h4>2. Variables</h4>
+    <ul>
+        <li><strong>Data Types:</strong> Supported data types include <code>Int16</code>, <code>UInt16</code>, <code>Int32</code>, <code>UInt32</code>, <code>Float</code>, <code>Boolean</code>, <code>String</code>, <code>ByteString</code>, and <code>LocalizedText</code>.</li>
+        <li><strong>Access Control:</strong> Variable access can be set to <code>readonly</code> or <code>readwrite</code>.</li>
+    </ul>
+
+    <h4>3. ObjectTypes (Templates)</h4>
+    <ul>
+        <li>Define reusable object type definitions (templates) under the <code>Types/ObjectTypes</code> visual folder.</li>
+        <li>Instantiate these types under folders/objects. Changes to the ObjectType structure will automatically propagate to all instances.</li>
+        <li><strong>Alarms on ObjectTypes:</strong> When configuring an alarm inside an ObjectType, the alarm variable path must reference the variable using the format <code>'ObjectTypeName'.'VariableName'</code> (e.g. <code>motor.status</code>).</li>
+    </ul>
+
+    <h4>4. Enumerations (DataTypes)</h4>
+    <ul>
+        <li>Define custom enumeration data types mapping integer states to display strings (e.g. <code>0: Stopped</code>, <code>1: Running</code>).</li>
+        <li>Variables can select these custom Enumerations as their data type.</li>
+    </ul>
+
+    <h4>5. Methods</h4>
+    <ul>
+        <li>Define callable server methods with custom <strong>Input Arguments</strong> and <strong>Output Arguments</strong>.</li>
+        <li>Incoming method calls are routed automatically to matching <code>opcua-server-io</code> nodes (set to <code>method-input</code> mode) where flow logic handles execution and returns the result via <code>method-output</code>.</li>
+    </ul>
+
+    <h4>6. Alarms</h4>
+    <ul>
+        <li><strong>Level Alarms:</strong> Monitor numeric variables and trigger limit events (<code>highHighLimit</code>, <code>highLimit</code>, <code>lowLimit</code>, <code>lowLowLimit</code>) with custom severity.</li>
+        <li><strong>Digital Alarms:</strong> Triggered when a boolean/numeric variable matches or deviates from a configured normal state.</li>
+    </ul>
+
+    <h3>Security & Access Control</h3>
+    <ul>
+        <li><strong>Authentication:</strong> Supports anonymous login and authenticated username/password login. Passwords can be hashed automatically.</li>
+        <li><strong>Access Permissions:</strong> Each folder, variable, method, or alarm can restrict access to specified user groups (comma-separated list, e.g. <code>operator,engineer</code>). If no users are configured, permission checks are disabled.</li>
+        <li><strong>Client Certificates:</strong> Open the Certificate modal to inspect, trust, or reject incoming client certificates. Trusted certificates reside in the simple_opcua server storage.</li>
+    </ul>
 </script>