API NEW CONTROLLER UPDATED - Remove mail service from ReceiverAuthController

All references to IEnvelopeMailService have been removed from ReceiverAuthController. The controller no longer sends access code emails; this responsibility is now handled by the Web project when generating the link. Updated comments clarify the new flow, and related redundant code has been cleaned up. Authentication and TFA logic remain unchanged.

EnvelopeGenerator.API/Controllers/EmailTemplateController.cs

@@ -1,17 +1,14 @@
 using AutoMapper;
-using EnvelopeGenerator.Application.EmailTemplates;
-using EnvelopeGenerator.Application.EmailTemplates.Commands.Update;
-using EnvelopeGenerator.Application.EmailTemplates.Commands.Reset;
-using EnvelopeGenerator.Application.EmailTemplates.Queries.Read;
+using EnvelopeGenerator.Application.EmailTemplates.Commands;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using MediatR;
-using System.Threading.Tasks;
 using EnvelopeGenerator.Application.Common.Dto;
 using DigitalData.Core.Abstraction.Application.Repository;
 using EnvelopeGenerator.Domain.Entities;
 using Microsoft.EntityFrameworkCore;
 using EnvelopeGenerator.Domain.Constants;
+using EnvelopeGenerator.Application.EmailTemplates.Queries;
 
 namespace EnvelopeGenerator.API.Controllers;
 
@@ -22,20 +19,20 @@ namespace EnvelopeGenerator.API.Controllers;
 /// <remarks>
 /// Initialisiert eine neue Instanz der <see cref="EmailTemplateController"/>-Klasse.
 /// </remarks>
-/// <param name="mapper">
-/// <param name="repository">
-/// Die AutoMapper-Instanz, die zum Zuordnen von Objekten verwendet wird.
+/// <param name="mediator">
+/// Die Mediator-Instanz, die zum Senden von Befehlen und Abfragen verwendet wird.
 /// </param>
 [Route("api/[controller]")]
 [ApiController]
 [Authorize(Policy = AuthPolicy.Sender)]
-public class EmailTemplateController(IMapper mapper, IRepository<EmailTemplate> repository, IMediator mediator) : ControllerBase
+public class EmailTemplateController(IMediator mediator) : ControllerBase
 {
     /// <summary>
     /// Ruft E-Mail-Vorlagen basierend auf der angegebenen Abfrage ab.
     /// Gibt alles zurück, wenn keine Id- oder Typ-Informationen eingegeben wurden.
     /// </summary>
     /// <param name="emailTemplate">Die Abfrageparameter zum Abrufen von E-Mail-Vorlagen.</param>
+    /// <param name="cancel"></param>
     /// <returns>Gibt HTTP-Antwort zurück</returns>
     /// <remarks>
     /// Sample request:
@@ -46,58 +43,27 @@ public class EmailTemplateController(IMapper mapper, IRepository<EmailTemplate>
     /// <response code="401">Wenn der Benutzer nicht authentifiziert ist.</response>
     /// <response code="404">Wenn die gesuchte Abfrage nicht gefunden wird.</response>
     [HttpGet]
-    public async Task<IActionResult> Get([FromQuery] ReadEmailTemplateQuery? emailTemplate = null)
+    public async Task<IActionResult> Get([FromQuery] ReadEmailTemplateQuery emailTemplate, CancellationToken cancel)
     {
-        if (emailTemplate is null || (emailTemplate.Id is null && emailTemplate.Type is null))
-        {
-            var temps = await repository.Query.ToListAsync();
-            return Ok(mapper.Map<IEnumerable<EmailTemplateDto>>(temps));
-        }
-        else
-        {
-            var temp = await mediator.Send(emailTemplate);
-            return temp is null ? NotFound() : Ok(temp);
-        }
+        var result = await mediator.Send(emailTemplate, cancel);
+        return Ok(result);
     }
 
     /// <summary>
     /// Updates an temp template or resets it if no update command is provided.
     /// Aktualisiert eine E-Mail-Vorlage oder setzt sie zurück, wenn kein Aktualisierungsbefehl angegeben ist.
     /// </summary>
-    /// <param name="temp">Die E-Mail-Vorlagenabfrage.</param>
-    /// <param name="update">Der Aktualisierungsbefehl für die E-Mail-Vorlage.
-    /// Wird auf Standardwert aktualisiert, wenn die Anfrage ohne http-Body gesendet wird.
-    /// </param>
-    /// <returns>Gibt HTTP-Antwort zurück</returns>
-    /// <remarks>
-    /// Sample request:
-    /// PUT /api/EmailTemplate
-    /// {
-    ///     "emailTemplateId": 123,
-    ///     "newContent": "Updated content"
-    /// }
-    /// </remarks>
+    /// <param name="update"></param>
+    /// <param name="cancel"></param>
+    /// <returns></returns>
     /// <response code="200">Wenn die E-Mail-Vorlage erfolgreich aktualisiert oder zurückgesetzt wird.</response>
     /// <response code="400">Wenn die Abfrage ohne einen String gesendet wird.</response>
     /// <response code="401">Wenn der Benutzer nicht authentifiziert ist.</response>
     /// <response code="404">Wenn die gesuchte Abfrage nicht gefunden wird.</response>
     [HttpPut]
-    public async Task<IActionResult> Update([FromQuery] EmailTemplateQueryBase? temp = null, [FromBody] UpdateEmailTemplateCommand? update = null)
+    public async Task<IActionResult> Update([FromBody] UpdateEmailTemplateCommand update, CancellationToken cancel)
     {
-        if (update is null)
-        {
-            await mediator.Send(new ResetEmailTemplateCommand(temp));
-            return Ok();
-        }
-        else if (temp is null)
-        {
-            return BadRequest("No both id and type");
-        }
-        else
-        {
-            update.EmailTemplateQuery = temp;
-            await mediator.Send(update);
-            return Ok();
-        }
+        await mediator.Send(update, cancel);
+        return Ok();
     }
 }

EnvelopeGenerator.API/Controllers/ReadOnlyController.cs

@@ -38,6 +38,7 @@ public class ReadOnlyController : ControllerBase
     /// <param name="createDto">Creation payload.</param>
     [HttpPost]
     [Authorize(Policy = AuthPolicy.Receiver)]
+    [Obsolete("Use MediatR")]
     public async Task<IActionResult> CreateAsync([FromBody] EnvelopeReceiverReadOnlyCreateDto createDto)
     {
         var authReceiverMail = User.GetReceiverMailOfReceiver();

EnvelopeGenerator.API/Controllers/ReceiverAuthController.cs

@@ -0,0 +1,406 @@
+using EnvelopeGenerator.API.Models;
+using EnvelopeGenerator.Application.Common.Extensions;
+using EnvelopeGenerator.Application.Common.Interfaces.Services;
+using EnvelopeGenerator.Application.EnvelopeReceivers.Queries;
+using EnvelopeGenerator.Domain.Constants;
+using EnvelopeGenerator.API.Extensions;
+using MediatR;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Mvc;
+using OtpNet;
+
+namespace EnvelopeGenerator.API.Controllers;
+
+/// <summary>
+/// REST-API für den Empfänger-Authentifizierungs-Flow.
+/// 
+/// Entspricht der Logik in EnvelopeGenerator.Web.Controllers.EnvelopeController
+/// (Main + LogInEnvelope), aber gibt JSON statt Views zurück.
+/// 
+/// Der Blazor-Client (ReceiverUI) ruft diese Endpunkte auf.
+/// 
+/// FLOW:
+/// 1. Client ruft GET  /api/receiverauth/{key}/status     → Prüft Status
+/// 2. Client ruft POST /api/receiverauth/{key}/access-code → Sendet AccessCode
+/// 3. Client ruft POST /api/receiverauth/{key}/tfa         → Sendet TFA-Code
+/// 
+/// Nach erfolgreicher Authentifizierung wird ein Cookie gesetzt (SignInEnvelopeAsync).
+/// Danach kann der Client die Dokument-Daten über die bestehenden Envelope-Endpunkte laden.
+/// </summary>
+[Route("api/[controller]")]
+[ApiController]
+public class ReceiverAuthController : ControllerBase
+{
+    private readonly ILogger<ReceiverAuthController> _logger;
+    private readonly IMediator _mediator;
+    private readonly IEnvelopeReceiverService _envRcvService;
+    private readonly IEnvelopeHistoryService _historyService;
+    private readonly IAuthenticator _authenticator;
+    private readonly IReceiverService _rcvService;
+    private readonly IEnvelopeSmsHandler _envSmsHandler;
+
+    public ReceiverAuthController(
+        ILogger<ReceiverAuthController> logger,
+        IMediator mediator,
+        IEnvelopeReceiverService envRcvService,
+        IEnvelopeHistoryService historyService,
+        IAuthenticator authenticator,
+        IReceiverService rcvService,
+        IEnvelopeSmsHandler envSmsHandler)
+    {
+        _logger = logger;
+        _mediator = mediator;
+        _envRcvService = envRcvService;
+        _historyService = historyService;
+        _authenticator = authenticator;
+        _rcvService = rcvService;
+        _envSmsHandler = envSmsHandler;
+    }
+
+    // ══════════════════════════════════════════════════════════════
+    // ENDPUNKT 1: STATUS PRÜFEN
+    // Entspricht: Web.EnvelopeController.Main()
+    // ══════════════════════════════════════════════════════════════
+
+    /// <summary>
+    /// Prüft den aktuellen Status eines Umschlags für den Empfänger.
+    /// Entscheidet ob: NotFound, Rejected, Signed, AccessCode nötig, oder direkt anzeigen.
+    /// </summary>
+    /// <param name="key">Der EnvelopeReceiver-Key aus der URL (Base64-kodiert)</param>
+    /// <param name="cancel">Cancellation-Token</param>
+    /// <returns>ReceiverAuthResponse mit dem aktuellen Status</returns>
+    [HttpGet("{key}/status")]
+    public async Task<IActionResult> GetStatus([FromRoute] string key, CancellationToken cancel)
+    {
+        try
+        {
+            // ── Key dekodieren ──
+            if (!key.TryDecode(out var decoded))
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            // ── ReadOnly-Links ──
+            if (decoded.GetEncodeType() == EncodeType.EnvelopeReceiverReadOnly)
+            {
+                return Ok(new ReceiverAuthResponse
+                {
+                    Status = "show_document",
+                    ReadOnly = true
+                });
+            }
+
+            // ── EnvelopeReceiver laden ──
+            var er = await _mediator.ReadEnvelopeReceiverAsync(key, cancel);
+            if (er is null)
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            // ── Abgelehnt? ──
+            var rejRcvrs = await _historyService.ReadRejectingReceivers(er.Envelope!.Id);
+            if (rejRcvrs.Any())
+            {
+                await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+                return Ok(new ReceiverAuthResponse
+                {
+                    Status = "rejected",
+                    Title = er.Envelope.Title,
+                    SenderEmail = er.Envelope.User?.Email
+                });
+            }
+
+            // ── Bereits signiert? ──
+            if (await _historyService.IsSigned(
+                    envelopeId: er.Envelope.Id,
+                    userReference: er.Receiver!.EmailAddress))
+            {
+                await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+                return Ok(new ReceiverAuthResponse
+                {
+                    Status = "already_signed",
+                    Title = er.Envelope.Title,
+                    SenderEmail = er.Envelope.User?.Email
+                });
+            }
+
+            // ── Kein AccessCode nötig? → Direkt SignIn ──
+            if (!er.Envelope.UseAccessCode)
+            {
+                (string? uuid, string? signature) = decoded.ParseEnvelopeReceiverId();
+                var erSecretRes = await _envRcvService.ReadWithSecretByUuidSignatureAsync(
+                    uuid: uuid!, signature: signature!);
+
+                if (erSecretRes.IsFailed)
+                    return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+                await HttpContext.SignInEnvelopeAsync(erSecretRes.Data, Role.ReceiverFull);
+
+                return Ok(new ReceiverAuthResponse
+                {
+                    Status = "show_document",
+                    Title = er.Envelope.Title,
+                    Message = er.Envelope.Message,
+                    SenderEmail = er.Envelope.User?.Email,
+                    ReadOnly = er.Envelope.ReadOnly
+                });
+            }
+
+            // ── AccessCode nötig ──
+            // HINWEIS: Die E-Mail mit dem AccessCode wird NICHT hier gesendet.
+            // Das passiert bereits im Web-Projekt, wenn der Link generiert wird.
+            // Der Blazor-Flow übernimmt erst NACH dem E-Mail-Versand.
+            bool accessCodeAlreadyRequested = await _historyService.AccessCodeAlreadyRequested(
+                envelopeId: er.Envelope.Id,
+                userReference: er.Receiver.EmailAddress);
+
+            if (!accessCodeAlreadyRequested)
+            {
+                // AccessCode wurde noch nie angefordert — das bedeutet der Empfänger
+                // kommt zum ersten Mal. Wir zeichnen es auf, aber die E-Mail
+                // wurde bereits vom Web-Projekt gesendet.
+                await _historyService.RecordAsync(
+                    er.EnvelopeId, er.Receiver.EmailAddress, EnvelopeStatus.AccessCodeRequested);
+            }
+
+            // ── Prüfe ob der Nutzer bereits eingeloggt ist ──
+            if (User.IsInRole(Role.ReceiverFull))
+            {
+                return Ok(new ReceiverAuthResponse
+                {
+                    Status = "show_document",
+                    Title = er.Envelope.Title,
+                    Message = er.Envelope.Message,
+                    SenderEmail = er.Envelope.User?.Email,
+                    ReadOnly = er.Envelope.ReadOnly
+                });
+            }
+
+            return Ok(new ReceiverAuthResponse
+            {
+                Status = "requires_access_code",
+                Title = er.Envelope.Title,
+                SenderEmail = er.Envelope.User?.Email,
+                TfaEnabled = er.Envelope.TFAEnabled,
+                HasPhoneNumber = er.HasPhoneNumber
+            });
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Error checking status for key {Key}", key);
+            return StatusCode(500, new ReceiverAuthResponse
+            {
+                Status = "error",
+                ErrorMessage = "Ein unerwarteter Fehler ist aufgetreten."
+            });
+        }
+    }
+
+    // ══════════════════════════════════════════════════════════════
+    // ENDPUNKT 2: ACCESS-CODE PRÜFEN
+    // ══════════════════════════════════════════════════════════════
+
+    /// <summary>
+    /// Prüft den eingegebenen Zugangscode.
+    /// Bei Erfolg: SignIn oder TFA-Weiterleitung.
+    /// Bei Fehler: Fehlermeldung zurückgeben.
+    /// </summary>
+    [HttpPost("{key}/access-code")]
+    public async Task<IActionResult> SubmitAccessCode(
+        [FromRoute] string key,
+        [FromBody] AccessCodeRequest request,
+        CancellationToken cancel)
+    {
+        try
+        {
+            // ── Key dekodieren + Daten laden ──
+            (string? uuid, string? signature) = key.DecodeEnvelopeReceiverId();
+            if (uuid is null || signature is null)
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            var erSecretRes = await _envRcvService.ReadWithSecretByUuidSignatureAsync(
+                uuid: uuid, signature: signature);
+
+            if (erSecretRes.IsFailed)
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            var erSecret = erSecretRes.Data;
+
+            // ── AccessCode prüfen ──
+            if (erSecret.AccessCode != request.AccessCode)
+            {
+                await _historyService.RecordAsync(
+                    erSecret.EnvelopeId,
+                    erSecret.Receiver!.EmailAddress,
+                    EnvelopeStatus.AccessCodeIncorrect);
+
+                return Unauthorized(new ReceiverAuthResponse
+                {
+                    Status = "requires_access_code",
+                    Title = erSecret.Envelope!.Title,
+                    SenderEmail = erSecret.Envelope.User?.Email,
+                    TfaEnabled = erSecret.Envelope.TFAEnabled,
+                    HasPhoneNumber = erSecret.HasPhoneNumber,
+                    ErrorMessage = "Falscher Zugangscode."
+                });
+            }
+
+            // ── AccessCode korrekt ──
+            await _historyService.RecordAsync(
+                erSecret.EnvelopeId,
+                erSecret.Receiver!.EmailAddress,
+                EnvelopeStatus.AccessCodeCorrect);
+
+            // ── TFA erforderlich? ──
+            if (erSecret.Envelope!.TFAEnabled)
+            {
+                var rcv = erSecret.Receiver;
+                if (rcv.TotpSecretkey is null)
+                {
+                    rcv.TotpSecretkey = _authenticator.GenerateTotpSecretKey();
+                    await _rcvService.UpdateAsync(rcv);
+                }
+
+                await HttpContext.SignInEnvelopeAsync(erSecret, Role.ReceiverTFA);
+
+                if (request.PreferSms)
+                {
+                    var (smsRes, expiration) = await _envSmsHandler.SendTotpAsync(erSecret);
+
+                    return Ok(new ReceiverAuthResponse
+                    {
+                        Status = "requires_tfa",
+                        TfaType = "sms",
+                        TfaExpiration = expiration,
+                        Title = erSecret.Envelope.Title,
+                        SenderEmail = erSecret.Envelope.User?.Email,
+                        HasPhoneNumber = erSecret.HasPhoneNumber
+                    });
+                }
+                else
+                {
+                    return Ok(new ReceiverAuthResponse
+                    {
+                        Status = "requires_tfa",
+                        TfaType = "authenticator",
+                        Title = erSecret.Envelope.Title,
+                        SenderEmail = erSecret.Envelope.User?.Email,
+                        HasPhoneNumber = erSecret.HasPhoneNumber
+                    });
+                }
+            }
+
+            // ── Kein TFA → Direkt SignIn ──
+            await HttpContext.SignInEnvelopeAsync(erSecret, Role.ReceiverFull);
+
+            return Ok(new ReceiverAuthResponse
+            {
+                Status = "show_document",
+                Title = erSecret.Envelope.Title,
+                Message = erSecret.Envelope.Message,
+                SenderEmail = erSecret.Envelope.User?.Email,
+                ReadOnly = erSecret.Envelope.ReadOnly
+            });
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Error submitting access code for key {Key}", key);
+            return StatusCode(500, new ReceiverAuthResponse
+            {
+                Status = "error",
+                ErrorMessage = "Ein unerwarteter Fehler ist aufgetreten."
+            });
+        }
+    }
+
+    // ══════════════════════════════════════════════════════════════
+    // ENDPUNKT 3: TFA-CODE PRÜFEN
+    // ══════════════════════════════════════════════════════════════
+
+    /// <summary>
+    /// Prüft den TFA-Code (SMS oder Authenticator).
+    /// Setzt voraus, dass der Nutzer bereits mit ReceiverTFA-Rolle eingeloggt ist.
+    /// </summary>
+    [HttpPost("{key}/tfa")]
+    public async Task<IActionResult> SubmitTfaCode(
+        [FromRoute] string key,
+        [FromBody] TfaCodeRequest request,
+        CancellationToken cancel)
+    {
+        try
+        {
+            if (!User.IsInRole(Role.ReceiverTFA))
+                return Unauthorized(new ReceiverAuthResponse
+                {
+                    Status = "requires_access_code",
+                    ErrorMessage = "Bitte zuerst den Zugangscode eingeben."
+                });
+
+            (string? uuid, string? signature) = key.DecodeEnvelopeReceiverId();
+            if (uuid is null || signature is null)
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            var erSecretRes = await _envRcvService.ReadWithSecretByUuidSignatureAsync(
+                uuid: uuid, signature: signature);
+
+            if (erSecretRes.IsFailed)
+                return NotFound(new ReceiverAuthResponse { Status = "not_found" });
+
+            var erSecret = erSecretRes.Data;
+
+            if (erSecret.Receiver!.TotpSecretkey is null)
+            {
+                _logger.LogError("TotpSecretkey is null for receiver {Signature}", signature);
+                return StatusCode(500, new ReceiverAuthResponse
+                {
+                    Status = "error",
+                    ErrorMessage = "TFA-Konfiguration fehlt."
+                });
+            }
+
+            bool codeValid;
+
+            if (request.Type == "sms")
+            {
+                codeValid = _envSmsHandler.VerifyTotp(request.Code, erSecret.Receiver.TotpSecretkey);
+            }
+            else
+            {
+                codeValid = _authenticator.VerifyTotp(
+                    request.Code,
+                    erSecret.Receiver.TotpSecretkey,
+                    window: VerificationWindow.RfcSpecifiedNetworkDelay);
+            }
+
+            if (!codeValid)
+            {
+                return Unauthorized(new ReceiverAuthResponse
+                {
+                    Status = "requires_tfa",
+                    TfaType = request.Type,
+                    Title = erSecret.Envelope!.Title,
+                    SenderEmail = erSecret.Envelope.User?.Email,
+                    HasPhoneNumber = erSecret.HasPhoneNumber,
+                    ErrorMessage = "Falscher Code."
+                });
+            }
+
+            await HttpContext.SignInEnvelopeAsync(erSecret, Role.ReceiverFull);
+
+            return Ok(new ReceiverAuthResponse
+            {
+                Status = "show_document",
+                Title = erSecret.Envelope!.Title,
+                Message = erSecret.Envelope.Message,
+                SenderEmail = erSecret.Envelope.User?.Email,
+                ReadOnly = erSecret.Envelope.ReadOnly
+            });
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Error submitting TFA code for key {Key}", key);
+            return StatusCode(500, new ReceiverAuthResponse
+            {
+                Status = "error",
+                ErrorMessage = "Ein unerwarteter Fehler ist aufgetreten."
+            });
+        }
+    }
+}

EnvelopeGenerator.API/EnvelopeGenerator.API.csproj

@@ -32,11 +32,14 @@
     <PackageReference Include="AspNetCore.Scalar" Version="1.1.8" />
     <PackageReference Include="DigitalData.Auth.Client" Version="1.3.7" />
     <PackageReference Include="DigitalData.Core.API" Version="2.2.1" />
+    <PackageReference Include="HtmlSanitizer" Version="9.0.892" />
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="9.0.4" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="9.0.6" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.82.1" />
     <PackageReference Include="NLog" Version="5.2.5" />
     <PackageReference Include="NLog.Web.AspNetCore" Version="5.3.0" />
     <PackageReference Include="Scalar.AspNetCore" Version="2.2.1" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="8.1.1" />
     <PackageReference Include="DigitalData.EmailProfilerDispatcher.Abstraction" Version="3.2.0" />
     <PackageReference Include="Yarp.ReverseProxy" Version="2.1.0" />

EnvelopeGenerator.API/Models/ReceiverAuthResponse.cs

@@ -0,0 +1,78 @@
+namespace EnvelopeGenerator.API.Models;
+
+/// <summary>
+/// Einheitliche Antwort des ReceiverAuthControllers.
+/// 
+/// WARUM ein einziges Response-Objekt für alle Endpunkte?
+/// - Der Client braucht nur ein Format zu verstehen
+/// - Der Status-String bestimmt, welche Felder relevant sind
+/// - Entspricht dem, was der Web-Controller bisher über ViewData verteilt hat
+/// 
+/// Status-Werte und was sie bedeuten:
+/// - "requires_access_code" → AccessCode-Eingabe zeigen
+/// - "requires_tfa"         → TFA-Code-Eingabe zeigen (nach AccessCode)
+/// - "show_document"        → Dokument laden und anzeigen
+/// - "already_signed"       → Info-Seite "Bereits unterschrieben"
+/// - "rejected"             → Info-Seite "Abgelehnt"
+/// - "not_found"            → Fehler-Seite "Nicht gefunden"
+/// - "expired"              → Fehler-Seite "Link abgelaufen"
+/// </summary>
+public class ReceiverAuthResponse
+{
+    /// <summary>Aktueller Status des Empfänger-Flows</summary>
+    public required string Status { get; init; }
+
+    /// <summary>Titel des Umschlags (z.B. "Vertragsdokument")</summary>
+    public string? Title { get; init; }
+
+    /// <summary>Nachricht des Absenders</summary>
+    public string? Message { get; init; }
+
+    /// <summary>E-Mail des Absenders (für Rückfragen-Hinweis)</summary>
+    public string? SenderEmail { get; init; }
+
+    /// <summary>Name des Empfängers</summary>
+    public string? ReceiverName { get; init; }
+
+    /// <summary>Ob TFA für diesen Umschlag aktiviert ist</summary>
+    public bool TfaEnabled { get; init; }
+
+    /// <summary>Ob der Empfänger eine Telefonnummer hat (für SMS-TFA)</summary>
+    public bool HasPhoneNumber { get; init; }
+
+    /// <summary>Ob das Dokument nur gelesen werden soll (ReadAndConfirm)</summary>
+    public bool ReadOnly { get; init; }
+
+    /// <summary>TFA-Typ: "sms" oder "authenticator" (wenn Status = "requires_tfa")</summary>
+    public string? TfaType { get; init; }
+
+    /// <summary>Ablaufzeit des SMS-Codes (für Countdown-Timer)</summary>
+    public DateTime? TfaExpiration { get; init; }
+
+    /// <summary>Fehlermeldung (z.B. "Falscher Zugangscode")</summary>
+    public string? ErrorMessage { get; init; }
+}
+
+/// <summary>
+/// Request-Body für POST /api/receiverauth/{key}/access-code
+/// </summary>
+public class AccessCodeRequest
+{
+    /// <summary>Der vom Empfänger eingegebene Zugangscode</summary>
+    public required string AccessCode { get; init; }
+
+    /// <summary>Ob SMS statt Authenticator bevorzugt wird</summary>
+    public bool PreferSms { get; init; }
+}
+
+/// <summary>
+/// Request-Body für POST /api/receiverauth/{key}/tfa
+/// </summary>
+public class TfaCodeRequest
+{
+    /// <summary>Der eingegebene TFA-Code (6-stellig)</summary>
+    public required string Code { get; init; }
+
+    /// <summary>"sms" oder "authenticator"</summary>
+    public required string Type { get; init; }
+}

EnvelopeGenerator.Application/Common/Commands/CreateCommandHandler.cs

@@ -0,0 +1,36 @@
+using DigitalData.Core.Abstraction.Application.Repository;
+using MediatR;
+
+namespace EnvelopeGenerator.Application.Common.Commands;
+
+/// <summary>
+/// 
+/// </summary>
+/// <typeparam name="TCommand"></typeparam>
+/// <typeparam name="TEntity"></typeparam>
+public class CreateCommandHandler<TCommand, TEntity> : IRequestHandler<TCommand, TEntity>
+    where TCommand : class, IRequest<TEntity>
+    where TEntity : class
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    protected readonly IRepository<TEntity> Repository;
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="repository"></param>
+    public CreateCommandHandler(IRepository<TEntity> repository)
+    {
+        Repository = repository;
+    }
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="request"></param>
+    /// <param name="cancel"></param>
+    /// <returns></returns>
+    public Task<TEntity> Handle(TCommand request, CancellationToken cancel) => Repository.CreateAsync(request, cancel);
+}

EnvelopeGenerator.Application/Common/Commands/UpdateCommand.cs

@@ -0,0 +1,59 @@
+using DigitalData.Core.Abstraction.Application.Repository;
+using MediatR;
+using System.Linq.Expressions;
+
+namespace EnvelopeGenerator.Application.Common.Commands;
+
+/// <summary>
+/// 
+/// </summary>
+/// <typeparam name="TUpdateDto"></typeparam>
+/// <typeparam name="TEntity"></typeparam>
+public abstract record UpdateCommand<TUpdateDto, TEntity> : IRequest where TUpdateDto : class where TEntity : class
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    public TUpdateDto Update { get; init; } = null!;
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <returns></returns>
+    public abstract Expression<Func<TEntity, bool>> BuildQueryExpression();
+}
+
+/// <summary>
+/// 
+/// </summary>
+/// <typeparam name="TCommand"></typeparam>
+/// <typeparam name="TUpdateDto"></typeparam>
+/// <typeparam name="TEntity"></typeparam>
+public class UpdateCommandHandler<TCommand, TUpdateDto, TEntity> : IRequestHandler<TCommand>
+    where TUpdateDto : class
+    where TEntity : class
+    where TCommand : UpdateCommand<TUpdateDto, TEntity>
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    protected readonly IRepository<TEntity> Repository;
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="repository"></param>
+    public UpdateCommandHandler(IRepository<TEntity> repository)
+    {
+        Repository = repository;
+    }
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="request"></param>
+    /// <param name="cancel"></param>
+    /// <returns></returns>
+    public Task Handle(TCommand request, CancellationToken cancel)
+        => Repository.UpdateAsync(request.Update, request.BuildQueryExpression(), cancel);
+}

EnvelopeGenerator.Application/Common/Dto/EmailTemplateDto.cs

@@ -13,25 +13,30 @@ public record EmailTemplateDto
     /// <summary>
     /// 
     /// </summary>
-    public required string Name { get; init; }
+    public string Name { get; set; } = null!;
 
     /// <summary>
     /// Das Datum und die Uhrzeit, wann die Vorlage hinzugefügt wurde.
     /// </summary>
-    public DateTime AddedWhen { get; init; }
+    public DateTime AddedWhen { get; set; }
 
     /// <summary>
     /// Der Inhalt (Body) der E-Mail-Vorlage. Kann null sein.
     /// </summary>
-    public string? Body { get; init; }
+    public string? Body { get; set; }
 
     /// <summary>
     /// Der Betreff der E-Mail-Vorlage. Kann null sein.
     /// </summary>
-    public string? Subject { get; init; }
+    public string? Subject { get; set; }
+
+    /// <summary>
+    /// Der Sprachcode der E-Mail-Vorlage.
+    /// </summary>
+    public string LangCode { get; set; } = null!;
 
     /// <summary>
     /// Das Datum und die Uhrzeit, wann die Vorlage zuletzt geändert wurde. Kann null sein.
     /// </summary>
-    public DateTime? ChangedWhen { get; init; }
+    public DateTime? ChangedWhen { get; set; }
 };

EnvelopeGenerator.Application/Common/Dto/MappingProfile.cs

@@ -28,8 +28,8 @@ public class MappingProfile : Profile
         CreateMap<EmailTemplate, EmailTemplateDto>();
         CreateMap<Envelope, EnvelopeDto>();
         CreateMap<Document, DocumentDto>();
-        CreateMap<Domain.Entities.History, HistoryDto>();
-        CreateMap<Domain.Entities.History, HistoryCreateDto>();
+        CreateMap<Domain.Entities.History, HistoryDto>().ForMember(dest => dest.ActionDate, opt => opt.MapFrom(src => src.ChangedWhen));
+        CreateMap<Domain.Entities.History, HistoryCreateDto>().ForMember(dest => dest.ActionDate, opt => opt.MapFrom(src => src.ChangedWhen));
         CreateMap<Domain.Entities.EnvelopeReceiver, EnvelopeReceiverDto>();
         CreateMap<Domain.Entities.EnvelopeReceiver, EnvelopeReceiverSecretDto>();
         CreateMap<EnvelopeType, EnvelopeTypeDto>();
@@ -44,15 +44,15 @@ public class MappingProfile : Profile
         CreateMap<EmailTemplateDto, EmailTemplate>();
         CreateMap<EnvelopeDto, Envelope>();
         CreateMap<DocumentDto, Document>();
-        CreateMap<HistoryDto, Domain.Entities.History>();
-        CreateMap<HistoryCreateDto, Domain.Entities.History>();
+        CreateMap<HistoryDto, Domain.Entities.History>().ForMember(dest => dest.ChangedWhen, opt => opt.MapFrom(src => src.ActionDate));
+        CreateMap<HistoryCreateDto, Domain.Entities.History>().ForMember(dest => dest.ChangedWhen, opt => opt.MapFrom(src => src.ActionDate));
         CreateMap<EnvelopeReceiverDto, Domain.Entities.EnvelopeReceiver>();
         CreateMap<EnvelopeTypeDto, EnvelopeType>();
         CreateMap<ReceiverDto, Domain.Entities.Receiver>().ForMember(rcv => rcv.EnvelopeReceivers, rcvReadDto => rcvReadDto.Ignore());
         CreateMap<EnvelopeReceiverReadOnlyCreateDto, Domain.Entities.EnvelopeReceiverReadOnly>();
         CreateMap<EnvelopeReceiverReadOnlyUpdateDto, Domain.Entities.EnvelopeReceiverReadOnly>();
         CreateMap<AnnotationCreateDto, ElementAnnotation>()
-            .ForMember(dest => dest.AddedWhen, opt => opt.MapFrom(_ => DateTime.UtcNow));
+            .MapAddedWhen();
 
         // Messaging mappings
         // for GTX messaging

EnvelopeGenerator.Application/Common/Extensions/AutoMapperAuditingExtensions.cs

@@ -0,0 +1,24 @@
+using AutoMapper;
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
+
+namespace EnvelopeGenerator.Application.Common.Extensions;
+
+/// <summary>
+/// Extension methods for applying auditing timestamps during AutoMapper mappings.
+/// </summary>
+public static class AutoMapperAuditingExtensions
+{
+    /// <summary>
+    /// Maps <see cref="IHasAddedWhen.AddedWhen"/> to the current UTC time.
+    /// </summary>
+    public static IMappingExpression<TSource, TDestination> MapAddedWhen<TSource, TDestination>(this IMappingExpression<TSource, TDestination> expression)
+        where TDestination : IHasAddedWhen
+        => expression.ForMember(dest => dest.AddedWhen, opt => opt.MapFrom(_ => DateTime.UtcNow));
+
+    /// <summary>
+    /// Maps <see cref="IHasChangedWhen.ChangedWhen"/> to the current UTC time.
+    /// </summary>
+    public static IMappingExpression<TSource, TDestination> MapChangedWhen<TSource, TDestination>(this IMappingExpression<TSource, TDestination> expression)
+        where TDestination : IHasChangedWhen
+        => expression.ForMember(dest => dest.ChangedWhen, opt => opt.MapFrom(_ => DateTime.UtcNow));
+}

EnvelopeGenerator.Application/DocStatus/Commands/CreateDocStatusCommand.cs

@@ -1,12 +1,31 @@
-namespace EnvelopeGenerator.Application.DocStatus.Commands;
+using DigitalData.Core.Abstraction.Application.Repository;
+using EnvelopeGenerator.Application.Common.Commands;
+using EnvelopeGenerator.Domain.Entities;
+using MediatR;
+
+namespace EnvelopeGenerator.Application.DocStatus.Commands;
 
 /// <summary>
 /// 
 /// </summary>
-public record CreateDocStatusCommand : ModifyDocStatusCommandBase
+public record CreateDocStatusCommand : ModifyDocStatusCommandBase, IRequest<DocumentStatus>
 {
     /// <summary>
     /// Gets timestamp when this record was added. Returns the StatusChangedWhen value.
     /// </summary>
     public DateTime AddedWhen => StatusChangedWhen;
+}
+
+/// <summary>
+/// 
+/// </summary>
+public class CreateDocStatusCommandHandler : CreateCommandHandler<CreateDocStatusCommand, DocumentStatus>
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="repository"></param>
+    public CreateDocStatusCommandHandler(IRepository<DocumentStatus> repository) : base(repository)
+    {
+    }
 }

EnvelopeGenerator.Application/DocStatus/MappingProfile.cs

@@ -1,4 +1,5 @@
 using AutoMapper;
+using EnvelopeGenerator.Application.Common.Extensions;
 using EnvelopeGenerator.Application.DocStatus.Commands;
 using EnvelopeGenerator.Domain.Entities;
 
@@ -16,10 +17,12 @@ public class MappingProfile : Profile
     {
         CreateMap<CreateDocStatusCommand, DocumentStatus>()
         .ForMember(dest => dest.Envelope, opt => opt.Ignore())
-        .ForMember(dest => dest.Receiver, opt => opt.Ignore());
+        .ForMember(dest => dest.Receiver, opt => opt.Ignore())
+        .MapAddedWhen();
 
         CreateMap<UpdateDocStatusCommand, DocumentStatus>()
         .ForMember(dest => dest.Envelope, opt => opt.Ignore())
-        .ForMember(dest => dest.Receiver, opt => opt.Ignore());
+        .ForMember(dest => dest.Receiver, opt => opt.Ignore())
+        .MapChangedWhen();
     }
 }

EnvelopeGenerator.Application/EmailTemplates/Commands/Reset/ResetEmailTemplateCommand.cs

@@ -1,41 +0,0 @@
-using EnvelopeGenerator.Domain;
-using EnvelopeGenerator.Domain.Constants;
-using MediatR;
-
-namespace EnvelopeGenerator.Application.EmailTemplates.Commands.Reset;
-
-/// <summary>
-/// Ein Befehl zum Zurücksetzen einer E-Mail-Vorlage auf die Standardwerte.
-/// Erbt von <see cref="EmailTemplateQueryBase"/> und ermöglicht die Angabe einer optionalen ID und eines Typs der E-Mail-Vorlage.<br/><br/>
-/// Beispiele:<br/>
-/// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.<br/>
-/// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.<br/>
-/// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.<br/>
-/// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.<br/>
-/// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.<br/>
-/// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.<br/>
-/// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.<br/>
-/// 7 - DocumentRejected_ADM (Für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.<br/>
-/// 8 - DocumentRejected_REC (Für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.<br/>
-/// 9 - DocumentRejected_REC_2 (Für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.<br/>
-/// </summary>
-public record ResetEmailTemplateCommand : EmailTemplateQueryBase, IRequest
-{
-    /// <summary>
-    /// 
-    /// </summary>
-    /// <param name="orginal"></param>
-    public ResetEmailTemplateCommand(EmailTemplateQueryBase? orginal = null) : base(orginal ?? new())
-    {
-
-    }
-
-    /// <summary>
-    /// 
-    /// </summary>
-    /// <param name="Id">Die optionale ID der E-Mail-Vorlage, die zurückgesetzt werden soll.</param>
-    /// <param name="Type">Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional).</param>
-    public ResetEmailTemplateCommand(int? Id = null, EmailTemplateType? Type = null) : base(Id, Type)
-    {
-    }
-};

EnvelopeGenerator.Application/EmailTemplates/Commands/ResetEmailTemplateCommand.cs

@@ -1,11 +1,38 @@
 using DigitalData.Core.Abstraction.Application.Repository;
+using EnvelopeGenerator.Domain.Constants;
+using MediatR;
 using EnvelopeGenerator.Application.Common.Dto;
 using EnvelopeGenerator.Domain.Entities;
-using MediatR;
 using Microsoft.EntityFrameworkCore;
-using System.Linq;
 
-namespace EnvelopeGenerator.Application.EmailTemplates.Commands.Reset;
+namespace EnvelopeGenerator.Application.EmailTemplates.Commands;
+
+/// <summary>
+/// Ein Befehl zum Zurücksetzen einer E-Mail-Vorlage auf die Standardwerte.
+/// Erbt von <see cref="IEmailTemplateQuery"/> und ermöglicht die Angabe einer optionalen ID und eines Typs der E-Mail-Vorlage.<br/><br/>
+/// </summary>
+public record ResetEmailTemplateCommand : IEmailTemplateQuery, IRequest
+{
+    /// <summary>
+    /// Die eindeutige Kennung der E-Mail-Vorlage (optional).
+    /// </summary>
+    public int? Id { get; set; }
+
+    /// <summary>
+    /// Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional). Beispiele:<br/>
+    /// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.<br/>
+    /// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.<br/>
+    /// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.<br/>
+    /// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.<br/>
+    /// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.<br/>
+    /// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.<br/>
+    /// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.<br/>
+    /// 7 - DocumentRejected_ADM (für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.<br/>
+    /// 8 - DocumentRejected_REC (für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.<br/>
+    /// 9 - DocumentRejected_REC_2 (für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.
+    /// </summary>
+    public EmailTemplateType? Type { get; set; }
+}
 
 /// <summary>
 /// 
@@ -41,7 +68,7 @@ public class ResetEmailTemplateCommandHandler : IRequestHandler<ResetEmailTempla
         foreach (var temp in temps)
         {
             var def = Defaults.Where(t => t.Name == temp.Name).FirstOrDefault();
-            if(def is not null)
+            if (def is not null)
                 await _repository.UpdateAsync(def, t => t.Id == temp.Id, cancel);
         }
     }
@@ -113,4 +140,4 @@ public class ResetEmailTemplateCommandHandler : IRequestHandler<ResetEmailTempla
         }
     };
 
-}
+}

EnvelopeGenerator.Application/EmailTemplates/Commands/Update/UpdateEmailTemplateCommand.cs

@@ -1,29 +0,0 @@
-using MediatR;
-using System.Text.Json.Serialization;
-
-namespace EnvelopeGenerator.Application.EmailTemplates.Commands.Update;
-
-
-/// <summary>
-/// Befehl zum Aktualisieren einer E-Mail-Vorlage.
-/// </summary>
-/// <param name="Body">
-/// (Optional)Der neue Inhalt des E-Mail-Textkörpers. Wenn null, bleibt der vorhandene Inhalt unverändert.
-/// </param>
-/// <param name="Subject">
-/// (Optional) Der neue Betreff der E-Mail. Wenn null, bleibt der vorhandene Betreff unverändert.
-/// </param>
-public record UpdateEmailTemplateCommand(string? Body = null, string? Subject = null) : IRequest
-{
-    /// <param>
-    /// Die Abfrage, die die E-Mail-Vorlage darstellt, die aktualisiert werden soll.
-    /// </param>
-    [JsonIgnore]
-    public EmailTemplateQueryBase? EmailTemplateQuery { get; set; }
-
-    /// <summary>
-    /// 
-    /// </summary>
-    [JsonIgnore]
-    public DateTime ChangedWhen { get; init; } = DateTime.Now;
-}

EnvelopeGenerator.Application/EmailTemplates/Commands/Update/UpdateEmailTemplateCommandHandler.cs

@@ -1,67 +0,0 @@
-using AutoMapper;
-using DigitalData.Core.Abstraction.Application.Repository;
-using DigitalData.Core.Exceptions;
-using EnvelopeGenerator.Domain.Entities;
-using MediatR;
-using Microsoft.EntityFrameworkCore;
-using EnvelopeGenerator.Domain.Constants;
-using EnvelopeGenerator.Application.Common.Dto;
-
-namespace EnvelopeGenerator.Application.EmailTemplates.Commands.Update;
-
-/// <summary>
-/// 
-/// </summary>
-public class UpdateEmailTemplateCommandHandler : IRequestHandler<UpdateEmailTemplateCommand>
-{
-    private readonly IRepository<EmailTemplate> _repository;
-    
-    private readonly IMapper _mapper;
-
-    /// <summary>
-    /// 
-    /// </summary>
-    /// <param name="repository"></param>
-    /// <param name="mapper"></param>
-    public UpdateEmailTemplateCommandHandler(IRepository<EmailTemplate> repository, IMapper mapper)
-    {
-        _repository = repository;
-        _mapper = mapper;
-    }
-
-    /// <summary>
-    /// 
-    /// </summary>
-    /// <param name="request"></param>
-    /// <param name="cancel"></param>
-    /// <returns></returns>
-    /// <exception cref="InvalidOperationException"></exception>
-    /// <exception cref="NotFoundException"></exception>
-    [Obsolete("Use Read-method returning IReadQuery<TEntity> instead.")]
-    public async Task Handle(UpdateEmailTemplateCommand request, CancellationToken cancel)
-    {
-        EmailTemplateDto? tempDto;
-
-        if (request.EmailTemplateQuery?.Id is int id)
-        {
-            var temp = await _repository.ReadOnly().Where(t => t.Id == id).FirstOrDefaultAsync(cancel);
-            tempDto = _mapper.Map<EmailTemplateDto>(temp);
-        }
-        else if (request!.EmailTemplateQuery!.Type is EmailTemplateType type)
-        {
-            var temp = await _repository.ReadOnly().Where(t => t.Name == type.ToString()).FirstOrDefaultAsync(cancel);
-            tempDto = _mapper.Map<EmailTemplateDto>(temp);
-        }
-        else
-        {
-            throw new InvalidOperationException("Both id and type is null. Id: " + request.EmailTemplateQuery.Id +". Type: " + request.EmailTemplateQuery.Type.ToString());
-        }
-
-        if (tempDto == null)
-        {
-            throw new NotFoundException();
-        }
-
-        await _repository.UpdateAsync(tempDto, t => t.Id == tempDto.Id, cancel);
-    }
-}

EnvelopeGenerator.Application/EmailTemplates/Commands/UpdateEmailTemplateCommand.cs

@@ -0,0 +1,63 @@
+using DigitalData.Core.Abstraction.Application.Repository;
+using EnvelopeGenerator.Application.Common.Commands;
+using EnvelopeGenerator.Domain.Constants;
+using EnvelopeGenerator.Domain.Entities;
+using System.Linq.Expressions;
+
+namespace EnvelopeGenerator.Application.EmailTemplates.Commands;
+
+/// <summary>
+/// 
+/// </summary>
+/// <param name="Body"></param>
+/// <param name="Subject"></param>
+public record EmailTemplateUpdateDto(string Body, string Subject);
+
+/// <summary>
+/// Befehl zum Aktualisieren einer E-Mail-Vorlage.
+/// </summary>
+public record UpdateEmailTemplateCommand : UpdateCommand<EmailTemplateUpdateDto, EmailTemplate>, IEmailTemplateQuery
+{
+    /// <summary>
+    /// Die eindeutige Kennung der E-Mail-Vorlage (optional).
+    /// </summary>
+    public int? Id { get; set; }
+
+    /// <summary>
+    /// Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional). Beispiele:<br/>
+    /// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.<br/>
+    /// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.<br/>
+    /// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.<br/>
+    /// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.<br/>
+    /// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.<br/>
+    /// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.<br/>
+    /// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.<br/>
+    /// 7 - DocumentRejected_ADM (für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.<br/>
+    /// 8 - DocumentRejected_REC (für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.<br/>
+    /// 9 - DocumentRejected_REC_2 (für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.
+    /// </summary>
+    public EmailTemplateType? Type { get; set; }
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <returns></returns>
+    public override Expression<Func<EmailTemplate, bool>> BuildQueryExpression()
+        => Id is int id
+            ? temp => temp.Id == id
+            : temp => temp!.Name == Type.ToString();
+}
+
+/// <summary>
+/// 
+/// </summary>
+public class UpdateEmailTemplateCommandHandler : UpdateCommandHandler<UpdateEmailTemplateCommand, EmailTemplateUpdateDto, EmailTemplate>
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="repository"></param>
+    public UpdateEmailTemplateCommandHandler(IRepository<EmailTemplate> repository) : base(repository)
+    {
+    }
+}

EnvelopeGenerator.Application/EmailTemplates/EmailTemplateQueryBase.cs

@@ -1,24 +0,0 @@
-using EnvelopeGenerator.Domain.Constants;
-
-namespace EnvelopeGenerator.Application.EmailTemplates;
-
-/// <summary>
-/// Repräsentiert eine Abfrage für E-Mail-Vorlagen, die für Absender und Empfänger von Umschlägen verwendet werden.
-/// Die Standardkultur ist "de-DE".
-/// </summary>
-/// <param name="Id">Die eindeutige Kennung der E-Mail-Vorlage (optional).</param>
-/// <param name="Type">Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional). Beispiele:
-/// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.
-/// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.
-/// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.
-/// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.
-/// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.
-/// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.
-/// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.
-/// 7 - DocumentRejected_ADM (Für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.
-/// 8 - DocumentRejected_REC (Für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.
-/// 9 - DocumentRejected_REC_2 (Für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.
-/// </param>
-public record EmailTemplateQueryBase(int? Id = null, EmailTemplateType? Type = null)
-{
-}

EnvelopeGenerator.Application/EmailTemplates/IEmailTemplateQuery.cs

@@ -0,0 +1,30 @@
+using EnvelopeGenerator.Domain.Constants;
+
+namespace EnvelopeGenerator.Application.EmailTemplates;
+
+/// <summary>
+/// Stellt eine Schnittstelle für Abfragen von E-Mail-Vorlagen dar, die für Absender und Empfänger von Umschlägen verwendet werden.
+/// Die Standardkultur ist "de-DE".
+/// </summary>
+public interface IEmailTemplateQuery
+{
+    /// <summary>
+    /// Die eindeutige Kennung der E-Mail-Vorlage (optional).
+    /// </summary>
+    int? Id { get; set; }
+
+    /// <summary>
+    /// Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional). Beispiele:<br/>
+    /// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.<br/>
+    /// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.<br/>
+    /// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.<br/>
+    /// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.<br/>
+    /// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.<br/>
+    /// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.<br/>
+    /// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.<br/>
+    /// 7 - DocumentRejected_ADM (für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.<br/>
+    /// 8 - DocumentRejected_REC (für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.<br/>
+    /// 9 - DocumentRejected_REC_2 (für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.
+    /// </summary>
+    EmailTemplateType? Type { get; set; }
+}

EnvelopeGenerator.Application/EmailTemplates/MappingProfile.cs

@@ -0,0 +1,24 @@
+using AutoMapper;
+using EnvelopeGenerator.Application.Common.Dto;
+using EnvelopeGenerator.Application.Common.Extensions;
+using EnvelopeGenerator.Application.EmailTemplates.Commands;
+using EnvelopeGenerator.Domain.Entities;
+
+namespace EnvelopeGenerator.Application.EmailTemplates;
+
+/// <summary>
+///
+/// </summary>
+public class MappingProfile : Profile
+{
+    /// <summary>
+    ///
+    /// </summary>
+    public MappingProfile()
+    {
+        CreateMap<EmailTemplate, EmailTemplateDto>();
+
+        CreateMap<EmailTemplateUpdateDto, EmailTemplate>()
+            .MapChangedWhen();
+    }
+}

EnvelopeGenerator.Application/EmailTemplates/Queries/ReadEmailTemplateQuery.cs

@@ -4,21 +4,82 @@ using EnvelopeGenerator.Application.Common.Dto;
 using DigitalData.Core.Abstraction.Application.Repository;
 using EnvelopeGenerator.Domain.Entities;
 using Microsoft.EntityFrameworkCore;
+using EnvelopeGenerator.Domain.Constants;
+using DigitalData.Core.Exceptions;
+using EnvelopeGenerator.Application.Common.Extensions;
 
-namespace EnvelopeGenerator.Application.EmailTemplates.Queries.Read;
+namespace EnvelopeGenerator.Application.EmailTemplates.Queries;
 
 /// <summary>
 /// Stellt eine Abfrage dar, um eine E-Mail-Vorlage zu lesen.
-/// Diese Klasse erbt von <see cref="EmailTemplateQueryBase"/>.
+/// Diese Klasse erbt von <see cref="IEmailTemplateQuery"/>.
 /// </summary>
-public record ReadEmailTemplateQuery : EmailTemplateQueryBase, IRequest<EmailTemplateDto?>
+public record ReadEmailTemplateQuery : IEmailTemplateQuery, IRequest<IEnumerable<EmailTemplateDto>>
 {
+    /// <summary>
+    /// Die eindeutige Kennung der E-Mail-Vorlage (optional).
+    /// </summary>
+    public int? Id { get; set; }
+
+    /// <summary>
+    /// Der Typ der E-Mail-Vorlage, z. B. <see cref="EmailTemplateType"/> (optional). Beispiele:<br/>
+    /// 0 - DocumentReceived: Benachrichtigung über den Empfang eines Dokuments.<br/>
+    /// 1 - DocumentSigned: Benachrichtigung über die Unterzeichnung eines Dokuments.<br/>
+    /// 2 - DocumentDeleted: Benachrichtigung über das Löschen eines Dokuments.<br/>
+    /// 3 - DocumentCompleted: Benachrichtigung über den Abschluss eines Dokuments.<br/>
+    /// 4 - DocumentAccessCodeReceived: Benachrichtigung über den Erhalt eines Zugangscodes.<br/>
+    /// 5 - DocumentShared: Benachrichtigung über das Teilen eines Dokuments.<br/>
+    /// 6 - TotpSecret: Benachrichtigung über ein TOTP-Geheimnis.<br/>
+    /// 7 - DocumentRejected_ADM (für den Absender): Mail an den Absender, wenn das Dokument abgelehnt wird.<br/>
+    /// 8 - DocumentRejected_REC (für den ablehnenden Empfänger): Mail an den ablehnenden Empfänger, wenn das Dokument abgelehnt wird.<br/>
+    /// 9 - DocumentRejected_REC_2 (für sonstige Empfänger): Mail an andere Empfänger (Brief), wenn das Dokument abgelehnt wird.
+    /// </summary>
+    public EmailTemplateType? Type { get; set; }
+
+    /// <summary>
+    /// 
+    /// </summary>
+    public string? LangCode { get; set; }
 }
 
 /// <summary>
 /// 
 /// </summary>
-public class ReadEmailTemplateQueryHandler : IRequestHandler<ReadEmailTemplateQuery, EmailTemplateDto?>
+public static class ReadEmailTemplateQueryExtensions
+{
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="sender"></param>
+    /// <param name="id"></param>
+    /// <param name="langCode"></param>
+    /// <param name="cancel"></param>
+    /// <returns></returns>
+    public static async Task<EmailTemplateDto?> ReadEmailTemplateAsync(this ISender sender, int id, string langCode, CancellationToken cancel = default)
+    {
+        var result = await sender.Send(new ReadEmailTemplateQuery { Id = id, LangCode = langCode }, cancel);
+        return result.FirstOrDefault();
+    }
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="sender"></param>
+    /// <param name="type"></param>
+    /// <param name="langCode"></param>
+    /// <param name="cancel"></param>
+    /// <returns></returns>
+    public static async Task<EmailTemplateDto?> ReadEmailTemplateAsync(this ISender sender, EmailTemplateType type, string langCode, CancellationToken cancel = default)
+    {
+        var result = await sender.Send(new ReadEmailTemplateQuery { Type = type, LangCode = langCode }, cancel);
+        return result.FirstOrDefault();
+    }
+}
+
+/// <summary>
+/// 
+/// </summary>
+public class ReadEmailTemplateQueryHandler : IRequestHandler<ReadEmailTemplateQuery, IEnumerable<EmailTemplateDto>>
 {
     private readonly IMapper _mapper;
 
@@ -44,12 +105,21 @@ public class ReadEmailTemplateQueryHandler : IRequestHandler<ReadEmailTemplateQu
     /// <param name="cancel"></param>
     /// <returns></returns>
     /// <exception cref="InvalidOperationException"></exception>
-    public async Task<EmailTemplateDto?> Handle(ReadEmailTemplateQuery request, CancellationToken cancel)
+    public async Task<IEnumerable<EmailTemplateDto>> Handle(ReadEmailTemplateQuery request, CancellationToken cancel)
     {
-        var query = request.Id is int id
-            ? _repo.Query.Where(temp => temp.Id == id)
-            : _repo.Query.Where(temp => temp.Name == request.Type!.ToString());
+        var query = _repo.Query;
 
-        return _mapper.Map<EmailTemplateDto>(await query.FirstOrDefaultAsync(cancel));
+        if (request.Id is int id)
+            query = query.Where(temp => temp.Id == id);
+
+        if (request.Type is EmailTemplateType type)
+            query = query.Where(temp => temp.Name == type.ToString());
+
+        if (request.LangCode is string langCode)
+            query = query.Where(temp => temp.LangCode == langCode);
+
+        var entity = await query.ToListAsync(cancel);
+
+        return _mapper.Map<IEnumerable<EmailTemplateDto>>(entity);
     }
 }

EnvelopeGenerator.Application/EnvelopeGenerator.Application.csproj

@@ -19,12 +19,16 @@
 		<PackageReference Include="DigitalData.Core.Client" Version="2.1.0" />
 		<PackageReference Include="DigitalData.Core.Exceptions" Version="1.1.0" />
 		<PackageReference Include="DigitalData.EmailProfilerDispatcher" Version="3.1.1" />
-		<PackageReference Include="HtmlSanitizer" Version="8.0.865" />
+		<PackageReference Include="HtmlSanitizer" Version="9.0.892" />
 		<PackageReference Include="MediatR" Version="12.5.0" />
 		<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="7.0.18" />
+		<PackageReference Include="Microsoft.Identity.Client" Version="4.82.1" />
 		<PackageReference Include="Otp.NET" Version="1.4.0" />
 		<PackageReference Include="QRCoder" Version="1.6.0" />
 		<PackageReference Include="QRCoder-ImageSharp" Version="0.10.0" />
+		<PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+		<PackageReference Include="System.Formats.Asn1" Version="10.0.3" />
+		<PackageReference Include="System.Security.AccessControl" Version="6.0.1" />
 		<PackageReference Include="UserManager" Version="1.1.3" />
 	</ItemGroup>
 
@@ -63,6 +67,9 @@
 			<LastGenOutput>Model.Designer.cs</LastGenOutput>
 			<Generator>PublicResXFileCodeGenerator</Generator>
 		</EmbeddedResource>
+		<EmbeddedResource Update="Resources\Resource.fr-FR.resx">
+		  <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
+		</EmbeddedResource>
 		<EmbeddedResource Update="Resources\Resource.de-DE.resx">
 			<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
 		</EmbeddedResource>
@@ -73,7 +80,7 @@
 
 	<ItemGroup Condition="'$(TargetFramework)' == 'net7.0'">
 	  <PackageReference Include="AutoMapper" Version="13.0.1" />
-	  <PackageReference Include="Microsoft.Data.SqlClient" Version="5.2.3" />
+	  <PackageReference Include="Microsoft.Data.SqlClient" Version="6.1.4" />
 	  <PackageReference Include="CommandDotNet">
 		<Version>7.0.5</Version>
 	  </PackageReference>

EnvelopeGenerator.Application/Resources/Resource.de-DE.resx

@@ -123,6 +123,9 @@
   <data name="Back" xml:space="preserve">
     <value>Zurück</value>
   </data>
+  <data name="AuthenticatorSetup_Prefix" xml:space="preserve">
+    <value>Klicken Sie auf den</value>
+  </data>
   <data name="Complete" xml:space="preserve">
     <value>Abschließen</value>
   </data>
@@ -144,6 +147,9 @@
   <data name="DocSigned" xml:space="preserve">
     <value>Dokument unterschrieben</value>
   </data>
+  <data name="DocumentSharingPeriodExpired" xml:space="preserve">
+    <value>Der Zeitraum für die gemeinsame Nutzung von Dokumenten ist abgelaufen.</value>
+  </data>
   <data name="en-US" xml:space="preserve">
     <value>Englisch</value>
   </data>
@@ -153,6 +159,9 @@
   <data name="EnvelopeInfo2" xml:space="preserve">
     <value>Erstellt am {0} von {1}. Sie können den Absender über &lt;span class="highlight highlight-envelope-info-2"&gt;&lt;a class="mail-link" href="mailto:{2}?subject={3}&amp;body=Sehr%20geehrter%20{4}%20{5},%0A%0A%0A"&gt;{6}&lt;/a&gt;&lt;/span&gt; kontaktieren.</value>
   </data>
+  <data name="Expired" xml:space="preserve">
+    <value>Abgelaufen</value>
+  </data>
   <data name="FiClass" xml:space="preserve">
     <value>fi-de</value>
   </data>
@@ -165,6 +174,9 @@
   <data name="HomePageDescription" xml:space="preserve">
     <value>Das digitale Unterschriftenportal ist eine Plattform, die entwickelt wurde, um Ihre Dokumente sicher zu unterschreiben und zu verwalten. Mit seiner benutzerfreundlichen Oberfläche können Sie Ihre Dokumente schnell hochladen, die Unterschriftsprozesse verfolgen und Ihre digitalen Unterschriftenanwendungen einfach durchführen. Dieses Portal beschleunigt Ihren Arbeitsablauf mit rechtlich gültigen Unterschriften und erhöht gleichzeitig die Sicherheit Ihrer Dokumente.</value>
   </data>
+  <data name="AuthenticatorSetup_Link" xml:space="preserve">
+    <value>Link</value>
+  </data>
   <data name="LocationWarning" xml:space="preserve">
     <value>Bitte überprüfen Sie die Standortinformationen. Wenn sie falsch sind, korrigieren Sie diese bitte.</value>
   </data>
@@ -264,4 +276,175 @@
   <data name="WrongAccessCode" xml:space="preserve">
     <value>Ungültiger Zugangscode.</value>
   </data>
+  <data name="AuthenticatorSetup_Suffix" xml:space="preserve">
+    <value>um Ihre Authenticator-App einzurichten.</value>
+  </data>
+  <data name="DocumentSuccessfullySigned" xml:space="preserve">
+    <value>Dokument erfolgreich signiert!</value>
+  </data>
+  <data name="DocumentSignedConfirmationMessage" xml:space="preserve">
+    <value>Sie haben das Dokument signiert. Im Anschluss erhalten Sie eine schriftliche Bestätigung.</value>
+  </data>
+  <data name="Signatures" xml:space="preserve">
+    <value>Unterschriften</value>
+  </data>
+  <data name="EnterRecipientToShareDocument" xml:space="preserve">
+    <value>Geben Sie hier den Empfänger ein, mit welchem Sie das Dokument teilen wollen</value>
+  </data>
+  <data name="Email" xml:space="preserve">
+    <value>E-Mail</value>
+  </data>
+  <data name="ValidUntil" xml:space="preserve">
+    <value>Gültig bis</value>
+  </data>
+  <data name="ShrEnvInvalidEmailTitle" xml:space="preserve">
+    <value>Falsche Email</value>
+  </data>
+  <data name="ShrEnvInvalidEmailText" xml:space="preserve">
+    <value>Die E-Mail-Adresse ist ungültig. Bitte verwenden Sie das richtige Format, z. B.: user@mail.com.</value>
+  </data>
+  <data name="ShrEnvSentTitle" xml:space="preserve">
+    <value>Gesendet</value>
+  </data>
+  <data name="ShrEnvErrorTitle" xml:space="preserve">
+    <value>Fehler</value>
+  </data>
+  <data name="InvalidDateTitle" xml:space="preserve">
+    <value>Falsches Datum</value>
+  </data>
+  <data name="ShrEnvInvalidDateText" xml:space="preserve">
+    <value>Die E-Mail-Adresse ist ungültig. Bitte verwenden Sie das richtige Format, z. B.: user@mail.com.</value>
+  </data>
+  <data name="UnexpectedErrorTitle" xml:space="preserve">
+    <value>Unerwarteter Fehler</value>
+  </data>
+  <data name="ShrEnvOperationFailedText" xml:space="preserve">
+    <value>Der Vorgang ist fehlgeschlagen. Bitte wenden Sie sich an das IT-Team.</value>
+  </data>
+  <data name="PrivacyNotice" xml:space="preserve">
+    <value>Datenschutzhinweis</value>
+  </data>
+  <data name="CookieConsentMessage" xml:space="preserve">
+    <value>Wir verwenden technisch notwendige Session Cookies. Diese Cookies sind für den ordnungsgemäßen Betrieb dieser Webseite von nöten und können aus diesm Grund nicht abgewählt werden. Es findet keine Übermittlung an Dritte statt.</value>
+  </data>
+  <data name="Accept" xml:space="preserve">
+    <value>Akzeptieren</value>
+  </data>
+  <data name="ConnectionValidityExpired" xml:space="preserve">
+    <value>Die Gültigkeitsdauer der Verbindung ist abgelaufen.</value>
+  </data>
+  <data name="Creator" xml:space="preserve">
+    <value>Ersteller</value>
+  </data>
+  <data name="Date" xml:space="preserve">
+    <value>Datum</value>
+  </data>
+  <data name="DocumentProtected" xml:space="preserve">
+    <value>Dokument geschützt</value>
+  </data>
+  <data name="Password" xml:space="preserve">
+    <value>Passwort</value>
+  </data>
+  <data name="Open" xml:space="preserve">
+    <value>Öffnen</value>
+  </data>
+  <data name="TfaRegistration" xml:space="preserve">
+    <value>2FA Registrierung</value>
+  </data>
+  <data name="Registration" xml:space="preserve">
+    <value>Registrierung</value>
+  </data>
+  <data name="PageVisibleUntil" xml:space="preserve">
+    <value>Diese Seite ist bis {0} sichtbar.</value>
+  </data>
+  <data name="Step1Download2faApplication" xml:space="preserve">
+    <value>Schritt 1 -  Download einer 2FA Applikation</value>
+  </data>
+  <data name="Download2faAppInstruction" xml:space="preserve">
+    <value>Bitte nehmen Sie Ihr Smartphone zur Hand und laden eine Applikation herunter, die zur Zwei-Faktor-Authentifizierung (2FA) benutzt werden kann.</value>
+  </data>
+  <data name="Recommended2faApplications" xml:space="preserve">
+    <value>Folgende Applikationen empfehlen wir</value>
+  </data>
+  <data name="Step2ScanQrCode" xml:space="preserve">
+    <value>Schritt 2 -  Scannen des QR-Codes</value>
+  </data>
+  <data name="ScanQrCodeInstruction" xml:space="preserve">
+    <value>Sobald Sie eine Zwei-Faktor-Authentifizierung App installiert haben, können Sie fortfahren und innerhalb der Applikation die Option zum Scannen eines QR-Codes suchen und bestätigen. Im Anschluss, sobald die Kamera freigegeben wurde, können Sie den QR-Code von uns scannen.</value>
+  </data>
+  <data name="Step3VerifyTheCode" xml:space="preserve">
+    <value>Schritt 3 - Verifizierung des Codes</value>
+  </data>
+  <data name="VerifyCodeInstructionMain" xml:space="preserve">
+    <value>Sie können nun in der Zwei-Faktor-Authentifizierung App einen Zahlencode zur Verifizierung des Vorganges ablesen. Bitte tragen Sie diesen Code in das unten aufgeführte Eingabefeld ein und Klicken auf</value>
+  </data>
+  <data name="VerifyCodeInstructionSubmit" xml:space="preserve">
+    <value>Senden</value>
+  </data>
+  <data name="CopyLink" xml:space="preserve">
+    <value>Link kopieren</value>
+  </data>
+  <data name="CityFormatInvalid" xml:space="preserve">
+    <value>Bitte überprüfen Sie die eingegebene Ortsangabe "{0}" auf korrekte Formatierung. Beispiele für richtige Formate sind: München, Île-de-France, Sauðárkrókur, San Francisco, St. Catharines usw.</value>
+  </data>
+  <data name="CopyLinkSuccess" xml:space="preserve">
+    <value>Kopiert</value>
+  </data>
+  <data name="Logout" xml:space="preserve">
+    <value>Abmelden</value>
+  </data>
+  <data name="ViewAllPages" xml:space="preserve">
+    <value>Bitte sehen Sie sich alle Seiten an.</value>
+  </data>
+  <data name="Reset" xml:space="preserve">
+    <value>Zurücksetzen</value>
+  </data>
+  <data name="ViewRemainingPages" xml:space="preserve">
+    <value>Bitte sehen Sie sich die folgenden Seiten an: {0}</value>
+  </data>
+  <data name="City" xml:space="preserve">
+    <value>Ort</value>
+  </data>
+  <data name="EnvelopeRejectedRedirect" xml:space="preserve">
+    <value>Dokument wurde von einem Empfänger abgelehnt. Sie werden weitergeleitet...</value>
+  </data>
+  <data name="MissingSignatures" xml:space="preserve">
+    <value>Es wurden nicht alle Signaturfelder ausgefüllt!</value>
+  </data>
+  <data name="ResetConfirmText" xml:space="preserve">
+    <value>Wollen Sie das Dokument und alle erstellten Signaturen zurücksetzen?</value>
+  </data>
+  <data name="EnvelopeSignError" xml:space="preserve">
+    <value>Umschlag konnte nicht signiert werden!</value>
+  </data>
+  <data name="SignedBy" xml:space="preserve">
+    <value>Signiert von</value>
+  </data>
+  <data name="Warning" xml:space="preserve">
+    <value>Warnung</value>
+  </data>
+  <data name="Position" xml:space="preserve">
+    <value>Position</value>
+  </data>
+  <data name="Share" xml:space="preserve">
+    <value>Teilen</value>
+  </data>
+  <data name="CopyLinkFailure" xml:space="preserve">
+    <value>Unerwarteter Fehler</value>
+  </data>
+  <data name="LocationFieldsRequired" xml:space="preserve">
+    <value>Bitte füllen Sie alle Standortinformationen vollständig aus!</value>
+  </data>
+  <data name="ResetConfirmTitle" xml:space="preserve">
+    <value>Sind Sie sicher?</value>
+  </data>
+  <data name="EnvelopeUnavailable" xml:space="preserve">
+    <value>Umschlag ist nicht mehr verfügbar.</value>
+  </data>
+  <data name="Success" xml:space="preserve">
+    <value>Erfolg</value>
+  </data>
+  <data name="DocumentReset" xml:space="preserve">
+    <value>Dokument wurde zurückgesetzt.</value>
+  </data>
 </root>

EnvelopeGenerator.Application/Resources/Resource.en-US.resx

@@ -123,6 +123,9 @@
   <data name="Back" xml:space="preserve">
     <value>Back</value>
   </data>
+  <data name="AuthenticatorSetup_Prefix" xml:space="preserve">
+    <value>Click the</value>
+  </data>
   <data name="Complete" xml:space="preserve">
     <value>Complete</value>
   </data>
@@ -144,6 +147,9 @@
   <data name="DocSigned" xml:space="preserve">
     <value>Document signed</value>
   </data>
+  <data name="DocumentSharingPeriodExpired" xml:space="preserve">
+    <value>The period for sharing documents has expired.</value>
+  </data>
   <data name="en-US" xml:space="preserve">
     <value>English</value>
   </data>
@@ -153,6 +159,9 @@
   <data name="EnvelopeInfo2" xml:space="preserve">
     <value>Created on {0} by {1}. You can contact the sender via &lt;span class="highlight highlight-envelope-info-2"&gt;&lt;a class="mail-link" href="mailto:{2}?subject={3}&amp;body=Dear%20{4}%20{5},%0A%0A%0A"&gt;{6}&lt;/a&gt;&lt;/span&gt;.</value>
   </data>
+  <data name="Expired" xml:space="preserve">
+    <value>Expired</value>
+  </data>
   <data name="FiClass" xml:space="preserve">
     <value>fi-us</value>
   </data>
@@ -165,6 +174,9 @@
   <data name="HomePageDescription" xml:space="preserve">
     <value>The Digital Signature Portal is a platform developed for securely signing and managing your documents. With its user-friendly interface, you can quickly upload your documents, track the signing processes, and easily carry out your digital signature applications. This portal accelerates your workflow with legally valid signatures while enhancing the security of your documents.</value>
   </data>
+  <data name="AuthenticatorSetup_Link" xml:space="preserve">
+    <value>link</value>
+  </data>
   <data name="LocationWarning" xml:space="preserve">
     <value>Please review the location information. If it is incorrect, kindly make the necessary corrections.</value>
   </data>
@@ -264,4 +276,175 @@
   <data name="WrongAccessCode" xml:space="preserve">
     <value>Invalid access code.</value>
   </data>
+  <data name="AuthenticatorSetup_Suffix" xml:space="preserve">
+    <value>to set up your authenticator app.</value>
+  </data>
+  <data name="DocumentSuccessfullySigned" xml:space="preserve">
+    <value>Document successfully signed!</value>
+  </data>
+  <data name="DocumentSignedConfirmationMessage" xml:space="preserve">
+    <value>You have signed the document. Afterwards, you will receive a written confirmation.</value>
+  </data>
+  <data name="Signatures" xml:space="preserve">
+    <value>Signatures</value>
+  </data>
+  <data name="EnterRecipientToShareDocument" xml:space="preserve">
+    <value>Enter the recipient you want to share the document with</value>
+  </data>
+  <data name="Email" xml:space="preserve">
+    <value>E-mail</value>
+  </data>
+  <data name="ValidUntil" xml:space="preserve">
+    <value>Valid until</value>
+  </data>
+  <data name="ShrEnvInvalidEmailTitle" xml:space="preserve">
+    <value>Invalid email</value>
+  </data>
+  <data name="ShrEnvInvalidEmailText" xml:space="preserve">
+    <value>The email address is invalid. Please use the correct format, e.g., user@mail.com.</value>
+  </data>
+  <data name="ShrEnvSentTitle" xml:space="preserve">
+    <value>Sent</value>
+  </data>
+  <data name="ShrEnvErrorTitle" xml:space="preserve">
+    <value>Error</value>
+  </data>
+  <data name="InvalidDateTitle" xml:space="preserve">
+    <value>Invalid date</value>
+  </data>
+  <data name="ShrEnvInvalidDateText" xml:space="preserve">
+    <value>The email address is invalid. Please use the correct format, e.g., user@mail.com.</value>
+  </data>
+  <data name="UnexpectedErrorTitle" xml:space="preserve">
+    <value>Unexpected error</value>
+  </data>
+  <data name="ShrEnvOperationFailedText" xml:space="preserve">
+    <value>The operation failed. Please contact the IT team.</value>
+  </data>
+  <data name="PrivacyNotice" xml:space="preserve">
+    <value>Privacy notice</value>
+  </data>
+  <data name="CookieConsentMessage" xml:space="preserve">
+    <value>We use technically necessary session cookies. These cookies are required for the proper operation of this website and therefore cannot be deselected. No data is transmitted to third parties.</value>
+  </data>
+  <data name="Accept" xml:space="preserve">
+    <value>Accept</value>
+  </data>
+  <data name="ConnectionValidityExpired" xml:space="preserve">
+    <value>The session has expired.</value>
+  </data>
+  <data name="Creator" xml:space="preserve">
+    <value>Creator</value>
+  </data>
+  <data name="Date" xml:space="preserve">
+    <value>Date</value>
+  </data>
+  <data name="DocumentProtected" xml:space="preserve">
+    <value>Document protected</value>
+  </data>
+  <data name="Password" xml:space="preserve">
+    <value>Password</value>
+  </data>
+  <data name="Open" xml:space="preserve">
+    <value>Open</value>
+  </data>
+  <data name="TfaRegistration" xml:space="preserve">
+    <value>2FA Registration</value>
+  </data>
+  <data name="Registration" xml:space="preserve">
+    <value>Registration</value>
+  </data>
+  <data name="PageVisibleUntil" xml:space="preserve">
+    <value>This page is visible until {0}.</value>
+  </data>
+  <data name="Step1Download2faApplication" xml:space="preserve">
+    <value>Step 1 – Download a 2FA application</value>
+  </data>
+  <data name="Download2faAppInstruction" xml:space="preserve">
+    <value>Please take your smartphone and download an application that can be used for two-factor authentication (2FA).</value>
+  </data>
+  <data name="Recommended2faApplications" xml:space="preserve">
+    <value>We recommend the following applications</value>
+  </data>
+  <data name="Step2ScanQrCode" xml:space="preserve">
+    <value>Step 2 – Scan the QR code</value>
+  </data>
+  <data name="ScanQrCodeInstruction" xml:space="preserve">
+    <value>Once you have installed a two-factor authentication app, you can proceed and look for the option to scan a QR code within the application and confirm it. Then, once the camera is enabled, you can scan the QR code provided by us.</value>
+  </data>
+  <data name="Step3VerifyTheCode" xml:space="preserve">
+    <value>Step 3 – Verify the code</value>
+  </data>
+  <data name="VerifyCodeInstructionMain" xml:space="preserve">
+    <value>You can now read a numeric code in the two-factor authentication app to verify the process. Please enter this code in the input field below and click</value>
+  </data>
+  <data name="VerifyCodeInstructionSubmit" xml:space="preserve">
+    <value>Submit</value>
+  </data>
+  <data name="CopyLink" xml:space="preserve">
+    <value>Copy link</value>
+  </data>
+  <data name="CityFormatInvalid" xml:space="preserve">
+    <value>Please check the entered location "{0}" for proper formatting. Examples: Munich, Île-de-France, Sauðárkrókur, San Francisco, St. Catharines, etc.</value>
+  </data>
+  <data name="CopyLinkSuccess" xml:space="preserve">
+    <value>Copied</value>
+  </data>
+  <data name="Logout" xml:space="preserve">
+    <value>Logout</value>
+  </data>
+  <data name="ViewAllPages" xml:space="preserve">
+    <value>Please view all pages.</value>
+  </data>
+  <data name="Reset" xml:space="preserve">
+    <value>Reset</value>
+  </data>
+  <data name="ViewRemainingPages" xml:space="preserve">
+    <value>Please view the following pages: {0}</value>
+  </data>
+  <data name="City" xml:space="preserve">
+    <value>City</value>
+  </data>
+  <data name="EnvelopeRejectedRedirect" xml:space="preserve">
+    <value>The document was rejected by a recipient. You will be redirected...</value>
+  </data>
+  <data name="MissingSignatures" xml:space="preserve">
+    <value>Not all signature fields have been completed!</value>
+  </data>
+  <data name="ResetConfirmText" xml:space="preserve">
+    <value>Do you want to reset the document and all created signatures?</value>
+  </data>
+  <data name="EnvelopeSignError" xml:space="preserve">
+    <value>The envelope could not be signed!</value>
+  </data>
+  <data name="SignedBy" xml:space="preserve">
+    <value>Signed by</value>
+  </data>
+  <data name="Warning" xml:space="preserve">
+    <value>Warning</value>
+  </data>
+  <data name="Position" xml:space="preserve">
+    <value>Position</value>
+  </data>
+  <data name="Share" xml:space="preserve">
+    <value>Share</value>
+  </data>
+  <data name="CopyLinkFailure" xml:space="preserve">
+    <value>Unexpected error</value>
+  </data>
+  <data name="LocationFieldsRequired" xml:space="preserve">
+    <value>Please complete all location information.</value>
+  </data>
+  <data name="ResetConfirmTitle" xml:space="preserve">
+    <value>Are you sure?</value>
+  </data>
+  <data name="EnvelopeUnavailable" xml:space="preserve">
+    <value>The envelope is no longer available.</value>
+  </data>
+  <data name="Success" xml:space="preserve">
+    <value>Success</value>
+  </data>
+  <data name="DocumentReset" xml:space="preserve">
+    <value>Document has been reset.</value>
+  </data>
 </root>

EnvelopeGenerator.Application/Resources/Resource.fr-FR.resx

@@ -0,0 +1,450 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <data name="and" xml:space="preserve">
+    <value>et</value>
+  </data>
+  <data name="Back" xml:space="preserve">
+    <value>Retour</value>
+  </data>
+  <data name="AuthenticatorSetup_Prefix" xml:space="preserve">
+    <value>Cliquez sur</value>
+  </data>
+  <data name="Complete" xml:space="preserve">
+    <value>Terminer</value>
+  </data>
+  <data name="Confirmation" xml:space="preserve">
+    <value>Confirmation</value>
+  </data>
+  <data name="Culture" xml:space="preserve">
+    <value>fr-FR</value>
+  </data>
+  <data name="de-DE" xml:space="preserve">
+    <value>Allemand</value>
+  </data>
+  <data name="DocProtected" xml:space="preserve">
+    <value>Document protégé</value>
+  </data>
+  <data name="DocRejected" xml:space="preserve">
+    <value>Document rejeté</value>
+  </data>
+  <data name="DocSigned" xml:space="preserve">
+    <value>Document signé</value>
+  </data>
+  <data name="DocumentSharingPeriodExpired" xml:space="preserve">
+    <value>La période de partage des documents a expiré.</value>
+  </data>
+  <data name="en-US" xml:space="preserve">
+    <value>Anglais</value>
+  </data>
+  <data name="EnvelopeInfo1" xml:space="preserve">
+    <value>Vous devez signer le processus {0}. &lt;span class="highlight highlight-envelope-info-1"&gt;Veuillez vérifier la page {1}&lt;/span&gt;.</value>
+  </data>
+  <data name="EnvelopeInfo2" xml:space="preserve">
+    <value>Créé le {0} par {1}. Vous pouvez contacter l’expéditeur via &lt;span class="highlight highlight-envelope-info-2"&gt;&lt;a class="mail-link" href="mailto:{2}?subject={3}&amp;body=Cher%20{4}%20{5},%0A%0A%0A"&gt;{6}&lt;/a&gt;&lt;/span&gt;.</value>
+  </data>
+  <data name="Expired" xml:space="preserve">
+    <value>Expiré</value>
+  </data>
+  <data name="FiClass" xml:space="preserve">
+    <value>fi-fr</value>
+  </data>
+  <data name="Finalize" xml:space="preserve">
+    <value>Finaliser</value>
+  </data>
+  <data name="Hello" xml:space="preserve">
+    <value>Bonjour</value>
+  </data>
+  <data name="HomePageDescription" xml:space="preserve">
+    <value>Le Portail de Signature Numérique est une plateforme développée pour signer et gérer vos documents en toute sécurité. Grâce à son interface conviviale, vous pouvez rapidement téléverser vos documents, suivre les processus de signature et effectuer facilement vos démarches de signature numérique. Ce portail accélère votre flux de travail avec des signatures juridiquement valides tout en renforçant la sécurité de vos documents.</value>
+  </data>
+  <data name="AuthenticatorSetup_Link" xml:space="preserve">
+    <value>lien</value>
+  </data>
+  <data name="LocationWarning" xml:space="preserve">
+    <value>Veuillez vérifier les informations de localisation. Si elles sont incorrectes, veuillez effectuer les corrections nécessaires.</value>
+  </data>
+  <data name="LockedBodyAccess" xml:space="preserve">
+    <value>Nous allons maintenant vous envoyer un code d’accès à votre adresse e-mail enregistrée. Cela peut prendre quelques minutes !</value>
+  </data>
+  <data name="LockedBodyAuthenticator" xml:space="preserve">
+    <value>Veuillez saisir le TOTP fourni dans votre application Authenticator.</value>
+  </data>
+  <data name="LockedBodyAuthenticatorNew" xml:space="preserve">
+    <value>Nous avons envoyé le code QR à votre adresse e-mail. Votre code QR est valide jusqu’au {0}. Vous pouvez l’utiliser pour toutes les enveloppes reçues à cette adresse e-mail.</value>
+  </data>
+  <data name="LockedBodySms" xml:space="preserve">
+    <value>Nous venons d’envoyer le code d’accès par SMS au numéro de téléphone que vous avez fourni.</value>
+  </data>
+  <data name="LockedCodeLabelAccess" xml:space="preserve">
+    <value>Code d’accès</value>
+  </data>
+  <data name="LockedCodeLabelAuthenticator" xml:space="preserve">
+    <value>TOTP</value>
+  </data>
+  <data name="LockedCodeLabelSms" xml:space="preserve">
+    <value>Code SMS</value>
+  </data>
+  <data name="LockedFooterBodyAccess" xml:space="preserve">
+    <value>Veuillez vérifier votre boîte de réception, y compris le dossier spam. Vous pouvez également demander à l’expéditeur &lt;a class="mail-link" href="mailto:{0}?subject={1}&amp;body={2}" target="_blank"&gt;{0}&lt;/a&gt; de vous envoyer le code par un autre moyen.</value>
+  </data>
+  <data name="LockedFooterBodyAuthenticator" xml:space="preserve">
+    <value>Le nouveau code QR n’est envoyé qu’une seule fois pour une période donnée et est enregistré dans votre application Authenticator une fois scanné. Il peut être utilisé pour toutes les enveloppes reçues à la même adresse e-mail jusqu’à son expiration. Si vous ne recevez pas l’e-mail contenant le code QR ou si vous le supprimez à la fois de l’e-mail et de l’application Authenticator, veuillez contacter l’expéditeur.</value>
+  </data>
+  <data name="LockedFooterBodySms" xml:space="preserve">
+    <value>Vous pouvez demander à l’expéditeur de vérifier votre numéro de téléphone. Le numéro de téléphone doit être saisi avec l’indicatif. Sinon, vous pouvez demander la suppression de la protection à deux facteurs.</value>
+  </data>
+  <data name="LockedFooterTitleAccess" xml:space="preserve">
+    <value>Vous n’avez pas reçu de code d’accès ?</value>
+  </data>
+  <data name="LockedFooterTitleAuthenticator" xml:space="preserve">
+    <value>Vous n’avez pas reçu de code QR ?</value>
+  </data>
+  <data name="LockedFooterTitleSms" xml:space="preserve">
+    <value>Vous n’avez pas reçu de SMS ?</value>
+  </data>
+  <data name="LockedTitleAccess" xml:space="preserve">
+    <value>Le document nécessite un code d’accès</value>
+  </data>
+  <data name="LockedTitleAuthenticator" xml:space="preserve">
+    <value>Authentification à 2 facteurs</value>
+  </data>
+  <data name="LockedTitleSms" xml:space="preserve">
+    <value>Authentification à 2 facteurs</value>
+  </data>
+  <data name="Privacy" xml:space="preserve">
+    <value>Confidentialité</value>
+  </data>
+  <data name="ReadOnlyMessage" xml:space="preserve">
+    <value>Transféré par {0}. Valable jusqu’au {1}.</value>
+  </data>
+  <data name="Reject" xml:space="preserve">
+    <value>Rejeter</value>
+  </data>
+  <data name="Rejection" xml:space="preserve">
+    <value>Rejet</value>
+  </data>
+  <data name="RejectionInfo1" xml:space="preserve">
+    <value>Ce processus de signature a été rejeté !</value>
+  </data>
+  <data name="RejectionInfo1_ext" xml:space="preserve">
+    <value>Processus annulé !</value>
+  </data>
+  <data name="RejectionInfo2" xml:space="preserve">
+    <value>Vous pouvez contacter {0}, &lt;a href="mailto:{1}?subject={2}&amp;body=Cher%20{0},%0A%0A%0A"&gt;{1}&lt;/a&gt; si nécessaire.</value>
+  </data>
+  <data name="RejectionInfo2_ext" xml:space="preserve">
+    <value>Le processus a été rejeté par l’une des parties concernées. Vous pouvez contacter {0}, &lt;a href="mailto:{1}?subject={2}&amp;body=Cher%20{0},%0A%0A%0A"&gt;{1}&lt;/a&gt; si nécessaire.</value>
+  </data>
+  <data name="RejectionReasonQ" xml:space="preserve">
+    <value>Veuillez indiquer une raison :</value>
+  </data>
+  <data name="SigAgree" xml:space="preserve">
+    <value>En cliquant sur Finaliser, j’accepte que la signature affichée et soumise soit une représentation électronique de ma signature dans les cas où je l’utilise sur des documents, y compris des contrats juridiquement contraignants.</value>
+  </data>
+  <data name="SignDoc" xml:space="preserve">
+    <value>Signer le document</value>
+  </data>
+  <data name="SigningProcessTitle" xml:space="preserve">
+    <value>Titre du processus de signature</value>
+  </data>
+  <data name="UnexpectedError" xml:space="preserve">
+    <value>Une erreur inattendue s’est produite.</value>
+  </data>
+  <data name="ViewDoc" xml:space="preserve">
+    <value>Afficher le document</value>
+  </data>
+  <data name="WelcomeToTheESignPortal" xml:space="preserve">
+    <value>Bienvenue sur le portail eSign</value>
+  </data>
+  <data name="WrongAccessCode" xml:space="preserve">
+    <value>Code d’accès invalide.</value>
+  </data>
+  <data name="AuthenticatorSetup_Suffix" xml:space="preserve">
+    <value>pour configurer votre application d'authentification.</value>
+  </data>
+  <data name="DocumentSuccessfullySigned" xml:space="preserve">
+    <value>Document signé avec succès !</value>
+  </data>
+  <data name="DocumentSignedConfirmationMessage" xml:space="preserve">
+    <value>Vous avez signé le document. Vous recevrez ensuite une confirmation écrite.</value>
+  </data>
+  <data name="Signatures" xml:space="preserve">
+    <value>Signatures</value>
+  </data>
+  <data name="EnterRecipientToShareDocument" xml:space="preserve">
+    <value>Saisissez ici le destinataire avec lequel vous souhaitez partager le document</value>
+  </data>
+  <data name="Email" xml:space="preserve">
+    <value>E-mail</value>
+  </data>
+  <data name="ValidUntil" xml:space="preserve">
+    <value>Valable jusqu'au</value>
+  </data>
+  <data name="ShrEnvInvalidEmailTitle" xml:space="preserve">
+    <value>E-mail incorrect</value>
+  </data>
+  <data name="ShrEnvInvalidEmailText" xml:space="preserve">
+    <value>L'adresse e-mail est invalide. Veuillez utiliser le format correct, par ex. : user@mail.com.</value>
+  </data>
+  <data name="ShrEnvSentTitle" xml:space="preserve">
+    <value>Envoyé</value>
+  </data>
+  <data name="ShrEnvErrorTitle" xml:space="preserve">
+    <value>Erreur</value>
+  </data>
+  <data name="InvalidDateTitle" xml:space="preserve">
+    <value>Date invalide</value>
+  </data>
+  <data name="ShrEnvInvalidDateText" xml:space="preserve">
+    <value>L'adresse e-mail est invalide. Veuillez utiliser le format correct, par ex. : user@mail.com.</value>
+  </data>
+  <data name="UnexpectedErrorTitle" xml:space="preserve">
+    <value>Erreur inattendue</value>
+  </data>
+  <data name="ShrEnvOperationFailedText" xml:space="preserve">
+    <value>L'opération a échoué. Veuillez contacter l'équipe informatique.</value>
+  </data>
+  <data name="PrivacyNotice" xml:space="preserve">
+    <value>Avis de confidentialité</value>
+  </data>
+  <data name="CookieConsentMessage" xml:space="preserve">
+    <value>Nous utilisons des cookies de session strictement nécessaires. Ces cookies sont indispensables au bon fonctionnement de ce site et ne peuvent donc pas être désactivés. Aucune donnée n'est transmise à des tiers.</value>
+  </data>
+  <data name="Accept" xml:space="preserve">
+    <value>Accepter</value>
+  </data>
+  <data name="ConnectionValidityExpired" xml:space="preserve">
+    <value>La durée de validité de la connexion est expirée.</value>
+  </data>
+  <data name="Creator" xml:space="preserve">
+    <value>Créateur</value>
+  </data>
+  <data name="Date" xml:space="preserve">
+    <value>Date</value>
+  </data>
+  <data name="DocumentProtected" xml:space="preserve">
+    <value>Document protégé</value>
+  </data>
+  <data name="Password" xml:space="preserve">
+    <value>Mot de passe</value>
+  </data>
+  <data name="Open" xml:space="preserve">
+    <value>Ouvrir</value>
+  </data>
+  <data name="TfaRegistration" xml:space="preserve">
+    <value>Enregistrement 2FA</value>
+  </data>
+  <data name="Registration" xml:space="preserve">
+    <value>Inscription</value>
+  </data>
+  <data name="PageVisibleUntil" xml:space="preserve">
+    <value>Cette page est visible jusqu'au {0}.</value>
+  </data>
+  <data name="Step1Download2faApplication" xml:space="preserve">
+    <value>Étape 1 – Téléchargez une application 2FA</value>
+  </data>
+  <data name="Download2faAppInstruction" xml:space="preserve">
+    <value>Veuillez prendre votre smartphone et télécharger une application pouvant être utilisée pour l’authentification à deux facteurs (2FA).</value>
+  </data>
+  <data name="Recommended2faApplications" xml:space="preserve">
+    <value>Nous recommandons les applications suivantes</value>
+  </data>
+  <data name="Step2ScanQrCode" xml:space="preserve">
+    <value>Étape 2 – Scannez le code QR</value>
+  </data>
+  <data name="ScanQrCodeInstruction" xml:space="preserve">
+    <value>Une fois que vous avez installé une application d’authentification à deux facteurs, vous pouvez continuer et chercher dans l’application l’option pour scanner un code QR et la confirmer. Ensuite, une fois la caméra activée, vous pourrez scanner le code QR fourni par nos soins.</value>
+  </data>
+  <data name="Step3VerifyTheCode" xml:space="preserve">
+    <value>Étape 3 – Vérification du code</value>
+  </data>
+  <data name="VerifyCodeInstructionMain" xml:space="preserve">
+    <value>Vous pouvez maintenant lire un code numérique dans l’application d’authentification à deux facteurs pour vérifier l’opération. Veuillez saisir ce code dans le champ ci-dessous et cliquer sur</value>
+  </data>
+  <data name="VerifyCodeInstructionSubmit" xml:space="preserve">
+    <value>Envoyer</value>
+  </data>
+  <data name="CopyLink" xml:space="preserve">
+    <value>Copier le lien</value>
+  </data>
+  <data name="CityFormatInvalid" xml:space="preserve">
+    <value>Veuillez vérifier le lieu saisi "{0}" pour un format correct. Exemples : Munich, Île-de-France, Sauðárkrókur, San Francisco, St. Catharines, etc.</value>
+  </data>
+  <data name="CopyLinkSuccess" xml:space="preserve">
+    <value>Copié</value>
+  </data>
+  <data name="Logout" xml:space="preserve">
+    <value>Déconnexion</value>
+  </data>
+  <data name="ViewAllPages" xml:space="preserve">
+    <value>Veuillez consulter toutes les pages.</value>
+  </data>
+  <data name="Reset" xml:space="preserve">
+    <value>Réinitialiser</value>
+  </data>
+  <data name="ViewRemainingPages" xml:space="preserve">
+    <value>Veuillez consulter les pages suivantes : {0}</value>
+  </data>
+  <data name="City" xml:space="preserve">
+    <value>Ville</value>
+  </data>
+  <data name="EnvelopeRejectedRedirect" xml:space="preserve">
+    <value>Le document a été refusé par un destinataire. Vous allez être redirigé...</value>
+  </data>
+  <data name="MissingSignatures" xml:space="preserve">
+    <value>Tous les champs de signature n'ont pas été remplis !</value>
+  </data>
+  <data name="ResetConfirmText" xml:space="preserve">
+    <value>Voulez-vous réinitialiser le document et toutes les signatures créées ?</value>
+  </data>
+  <data name="EnvelopeSignError" xml:space="preserve">
+    <value>Le pli n'a pas pu être signé !</value>
+  </data>
+  <data name="SignedBy" xml:space="preserve">
+    <value>Signé par</value>
+  </data>
+  <data name="Warning" xml:space="preserve">
+    <value>Avertissement</value>
+  </data>
+  <data name="Position" xml:space="preserve">
+    <value>Position</value>
+  </data>
+  <data name="Share" xml:space="preserve">
+    <value>Partager</value>
+  </data>
+  <data name="CopyLinkFailure" xml:space="preserve">
+    <value>Erreur inattendue</value>
+  </data>
+  <data name="LocationFieldsRequired" xml:space="preserve">
+    <value>Veuillez compléter toutes les informations de localisation.</value>
+  </data>
+  <data name="ResetConfirmTitle" xml:space="preserve">
+    <value>Êtes-vous sûr ?</value>
+  </data>
+  <data name="EnvelopeUnavailable" xml:space="preserve">
+    <value>Le pli n'est plus disponible.</value>
+  </data>
+  <data name="Success" xml:space="preserve">
+    <value>Succès</value>
+  </data>
+  <data name="DocumentReset" xml:space="preserve">
+    <value>Le document a été réinitialisé.</value>
+  </data>
+</root>

EnvelopeGenerator.Application/Services/EnvelopeMailService.cs

@@ -4,7 +4,6 @@ using DigitalData.EmailProfilerDispatcher.Abstraction.DTOs.EmailOut;
 using DigitalData.EmailProfilerDispatcher.Abstraction.Services;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
-using Newtonsoft.Json;
 using DigitalData.Core.Abstraction.Application.DTO;
 using EnvelopeGenerator.Domain.Constants;
 using EnvelopeGenerator.Application.Common.Configurations;
@@ -12,6 +11,7 @@ using EnvelopeGenerator.Application.Common.Dto.EnvelopeReceiver;
 using EnvelopeGenerator.Application.Common.Dto.EnvelopeReceiverReadOnly;
 using EnvelopeGenerator.Application.Common.Extensions;
 using EnvelopeGenerator.Application.Common.Interfaces.Services;
+using MediatR;
 
 namespace EnvelopeGenerator.Application.Services;
 
@@ -21,170 +21,170 @@ namespace EnvelopeGenerator.Application.Services;
 [Obsolete("Use MediatR")]
 public class EnvelopeMailService : EmailOutService, IEnvelopeMailService
 {
-private readonly IEmailTemplateService _tempService;
-private readonly IEnvelopeReceiverService _envRcvService;
-private readonly DispatcherParams _dConfig;
-private readonly IConfigService _configService;
-private readonly Dictionary<string, string> _placeholders;
-private readonly IAuthenticator _authenticator;
+	private readonly IEmailTemplateService _tempService;
+	private readonly IEnvelopeReceiverService _envRcvService;
+	private readonly DispatcherParams _dConfig;
+	private readonly IConfigService _configService;
+	private readonly Dictionary<string, string> _placeholders;
+    private readonly ISender _sender;
 
-/// <summary>
-/// 
-/// </summary>
-/// <param name="repository"></param>
-/// <param name="mapper"></param>
-/// <param name="tempService"></param>
-/// <param name="envelopeReceiverService"></param>
-/// <param name="dispatcherConfigOptions"></param>
-/// <param name="configService"></param>
-/// <param name="mailConfig"></param>
-/// <param name="authenticator"></param>
-    public EnvelopeMailService(IEmailOutRepository repository, IMapper mapper, IEmailTemplateService tempService, IEnvelopeReceiverService envelopeReceiverService, IOptions<DispatcherParams> dispatcherConfigOptions, IConfigService configService, IOptions<MailParams> mailConfig, IAuthenticator authenticator) : base(repository, mapper)
-    {
-        _tempService = tempService;
-	    _envRcvService = envelopeReceiverService;
-	    _dConfig = dispatcherConfigOptions.Value;
-	    _configService = configService;
-	    _placeholders = new Dictionary<string, string>(mailConfig.Value.Placeholders);
-        _authenticator = authenticator;
+	/// <summary>
+	/// 
+	/// </summary>
+	/// <param name="repository"></param>
+	/// <param name="mapper"></param>
+	/// <param name="tempService"></param>
+	/// <param name="envelopeReceiverService"></param>
+	/// <param name="dispatcherConfigOptions"></param>
+	/// <param name="configService"></param>
+	/// <param name="mailConfig"></param>
+	/// <param name="sender"></param>
+    public EnvelopeMailService(IEmailOutRepository repository, IMapper mapper, IEmailTemplateService tempService, IEnvelopeReceiverService envelopeReceiverService, IOptions<DispatcherParams> dispatcherConfigOptions, IConfigService configService, IOptions<MailParams> mailConfig, ISender sender) : base(repository, mapper)
+	{
+		_tempService = tempService;
+		_envRcvService = envelopeReceiverService;
+		_dConfig = dispatcherConfigOptions.Value;
+		_configService = configService;
+		_placeholders = new Dictionary<string, string>(mailConfig.Value.Placeholders);
+		_sender = sender;
     }
 
-private async Task<Dictionary<string, string>> CreatePlaceholders(string? accessCode = null, EnvelopeReceiverDto? envelopeReceiverDto = null)
-{
-	if (accessCode is not null)
-            _placeholders["[DOCUMENT_ACCESS_CODE]"] = accessCode;
-
-	if(envelopeReceiverDto?.Envelope is not null && envelopeReceiverDto.Receiver is not null)
+	private async Task<Dictionary<string, string>> CreatePlaceholders(string? accessCode = null, EnvelopeReceiverDto? envelopeReceiverDto = null)
 	{
-		var erId = (envelopeReceiverDto.Envelope.Uuid, envelopeReceiverDto.Receiver.Signature).ToEnvelopeKey();
-		var sigHost = await _configService.ReadDefaultSignatureHost();
-		var linkToDoc = $"{sigHost}/EnvelopeKey/{erId}";
-		_placeholders["[LINK_TO_DOCUMENT]"] = linkToDoc;
-		_placeholders["[LINK_TO_DOCUMENT_TEXT]"] = linkToDoc[..Math.Min(40, linkToDoc.Length)] + "..";
+		if (accessCode is not null)
+			_placeholders["[DOCUMENT_ACCESS_CODE]"] = accessCode;
+
+		if (envelopeReceiverDto?.Envelope is not null && envelopeReceiverDto.Receiver is not null)
+		{
+			var erId = (envelopeReceiverDto.Envelope.Uuid, envelopeReceiverDto.Receiver.Signature).ToEnvelopeKey();
+			var sigHost = await _configService.ReadDefaultSignatureHost();
+			var linkToDoc = $"{sigHost}/EnvelopeKey/{erId}";
+			_placeholders["[LINK_TO_DOCUMENT]"] = linkToDoc;
+			_placeholders["[LINK_TO_DOCUMENT_TEXT]"] = linkToDoc[..Math.Min(40, linkToDoc.Length)] + "..";
+		}
+
+		return _placeholders;
 	}
 
-	return _placeholders;
-}
-
-    private async Task<Dictionary<string, string>> CreatePlaceholders(EnvelopeReceiverReadOnlyDto? readOnlyDto = null)
-    {
-        if (readOnlyDto?.Envelope is not null && readOnlyDto.Receiver is not null)
-        {
-            _placeholders["[NAME_RECEIVER]"] = await _envRcvService.ReadLastUsedReceiverNameByMailAsync(readOnlyDto.AddedWho).ThenAsync(res => res, (msg, ntc) => string.Empty) ?? string.Empty;
-            var erReadOnlyId = (readOnlyDto.Id).ToEnvelopeKey();
-            var sigHost = await _configService.ReadDefaultSignatureHost();
-            var linkToDoc = $"{sigHost}/EnvelopeKey/{erReadOnlyId}";
-            _placeholders["[LINK_TO_DOCUMENT]"] = linkToDoc;
-            _placeholders["[LINK_TO_DOCUMENT_TEXT]"] = linkToDoc[..Math.Min(40, linkToDoc.Length)] + "..";
-        }
-
-        return _placeholders;
-    }
-	
-/// <summary>
-/// 
-/// </summary>
-/// <param name="dto"></param>
-/// <param name="tempType"></param>
-/// <param name="optionalPlaceholders"></param>
-/// <returns></returns>
-    public async Task<DataResult<int>> SendAsync(EnvelopeReceiverDto dto, EmailTemplateType tempType, Dictionary<string, object>? optionalPlaceholders = null)
-    {
-	var tempSerResult = await _tempService.ReadByNameAsync(tempType);
-	if (tempSerResult.IsFailed)
-		return tempSerResult.ToFail<int>().Notice(LogLevel.Error, DigitalData.Core.Abstraction.Application.DTO.Flag.DataIntegrityIssue, $"The email cannot send because '{tempType}' template cannot found.");
-	var temp = tempSerResult.Data;
-
-	var mail = new EmailOutCreateDto()
+	private async Task<Dictionary<string, string>> CreatePlaceholders(EnvelopeReceiverReadOnlyDto? readOnlyDto = null)
 	{
-		EmailAddress = dto.Receiver!.EmailAddress,
-		EmailSubj = temp.Subject,
-		EmailBody = temp.Body,
-		//email_type = envelope_status,
-		//message = envelope_message,
-		ReferenceId = dto.EnvelopeId,               //REFERENCE_ID = ENVELOPE_ID
-		ReferenceString = dto!.Envelope!.Uuid,		//REFERENCE_STRING = ENVELOPE_UUID
-		//receiver_name = receiver.name,
-		//receiver_access_code = receiver.access_code,
-		//sender_adress = envelope.user.email,
-		//sender_name = envelope.user.full_name,
-		//envelope_title = envelope.title,
-		ReminderTypeId = _dConfig.ReminderTypeId,
-		SendingProfile = _dConfig.SendingProfile,
-		EntityId = null,
-		WfId = (int) EnvelopeStatus.MessageAccessCodeSent,
-		WfReference = null,
-		AddedWho = _dConfig.AddedWho,
-		EmailAttmt1 = _dConfig.EmailAttmt1
-	};
+		if (readOnlyDto?.Envelope is not null && readOnlyDto.Receiver is not null)
+		{
+			_placeholders["[NAME_RECEIVER]"] = await _envRcvService.ReadLastUsedReceiverNameByMailAsync(readOnlyDto.AddedWho).ThenAsync(res => res, (msg, ntc) => string.Empty) ?? string.Empty;
+			var erReadOnlyId = (readOnlyDto.Id).ToEnvelopeKey();
+			var sigHost = await _configService.ReadDefaultSignatureHost();
+			var linkToDoc = $"{sigHost}/EnvelopeKey/{erReadOnlyId}";
+			_placeholders["[LINK_TO_DOCUMENT]"] = linkToDoc;
+			_placeholders["[LINK_TO_DOCUMENT_TEXT]"] = linkToDoc[..Math.Min(40, linkToDoc.Length)] + "..";
+		}
 
-	//get acccess code
-	var acResult = await _envRcvService.ReadAccessCodeByIdAsync(envelopeId: dto.EnvelopeId, receiverId: dto.ReceiverId);
-	if (acResult.IsFailed)
-		return acResult.ToFail<int>().Notice(LogLevel.Error, "Therefore, access code cannot be sent");
-	var accessCode = acResult.Data;
-		
-	var placeholders = await CreatePlaceholders(accessCode: accessCode, envelopeReceiverDto: dto);
+		return _placeholders;
+	}
 
-	// Add optional place holders.
-	if (optionalPlaceholders is not null)
-		foreach (var oph in optionalPlaceholders)
-			placeholders[oph.Key] = oph.Value.ToString() ?? "NULL";
+	/// <summary>
+	/// 
+	/// </summary>
+	/// <param name="dto"></param>
+	/// <param name="tempType"></param>
+	/// <param name="optionalPlaceholders"></param>
+	/// <returns></returns>
+	public async Task<DataResult<int>> SendAsync(EnvelopeReceiverDto dto, EmailTemplateType tempType, Dictionary<string, object>? optionalPlaceholders = null)
+	{
+		var tempSerResult = await _tempService.ReadByNameAsync(tempType);
+		if (tempSerResult.IsFailed)
+			return tempSerResult.ToFail<int>().Notice(LogLevel.Error, Flag.DataIntegrityIssue, $"The email cannot send because '{tempType}' template cannot found.");
+		var temp = tempSerResult.Data;
 
-	//TODO: remove the requirement to add the models using reflections
-	return await CreateWithTemplateAsync(createDto: mail,placeholders: placeholders,
-		dto, dto.Envelope.User!, dto.Envelope);
-}
+		var mail = new EmailOutCreateDto()
+		{
+			EmailAddress = dto.Receiver!.EmailAddress,
+			EmailSubj = temp.Subject,
+			EmailBody = temp.Body,
+			//email_type = envelope_status,
+			//message = envelope_message,
+			ReferenceId = dto.EnvelopeId,               //REFERENCE_ID = ENVELOPE_ID
+			ReferenceString = dto!.Envelope!.Uuid,      //REFERENCE_STRING = ENVELOPE_UUID
+														//receiver_name = receiver.name,
+														//receiver_access_code = receiver.access_code,
+														//sender_adress = envelope.user.email,
+														//sender_name = envelope.user.full_name,
+														//envelope_title = envelope.title,
+			ReminderTypeId = _dConfig.ReminderTypeId,
+			SendingProfile = _dConfig.SendingProfile,
+			EntityId = null,
+			WfId = (int)EnvelopeStatus.MessageAccessCodeSent,
+			WfReference = null,
+			AddedWho = _dConfig.AddedWho,
+			EmailAttmt1 = _dConfig.EmailAttmt1
+		};
 
-/// <summary>
-/// 
-/// </summary>
-/// <param name="dto"></param>
-/// <param name="optionalPlaceholders"></param>
-/// <returns></returns>
-public async Task<DataResult<int>> SendAsync(EnvelopeReceiverReadOnlyDto dto, Dictionary<string, object>? optionalPlaceholders = null)
-{
-        var tempSerResult = await _tempService.ReadByNameAsync(EmailTemplateType.DocumentShared);
-        if (tempSerResult.IsFailed)
-            return tempSerResult.ToFail<int>().Notice(LogLevel.Error, Flag.DataIntegrityIssue, $"The email cannot send because '{EmailTemplateType.DocumentShared}' template cannot found.");
-        var temp = tempSerResult.Data;
+		//get acccess code
+		var acResult = await _envRcvService.ReadAccessCodeByIdAsync(envelopeId: dto.EnvelopeId, receiverId: dto.ReceiverId);
+		if (acResult.IsFailed)
+			return acResult.ToFail<int>().Notice(LogLevel.Error, "Therefore, access code cannot be sent");
+		var accessCode = acResult.Data;
 
-        var mail = new EmailOutCreateDto()
-        {
-            EmailAddress = dto.ReceiverMail,
-            EmailSubj = temp.Subject,
-            EmailBody = temp.Body,
-		//TODO: remove int casting when all 
-            ReferenceId = (int) dto.EnvelopeId,			//REFERENCE_ID = ENVELOPE_ID
-            ReferenceString = dto.Envelope!.Uuid,		//REFERENCE_STRING = ENVELOPE_UUID
-                                                        //receiver_name = receiver.name,
-                                                        //receiver_access_code = receiver.access_code,
-                                                        //sender_adress = envelope.user.email,
-                                                        //sender_name = envelope.user.full_name,
-                                                        //envelope_title = envelope.title,
-            ReminderTypeId = _dConfig.ReminderTypeId,
-            SendingProfile = _dConfig.SendingProfile,
-            EntityId = null,
-            WfId = (int)EnvelopeStatus.EnvelopeShared,
-            WfReference = null,
-            AddedWho = _dConfig.AddedWho,
-            EmailAttmt1 = _dConfig.EmailAttmt1
-        };
+		var placeholders = await CreatePlaceholders(accessCode: accessCode, envelopeReceiverDto: dto);
 
-        var placeholders = await CreatePlaceholders(readOnlyDto: dto);
+		// Add optional place holders.
+		if (optionalPlaceholders is not null)
+			foreach (var oph in optionalPlaceholders)
+				placeholders[oph.Key] = oph.Value.ToString() ?? "NULL";
 
-        // Add optional place holders.
-        if (optionalPlaceholders is not null)
-            foreach (var oph in optionalPlaceholders)
-            placeholders[oph.Key] = oph.Value.ToString() ?? "NULL";
+		//TODO: remove the requirement to add the models using reflections
+		return await CreateWithTemplateAsync(createDto: mail, placeholders: placeholders,
+			dto, dto.Envelope.User!, dto.Envelope);
+	}
 
-        return await CreateWithTemplateAsync(createDto: mail, placeholders: placeholders, dto.Envelope);
-    }
+	/// <summary>
+	/// 
+	/// </summary>
+	/// <param name="dto"></param>
+	/// <param name="optionalPlaceholders"></param>
+	/// <returns></returns>
+	public async Task<DataResult<int>> SendAsync(EnvelopeReceiverReadOnlyDto dto, Dictionary<string, object>? optionalPlaceholders = null)
+	{
+		var tempSerResult = await _tempService.ReadByNameAsync(EmailTemplateType.DocumentShared);
+		if (tempSerResult.IsFailed)
+			return tempSerResult.ToFail<int>().Notice(LogLevel.Error, Flag.DataIntegrityIssue, $"The email cannot send because '{EmailTemplateType.DocumentShared}' template cannot found.");
+		var temp = tempSerResult.Data;
+
+		var mail = new EmailOutCreateDto()
+		{
+			EmailAddress = dto.ReceiverMail,
+			EmailSubj = temp.Subject,
+			EmailBody = temp.Body,
+			//TODO: remove int casting when all 
+			ReferenceId = (int)dto.EnvelopeId,          //REFERENCE_ID = ENVELOPE_ID
+			ReferenceString = dto.Envelope!.Uuid,       //REFERENCE_STRING = ENVELOPE_UUID
+														//receiver_name = receiver.name,
+														//receiver_access_code = receiver.access_code,
+														//sender_adress = envelope.user.email,
+														//sender_name = envelope.user.full_name,
+														//envelope_title = envelope.title,
+			ReminderTypeId = _dConfig.ReminderTypeId,
+			SendingProfile = _dConfig.SendingProfile,
+			EntityId = null,
+			WfId = (int)EnvelopeStatus.EnvelopeShared,
+			WfReference = null,
+			AddedWho = _dConfig.AddedWho,
+			EmailAttmt1 = _dConfig.EmailAttmt1
+		};
+
+		var placeholders = await CreatePlaceholders(readOnlyDto: dto);
+
+		// Add optional place holders.
+		if (optionalPlaceholders is not null)
+			foreach (var oph in optionalPlaceholders)
+				placeholders[oph.Key] = oph.Value.ToString() ?? "NULL";
+
+		return await CreateWithTemplateAsync(createDto: mail, placeholders: placeholders, dto.Envelope);
+	}
 
 	/// <summary>
 	/// 
 	/// </summary>
 	/// <param name="dto"></param>
 	/// <returns></returns>
-    public async Task<DataResult<int>> SendAccessCodeAsync(EnvelopeReceiverDto dto) => await SendAsync(dto: dto, tempType: EmailTemplateType.DocumentAccessCodeReceived);
+	public async Task<DataResult<int>> SendAccessCodeAsync(EnvelopeReceiverDto dto) => await SendAsync(dto: dto, tempType: EmailTemplateType.DocumentAccessCodeReceived);
 }

EnvelopeGenerator.BBTests/EnvelopeGenerator.BBTests.vbproj

@@ -48,8 +48,14 @@
     <Reference Include="AutoMapper, Version=10.0.0.0, Culture=neutral, PublicKeyToken=be96cd2c38ef1005, processorArchitecture=MSIL">
       <HintPath>..\packages\AutoMapper.10.1.1\lib\net461\AutoMapper.dll</HintPath>
     </Reference>
+    <Reference Include="Azure.Core, Version=1.50.0.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\Azure.Core.1.50.0\lib\net462\Azure.Core.dll</HintPath>
+    </Reference>
+    <Reference Include="Azure.Identity, Version=1.17.1.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\Azure.Identity.1.17.1\lib\netstandard2.0\Azure.Identity.dll</HintPath>
+    </Reference>
     <Reference Include="BouncyCastle.Cryptography, Version=2.0.0.0, Culture=neutral, PublicKeyToken=072edcf4a5328938, processorArchitecture=MSIL">
-      <HintPath>..\packages\BouncyCastle.Cryptography.2.5.0\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
+      <HintPath>..\packages\BouncyCastle.Cryptography.2.6.2\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
     </Reference>
     <Reference Include="DevExpress.BonusSkins.v21.2" />
     <Reference Include="DevExpress.Data.v21.2" />
@@ -185,8 +191,8 @@
     <Reference Include="Microsoft.Bcl.HashCode, Version=1.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Bcl.HashCode.1.1.1\lib\net461\Microsoft.Bcl.HashCode.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Data.SqlClient, Version=1.13.20136.2, Culture=neutral, PublicKeyToken=23ec7fc2d6eaa4a5, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Data.SqlClient.1.1.3\lib\net46\Microsoft.Data.SqlClient.dll</HintPath>
+    <Reference Include="Microsoft.Data.SqlClient, Version=6.0.0.0, Culture=neutral, PublicKeyToken=23ec7fc2d6eaa4a5, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Data.SqlClient.6.1.4\lib\net462\Microsoft.Data.SqlClient.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.EntityFrameworkCore, Version=3.1.32.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.EntityFrameworkCore.3.1.32\lib\netstandard2.0\Microsoft.EntityFrameworkCore.dll</HintPath>
@@ -200,11 +206,11 @@
     <Reference Include="Microsoft.EntityFrameworkCore.SqlServer, Version=3.1.32.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.EntityFrameworkCore.SqlServer.3.1.32\lib\netstandard2.0\Microsoft.EntityFrameworkCore.SqlServer.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Caching.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Caching.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.Caching.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Caching.Abstractions, Version=8.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Caching.Abstractions.8.0.0\lib\net462\Microsoft.Extensions.Caching.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Caching.Memory, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Caching.Memory.7.0.0\lib\net462\Microsoft.Extensions.Caching.Memory.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Caching.Memory, Version=8.0.0.1, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Caching.Memory.8.0.1\lib\net462\Microsoft.Extensions.Caching.Memory.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Configuration, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Configuration.7.0.0\lib\net462\Microsoft.Extensions.Configuration.dll</HintPath>
@@ -218,8 +224,8 @@
     <Reference Include="Microsoft.Extensions.DependencyInjection, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.7.0.0\lib\net462\Microsoft.Extensions.DependencyInjection.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.DependencyInjection.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.DependencyInjection.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.DependencyInjection.Abstractions, Version=8.0.0.2, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.Abstractions.8.0.2\lib\net462\Microsoft.Extensions.DependencyInjection.Abstractions.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Localization.Abstractions, Version=7.0.16.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Localization.Abstractions.7.0.16\lib\net462\Microsoft.Extensions.Localization.Abstractions.dll</HintPath>
@@ -227,38 +233,41 @@
     <Reference Include="Microsoft.Extensions.Logging, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Logging.7.0.0\lib\net462\Microsoft.Extensions.Logging.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Logging.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Logging.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.Logging.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Logging.Abstractions, Version=8.0.0.3, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Logging.Abstractions.8.0.3\lib\net462\Microsoft.Extensions.Logging.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Options, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Options.7.0.0\lib\net462\Microsoft.Extensions.Options.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Options, Version=8.0.0.2, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Options.8.0.2\lib\net462\Microsoft.Extensions.Options.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Options.ConfigurationExtensions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Options.ConfigurationExtensions.7.0.0\lib\net462\Microsoft.Extensions.Options.ConfigurationExtensions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Primitives, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Primitives.7.0.0\lib\net462\Microsoft.Extensions.Primitives.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Primitives, Version=8.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Primitives.8.0.0\lib\net462\Microsoft.Extensions.Primitives.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Identity.Client, Version=4.77.0.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Identity.Client.4.77.0\lib\net462\Microsoft.Identity.Client.dll</HintPath>
+    <Reference Include="Microsoft.Identity.Client, Version=4.82.1.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Identity.Client.4.82.1\lib\net462\Microsoft.Identity.Client.dll</HintPath>
+    </Reference>
+    <Reference Include="Microsoft.Identity.Client.Extensions.Msal, Version=4.78.0.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Identity.Client.Extensions.Msal.4.78.0\lib\netstandard2.0\Microsoft.Identity.Client.Extensions.Msal.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.IdentityModel.Abstractions, Version=8.14.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.IdentityModel.Abstractions.8.14.0\lib\net462\Microsoft.IdentityModel.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.JsonWebTokens, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.JsonWebTokens.7.5.1\lib\net462\Microsoft.IdentityModel.JsonWebTokens.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.JsonWebTokens, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.JsonWebTokens.7.7.1\lib\net462\Microsoft.IdentityModel.JsonWebTokens.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Logging, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Logging.7.5.1\lib\net462\Microsoft.IdentityModel.Logging.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Logging, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Logging.7.7.1\lib\net462\Microsoft.IdentityModel.Logging.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Protocols, Version=5.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.5.5.0\lib\net461\Microsoft.IdentityModel.Protocols.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Protocols, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.7.7.1\lib\net462\Microsoft.IdentityModel.Protocols.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect, Version=5.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.OpenIdConnect.5.5.0\lib\net461\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.OpenIdConnect.7.7.1\lib\net462\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Tokens, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Tokens.7.5.1\lib\net462\Microsoft.IdentityModel.Tokens.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Tokens, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Tokens.7.7.1\lib\net462\Microsoft.IdentityModel.Tokens.dll</HintPath>
     </Reference>
     <Reference Include="Newtonsoft.Json, Version=13.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
       <HintPath>..\packages\Newtonsoft.Json.13.0.3\lib\net45\Newtonsoft.Json.dll</HintPath>
@@ -285,8 +294,11 @@
       <HintPath>..\packages\S22.Imap.3.6.0.0\lib\net40\S22.Imap.dll</HintPath>
     </Reference>
     <Reference Include="System" />
-    <Reference Include="System.Buffers, Version=4.0.4.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Buffers.4.6.0\lib\net462\System.Buffers.dll</HintPath>
+    <Reference Include="System.Buffers, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Buffers.4.6.1\lib\net462\System.Buffers.dll</HintPath>
+    </Reference>
+    <Reference Include="System.ClientModel, Version=1.8.0.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.ClientModel.1.8.0\lib\netstandard2.0\System.ClientModel.dll</HintPath>
     </Reference>
     <Reference Include="System.CodeDom, Version=9.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.CodeDom.9.0.0\lib\net462\System.CodeDom.dll</HintPath>
@@ -308,18 +320,21 @@
     <Reference Include="System.Data.Odbc, Version=6.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Data.Odbc.6.0.1\lib\net461\System.Data.Odbc.dll</HintPath>
     </Reference>
-    <Reference Include="System.Diagnostics.DiagnosticSource, Version=7.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Diagnostics.DiagnosticSource.7.0.0\lib\net462\System.Diagnostics.DiagnosticSource.dll</HintPath>
+    <Reference Include="System.Diagnostics.DiagnosticSource, Version=8.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Diagnostics.DiagnosticSource.8.0.1\lib\net462\System.Diagnostics.DiagnosticSource.dll</HintPath>
     </Reference>
     <Reference Include="System.DirectoryServices.AccountManagement" />
-    <Reference Include="System.Formats.Asn1, Version=9.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Formats.Asn1.9.0.0\lib\net462\System.Formats.Asn1.dll</HintPath>
+    <Reference Include="System.Formats.Asn1, Version=10.0.0.3, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Formats.Asn1.10.0.3\lib\net462\System.Formats.Asn1.dll</HintPath>
     </Reference>
     <Reference Include="System.IdentityModel" />
-    <Reference Include="System.IdentityModel.Tokens.Jwt, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.IdentityModel.Tokens.Jwt.7.5.1\lib\net462\System.IdentityModel.Tokens.Jwt.dll</HintPath>
+    <Reference Include="System.IdentityModel.Tokens.Jwt, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.IdentityModel.Tokens.Jwt.7.7.1\lib\net462\System.IdentityModel.Tokens.Jwt.dll</HintPath>
     </Reference>
     <Reference Include="System.IO.Compression" />
+    <Reference Include="System.IO.FileSystem.AccessControl, Version=5.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.IO.FileSystem.AccessControl.5.0.0\lib\net461\System.IO.FileSystem.AccessControl.dll</HintPath>
+    </Reference>
     <Reference Include="System.IO.Packaging, Version=9.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.IO.Packaging.9.0.0\lib\net462\System.IO.Packaging.dll</HintPath>
     </Reference>
@@ -327,21 +342,27 @@
       <HintPath>..\packages\System.IO.Pipelines.9.0.0\lib\net462\System.IO.Pipelines.dll</HintPath>
     </Reference>
     <Reference Include="System.Management" />
-    <Reference Include="System.Memory, Version=4.0.2.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Memory.4.6.0\lib\net462\System.Memory.dll</HintPath>
+    <Reference Include="System.Memory, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Memory.4.6.3\lib\net462\System.Memory.dll</HintPath>
+    </Reference>
+    <Reference Include="System.Memory.Data, Version=8.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Memory.Data.8.0.1\lib\net462\System.Memory.Data.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Formatting, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.AspNet.WebApi.Client.6.0.0\lib\net45\System.Net.Http.Formatting.dll</HintPath>
     </Reference>
     <Reference Include="System.Numerics" />
-    <Reference Include="System.Numerics.Vectors, Version=4.1.5.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Numerics.Vectors.4.6.0\lib\net462\System.Numerics.Vectors.dll</HintPath>
+    <Reference Include="System.Numerics.Vectors, Version=4.1.6.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Numerics.Vectors.4.6.1\lib\net462\System.Numerics.Vectors.dll</HintPath>
     </Reference>
-    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.1.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.0\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
+    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.2\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
     </Reference>
     <Reference Include="System.Security" />
+    <Reference Include="System.Security.AccessControl, Version=6.0.0.1, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Security.AccessControl.6.0.1\lib\net461\System.Security.AccessControl.dll</HintPath>
+    </Reference>
     <Reference Include="System.Security.Cryptography.Algorithms, Version=4.1.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Security.Cryptography.Algorithms.4.3.1\lib\net461\System.Security.Cryptography.Algorithms.dll</HintPath>
       <Private>True</Private>
@@ -358,6 +379,9 @@
       <Private>True</Private>
       <Private>True</Private>
     </Reference>
+    <Reference Include="System.Security.Cryptography.ProtectedData, Version=4.0.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Security.Cryptography.ProtectedData.4.5.0\lib\net461\System.Security.Cryptography.ProtectedData.dll</HintPath>
+    </Reference>
     <Reference Include="System.Security.Principal.Windows, Version=5.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Security.Principal.Windows.5.0.0\lib\net461\System.Security.Principal.Windows.dll</HintPath>
     </Reference>
@@ -367,12 +391,12 @@
     <Reference Include="System.Text.Json, Version=9.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Text.Json.9.0.0\lib\net462\System.Text.Json.dll</HintPath>
     </Reference>
-    <Reference Include="System.Threading.Tasks.Extensions, Version=4.2.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Threading.Tasks.Extensions.4.5.4\lib\net461\System.Threading.Tasks.Extensions.dll</HintPath>
+    <Reference Include="System.Threading.Tasks.Extensions, Version=4.2.1.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Threading.Tasks.Extensions.4.6.0\lib\net462\System.Threading.Tasks.Extensions.dll</HintPath>
     </Reference>
     <Reference Include="System.Transactions" />
-    <Reference Include="System.ValueTuple, Version=4.0.3.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.ValueTuple.4.5.0\lib\net461\System.ValueTuple.dll</HintPath>
+    <Reference Include="System.ValueTuple, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.ValueTuple.4.6.1\lib\net462\System.ValueTuple.dll</HintPath>
     </Reference>
     <Reference Include="System.Xml.Linq" />
     <Reference Include="System.Data.DataSetExtensions" />
@@ -508,10 +532,10 @@
     <Error Condition="!Exists('..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets'))" />
     <Error Condition="!Exists('..\packages\EntityFramework.6.5.1\build\EntityFramework.props')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\EntityFramework.6.5.1\build\EntityFramework.props'))" />
     <Error Condition="!Exists('..\packages\EntityFramework.6.5.1\build\EntityFramework.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\EntityFramework.6.5.1\build\EntityFramework.targets'))" />
-    <Error Condition="!Exists('..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets'))" />
+    <Error Condition="!Exists('..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets'))" />
   </Target>
   <Import Project="..\packages\EntityFramework.6.5.1\build\EntityFramework.targets" Condition="Exists('..\packages\EntityFramework.6.5.1\build\EntityFramework.targets')" />
-  <Import Project="..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets" Condition="Exists('..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets')" />
+  <Import Project="..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets" Condition="Exists('..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets')" />
   <!-- To modify your build process, add your task inside one of the targets below and uncomment it.
        Other similar extension points exist, see Microsoft.Common.targets.
   <Target Name="BeforeBuild">

EnvelopeGenerator.BBTests/app.config

@@ -65,15 +65,15 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.2.0" newVersion="4.0.2.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-6.0.1.0" newVersion="6.0.1.0" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.3.0" newVersion="6.0.3.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.4.0" newVersion="4.0.4.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Collections.Immutable" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -81,7 +81,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Numerics.Vectors" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.1.5.0" newVersion="4.1.5.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.1.6.0" newVersion="4.1.6.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Security.Cryptography.Pkcs" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -109,11 +109,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Identity.Client" publicKeyToken="0a613f4dd989e8ae" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.77.0.0" newVersion="4.77.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.82.1.0" newVersion="4.82.1.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Diagnostics.DiagnosticSource" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.1" newVersion="8.0.0.1" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.IdentityModel.Abstractions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
@@ -129,15 +129,15 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.DependencyInjection.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Logging.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.3" newVersion="8.0.0.3" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.ComponentModel.Annotations" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -153,11 +153,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Memory" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.1" newVersion="8.0.0.1" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Options" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Configuration.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
@@ -179,6 +179,30 @@
         <assemblyIdentity name="Microsoft.IdentityModel.JsonWebTokens" publicKeyToken="31bf3856ad364e35" culture="neutral" />
         <bindingRedirect oldVersion="0.0.0.0-7.5.1.0" newVersion="7.5.1.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.ValueTuple" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Formats.Asn1" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-10.0.0.3" newVersion="10.0.0.3" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Threading.Tasks.Extensions" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-4.2.1.0" newVersion="4.2.1.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Data.SqlClient" publicKeyToken="23ec7fc2d6eaa4a5" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Extensions.Primitives" publicKeyToken="adb9793829ddae60" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Security.AccessControl" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.1" newVersion="6.0.0.1" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
   <entityFramework>

EnvelopeGenerator.BBTests/packages.config

@@ -1,7 +1,9 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
   <package id="AutoMapper" version="10.1.1" targetFramework="net462" />
-  <package id="BouncyCastle.Cryptography" version="2.5.0" targetFramework="net462" />
+  <package id="Azure.Core" version="1.50.0" targetFramework="net462" />
+  <package id="Azure.Identity" version="1.17.1" targetFramework="net462" />
+  <package id="BouncyCastle.Cryptography" version="2.6.2" targetFramework="net462" />
   <package id="DigitalData.Controls.DocumentViewer" version="1.9.8" targetFramework="net462" />
   <package id="DigitalData.Core.Abstraction.Application" version="1.6.0" targetFramework="net462" />
   <package id="DigitalData.Core.Abstractions" version="4.3.0" targetFramework="net462" />
@@ -23,33 +25,34 @@
   <package id="Microsoft.Bcl.Cryptography" version="9.0.0" targetFramework="net462" />
   <package id="Microsoft.Bcl.HashCode" version="1.1.1" targetFramework="net462" />
   <package id="Microsoft.CSharp" version="4.7.0" targetFramework="net462" />
-  <package id="Microsoft.Data.SqlClient" version="1.1.3" targetFramework="net462" />
-  <package id="Microsoft.Data.SqlClient.SNI" version="1.1.0" targetFramework="net462" />
+  <package id="Microsoft.Data.SqlClient" version="6.1.4" targetFramework="net462" />
+  <package id="Microsoft.Data.SqlClient.SNI" version="6.0.2" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Abstractions" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Analyzers" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Relational" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.SqlServer" version="3.1.32" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Caching.Abstractions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Caching.Memory" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Caching.Abstractions" version="8.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Caching.Memory" version="8.0.1" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration.Abstractions" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration.Binder" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.DependencyInjection" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.DependencyInjection.Abstractions" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.DependencyInjection.Abstractions" version="8.0.2" targetFramework="net462" />
   <package id="Microsoft.Extensions.Localization.Abstractions" version="7.0.16" targetFramework="net462" />
   <package id="Microsoft.Extensions.Logging" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Logging.Abstractions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Options" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Logging.Abstractions" version="8.0.3" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Options" version="8.0.2" targetFramework="net462" />
   <package id="Microsoft.Extensions.Options.ConfigurationExtensions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Primitives" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Identity.Client" version="4.77.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Primitives" version="8.0.0" targetFramework="net462" />
+  <package id="Microsoft.Identity.Client" version="4.82.1" targetFramework="net462" />
+  <package id="Microsoft.Identity.Client.Extensions.Msal" version="4.78.0" targetFramework="net462" />
   <package id="Microsoft.IdentityModel.Abstractions" version="8.14.0" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.JsonWebTokens" version="7.5.1" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Logging" version="7.5.1" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Protocols" version="5.5.0" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="5.5.0" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Tokens" version="7.5.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.JsonWebTokens" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Logging" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Protocols" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Tokens" version="7.7.1" targetFramework="net462" />
   <package id="Microsoft.VisualBasic" version="10.3.0" targetFramework="net462" />
   <package id="Newtonsoft.Json" version="13.0.3" targetFramework="net462" />
   <package id="Newtonsoft.Json.Bson" version="1.0.2" targetFramework="net462" />
@@ -59,29 +62,35 @@
   <package id="protobuf-net.Core" version="3.2.46" targetFramework="net462" />
   <package id="RtfPipe" version="2.0.7677.4303" targetFramework="net462" />
   <package id="S22.Imap" version="3.6.0.0" targetFramework="net462" />
-  <package id="System.Buffers" version="4.6.0" targetFramework="net462" />
+  <package id="System.Buffers" version="4.6.1" targetFramework="net462" />
+  <package id="System.ClientModel" version="1.8.0" targetFramework="net462" />
   <package id="System.CodeDom" version="9.0.0" targetFramework="net462" />
   <package id="System.Collections.Immutable" version="9.0.0" targetFramework="net462" />
   <package id="System.ComponentModel.Annotations" version="4.7.0" targetFramework="net462" />
   <package id="System.Data.Common" version="4.3.0" targetFramework="net462" />
   <package id="System.Data.Odbc" version="6.0.1" targetFramework="net462" />
-  <package id="System.Diagnostics.DiagnosticSource" version="7.0.0" targetFramework="net462" />
+  <package id="System.Diagnostics.DiagnosticSource" version="8.0.1" targetFramework="net462" />
   <package id="System.DirectoryServices.AccountManagement" version="7.0.1" targetFramework="net462" />
-  <package id="System.Formats.Asn1" version="9.0.0" targetFramework="net462" />
-  <package id="System.IdentityModel.Tokens.Jwt" version="7.5.1" targetFramework="net462" />
+  <package id="System.Formats.Asn1" version="10.0.3" targetFramework="net462" />
+  <package id="System.IdentityModel.Tokens.Jwt" version="7.7.1" targetFramework="net462" />
+  <package id="System.IO.FileSystem.AccessControl" version="5.0.0" targetFramework="net462" />
   <package id="System.IO.Packaging" version="9.0.0" targetFramework="net462" />
   <package id="System.IO.Pipelines" version="9.0.0" targetFramework="net462" />
   <package id="System.Management" version="9.0.0" targetFramework="net462" />
-  <package id="System.Memory" version="4.6.0" targetFramework="net462" />
-  <package id="System.Numerics.Vectors" version="4.6.0" targetFramework="net462" />
-  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.0" targetFramework="net462" />
+  <package id="System.Memory" version="4.6.3" targetFramework="net462" />
+  <package id="System.Memory.Data" version="8.0.1" targetFramework="net462" />
+  <package id="System.Numerics.Vectors" version="4.6.1" targetFramework="net462" />
+  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.2" targetFramework="net462" />
+  <package id="System.Security.AccessControl" version="6.0.1" targetFramework="net462" />
   <package id="System.Security.Cryptography.Algorithms" version="4.3.1" targetFramework="net462" />
   <package id="System.Security.Cryptography.Cng" version="5.0.0" targetFramework="net462" />
   <package id="System.Security.Cryptography.Pkcs" version="9.0.0" targetFramework="net462" />
   <package id="System.Security.Cryptography.Primitives" version="4.3.0" targetFramework="net462" />
+  <package id="System.Security.Cryptography.ProtectedData" version="4.5.0" targetFramework="net462" />
   <package id="System.Security.Principal.Windows" version="5.0.0" targetFramework="net462" />
   <package id="System.Text.Encodings.Web" version="9.0.0" targetFramework="net462" />
   <package id="System.Text.Json" version="9.0.0" targetFramework="net462" />
-  <package id="System.Threading.Tasks.Extensions" version="4.5.4" targetFramework="net462" />
-  <package id="System.ValueTuple" version="4.5.0" targetFramework="net462" />
+  <package id="System.Text.RegularExpressions" version="4.3.1" targetFramework="net462" />
+  <package id="System.Threading.Tasks.Extensions" version="4.6.0" targetFramework="net462" />
+  <package id="System.ValueTuple" version="4.6.1" targetFramework="net462" />
 </packages>

EnvelopeGenerator.CommonServices/EnvelopeGenerator.CommonServices.vbproj

@@ -51,8 +51,14 @@
     <Reference Include="AutoMapper, Version=10.0.0.0, Culture=neutral, PublicKeyToken=be96cd2c38ef1005, processorArchitecture=MSIL">
       <HintPath>..\packages\AutoMapper.10.1.1\lib\net461\AutoMapper.dll</HintPath>
     </Reference>
+    <Reference Include="Azure.Core, Version=1.50.0.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\Azure.Core.1.50.0\lib\net462\Azure.Core.dll</HintPath>
+    </Reference>
+    <Reference Include="Azure.Identity, Version=1.17.1.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\Azure.Identity.1.17.1\lib\netstandard2.0\Azure.Identity.dll</HintPath>
+    </Reference>
     <Reference Include="BouncyCastle.Cryptography, Version=2.0.0.0, Culture=neutral, PublicKeyToken=072edcf4a5328938, processorArchitecture=MSIL">
-      <HintPath>..\packages\BouncyCastle.Cryptography.2.5.0\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
+      <HintPath>..\packages\BouncyCastle.Cryptography.2.6.2\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
     </Reference>
     <Reference Include="DevExpress.Charts.v21.2.Core, Version=21.2.4.0, Culture=neutral, PublicKeyToken=b88d1754d700e49a, processorArchitecture=MSIL" />
     <Reference Include="DevExpress.Data.Desktop.v21.2, Version=21.2.4.0, Culture=neutral, PublicKeyToken=b88d1754d700e49a, processorArchitecture=MSIL" />
@@ -186,8 +192,8 @@
       <HintPath>..\packages\Microsoft.Bcl.HashCode.1.1.1\lib\net461\Microsoft.Bcl.HashCode.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.CSharp" />
-    <Reference Include="Microsoft.Data.SqlClient, Version=1.13.20136.2, Culture=neutral, PublicKeyToken=23ec7fc2d6eaa4a5, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Data.SqlClient.1.1.3\lib\net46\Microsoft.Data.SqlClient.dll</HintPath>
+    <Reference Include="Microsoft.Data.SqlClient, Version=6.0.0.0, Culture=neutral, PublicKeyToken=23ec7fc2d6eaa4a5, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Data.SqlClient.6.1.4\lib\net462\Microsoft.Data.SqlClient.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.EntityFrameworkCore, Version=3.1.32.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.EntityFrameworkCore.3.1.32\lib\netstandard2.0\Microsoft.EntityFrameworkCore.dll</HintPath>
@@ -201,11 +207,11 @@
     <Reference Include="Microsoft.EntityFrameworkCore.SqlServer, Version=3.1.32.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.EntityFrameworkCore.SqlServer.3.1.32\lib\netstandard2.0\Microsoft.EntityFrameworkCore.SqlServer.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Caching.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Caching.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.Caching.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Caching.Abstractions, Version=8.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Caching.Abstractions.8.0.0\lib\net462\Microsoft.Extensions.Caching.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Caching.Memory, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Caching.Memory.7.0.0\lib\net462\Microsoft.Extensions.Caching.Memory.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Caching.Memory, Version=8.0.0.1, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Caching.Memory.8.0.1\lib\net462\Microsoft.Extensions.Caching.Memory.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Configuration, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Configuration.7.0.0\lib\net462\Microsoft.Extensions.Configuration.dll</HintPath>
@@ -219,8 +225,8 @@
     <Reference Include="Microsoft.Extensions.DependencyInjection, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.7.0.0\lib\net462\Microsoft.Extensions.DependencyInjection.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.DependencyInjection.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.DependencyInjection.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.DependencyInjection.Abstractions, Version=8.0.0.2, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.DependencyInjection.Abstractions.8.0.2\lib\net462\Microsoft.Extensions.DependencyInjection.Abstractions.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Localization.Abstractions, Version=7.0.16.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Localization.Abstractions.7.0.16\lib\net462\Microsoft.Extensions.Localization.Abstractions.dll</HintPath>
@@ -228,38 +234,41 @@
     <Reference Include="Microsoft.Extensions.Logging, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Logging.7.0.0\lib\net462\Microsoft.Extensions.Logging.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Logging.Abstractions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Logging.Abstractions.7.0.0\lib\net462\Microsoft.Extensions.Logging.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Logging.Abstractions, Version=8.0.0.3, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Logging.Abstractions.8.0.3\lib\net462\Microsoft.Extensions.Logging.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Options, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Options.7.0.0\lib\net462\Microsoft.Extensions.Options.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Options, Version=8.0.0.2, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Options.8.0.2\lib\net462\Microsoft.Extensions.Options.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.Extensions.Options.ConfigurationExtensions, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Options.ConfigurationExtensions.7.0.0\lib\net462\Microsoft.Extensions.Options.ConfigurationExtensions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Extensions.Primitives, Version=7.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Extensions.Primitives.7.0.0\lib\net462\Microsoft.Extensions.Primitives.dll</HintPath>
+    <Reference Include="Microsoft.Extensions.Primitives, Version=8.0.0.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Extensions.Primitives.8.0.0\lib\net462\Microsoft.Extensions.Primitives.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Identity.Client, Version=3.0.8.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Identity.Client.3.0.8\lib\net45\Microsoft.Identity.Client.dll</HintPath>
+    <Reference Include="Microsoft.Identity.Client, Version=4.82.1.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Identity.Client.4.82.1\lib\net462\Microsoft.Identity.Client.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Abstractions, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Abstractions.7.5.1\lib\net462\Microsoft.IdentityModel.Abstractions.dll</HintPath>
+    <Reference Include="Microsoft.Identity.Client.Extensions.Msal, Version=4.78.0.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Identity.Client.Extensions.Msal.4.78.0\lib\netstandard2.0\Microsoft.Identity.Client.Extensions.Msal.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.JsonWebTokens, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.JsonWebTokens.7.5.1\lib\net462\Microsoft.IdentityModel.JsonWebTokens.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Abstractions, Version=8.14.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Abstractions.8.14.0\lib\net462\Microsoft.IdentityModel.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Logging, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Logging.7.5.1\lib\net462\Microsoft.IdentityModel.Logging.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.JsonWebTokens, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.JsonWebTokens.7.7.1\lib\net462\Microsoft.IdentityModel.JsonWebTokens.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Protocols, Version=5.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.5.5.0\lib\net461\Microsoft.IdentityModel.Protocols.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Logging, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Logging.7.7.1\lib\net462\Microsoft.IdentityModel.Logging.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect, Version=5.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.OpenIdConnect.5.5.0\lib\net461\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Protocols, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.7.7.1\lib\net462\Microsoft.IdentityModel.Protocols.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.IdentityModel.Tokens, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.IdentityModel.Tokens.7.5.1\lib\net462\Microsoft.IdentityModel.Tokens.dll</HintPath>
+    <Reference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Protocols.OpenIdConnect.7.7.1\lib\net462\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll</HintPath>
+    </Reference>
+    <Reference Include="Microsoft.IdentityModel.Tokens, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.IdentityModel.Tokens.7.7.1\lib\net462\Microsoft.IdentityModel.Tokens.dll</HintPath>
     </Reference>
     <Reference Include="Newtonsoft.Json, Version=13.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
       <HintPath>..\packages\Newtonsoft.Json.13.0.3\lib\net45\Newtonsoft.Json.dll</HintPath>
@@ -286,8 +295,11 @@
       <HintPath>..\packages\RtfPipe.2.0.7677.4303\lib\net45\RtfPipe.dll</HintPath>
     </Reference>
     <Reference Include="System" />
-    <Reference Include="System.Buffers, Version=4.0.4.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Buffers.4.6.0\lib\net462\System.Buffers.dll</HintPath>
+    <Reference Include="System.Buffers, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Buffers.4.6.1\lib\net462\System.Buffers.dll</HintPath>
+    </Reference>
+    <Reference Include="System.ClientModel, Version=1.8.0.0, Culture=neutral, PublicKeyToken=92742159e12e44c8, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.ClientModel.1.8.0\lib\netstandard2.0\System.ClientModel.dll</HintPath>
     </Reference>
     <Reference Include="System.CodeDom, Version=8.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.CodeDom.8.0.0\lib\net462\System.CodeDom.dll</HintPath>
@@ -309,39 +321,51 @@
     <Reference Include="System.Data.Odbc, Version=6.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Data.Odbc.6.0.1\lib\net461\System.Data.Odbc.dll</HintPath>
     </Reference>
-    <Reference Include="System.Diagnostics.DiagnosticSource, Version=7.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Diagnostics.DiagnosticSource.7.0.0\lib\net462\System.Diagnostics.DiagnosticSource.dll</HintPath>
+    <Reference Include="System.Diagnostics.DiagnosticSource, Version=8.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Diagnostics.DiagnosticSource.8.0.1\lib\net462\System.Diagnostics.DiagnosticSource.dll</HintPath>
     </Reference>
     <Reference Include="System.DirectoryServices.AccountManagement" />
     <Reference Include="System.Drawing" />
     <Reference Include="System.Drawing.Common, Version=4.0.0.2, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Drawing.Common.4.7.3\lib\net461\System.Drawing.Common.dll</HintPath>
     </Reference>
+    <Reference Include="System.Formats.Asn1, Version=10.0.0.3, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Formats.Asn1.10.0.3\lib\net462\System.Formats.Asn1.dll</HintPath>
+    </Reference>
     <Reference Include="System.IdentityModel" />
-    <Reference Include="System.IdentityModel.Tokens.Jwt, Version=7.5.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.IdentityModel.Tokens.Jwt.7.5.1\lib\net462\System.IdentityModel.Tokens.Jwt.dll</HintPath>
+    <Reference Include="System.IdentityModel.Tokens.Jwt, Version=7.7.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.IdentityModel.Tokens.Jwt.7.7.1\lib\net462\System.IdentityModel.Tokens.Jwt.dll</HintPath>
     </Reference>
     <Reference Include="System.IO.Compression" />
+    <Reference Include="System.IO.FileSystem.AccessControl, Version=5.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.IO.FileSystem.AccessControl.5.0.0\lib\net461\System.IO.FileSystem.AccessControl.dll</HintPath>
+    </Reference>
     <Reference Include="System.IO.Packaging, Version=8.0.0.1, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.IO.Packaging.8.0.1\lib\net462\System.IO.Packaging.dll</HintPath>
     </Reference>
     <Reference Include="System.Management" />
-    <Reference Include="System.Memory, Version=4.0.2.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Memory.4.6.0\lib\net462\System.Memory.dll</HintPath>
+    <Reference Include="System.Memory, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Memory.4.6.3\lib\net462\System.Memory.dll</HintPath>
+    </Reference>
+    <Reference Include="System.Memory.Data, Version=8.0.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Memory.Data.8.0.1\lib\net462\System.Memory.Data.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.Formatting, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.AspNet.WebApi.Client.6.0.0\lib\net45\System.Net.Http.Formatting.dll</HintPath>
     </Reference>
     <Reference Include="System.Numerics" />
-    <Reference Include="System.Numerics.Vectors, Version=4.1.5.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Numerics.Vectors.4.6.0\lib\net462\System.Numerics.Vectors.dll</HintPath>
+    <Reference Include="System.Numerics.Vectors, Version=4.1.6.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Numerics.Vectors.4.6.1\lib\net462\System.Numerics.Vectors.dll</HintPath>
     </Reference>
-    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.1.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.0\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
+    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.2\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
     </Reference>
     <Reference Include="System.Runtime.Remoting" />
     <Reference Include="System.Runtime.Serialization" />
     <Reference Include="System.Security" />
+    <Reference Include="System.Security.AccessControl, Version=6.0.0.1, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Security.AccessControl.6.0.1\lib\net461\System.Security.AccessControl.dll</HintPath>
+    </Reference>
     <Reference Include="System.Security.Cryptography.Algorithms, Version=4.1.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Security.Cryptography.Algorithms.4.3.1\lib\net461\System.Security.Cryptography.Algorithms.dll</HintPath>
       <Private>True</Private>
@@ -358,6 +382,9 @@
       <Private>True</Private>
       <Private>True</Private>
     </Reference>
+    <Reference Include="System.Security.Cryptography.ProtectedData, Version=4.0.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Security.Cryptography.ProtectedData.4.5.0\lib\net461\System.Security.Cryptography.ProtectedData.dll</HintPath>
+    </Reference>
     <Reference Include="System.Security.Principal.Windows, Version=5.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Security.Principal.Windows.5.0.0\lib\net461\System.Security.Principal.Windows.dll</HintPath>
     </Reference>
@@ -365,15 +392,15 @@
     <Reference Include="System.Text.Encodings.Web, Version=8.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Text.Encodings.Web.8.0.0\lib\net462\System.Text.Encodings.Web.dll</HintPath>
     </Reference>
-    <Reference Include="System.Text.Json, Version=8.0.0.5, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Text.Json.8.0.5\lib\net462\System.Text.Json.dll</HintPath>
+    <Reference Include="System.Text.Json, Version=8.0.0.6, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Text.Json.8.0.6\lib\net462\System.Text.Json.dll</HintPath>
     </Reference>
-    <Reference Include="System.Threading.Tasks.Extensions, Version=4.2.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Threading.Tasks.Extensions.4.5.4\lib\net461\System.Threading.Tasks.Extensions.dll</HintPath>
+    <Reference Include="System.Threading.Tasks.Extensions, Version=4.2.1.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Threading.Tasks.Extensions.4.6.0\lib\net462\System.Threading.Tasks.Extensions.dll</HintPath>
     </Reference>
     <Reference Include="System.Transactions" />
-    <Reference Include="System.ValueTuple, Version=4.0.3.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.ValueTuple.4.5.0\lib\net461\System.ValueTuple.dll</HintPath>
+    <Reference Include="System.ValueTuple, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.ValueTuple.4.6.1\lib\net462\System.ValueTuple.dll</HintPath>
     </Reference>
     <Reference Include="System.Web" />
     <Reference Include="System.Windows.Forms" />
@@ -577,9 +604,9 @@
     <Error Condition="!Exists('..\packages\EntityFramework.6.4.4\build\EntityFramework.props')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\EntityFramework.6.4.4\build\EntityFramework.props'))" />
     <Error Condition="!Exists('..\packages\EntityFramework.6.4.4\build\EntityFramework.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\EntityFramework.6.4.4\build\EntityFramework.targets'))" />
     <Error Condition="!Exists('..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets'))" />
-    <Error Condition="!Exists('..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets'))" />
+    <Error Condition="!Exists('..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets'))" />
   </Target>
   <Import Project="..\packages\EntityFramework.6.4.4\build\EntityFramework.targets" Condition="Exists('..\packages\EntityFramework.6.4.4\build\EntityFramework.targets')" />
   <Import Project="..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets" Condition="Exists('..\packages\GdPicture.runtimes.windows.14.3.3\build\net462\GdPicture.runtimes.windows.targets')" />
-  <Import Project="..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets" Condition="Exists('..\packages\Microsoft.Data.SqlClient.SNI.1.1.0\build\net46\Microsoft.Data.SqlClient.SNI.targets')" />
+  <Import Project="..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets" Condition="Exists('..\packages\Microsoft.Data.SqlClient.SNI.6.0.2\build\net462\Microsoft.Data.SqlClient.SNI.targets')" />
 </Project>

EnvelopeGenerator.CommonServices/app.config

@@ -39,7 +39,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.ValueTuple" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.3.0" newVersion="4.0.3.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
@@ -47,15 +47,15 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.2.0" newVersion="4.0.2.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-6.0.1.0" newVersion="6.0.1.0" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.3.0" newVersion="6.0.3.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.4.0" newVersion="4.0.4.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Collections.Immutable" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -63,7 +63,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Numerics.Vectors" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.1.5.0" newVersion="4.1.5.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.1.6.0" newVersion="4.1.6.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Security.Cryptography.Pkcs" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -75,11 +75,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Text.Json" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-8.0.0.5" newVersion="8.0.0.5" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.6" newVersion="8.0.0.6" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Logging.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.3" newVersion="8.0.0.3" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Bcl.AsyncInterfaces" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
@@ -91,11 +91,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.DependencyInjection.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.ComponentModel.Annotations" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -103,7 +103,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Diagnostics.DiagnosticSource" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.1" newVersion="8.0.0.1" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.DependencyInjection" publicKeyToken="adb9793829ddae60" culture="neutral" />
@@ -115,11 +115,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Memory" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.1" newVersion="8.0.0.1" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Options" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Configuration.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
@@ -141,6 +141,34 @@
         <assemblyIdentity name="Microsoft.IdentityModel.JsonWebTokens" publicKeyToken="31bf3856ad364e35" culture="neutral" />
         <bindingRedirect oldVersion="0.0.0.0-7.5.1.0" newVersion="7.5.1.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Identity.Client" publicKeyToken="0a613f4dd989e8ae" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-4.82.1.0" newVersion="4.82.1.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.IdentityModel.Abstractions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-8.14.0.0" newVersion="8.14.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Threading.Tasks.Extensions" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-4.2.1.0" newVersion="4.2.1.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Data.SqlClient" publicKeyToken="23ec7fc2d6eaa4a5" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Extensions.Primitives" publicKeyToken="adb9793829ddae60" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Formats.Asn1" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-10.0.0.3" newVersion="10.0.0.3" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Security.AccessControl" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.1" newVersion="6.0.0.1" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
 </configuration>

EnvelopeGenerator.CommonServices/packages.config

@@ -1,7 +1,9 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
   <package id="AutoMapper" version="10.1.1" targetFramework="net462" />
-  <package id="BouncyCastle.Cryptography" version="2.5.0" targetFramework="net462" />
+  <package id="Azure.Core" version="1.50.0" targetFramework="net462" />
+  <package id="Azure.Identity" version="1.17.1" targetFramework="net462" />
+  <package id="BouncyCastle.Cryptography" version="2.6.2" targetFramework="net462" />
   <package id="DigitalData.Core.Abstraction.Application" version="1.6.0" targetFramework="net462" />
   <package id="DigitalData.Core.Abstractions" version="4.3.0" targetFramework="net462" />
   <package id="DigitalData.Modules.Base" version="1.3.8" targetFramework="net462" />
@@ -20,33 +22,34 @@
   <package id="Microsoft.Bcl.AsyncInterfaces" version="8.0.0" targetFramework="net462" />
   <package id="Microsoft.Bcl.HashCode" version="1.1.1" targetFramework="net462" />
   <package id="Microsoft.CSharp" version="4.7.0" targetFramework="net462" />
-  <package id="Microsoft.Data.SqlClient" version="1.1.3" targetFramework="net462" />
-  <package id="Microsoft.Data.SqlClient.SNI" version="1.1.0" targetFramework="net462" />
+  <package id="Microsoft.Data.SqlClient" version="6.1.4" targetFramework="net462" />
+  <package id="Microsoft.Data.SqlClient.SNI" version="6.0.2" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Abstractions" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Analyzers" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.Relational" version="3.1.32" targetFramework="net462" />
   <package id="Microsoft.EntityFrameworkCore.SqlServer" version="3.1.32" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Caching.Abstractions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Caching.Memory" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Caching.Abstractions" version="8.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Caching.Memory" version="8.0.1" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration.Abstractions" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.Configuration.Binder" version="7.0.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.DependencyInjection" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.DependencyInjection.Abstractions" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.DependencyInjection.Abstractions" version="8.0.2" targetFramework="net462" />
   <package id="Microsoft.Extensions.Localization.Abstractions" version="7.0.16" targetFramework="net462" />
   <package id="Microsoft.Extensions.Logging" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Logging.Abstractions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Options" version="7.0.0" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Logging.Abstractions" version="8.0.3" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Options" version="8.0.2" targetFramework="net462" />
   <package id="Microsoft.Extensions.Options.ConfigurationExtensions" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Extensions.Primitives" version="7.0.0" targetFramework="net462" />
-  <package id="Microsoft.Identity.Client" version="3.0.8" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Abstractions" version="7.5.1" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.JsonWebTokens" version="7.5.1" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Logging" version="7.5.1" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Protocols" version="5.5.0" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="5.5.0" targetFramework="net462" />
-  <package id="Microsoft.IdentityModel.Tokens" version="7.5.1" targetFramework="net462" />
+  <package id="Microsoft.Extensions.Primitives" version="8.0.0" targetFramework="net462" />
+  <package id="Microsoft.Identity.Client" version="4.82.1" targetFramework="net462" />
+  <package id="Microsoft.Identity.Client.Extensions.Msal" version="4.78.0" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Abstractions" version="8.14.0" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.JsonWebTokens" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Logging" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Protocols" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="7.7.1" targetFramework="net462" />
+  <package id="Microsoft.IdentityModel.Tokens" version="7.7.1" targetFramework="net462" />
   <package id="Microsoft.VisualBasic" version="10.3.0" targetFramework="net462" />
   <package id="Newtonsoft.Json" version="13.0.3" targetFramework="net462" />
   <package id="Newtonsoft.Json.Bson" version="1.0.2" targetFramework="net462" />
@@ -57,29 +60,36 @@
   <package id="protobuf-net.Core" version="3.2.46" targetFramework="net462" />
   <package id="Quartz" version="3.8.0" targetFramework="net462" />
   <package id="RtfPipe" version="2.0.7677.4303" targetFramework="net462" />
-  <package id="System.Buffers" version="4.6.0" targetFramework="net462" />
+  <package id="System.Buffers" version="4.6.1" targetFramework="net462" />
+  <package id="System.ClientModel" version="1.8.0" targetFramework="net462" />
   <package id="System.CodeDom" version="8.0.0" targetFramework="net462" />
   <package id="System.Collections.Immutable" version="8.0.0" targetFramework="net462" />
   <package id="System.ComponentModel.Annotations" version="4.7.0" targetFramework="net462" />
   <package id="System.Data.Common" version="4.3.0" targetFramework="net462" />
   <package id="System.Data.Odbc" version="6.0.1" targetFramework="net462" />
-  <package id="System.Diagnostics.DiagnosticSource" version="7.0.0" targetFramework="net462" />
+  <package id="System.Diagnostics.DiagnosticSource" version="8.0.1" targetFramework="net462" />
   <package id="System.DirectoryServices.AccountManagement" version="7.0.1" targetFramework="net462" />
   <package id="System.Drawing.Common" version="4.7.3" targetFramework="net462" />
-  <package id="System.IdentityModel.Tokens.Jwt" version="7.5.1" targetFramework="net462" />
+  <package id="System.Formats.Asn1" version="10.0.3" targetFramework="net462" />
+  <package id="System.IdentityModel.Tokens.Jwt" version="7.7.1" targetFramework="net462" />
+  <package id="System.IO.FileSystem.AccessControl" version="5.0.0" targetFramework="net462" />
   <package id="System.IO.Packaging" version="8.0.1" targetFramework="net462" />
   <package id="System.Management" version="8.0.0" targetFramework="net462" />
-  <package id="System.Memory" version="4.6.0" targetFramework="net462" />
-  <package id="System.Numerics.Vectors" version="4.6.0" targetFramework="net462" />
-  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.0" targetFramework="net462" />
+  <package id="System.Memory" version="4.6.3" targetFramework="net462" />
+  <package id="System.Memory.Data" version="8.0.1" targetFramework="net462" />
+  <package id="System.Numerics.Vectors" version="4.6.1" targetFramework="net462" />
+  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.2" targetFramework="net462" />
+  <package id="System.Security.AccessControl" version="6.0.1" targetFramework="net462" />
   <package id="System.Security.Cryptography.Algorithms" version="4.3.1" targetFramework="net462" />
   <package id="System.Security.Cryptography.Cng" version="5.0.0" targetFramework="net462" />
   <package id="System.Security.Cryptography.Pkcs" version="8.0.1" targetFramework="net462" />
   <package id="System.Security.Cryptography.Primitives" version="4.3.0" targetFramework="net462" />
+  <package id="System.Security.Cryptography.ProtectedData" version="4.5.0" targetFramework="net462" />
   <package id="System.Security.Principal.Windows" version="5.0.0" targetFramework="net462" />
   <package id="System.Text.Encodings.Web" version="8.0.0" targetFramework="net462" />
-  <package id="System.Text.Json" version="8.0.5" targetFramework="net462" />
-  <package id="System.Threading.Tasks.Extensions" version="4.5.4" targetFramework="net462" />
-  <package id="System.ValueTuple" version="4.5.0" targetFramework="net462" />
+  <package id="System.Text.Json" version="8.0.6" targetFramework="net462" />
+  <package id="System.Text.RegularExpressions" version="4.3.1" targetFramework="net462" />
+  <package id="System.Threading.Tasks.Extensions" version="4.6.0" targetFramework="net462" />
+  <package id="System.ValueTuple" version="4.6.1" targetFramework="net462" />
   <package id="UserManager.Domain" version="3.2.3" targetFramework="net462" />
 </packages>

EnvelopeGenerator.Domain/Entities/Config.cs

@@ -2,30 +2,22 @@
 using System.ComponentModel.DataAnnotations.Schema;
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_CONFIG", Schema = "dbo")]
-public class Config
 {
-    [Column("SENDING_PROFILE", TypeName = "int")]
-    [Required]
-    public int SendingProfile { get; set; }
+    [Table("TBSIG_CONFIG", Schema = "dbo")]
+    public class Config
+    {
+        [Column("SENDING_PROFILE", TypeName = "int")]
+        [Required]
+        public int SendingProfile { get; set; }
 
-    [Column("SIGNATURE_HOST", TypeName = "nvarchar(128)")]
-    [Required]
-    public string SignatureHost { get; set; }
+        [Column("SIGNATURE_HOST", TypeName = "nvarchar(128)")]
+        [Required]
+        public string SignatureHost { get; set; }
 
-    [Column("EXTERNAL_PROGRAM_NAME", TypeName = "nvarchar(30)")]
-    public string ExternalProgramName { get; set; }
+        [Column("EXTERNAL_PROGRAM_NAME", TypeName = "nvarchar(30)")]
+        public string ExternalProgramName { get; set; }
 
-    [Column("EXPORT_PATH", TypeName = "nvarchar(256)")]
-    public string ExportPath { get; set; }
-}
-
-#if NETFRAMEWORK
+        [Column("EXPORT_PATH", TypeName = "nvarchar(256)")]
+        public string ExportPath { get; set; }
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/Document.cs

@@ -1,6 +1,9 @@
-using EnvelopeGenerator.Domain.Interfaces;
+using System;
+using EnvelopeGenerator.Domain.Interfaces;
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
+
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
 using System.Drawing;
 using System.Collections.Generic;
@@ -8,81 +11,77 @@ using System.Linq;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_ENVELOPE_DOCUMENT", Schema = "dbo")]
-public class Document : IHasEnvelope
 {
-    public Document()
+    [Table("TBSIG_ENVELOPE_DOCUMENT", Schema = "dbo")]
+    public class Document : IHasEnvelope, IHasAddedWhen
     {
+        public Document()
+        {
 #if NETFRAMEWORK
-        Elements = Enumerable.Empty<Signature>().ToList();
+            Elements = Enumerable.Empty<Signature>().ToList();
+#endif
+        }
+
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
+
+        [Required]
+        [Column("ENVELOPE_ID")]
+        public int EnvelopeId { get; set; }
+#if NETFRAMEWORK
+            = 0;
+#endif
+
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
+
+        [Column("BYTE_DATA", TypeName = "varbinary(max)")]
+        public byte[]
+#if nullable
+            ?
+#endif
+            ByteData { get; set; }
+
+        #region File
+        [Column("FILENAME", TypeName = "nvarchar(256)")]
+        public string Filename { get; set; }
+
+        [Column("FILEPATH", TypeName = "nvarchar(256)")]
+        public string Filepath { get; set; }
+
+        [Column("FILENAME_ORIGINAL", TypeName = "nvarchar(256)")]
+        public string
+#if nullable
+            ?
+#endif
+            FileNameOriginal { get; set; }
+        #endregion
+
+        public virtual List<Signature>
+#if nullable
+            ?
+#endif
+            Elements { get; set; }
+
+        [ForeignKey("EnvelopeId")]
+        public virtual Envelope
+#if nullable
+            ?
+#endif
+            Envelope { get; set; }
+
+#if NETFRAMEWORK
+        [NotMapped]
+        public bool IsTempFile { get; set; }
+
+        [NotMapped]
+        public Bitmap Thumbnail { get; set; }
+
+        [NotMapped]
+        public int PageCount { get; set; }
 #endif
     }
-
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
-
-    [Required]
-    [Column("ENVELOPE_ID")]
-    public int EnvelopeId { get; set; }
-#if NETFRAMEWORK
-        = 0;
-#endif
-
-    [Column("BYTE_DATA", TypeName = "varbinary(max)")]
-    public byte[]
-#if NET
-        ?
-#endif
-        ByteData { get; set; }
-
-    #region File
-    [Column("FILENAME", TypeName = "nvarchar(256)")]
-    public string Filename { get; set; }
-
-    [Column("FILEPATH", TypeName = "nvarchar(256)")]
-    public string Filepath { get; set; }
-
-    [Column("FILENAME_ORIGINAL", TypeName = "nvarchar(256)")]
-    public string
-#if NET
-        ?
-#endif
-        FileNameOriginal { get; set; }
-    #endregion
-
-    public virtual List<Signature>
-#if NET
-        ?
-#endif
-        Elements { get; set; }
-
-    [ForeignKey("EnvelopeId")]
-    public virtual Envelope
-#if NET
-        ?
-#endif
-        Envelope { get; set; }
-
-#if NETFRAMEWORK
-    [NotMapped]
-    public bool IsTempFile { get; set; }
-
-    [NotMapped]
-    public Bitmap Thumbnail { get; set; }
-
-    [NotMapped]
-    public int PageCount { get; set; }
-#endif
-}
-
-#if NETFRAMEWORK
-    }
-#endif
+}

EnvelopeGenerator.Domain/Entities/DocumentStatus.cs

@@ -1,65 +1,62 @@
-using System.ComponentModel.DataAnnotations;
+using System;
+using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
 using DigitalData.Core.Abstractions.Interfaces;
 using EnvelopeGenerator.Domain.Interfaces;
-
-#if NETFRAMEWORK
-using System;
-#endif
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_DOCUMENT_STATUS", Schema = "dbo")]
-public class DocumentStatus : IHasEnvelope, IHasReceiver, IEntity
 {
-    public DocumentStatus()
+    [Table("TBSIG_DOCUMENT_STATUS", Schema = "dbo")]
+    public class DocumentStatus : IHasEnvelope, IHasReceiver, IEntity, IHasAddedWhen, IHasChangedWhen
     {
-        // TODO: * check Form Application and remove default value
+        public DocumentStatus()
+        {
+            // TODO: * check Form Application and remove default value
 #if NETFRAMEWORK
-        Status = Constants.DocumentStatus.Created;
+            Status = Constants.DocumentStatus.Created;
 #endif
-    }
+        }
 
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
 
-    [Required]
-    [Column("ENVELOPE_ID")]
-    public int EnvelopeId { get; set; }
+        [Required]
+        [Column("ENVELOPE_ID")]
+        public int EnvelopeId { get; set; }
 
-    [Required]
-    [Column("RECEIVER_ID")]
-    public int ReceiverId { get; set; }
+        [Required]
+        [Column("RECEIVER_ID")]
+        public int ReceiverId { get; set; }
 
-    [Required]
-    [Column("STATUS")]
-    public Constants.DocumentStatus Status { get; set; }
+        [Required]
+        [Column("STATUS")]
+        public Constants.DocumentStatus Status { get; set; }
 
-    [Column("VALUE", TypeName = "nvarchar(max)")]
-    public string Value { get; set; }
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
 
-    [ForeignKey("EnvelopeId")]
-    public virtual Envelope
-#if NET
-        ?
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
+
+        [Column("VALUE", TypeName = "nvarchar(max)")]
+        public string Value { get; set; }
+
+        [ForeignKey("EnvelopeId")]
+        public virtual Envelope
+#if nullable
+            ?
 #endif
-        Envelope { get; set; }
+            Envelope { get; set; }
 
-    [ForeignKey("ReceiverId")]
-    public virtual Receiver
-#if NET
-        ?
+        [ForeignKey("ReceiverId")]
+        public virtual Receiver
+#if nullable
+            ?
 #endif
             Receiver { get; set; }
-}
-
-#if NETFRAMEWORK
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/ElementAnnotation.cs

@@ -1,92 +1,85 @@
-using System.ComponentModel.DataAnnotations;
+using System;
+using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
-using System;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_DOCUMENT_RECEIVER_ELEMENT_ANNOTATION")]
-public class ElementAnnotation
 {
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID", TypeName = "bigint")]
-    public long Id { get; set; }
+    [Table("TBSIG_DOCUMENT_RECEIVER_ELEMENT_ANNOTATION")]
+    public class ElementAnnotation : IHasAddedWhen, IUpdateAuditable
+    {
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID", TypeName = "bigint")]
+        public long Id { get; set; }
 
-    [Required]
-    [Column("ELEMENT_ID", TypeName = "int")]
-    public int ElementId { get; set; }
+        [Required]
+        [Column("ELEMENT_ID", TypeName = "int")]
+        public int ElementId { get; set; }
 
-    [Required]
-    [Column("NAME", TypeName = "nvarchar(100)")]
-    [StringLength(100)]
-    public string Name { get; set; }
+        [Required]
+        [Column("NAME", TypeName = "nvarchar(100)")]
+        [StringLength(100)]
+        public string Name { get; set; }
 
-    [Required]
-    [Column("VALUE", TypeName = "nvarchar(max)")]
-    public string Value { get; set; }
+        [Required]
+        [Column("VALUE", TypeName = "nvarchar(max)")]
+        public string Value { get; set; }
 
-    [Required]
-    [Column("TYPE", TypeName = "nvarchar(50)")]
-    public string Type { get; set; }
+        [Required]
+        [Column("TYPE", TypeName = "nvarchar(50)")]
+        public string Type { get; set; }
 
-    [Column("POSITION_X", TypeName = "float")]
-    public double
-#if NET
-        ?
+        [Column("POSITION_X", TypeName = "float")]
+        public double
+#if nullable
+            ?
 #endif
-        X { get; set; }
+            X { get; set; }
 
-    [Column("POSITION_Y", TypeName = "float")]
-    public double
-#if NET
-        ?
+        [Column("POSITION_Y", TypeName = "float")]
+        public double
+#if nullable
+            ?
 #endif
-        Y { get; set; }
+            Y { get; set; }
 
-    [Column("WIDTH", TypeName = "float")]
-    public double
-#if NET
-        ?
+        [Column("WIDTH", TypeName = "float")]
+        public double
+#if nullable
+            ?
 #endif
-        Width { get; set; }
+            Width { get; set; }
 
-    [Column("HEIGHT", TypeName = "float")]
-    public double
-#if NET
-        ?
+        [Column("HEIGHT", TypeName = "float")]
+        public double
+#if nullable
+            ?
 #endif
-        Height { get; set; }
+            Height { get; set; }
 
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    public DateTime AddedWhen { get; set; }
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
 
-    [Column("CHANGED_WHEN", TypeName = "datetime")]
-    public DateTime? ChangedWhen { get; set; }
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
 
-    [Column("CHANGED_WHO", TypeName = "nvarchar(100)")]
-    [StringLength(100)]
-    public string
-#if NET
-        ?
+        [Column("CHANGED_WHO", TypeName = "nvarchar(100)")]
+        [StringLength(100)]
+        public string
+#if nullable
+            ?
 #endif
-        ChangedWho { get; set; }
+            ChangedWho { get; set; }
 
-    [ForeignKey("ElementId")]
-    public virtual Signature
-#if NET
-        ?
+        [ForeignKey("ElementId")]
+        public virtual Signature
+#if nullable
+            ?
 #endif
-        Element { get; set; }
-}
-
-#if NETFRAMEWORK
+            Element { get; set; }
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/EmailTemplate.cs

@@ -2,43 +2,40 @@
 using System.ComponentModel;
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
 using System;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_EMAIL_TEMPLATE", Schema = "dbo")]
-public class EmailTemplate : IEntity
 {
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
+    [Table("TBSIG_EMAIL_TEMPLATE", Schema = "dbo")]
+    public class EmailTemplate : IEntity, IHasAddedWhen, IHasChangedWhen
+    {
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
 
-    [Column("NAME", TypeName = "nvarchar(64)")]
-    public string Name { get; set; }
+        [Column("NAME", TypeName = "nvarchar(64)")]
+        public string Name { get; set; }
 
-    [Column("BODY", TypeName = "nvarchar(max)")]
-    public string Body { get; set; }
+        [Column("BODY", TypeName = "nvarchar(max)")]
+        public string Body { get; set; }
 
-    [Column("SUBJECT", TypeName = "nvarchar(512)")]
-    public string Subject { get; set; }
+        [Column("SUBJECT", TypeName = "nvarchar(512)")]
+        public string Subject { get; set; }
 
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    [DefaultValue("GETDATE()")]
-    public DateTime AddedWhen { get; set; }
+        [Required]
+        [Column("LANG_CODE", TypeName = "varchar(5)")]
+        public string LangCode { get; set; }
 
-    [Column("CHANGED_WHEN", TypeName = "datetime")]
-    public DateTime ChangedWhen { get; set; }
-}
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        [DefaultValue("GETDATE()")]
+        public DateTime AddedWhen { get; set; }
 
-#if NETFRAMEWORK
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/Envelope.cs

@@ -1,208 +1,205 @@
-using DigitalData.UserManager.Domain.Entities;
+using System;
+using DigitalData.UserManager.Domain.Entities;
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
 using EnvelopeGenerator.Domain.Constants;
 using Newtonsoft.Json;
-
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
-using System;
 using System.Collections.Generic;
 using System.Linq;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_ENVELOPE", Schema = "dbo")]
-public class Envelope
 {
-    public Envelope()
+    [Table("TBSIG_ENVELOPE", Schema = "dbo")]
+    public class Envelope : IHasAddedWhen, IHasChangedWhen
     {
-        // TODO: * Check the Form App and remove the default value
+        public Envelope()
+        {
+            // TODO: * Check the Form App and remove the default value
 #if NETFRAMEWORK
-        Id = 0;
-        Status = EnvelopeStatus.EnvelopeCreated;
-        Uuid = Guid.NewGuid().ToString();
-        Message = My.Resources.Envelope.Please_read_and_sign_this_document;
-        Title= string.Empty;
-        Comment = string.Empty;
-        Language = "de-DE";
-        SendReminderEmails = false;
-        FirstReminderDays = 0;
-        ReminderIntervalDays = 0;
-        CertificationType = (int)Constants.CertificationType.AdvancedElectronicSignature;
-        UseAccessCode = false;
-        Documents = Enumerable.Empty<Document>().ToList();
-        Histories = Enumerable.Empty<History>().ToList();
-        EnvelopeReceivers = Enumerable.Empty<EnvelopeReceiver>().ToList();
+            Id = 0;
+            Status = EnvelopeStatus.EnvelopeCreated;
+            Uuid = Guid.NewGuid().ToString();
+            Message = My.Resources.Envelope.Please_read_and_sign_this_document;
+            Title = string.Empty;
+            Comment = string.Empty;
+            Language = "de-DE";
+            SendReminderEmails = false;
+            FirstReminderDays = 0;
+            ReminderIntervalDays = 0;
+            CertificationType = (int)Constants.CertificationType.AdvancedElectronicSignature;
+            UseAccessCode = false;
+            Documents = Enumerable.Empty<Document>().ToList();
+            Histories = Enumerable.Empty<History>().ToList();
+            EnvelopeReceivers = Enumerable.Empty<EnvelopeReceiver>().ToList();
 #endif
+        }
+
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
+
+        [Required]
+        [Column("USER_ID")]
+        public int UserId { get; set; }
+
+        [Required]
+        [Column("STATUS")]
+        public EnvelopeStatus Status { get; set; }
+
+        [Required]
+        [Column("ENVELOPE_UUID", TypeName = "nvarchar(36)")]
+        public string Uuid { get; set; }
+
+        [Column("MESSAGE", TypeName = "nvarchar(max)")]
+        public string Message { get; set; }
+
+        [Column("EXPIRES_WHEN", TypeName = "datetime")]
+        public DateTime? ExpiresWhen { get; set; }
+
+        [Column("EXPIRES_WARNING_WHEN", TypeName = "datetime")]
+        public DateTime? ExpiresWarningWhen { get; set; }
+
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
+
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
+
+        [Column("TITLE", TypeName = "nvarchar(128)")]
+        public string
+#if nullable
+        ?
+#endif
+            Title
+        { get; set; }
+
+        [Column("COMMENT", TypeName = "nvarchar(128)")]
+        public string Comment { get; set; }
+
+        [Column("CONTRACT_TYPE")]
+        public int? ContractType { get; set; }
+
+#if NETFRAMEWORK
+        [NotMapped]
+        public string ContractTypeTranslated => My.Resources.Model.ResourceManager.GetString(ContractType.ToString());
+#endif
+
+        [Column("LANGUAGE", TypeName = "nvarchar(5)")]
+        public string Language { get; set; }
+
+        [Column("SEND_REMINDER_EMAILS")]
+        public bool SendReminderEmails { get; set; }
+
+        [Column("FIRST_REMINDER_DAYS")]
+        public int? FirstReminderDays { get; set; }
+
+        [Column("REMINDER_INTERVAL_DAYS")]
+        public int? ReminderIntervalDays { get; set; }
+
+        [Column("ENVELOPE_TYPE")]
+        public int? EnvelopeTypeId { get; set; }
+
+        [JsonIgnore]
+        [NotMapped]
+        public bool ReadOnly => EnvelopeTypeId == 2;
+
+        [Column("CERTIFICATION_TYPE")]
+        public int? CertificationType { get; set; }
+
+        [Column("USE_ACCESS_CODE")]
+        public bool UseAccessCode { get; set; }
+
+        [Column("FINAL_EMAIL_TO_CREATOR")]
+        public int? FinalEmailToCreator { get; set; }
+
+        [Column("FINAL_EMAIL_TO_RECEIVERS")]
+        public int? FinalEmailToReceivers { get; set; }
+
+        [Column("EXPIRES_WHEN_DAYS")]
+        public int? ExpiresWhenDays { get; set; }
+
+        [Column("EXPIRES_WARNING_WHEN_DAYS")]
+        public int? ExpiresWarningWhenDays { get; set; }
+
+        [ForeignKey("UserId")]
+        public User User { get; set; }
+
+        [Column("TFA_ENABLED")]
+        public bool TfaEnabled { get; set; }
+#if NETFRAMEWORK
+            = false;
+#endif
+
+        [NotMapped]
+        [Column("DOC_RESULT")]
+        public byte[]
+#if nullable
+        ?
+#endif
+            DocResult
+        { get; set; }
+
+        [ForeignKey("EnvelopeTypeId")]
+        public virtual EnvelopeType
+#if nullable
+        ?
+#endif
+            Type
+        { get; set; }
+
+#if NETFRAMEWORK
+        [NotMapped]
+        public string CURRENT_WORK_APP { get; set; } = "signFLOW GUI";
+
+        [NotMapped]
+        public bool IsAlreadySent => Status > EnvelopeStatus.EnvelopeSaved;
+#endif
+
+        public List<Document>
+#if nullable
+        ?
+#endif
+            Documents
+        { get; set; }
+
+        public List<History>
+#if nullable
+        ?
+#endif
+            Histories
+        { get; set; }
+
+        public List<EnvelopeReceiver>
+#if nullable
+        ?
+#endif
+            EnvelopeReceivers
+        { get; set; }
+
+        //#if NETFRAMEWORK
+        /// <summary>
+        /// Validates whether the receiver and document data are complete.
+        /// </summary>
+        public List<string> ValidateReceiverDocumentData()
+        {
+            var errors = new List<string>();
+
+            if (!Documents?.Any() ?? true)
+                errors.Add(My.Resources.Envelope.Missing_Documents);
+
+            if (!EnvelopeReceivers?.Any() ?? true)
+                errors.Add(My.Resources.Envelope.Missing_Receivers);
+
+            if (EnvelopeReceivers?.Any(r => !r.HasEmailAndName) ?? false)
+                errors.Add(My.Resources.Envelope.Incomplete_Receivers);
+
+            return errors;
+        }
+        //#endif
     }
-
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
-
-    [Required]
-    [Column("USER_ID")]
-    public int UserId { get; set; }
-
-    [Required]
-    [Column("STATUS")]
-    public EnvelopeStatus Status { get; set; }
-
-    [Required]
-    [Column("ENVELOPE_UUID", TypeName = "nvarchar(36)")]
-    public string Uuid { get; set; }
-
-    [Column("MESSAGE", TypeName = "nvarchar(max)")]
-    public string Message { get; set; }
-
-    [Column("EXPIRES_WHEN", TypeName = "datetime")]
-    public DateTime? ExpiresWhen { get; set; }
-
-    [Column("EXPIRES_WARNING_WHEN", TypeName = "datetime")]
-    public DateTime? ExpiresWarningWhen { get; set; }
-
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    public DateTime AddedWhen { get; set; }
-
-    [Column("CHANGED_WHEN", TypeName = "datetime")]
-    public DateTime? ChangedWhen { get; set; }
-
-    [Column("TITLE", TypeName = "nvarchar(128)")]
-    public string
-#if NET
-        ?
-#endif
-        Title { get; set; }
-
-    [Column("COMMENT", TypeName = "nvarchar(128)")]
-    public string Comment { get; set; }
-
-    [Column("CONTRACT_TYPE")]
-    public int? ContractType { get; set; }
-
-#if NETFRAMEWORK
-    [NotMapped]
-    public string ContractTypeTranslated => My.Resources.Model.ResourceManager.GetString(ContractType.ToString());
-#endif
-
-    [Column("LANGUAGE", TypeName = "nvarchar(5)")]
-    public string Language { get; set; }
-
-    [Column("SEND_REMINDER_EMAILS")]
-    public bool SendReminderEmails { get; set; }
-
-    [Column("FIRST_REMINDER_DAYS")]
-    public int? FirstReminderDays { get; set; }
-
-    [Column("REMINDER_INTERVAL_DAYS")]
-    public int? ReminderIntervalDays { get; set; }
-
-    [Column("ENVELOPE_TYPE")]
-    public int? EnvelopeTypeId { get; set; }
-
-    [JsonIgnore]
-    [NotMapped]
-    public bool ReadOnly => EnvelopeTypeId == 2;
-    
-    [Column("CERTIFICATION_TYPE")]
-    public int? CertificationType { get; set; }
-
-    [Column("USE_ACCESS_CODE")]
-    public bool UseAccessCode { get; set; }
-
-    [Column("FINAL_EMAIL_TO_CREATOR")]
-    public int? FinalEmailToCreator { get; set; }
-
-    [Column("FINAL_EMAIL_TO_RECEIVERS")]
-    public int? FinalEmailToReceivers { get; set; }
-
-    [Column("EXPIRES_WHEN_DAYS")]
-    public int? ExpiresWhenDays { get; set; }
-
-    [Column("EXPIRES_WARNING_WHEN_DAYS")]
-    public int? ExpiresWarningWhenDays { get; set; }
-
-    [ForeignKey("UserId")]
-    public User User { get; set; }
-
-    [Column("TFA_ENABLED")]
-    public bool TfaEnabled { get; set; }
-#if NETFRAMEWORK
-        = false;
-#endif
-
-    [NotMapped]
-    [Column("DOC_RESULT")]
-    public byte[]
-#if NET
-        ?
-#endif
-        DocResult
-    { get; set; }
-
-    [ForeignKey("EnvelopeTypeId")]
-    public virtual EnvelopeType
-#if NET
-        ?
-#endif
-        Type { get; set; }
-
-#if NETFRAMEWORK
-    [NotMapped]
-    public string CURRENT_WORK_APP { get; set; } = "signFLOW GUI";
-
-    [NotMapped]
-    public bool IsAlreadySent => Status > EnvelopeStatus.EnvelopeSaved;
-#endif
-
-    public List<Document>
-#if NET
-        ?
-#endif
-        Documents { get; set; }
-
-    public List<History>
-#if NET
-        ?
-#endif
-        Histories { get; set; }
-
-    public List<EnvelopeReceiver>
-#if NET
-        ?
-#endif
-        EnvelopeReceivers { get; set; }
-
-//#if NETFRAMEWORK
-    /// <summary>
-    /// Validates whether the receiver and document data are complete.
-    /// </summary>
-    public List<string> ValidateReceiverDocumentData()
-    {
-        var errors = new List<string>();
-
-        if (!Documents?.Any() ?? true)
-            errors.Add(My.Resources.Envelope.Missing_Documents);
-
-        if (!EnvelopeReceivers?.Any() ?? true)
-            errors.Add(My.Resources.Envelope.Missing_Receivers);
-
-        if (EnvelopeReceivers?.Any(r => !r.HasEmailAndName) ?? false)
-            errors.Add(My.Resources.Envelope.Incomplete_Receivers);
-
-        return errors;
-    }
-//#endif
-}
-
-#if NETFRAMEWORK
-    }
-#endif
+}

EnvelopeGenerator.Domain/Entities/EnvelopeReceiver.cs

@@ -1,104 +1,94 @@
-using System.ComponentModel.DataAnnotations;
+using System;
+using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
 using DigitalData.Core.Abstractions.Interfaces;
 using EnvelopeGenerator.Domain.Interfaces;
-
-#if NETFRAMEWORK
-using System;
-#endif
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_ENVELOPE_RECEIVER", Schema = "dbo")]
-public class EnvelopeReceiver : IHasEnvelope, IHasReceiver, IEntity
 {
-    public EnvelopeReceiver()
+    [Table("TBSIG_ENVELOPE_RECEIVER", Schema = "dbo")]
+    public class EnvelopeReceiver : IHasEnvelope, IHasReceiver, IEntity, IHasAddedWhen, IHasChangedWhen
     {
+        public EnvelopeReceiver()
+        {
 #if NETFRAMEWORK
-        CompanyName = string.Empty;
+            CompanyName = string.Empty;
 #endif
-    }
+        }
 
-    [Column("ENVELOPE_ID")]
-    public int EnvelopeId { get; set; }
+        [Column("ENVELOPE_ID")]
+        public int EnvelopeId { get; set; }
 
-    [Column("RECEIVER_ID")]
-    public int ReceiverId { get; set; }
+        [Column("RECEIVER_ID")]
+        public int ReceiverId { get; set; }
 
-    [Required]
-    [Column("SEQUENCE")]
-    public int Sequence { get; set; }
+        [Required]
+        [Column("SEQUENCE")]
+        public int Sequence { get; set; }
 
-    [Column("NAME", TypeName = "nvarchar(128)")]
-    public string Name { get; set; }
+        [Column("NAME", TypeName = "nvarchar(128)")]
+        public string Name { get; set; }
 
-    [Column("JOB_TITLE", TypeName = "nvarchar(128)")]
-    public string JobTitle { get; set; }
+        [Column("JOB_TITLE", TypeName = "nvarchar(128)")]
+        public string JobTitle { get; set; }
 
-    [Column("COMPANY_NAME", TypeName = "nvarchar(128)")]
-    public string
-#if NET
-        ?
+        [Column("COMPANY_NAME", TypeName = "nvarchar(128)")]
+        public string
+#if nullable
+            ?
 #endif
-        CompanyName { get; set; }
+            CompanyName { get; set; }
 
-    [Column("PRIVATE_MESSAGE", TypeName = "nvarchar(max)")]
-    public string PrivateMessage { get; set; }
+        [Column("PRIVATE_MESSAGE", TypeName = "nvarchar(max)")]
+        public string PrivateMessage { get; set; }
 
-    [Column("ACCESS_CODE", TypeName = "nvarchar(64)")]
-    public string AccessCode { get; set; }
+        [Column("ACCESS_CODE", TypeName = "nvarchar(64)")]
+        public string AccessCode { get; set; }
 
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    public DateTime AddedWhen { get; set; }
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
 
-    [Column("CHANGED_WHEN", TypeName = "datetime")]
-    public DateTime ChangedWhen { get; set; }
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
 
-    [Column("PHONE_NUMBER")]
-    [StringLength(20)]
-    [RegularExpression(@"^\+[0-9]+$", ErrorMessage = "Phone number must start with '+' followed by digits.")]
-    public string PhoneNumber { get; set; }
+        [Column("PHONE_NUMBER")]
+        [StringLength(20)]
+        [RegularExpression(@"^\+[0-9]+$", ErrorMessage = "Phone number must start with '+' followed by digits.")]
+        public string PhoneNumber { get; set; }
 
-    [NotMapped]
-    public Tuple<int, int> Id => Tuple.Create(EnvelopeId, ReceiverId);
+        [NotMapped]
+        public Tuple<int, int> Id => Tuple.Create(EnvelopeId, ReceiverId);
 
-    [NotMapped]
-    public bool HasPhoneNumber => !string.IsNullOrWhiteSpace(PhoneNumber);
+        [NotMapped]
+        public bool HasPhoneNumber => !string.IsNullOrWhiteSpace(PhoneNumber);
 
-    [ForeignKey("EnvelopeId")]
-    public Envelope
-#if NET
-        ?
+        [ForeignKey("EnvelopeId")]
+        public Envelope
+#if nullable
+            ?
 #endif
-            Envelope { get; set; }
+                Envelope { get; set; }
 
-    [ForeignKey("ReceiverId")]
-    public Receiver
-#if NET
-        ?
+        [ForeignKey("ReceiverId")]
+        public Receiver
+#if nullable
+            ?
 #endif
-            Receiver { get; set; }
+                Receiver { get; set; }
 
-    #region Model of old serice
-    [NotMapped]
-    public Constants.ReceiverStatus Status { get; set; }
+        #region Model of old serice
+        [NotMapped]
+        public Constants.ReceiverStatus Status { get; set; }
 
-    [NotMapped]
-    public bool HasId => Id.Item1 > 0 && Id.Item2 > 0;
+        [NotMapped]
+        public bool HasId => Id.Item1 > 0 && Id.Item2 > 0;
 
-    [NotMapped]
-    public bool HasEmailAndName =>
-        !string.IsNullOrWhiteSpace(Receiver.EmailAddress) &&
-        !string.IsNullOrWhiteSpace(Name);
+        [NotMapped]
+        public bool HasEmailAndName =>
+            !string.IsNullOrWhiteSpace(Receiver.EmailAddress) &&
+            !string.IsNullOrWhiteSpace(Name);
         #endregion
     }
-
-#if NETFRAMEWORK
-    }
-#endif
+}

EnvelopeGenerator.Domain/Entities/EnvelopeReceiverReadOnly.cs

@@ -1,14 +1,13 @@
-using System.ComponentModel.DataAnnotations.Schema;
+using System;
+using System.ComponentModel.DataAnnotations.Schema;
 using System.ComponentModel.DataAnnotations;
 using DigitalData.EmailProfilerDispatcher.Abstraction.Attributes;
-#if NETFRAMEWORK
-using System;
-#endif
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 
 namespace EnvelopeGenerator.Domain.Entities
 {
     [Table("TBSIG_ENVELOPE_RECEIVER_READ_ONLY")]
-    public class EnvelopeReceiverReadOnly
+    public class EnvelopeReceiverReadOnly : IHasChangedWhen, ICreationAuditable
     {
         [Key]
         [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
@@ -42,16 +41,12 @@ namespace EnvelopeGenerator.Domain.Entities
 
         [Column("ADDED_WHEN")]
         [Required]
-        public DateTime
-#if NET
-            ?
-#endif
-            AddedWhen { get; set; }
+        public DateTime AddedWhen { get; set; }
 
         [Column("CHANGED_WHO")]
         [StringLength(100)]
         public string
-#if NET
+#if nullable
             ?
 #endif
             ChangedWho { get; set; }

EnvelopeGenerator.Domain/Entities/History.cs

@@ -1,84 +1,73 @@
-using DigitalData.UserManager.Domain.Entities;
+using System;
+using DigitalData.UserManager.Domain.Entities;
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
 using EnvelopeGenerator.Domain.Interfaces;
 using EnvelopeGenerator.Domain.Constants;
 using DigitalData.Core.Abstractions.Interfaces;
-
-
-#if NETFRAMEWORK
-using System;
-#endif
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_ENVELOPE_HISTORY", Schema = "dbo")]
-public class History : IHasEnvelope, IHasReceiver, IEntity
 {
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public long Id { get; set; }
+    [Table("TBSIG_ENVELOPE_HISTORY", Schema = "dbo")]
+    public class History : IHasEnvelope, IHasReceiver, IEntity, IHasAddedWhen, IHasChangedWhen
+    {
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public long Id { get; set; }
 
-    [Required]
-    [Column("ENVELOPE_ID")]
-    public int EnvelopeId { get; set; }
+        [Required]
+        [Column("ENVELOPE_ID")]
+        public int EnvelopeId { get; set; }
 
-    [Required]
-    [Column("USER_REFERENCE", TypeName = "nvarchar(128)")]
-    public string UserReference { get; set; }
+        [Required]
+        [Column("USER_REFERENCE", TypeName = "nvarchar(128)")]
+        public string UserReference { get; set; }
 
-    [Required]
-    [Column("STATUS")]
-    public EnvelopeStatus  Status { get; set; }
+        [Required]
+        [Column("STATUS")]
+        public EnvelopeStatus  Status { get; set; }
 
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    [DatabaseGenerated(DatabaseGeneratedOption.Computed)]
-    public DateTime AddedWhen { get; set; }
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        [DatabaseGenerated(DatabaseGeneratedOption.Computed)]
+        public DateTime AddedWhen { get; set; }
 
-    [Column("ACTION_DATE", TypeName = "datetime")]
-    public DateTime? ActionDate { get; set; } = DateTime.Now;
-    
-    [Column("COMMENT", TypeName = "nvarchar(max)")]
-    public string
-#if NET
-        ?
+        [Column("ACTION_DATE", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
+        
+        [Column("COMMENT", TypeName = "nvarchar(max)")]
+        public string
+#if nullable
+            ?
 #endif
-        Comment { get; set; }
+            Comment { get; set; }
 
-    [ForeignKey("EnvelopeId")]
-    public virtual Envelope
-#if NET
-        ?
+        [ForeignKey("EnvelopeId")]
+        public virtual Envelope
+#if nullable
+            ?
 #endif
-        Envelope { get; set; }
+            Envelope { get; set; }
 
-    [ForeignKey("UserReference")]
-    public virtual User
-#if NET
-        ?
+        [ForeignKey("UserReference")]
+        public virtual User
+#if nullable
+            ?
 #endif
-        Sender { get; set; }
+            Sender { get; set; }
 
-    [ForeignKey("UserReference")]
-    public virtual Receiver
-#if NET
-        ?
+        [ForeignKey("UserReference")]
+        public virtual Receiver
+#if nullable
+            ?
 #endif
-        Receiver { get; set; }
+            Receiver { get; set; }
 
 #if NETFRAMEWORK
-    [NotMapped]
-    public string StatusTranslated => My.Resources.Model.ResourceManager.GetString(Status.ToString());
+        [NotMapped]
+        public string StatusTranslated => My.Resources.Model.ResourceManager.GetString(Status.ToString());
 #endif
-}
-
-#if NETFRAMEWORK
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/Receiver.cs

@@ -1,50 +1,42 @@
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
-using System.Drawing;
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
 using System;
 using System.Collections.Generic;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_RECEIVER", Schema = "dbo")]
-public class Receiver
 {
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
+    [Table("TBSIG_RECEIVER", Schema = "dbo")]
+    public class Receiver : IHasAddedWhen
+    {
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
 
-    [Required, EmailAddress]
-    [Column("EMAIL_ADDRESS", TypeName = "nvarchar(250)")]
-    [StringLength(250)]
-    public string EmailAddress { get; set; }
+        [Required, EmailAddress]
+        [Column("EMAIL_ADDRESS", TypeName = "nvarchar(250)")]
+        [StringLength(250)]
+        public string EmailAddress { get; set; }
 
-    [Required]
-    [Column("SIGNATURE", TypeName = "nvarchar(64)")]
-    public string Signature { get; set; }
+        [Required]
+        [Column("SIGNATURE", TypeName = "nvarchar(64)")]
+        public string Signature { get; set; }
 
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    public DateTime AddedWhen { get; set; }
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        public DateTime AddedWhen { get; set; }
 
-    [Column("TOTP_SECRET_KEY", TypeName = "nvarchar(MAX)")]
-    public string TotpSecretkey { get; set; }
+        [Column("TOTP_SECRET_KEY", TypeName = "nvarchar(MAX)")]
+        public string TotpSecretkey { get; set; }
 
-    [Column("TFA_REG_DEADLINE", TypeName = "datetime")]
-    public DateTime? TfaRegDeadline { get; set; }
+        [Column("TFA_REG_DEADLINE", TypeName = "datetime")]
+        public DateTime? TfaRegDeadline { get; set; }
 
-    public List<EnvelopeReceiver> EnvelopeReceivers { get; set; }
+        public List<EnvelopeReceiver> EnvelopeReceivers { get; set; }
 
-    public string GetSignature() => EmailAddress.ToUpperInvariant().GetChecksum();
-}
-
-#if NETFRAMEWORK
+        public string GetSignature() => EmailAddress.ToUpperInvariant().GetChecksum();
     }
-#endif
+}

EnvelopeGenerator.Domain/Entities/Signature.cs

@@ -1,134 +1,130 @@
-using EnvelopeGenerator.Domain.Interfaces;
+using System;
+using EnvelopeGenerator.Domain.Interfaces;
 using System.ComponentModel;
 using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
+using EnvelopeGenerator.Domain.Interfaces.Auditing;
 #if NETFRAMEWORK
-using System;
 using System.Collections.Generic;
 #endif
 
 namespace EnvelopeGenerator.Domain.Entities
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-[Table("TBSIG_DOCUMENT_RECEIVER_ELEMENT", Schema = "dbo")]
-public class Signature : ISignature, IHasReceiver
 {
-    public Signature()
+    [Table("TBSIG_DOCUMENT_RECEIVER_ELEMENT", Schema = "dbo")]
+    public class Signature : ISignature, IHasReceiver, IHasAddedWhen, IUpdateAuditable
     {
-        // TODO: * Check the Form App and remove the default value
+        public Signature()
+        {
+            // TODO: * Check the Form App and remove the default value
 #if NETFRAMEWORK
-        Id = -1;
-        Required = false;
-        ReadOnly = false;
-        AnnotationIndex = 0;
+            Id = -1;
+            Required = false;
+            ReadOnly = false;
+            AnnotationIndex = 0;
+#endif
+        }
+
+        [Key]
+        [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
+        [Column("GUID")]
+        public int Id { get; set; }
+
+        [Required]
+        [Column("DOCUMENT_ID")]
+        public int DocumentId { get; set; }
+
+        [Required]
+        [Column("RECEIVER_ID")]
+        public int ReceiverId { get; set; }
+
+        [Required]
+        [Column("ELEMENT_TYPE")]
+        [DefaultValue(0)]
+        public int ElementType { get; set; }
+
+        [Required]
+        [Column("POSITION_X")]
+        [DefaultValue(0)]
+        public double X { get; set; }
+
+        [Required]
+        [Column("POSITION_Y")]
+        [DefaultValue(0)]
+        public double Y { get; set; }
+
+        [Required]
+        [Column("WIDTH")]
+        [DefaultValue(0)]
+        public double Width { get; set; }
+
+        [Required]
+        [Column("HEIGHT")]
+        [DefaultValue(0)]
+        public double Height { get; set; }
+
+        [Required]
+        [Column("PAGE")]
+        [DefaultValue(1)]
+        public int Page { get; set; }
+
+        [Required]
+        [Column("REQUIRED")]
+        [DefaultValue(false)]
+        public bool Required { get; set; }
+
+        [Column("TOOLTIP")]
+        public string Tooltip { get; set; }
+
+        [Required]
+        [Column("READ_ONLY")]
+        [DefaultValue(false)]
+        public bool ReadOnly { get; set; }
+
+        [Required]
+        [Column("ANNOTATION_INDEX")]
+        [DefaultValue(0)]
+        public int AnnotationIndex { get; set; }
+
+        [Required]
+        [Column("ADDED_WHEN", TypeName = "datetime")]
+        [DefaultValue("GETDATE()")]
+        public DateTime AddedWhen { get; set; }
+
+        [Column("CHANGED_WHEN", TypeName = "datetime")]
+        public DateTime? ChangedWhen { get; set; }
+
+        [Column("CHANGED_WHO", TypeName = "nvarchar(100)")]
+        public string
+#if nullable
+        ?
+#endif
+            ChangedWho
+        { get; set; }
+
+        [ForeignKey("DocumentId")]
+        public virtual Document Document { get; set; }
+
+        [ForeignKey("ReceiverId")]
+        public virtual Receiver
+#if nullable
+        ?
+#endif
+            Receiver
+        { get; set; }
+
+        public virtual IEnumerable<ElementAnnotation>
+#if nullable
+        ?
+#endif
+            Annotations
+        { get; set; }
+
+#if NETFRAMEWORK
+        [NotMapped]
+        public double Top => Math.Round(Y, 5);
+
+        [NotMapped]
+        public double Left => Math.Round(X, 5);
 #endif
     }
-
-    [Key]
-    [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
-    [Column("GUID")]
-    public int Id { get; set; }
-
-    [Required]
-    [Column("DOCUMENT_ID")]
-    public int DocumentId { get; set; }
-
-    [Required]
-    [Column("RECEIVER_ID")]
-    public int ReceiverId { get; set; }
-
-    [Required]
-    [Column("ELEMENT_TYPE")]
-    [DefaultValue(0)]
-    public int ElementType { get; set; }
-
-    [Required]
-    [Column("POSITION_X")]
-    [DefaultValue(0)]
-    public double X { get; set; }
-
-    [Required]
-    [Column("POSITION_Y")]
-    [DefaultValue(0)]
-    public double Y { get; set; }
-
-    [Required]
-    [Column("WIDTH")]
-    [DefaultValue(0)]
-    public double Width { get; set; }
-
-    [Required]
-    [Column("HEIGHT")]
-    [DefaultValue(0)]
-    public double Height { get; set; }
-
-    [Required]
-    [Column("PAGE")]
-    [DefaultValue(1)]
-    public int Page { get; set; }
-
-    [Required]
-    [Column("REQUIRED")]
-    [DefaultValue(false)]
-    public bool Required { get; set; }
-
-    [Column("TOOLTIP")]
-    public string Tooltip { get; set; }
-
-    [Required]
-    [Column("READ_ONLY")]
-    [DefaultValue(false)]
-    public bool ReadOnly { get; set; }
-
-    [Required]
-    [Column("ANNOTATION_INDEX")]
-    [DefaultValue(0)]
-    public int AnnotationIndex { get; set; }
-
-    [Required]
-    [Column("ADDED_WHEN", TypeName = "datetime")]
-    [DefaultValue("GETDATE()")]
-    public DateTime? AddedWhen { get; set; }
-
-    [Column("CHANGED_WHEN", TypeName = "datetime")]
-    public DateTime? ChangedWhen { get; set; }
-
-    [Column("CHANGED_WHO", TypeName = "nvarchar(100)")]
-    public string
-#if NET
-        ?
-#endif
-        ChangedWho { get; set; }
-
-    [ForeignKey("DocumentId")]
-    public virtual Document Document { get; set; }
-
-    [ForeignKey("ReceiverId")]
-    public virtual Receiver
-#if NET
-        ?
-#endif
-        Receiver { get; set; }
-
-    public virtual IEnumerable<ElementAnnotation>
-#if NET
-        ?
-#endif
-        Annotations { get; set; }
-
-#if NETFRAMEWORK
-    [NotMapped]
-    public double Top => Math.Round(Y, 5);
-
-    [NotMapped]
-    public double Left => Math.Round(X, 5);
-#endif
-}
-
-#if NETFRAMEWORK
-    }
-#endif
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/ICreationAuditable.cs

@@ -0,0 +1,6 @@
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface ICreationAuditable : IHasAddedWhen, IHasAddedWho
+    {
+    }
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/IHasAddedWhen.cs

@@ -0,0 +1,11 @@
+#if NETFRAMEWORK
+using System;
+#endif
+
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface IHasAddedWhen
+    {
+        DateTime AddedWhen { get; set; }
+    }
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/IHasAddedWho.cs

@@ -0,0 +1,7 @@
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface IHasAddedWho
+    {
+        string AddedWho { get; set; }
+    }
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/IHasChangedWhen.cs

@@ -0,0 +1,11 @@
+#if NETFRAMEWORK
+using System;
+#endif
+
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface IHasChangedWhen
+    {
+        DateTime? ChangedWhen { get; set; }
+    }
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/IHasChangedWho.cs

@@ -0,0 +1,11 @@
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface IHasChangedWho
+    {
+        string
+#if nullable
+            ?
+#endif
+            ChangedWho { get; set; }
+    }
+}

EnvelopeGenerator.Domain/Interfaces/Auditing/IUpdateAuditable.cs

@@ -0,0 +1,6 @@
+namespace EnvelopeGenerator.Domain.Interfaces.Auditing
+{
+    public interface IUpdateAuditable : IHasChangedWhen, IHasChangedWho
+    {
+    }
+}

EnvelopeGenerator.Domain/Interfaces/IHasEnvelope.cs

@@ -1,22 +1,11 @@
 namespace EnvelopeGenerator.Domain.Interfaces
-#if NET
-    ;
-#elif NETFRAMEWORK
-    {
-#endif
-
-public interface IHasEnvelope
 {
-#if NET
-    public 
-#endif
+    public interface IHasEnvelope
+    {
         Entities.Envelope
-#if NET
-        ?
+#if nullable
+            ?
 #endif
             Envelope { get; set; }
-}
-
-#if NETFRAMEWORK
-}
-#endif
+    }
+}

EnvelopeGenerator.Domain/Interfaces/IHasReceiver.cs

@@ -1,22 +1,11 @@
 namespace EnvelopeGenerator.Domain.Interfaces
-#if NET
-    ;
-#elif NETFRAMEWORK
+{
+    public interface IHasReceiver
     {
-#endif
-
-public interface IHasReceiver
-    {
-#if NET
-    public 
-#endif
         Entities.Receiver
-#if NET
-        ?
+#if nullable
+            ?
 #endif
             Receiver { get; set; }
-}
-
-#if NETFRAMEWORK
-}
-#endif
+    }
+}

EnvelopeGenerator.Form/EnvelopeGenerator.Form.vbproj

@@ -52,7 +52,7 @@
   <ItemGroup>
     <Reference Include="Accessibility" />
     <Reference Include="BouncyCastle.Cryptography, Version=2.0.0.0, Culture=neutral, PublicKeyToken=072edcf4a5328938, processorArchitecture=MSIL">
-      <HintPath>..\packages\BouncyCastle.Cryptography.2.5.0\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
+      <HintPath>..\packages\BouncyCastle.Cryptography.2.6.2\lib\net461\BouncyCastle.Cryptography.dll</HintPath>
     </Reference>
     <Reference Include="DevExpress.BonusSkins.v21.2" />
     <Reference Include="DevExpress.Charts.v21.2.Core, Version=21.2.4.0, Culture=neutral, PublicKeyToken=b88d1754d700e49a, processorArchitecture=MSIL" />
@@ -200,9 +200,8 @@
     <Reference Include="Microsoft.Extensions.Logging.Abstractions, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.Extensions.Logging.Abstractions.2.1.1\lib\netstandard2.0\Microsoft.Extensions.Logging.Abstractions.dll</HintPath>
     </Reference>
-    <Reference Include="Microsoft.Identity.Client, Version=4.55.0.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Identity.Client.4.77.0\lib\net462\Microsoft.Identity.Client.dll</HintPath>
-      <Private>True</Private>
+    <Reference Include="Microsoft.Identity.Client, Version=4.82.1.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Identity.Client.4.82.1\lib\net462\Microsoft.Identity.Client.dll</HintPath>
     </Reference>
     <Reference Include="Microsoft.IdentityModel.Abstractions, Version=6.22.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.IdentityModel.Abstractions.8.14.0\lib\net462\Microsoft.IdentityModel.Abstractions.dll</HintPath>
@@ -236,8 +235,8 @@
       <HintPath>..\packages\S22.Imap.3.6.0.0\lib\net40\S22.Imap.dll</HintPath>
     </Reference>
     <Reference Include="System" />
-    <Reference Include="System.Buffers, Version=4.0.4.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Buffers.4.6.0\lib\net462\System.Buffers.dll</HintPath>
+    <Reference Include="System.Buffers, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Buffers.4.6.1\lib\net462\System.Buffers.dll</HintPath>
     </Reference>
     <Reference Include="System.CodeDom, Version=9.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.CodeDom.9.0.0\lib\net462\System.CodeDom.dll</HintPath>
@@ -262,8 +261,8 @@
     <Reference Include="System.Drawing.Common, Version=4.0.0.2, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
       <HintPath>..\packages\System.Drawing.Common.4.7.3\lib\net461\System.Drawing.Common.dll</HintPath>
     </Reference>
-    <Reference Include="System.Formats.Asn1, Version=9.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Formats.Asn1.9.0.0\lib\net462\System.Formats.Asn1.dll</HintPath>
+    <Reference Include="System.Formats.Asn1, Version=10.0.0.3, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Formats.Asn1.10.0.3\lib\net462\System.Formats.Asn1.dll</HintPath>
     </Reference>
     <Reference Include="System.IdentityModel" />
     <Reference Include="System.IO.Compression" />
@@ -274,19 +273,19 @@
       <HintPath>..\packages\System.IO.Pipelines.9.0.0\lib\net462\System.IO.Pipelines.dll</HintPath>
     </Reference>
     <Reference Include="System.Management" />
-    <Reference Include="System.Memory, Version=4.0.2.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Memory.4.6.0\lib\net462\System.Memory.dll</HintPath>
+    <Reference Include="System.Memory, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Memory.4.6.3\lib\net462\System.Memory.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Formatting, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <HintPath>..\packages\Microsoft.AspNet.WebApi.Client.6.0.0\lib\net45\System.Net.Http.Formatting.dll</HintPath>
     </Reference>
     <Reference Include="System.Numerics" />
-    <Reference Include="System.Numerics.Vectors, Version=4.1.5.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Numerics.Vectors.4.6.0\lib\net462\System.Numerics.Vectors.dll</HintPath>
+    <Reference Include="System.Numerics.Vectors, Version=4.1.6.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Numerics.Vectors.4.6.1\lib\net462\System.Numerics.Vectors.dll</HintPath>
     </Reference>
-    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.1.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.0\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
+    <Reference Include="System.Runtime.CompilerServices.Unsafe, Version=6.0.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.Runtime.CompilerServices.Unsafe.6.1.2\lib\net462\System.Runtime.CompilerServices.Unsafe.dll</HintPath>
     </Reference>
     <Reference Include="System.Runtime.Remoting" />
     <Reference Include="System.Runtime.Serialization" />
@@ -305,8 +304,8 @@
       <HintPath>..\packages\System.Threading.Tasks.Extensions.4.5.4\lib\net461\System.Threading.Tasks.Extensions.dll</HintPath>
     </Reference>
     <Reference Include="System.Transactions" />
-    <Reference Include="System.ValueTuple, Version=4.0.3.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
-      <HintPath>..\packages\System.ValueTuple.4.5.0\lib\net461\System.ValueTuple.dll</HintPath>
+    <Reference Include="System.ValueTuple, Version=4.0.5.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51, processorArchitecture=MSIL">
+      <HintPath>..\packages\System.ValueTuple.4.6.1\lib\net462\System.ValueTuple.dll</HintPath>
     </Reference>
     <Reference Include="System.Web" />
     <Reference Include="System.Xml.Linq" />

EnvelopeGenerator.Form/app.config

@@ -89,15 +89,15 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.2.0" newVersion="4.0.2.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-6.0.1.0" newVersion="6.0.1.0" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.3.0" newVersion="6.0.3.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.4.0" newVersion="4.0.4.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Collections.Immutable" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -105,7 +105,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.Numerics.Vectors" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.1.5.0" newVersion="4.1.5.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.1.6.0" newVersion="4.1.6.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="FirebirdSql.Data.FirebirdClient" publicKeyToken="3750abcc3150b00c" culture="neutral" />
@@ -133,7 +133,7 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.ValueTuple" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-4.0.3.0" newVersion="4.0.3.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.0.5.0" newVersion="4.0.5.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.IdentityModel.Abstractions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
@@ -157,11 +157,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.DependencyInjection.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="System.ComponentModel.Annotations" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
@@ -177,11 +177,11 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Caching.Memory" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.1" newVersion="8.0.0.1" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Options" publicKeyToken="adb9793829ddae60" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.2" newVersion="8.0.0.2" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Extensions.Configuration.Abstractions" publicKeyToken="adb9793829ddae60" culture="neutral" />
@@ -201,12 +201,32 @@
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.Identity.Client" publicKeyToken="0a613f4dd989e8ae" culture="neutral" />
-        <bindingRedirect oldVersion="0.0.0.0-3.0.8.0" newVersion="3.0.8.0" />
+        <bindingRedirect oldVersion="0.0.0.0-4.82.1.0" newVersion="4.82.1.0" />
       </dependentAssembly>
       <dependentAssembly>
         <assemblyIdentity name="Microsoft.IdentityModel.JsonWebTokens" publicKeyToken="31bf3856ad364e35" culture="neutral" />
         <bindingRedirect oldVersion="0.0.0.0-7.5.1.0" newVersion="7.5.1.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Formats.Asn1" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-10.0.0.3" newVersion="10.0.0.3" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Data.SqlClient" publicKeyToken="23ec7fc2d6eaa4a5" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Extensions.Primitives" publicKeyToken="adb9793829ddae60" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-8.0.0.0" newVersion="8.0.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Threading.Tasks.Extensions" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-4.2.0.1" newVersion="4.2.0.1" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Security.AccessControl" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-6.0.0.1" newVersion="6.0.0.1" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
   <entityFramework>

EnvelopeGenerator.Form/packages.config

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="BouncyCastle.Cryptography" version="2.5.0" targetFramework="net462" />
+  <package id="BouncyCastle.Cryptography" version="2.6.2" targetFramework="net462" />
   <package id="DigitalData.Controls.DocumentViewer" version="1.9.8" targetFramework="net462" />
   <package id="DigitalData.Modules.Base" version="1.3.8" targetFramework="net462" />
   <package id="DigitalData.Modules.Config" version="1.3.0" targetFramework="net462" />
@@ -20,7 +20,7 @@
   <package id="Microsoft.Bcl.Cryptography" version="9.0.0" targetFramework="net462" />
   <package id="Microsoft.CSharp" version="4.7.0" targetFramework="net462" />
   <package id="Microsoft.Extensions.Logging.Abstractions" version="2.1.1" targetFramework="net462" />
-  <package id="Microsoft.Identity.Client" version="4.77.0" targetFramework="net462" />
+  <package id="Microsoft.Identity.Client" version="4.82.1" targetFramework="net462" />
   <package id="Microsoft.IdentityModel.Abstractions" version="8.14.0" targetFramework="net462" />
   <package id="Microsoft.VisualBasic" version="10.3.0" targetFramework="net462" />
   <package id="Newtonsoft.Json" version="13.0.3" targetFramework="net462" />
@@ -32,24 +32,24 @@
   <package id="Quartz" version="3.8.0" targetFramework="net462" />
   <package id="RtfPipe" version="2.0.7677.4303" targetFramework="net462" />
   <package id="S22.Imap" version="3.6.0.0" targetFramework="net462" />
-  <package id="System.Buffers" version="4.6.0" targetFramework="net462" />
+  <package id="System.Buffers" version="4.6.1" targetFramework="net462" />
   <package id="System.CodeDom" version="9.0.0" targetFramework="net462" />
   <package id="System.Collections.Immutable" version="9.0.0" targetFramework="net462" />
   <package id="System.ComponentModel.Annotations" version="4.7.0" targetFramework="net462" />
   <package id="System.Data.Odbc" version="6.0.1" targetFramework="net462" />
   <package id="System.Diagnostics.DiagnosticSource" version="6.0.1" targetFramework="net462" />
   <package id="System.Drawing.Common" version="4.7.3" targetFramework="net462" />
-  <package id="System.Formats.Asn1" version="9.0.0" targetFramework="net462" />
+  <package id="System.Formats.Asn1" version="10.0.3" targetFramework="net462" />
   <package id="System.IO.Packaging" version="9.0.0" targetFramework="net462" />
   <package id="System.IO.Pipelines" version="9.0.0" targetFramework="net462" />
   <package id="System.Management" version="9.0.0" targetFramework="net462" />
-  <package id="System.Memory" version="4.6.0" targetFramework="net462" />
-  <package id="System.Numerics.Vectors" version="4.6.0" targetFramework="net462" />
-  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.0" targetFramework="net462" />
+  <package id="System.Memory" version="4.6.3" targetFramework="net462" />
+  <package id="System.Numerics.Vectors" version="4.6.1" targetFramework="net462" />
+  <package id="System.Runtime.CompilerServices.Unsafe" version="6.1.2" targetFramework="net462" />
   <package id="System.Security.Cryptography.Pkcs" version="9.0.0" targetFramework="net462" />
   <package id="System.Text.Encodings.Web" version="9.0.0" targetFramework="net462" />
   <package id="System.Text.Json" version="9.0.0" targetFramework="net462" />
   <package id="System.Threading.Tasks.Extensions" version="4.5.4" targetFramework="net462" />
-  <package id="System.ValueTuple" version="4.5.0" targetFramework="net462" />
+  <package id="System.ValueTuple" version="4.6.1" targetFramework="net462" />
   <package id="UserManager.Domain" version="3.2.3" targetFramework="net462" />
 </packages>

EnvelopeGenerator.Infrastructure/EnvelopeGenerator.Infrastructure.csproj

@@ -24,7 +24,13 @@
     <PackageReference Include="Dapper" Version="2.1.66" />
     <PackageReference Include="DigitalData.Core.Abstraction.Application" Version="1.6.0" />
     <PackageReference Include="DigitalData.Core.Infrastructure" Version="2.6.1" />
+    <PackageReference Include="HtmlSanitizer" Version="9.0.892" />
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="6.1.4" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.82.1" />
     <PackageReference Include="QuestPDF" Version="2025.7.1" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+    <PackageReference Include="System.Formats.Asn1" Version="10.0.3" />
+    <PackageReference Include="System.Security.AccessControl" Version="6.0.1" />
   </ItemGroup>
 
   <ItemGroup>

EnvelopeGenerator.Jobs/EnvelopeGenerator.Jobs.csproj

@@ -7,10 +7,14 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />
+    <PackageReference Include="HtmlSanitizer" Version="9.0.892" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.82.1" />
     <PackageReference Include="Quartz" Version="3.9.0" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.2" />
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="6.0.2" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.3" />
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="6.1.4" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
   </ItemGroup>
 
   <ItemGroup>

EnvelopeGenerator.PdfEditor/EnvelopeGenerator.PdfEditor.csproj

@@ -17,6 +17,7 @@
   </PropertyGroup>
 	
   <ItemGroup>
+	<PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />
 	<PackageReference Include="itext" Version="8.0.5" />
 	<PackageReference Include="itext.bouncy-castle-adapter" Version="8.0.5" />
   </ItemGroup>

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Auth/ApiAuthStateProvider.cs

@@ -0,0 +1,46 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Components.Authorization;
+using EnvelopeGenerator.ReceiverUI.Client.Services;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Auth;
+
+/// <summary>
+/// Fragt die API, ob der Nutzer eingeloggt ist.
+/// 
+/// WARUM nicht selbst Token lesen?
+/// - Das Auth-Cookie ist HttpOnly → JavaScript/WASM kann es nicht lesen
+/// - Stattdessen: Frage die API "bin ich eingeloggt?" → GET /api/auth/check
+/// - Die API prüft das Cookie serverseitig und antwortet mit 200 oder 401
+/// </summary>
+public class ApiAuthStateProvider : AuthenticationStateProvider
+{
+    private readonly IAuthService _authService;
+
+    public ApiAuthStateProvider(IAuthService authService)
+    {
+        _authService = authService;
+    }
+
+    public override async Task<AuthenticationState> GetAuthenticationStateAsync()
+    {
+        var result = await _authService.CheckAuthAsync();
+
+        if (result.IsSuccess)
+        {
+            // Eingeloggt → Erstelle einen authentifizierten ClaimsPrincipal
+            var identity = new ClaimsIdentity("cookie");
+            return new AuthenticationState(new ClaimsPrincipal(identity));
+        }
+
+        // Nicht eingeloggt
+        return new AuthenticationState(new ClaimsPrincipal(new ClaimsIdentity()));
+    }
+
+    /// <summary>
+    /// Wird nach Login/Logout aufgerufen, damit Blazor den Auth-State aktualisiert.
+    /// </summary>
+    public void NotifyAuthChanged()
+    {
+        NotifyAuthenticationStateChanged(GetAuthenticationStateAsync());
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/AccessCodeForm.razor

@@ -0,0 +1,172 @@
+@* AccessCodeForm: Zeigt das Zugangscode-Eingabeformular.
+   Entspricht dem AccessCode-Teil von EnvelopeLocked.cshtml im Web-Projekt.
+   
+   "Dumme" Komponente: Keine Services, keine API-Calls.
+   - Bekommt Daten über [Parameter]
+   - Gibt Eingaben über EventCallback an die Eltern-Page zurück
+   - Die Page entscheidet, was mit dem Code passiert *@
+
+<div class="page">
+    @* ── Header: Icon + Titel ── *@
+    <header class="text-center">
+        <div class="status-icon locked mt-4 mb-1">
+            <i class="bi bi-shield-lock"></i>
+        </div>
+        <h1>Zugangscode eingeben</h1>
+    </header>
+
+    @* ── Erklärungstext ── *@
+    <section class="text-center mb-4">
+        <p class="text-muted">
+            Ein Zugangscode wurde an Ihre E-Mail-Adresse gesendet.
+            Bitte geben Sie diesen unten ein.
+        </p>
+    </section>
+
+    @* ── Formular ── *@
+    <div class="access-code-container">
+        <EditForm Model="_model" OnValidSubmit="Submit">
+            <DataAnnotationsValidator />
+
+            @* Code-Eingabefeld: type="password" damit niemand mitlesen kann *@
+            <div class="form-floating mb-3">
+                <InputText @bind-Value="_model.Code"
+                           type="password"
+                           class="form-control code-input"
+                           id="accessCodeInput"
+                           placeholder="Zugangscode" />
+                <label for="accessCodeInput">Zugangscode</label>
+                <ValidationMessage For="() => _model.Code" />
+            </div>
+
+            @* TFA-Switch: Nur sichtbar wenn der Umschlag TFA aktiviert hat.
+               Im Web-Projekt ist das der "2FA per SMS"-Toggle.
+               Disabled wenn der Empfänger keine Telefonnummer hat. *@
+            @if (TfaEnabled)
+            {
+                <div class="form-check form-switch mb-3">
+                    <input class="form-check-input"
+                           type="checkbox"
+                           id="preferSmsSwitch"
+                           checked="@_preferSms"
+                           disabled="@(!HasPhoneNumber)"
+                           @onchange="ToggleSms" />
+                    <label class="form-check-label" for="preferSmsSwitch">
+                        2FA per SMS
+                    </label>
+                </div>
+            }
+
+            @* Fehlermeldung: Wird von der Eltern-Page gesetzt
+               wenn der AccessCode falsch war *@
+            @if (!string.IsNullOrEmpty(ErrorMessage))
+            {
+                <div class="alert alert-danger">@ErrorMessage</div>
+            }
+
+            @* Submit-Button mit Loading-State *@
+            <button type="submit" class="btn btn-primary w-100" disabled="@_isSubmitting">
+                @if (_isSubmitting)
+                {
+                    <LoadingIndicator Small="true" />
+                }
+                else
+                {
+                    <i class="bi bi-box-arrow-in-right me-2"></i>
+                    <span>Bestätigen</span>
+                }
+            </button>
+        </EditForm>
+    </div>
+
+    @* ── Hilfe-Bereich: Wer hat dieses Dokument gesendet? ──
+       Im Web-Projekt ist das der <details>-Bereich ganz unten.
+       Zeigt Sender-Mail und Umschlag-Titel, damit der Empfänger
+       bei Problemen weiß, an wen er sich wenden kann. *@
+    @if (!string.IsNullOrEmpty(SenderEmail))
+    {
+        <section class="text-center mt-4">
+            <details>
+                <summary class="text-muted">Woher kommt dieser Code?</summary>
+                <p class="text-muted mt-2">
+                    Dieses Dokument
+                    @if (!string.IsNullOrEmpty(Title))
+                    {
+                        <span>«@Title» </span>
+                    }
+                    wurde Ihnen von <a href="mailto:@SenderEmail">@SenderEmail</a> zugesendet.
+                    Der Zugangscode wurde ebenfalls an Ihre E-Mail-Adresse geschickt.
+                </p>
+            </details>
+        </section>
+    }
+</div>
+
+@code {
+    // ── Parameter von der Eltern-Page ──
+
+    /// <summary>Der Envelope-Key aus der URL</summary>
+    [Parameter, EditorRequired]
+    public string EnvelopeKey { get; set; } = string.Empty;
+
+    /// <summary>Fehlermeldung (z.B. "Falscher Zugangscode")</summary>
+    [Parameter]
+    public string? ErrorMessage { get; set; }
+
+    /// <summary>E-Mail des Absenders — für den Hilfe-Bereich unten</summary>
+    [Parameter]
+    public string? SenderEmail { get; set; }
+
+    /// <summary>Titel des Umschlags — für den Hilfe-Bereich unten</summary>
+    [Parameter]
+    public string? Title { get; set; }
+
+    /// <summary>Ob TFA für diesen Umschlag aktiviert ist — zeigt den SMS-Switch</summary>
+    [Parameter]
+    public bool TfaEnabled { get; set; }
+
+    /// <summary>Ob der Empfänger eine Telefonnummer hat — sonst ist SMS-Switch disabled</summary>
+    [Parameter]
+    public bool HasPhoneNumber { get; set; }
+
+    // ── Event: Gibt Code + SMS-Präferenz an die Page zurück ──
+
+    /// <summary>
+    /// Callback wenn der Benutzer das Formular abschickt.
+    /// Gibt ein Tuple zurück: (Code, PreferSms)
+    /// Die Page entscheidet dann, was damit passiert (API-Call etc.)
+    ///
+    /// WARUM ein Tuple statt nur string?
+    /// Weil die Page auch wissen muss, ob der Benutzer SMS bevorzugt.
+    /// Im Web-Projekt wird das als separates Form-Feld "userSelectSMS" gesendet.
+    /// </summary>
+    [Parameter]
+    public EventCallback<(string Code, bool PreferSms)> OnSubmit { get; set; }
+
+    // ── Interner State ──
+
+    private AccessCodeModel _model = new();
+    private bool _isSubmitting;
+    private bool _preferSms;
+
+    private void ToggleSms(ChangeEventArgs e)
+    {
+        _preferSms = (bool)(e.Value ?? false);
+    }
+
+    private async Task Submit()
+    {
+        _isSubmitting = true;
+        await OnSubmit.InvokeAsync((_model.Code, _preferSms));
+        _isSubmitting = false;
+    }
+
+    // ── Validierungs-Model ──
+
+    private class AccessCodeModel
+    {
+        [System.ComponentModel.DataAnnotations.Required(ErrorMessage = "Bitte Zugangscode eingeben")]
+        [System.ComponentModel.DataAnnotations.StringLength(6, MinimumLength = 4)]
+        public string Code { get; set; } = string.Empty;
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/ActionPanel.razor

@@ -0,0 +1,126 @@
+@* ActionPanel: Fixierte Button-Leiste am unteren Bildschirmrand.
+   Entspricht dem <div id="flex-action-panel"> in ShowEnvelope.cshtml.
+   
+   Wird angezeigt wenn der Empfänger das Dokument sieht (Status = ShowDocument).
+   Bei ReadOnly-Dokumenten wird nichts angezeigt.
+   
+   Die Buttons lösen EventCallbacks aus. Die Eltern-Komponente (EnvelopePage)
+   entscheidet, was passiert (API-Call etc.).
+   
+   Der ConfirmDialog wird über eine Referenz aufgerufen:
+   var confirmed = await _confirmDialog.ShowAsync("Titel", "Text");
+   
+   WARUM EventCallbacks statt direkte API-Calls?
+   - Die Komponente bleibt "dumm" (keine Services, kein API-Wissen)
+   - Die Eltern-Page kann den gleichen Button-Click anders behandeln
+   - Einfacher zu testen *@
+
+@if (!ReadOnly)
+{
+    @* position-fixed: Bleibt am unteren Rand auch beim Scrollen.
+       Gleiche Positionierung wie im Web-Projekt. *@
+    <div class="position-fixed bottom-0 end-0 p-3 d-flex gap-2" style="z-index: 1050;">
+
+        @* Zurücksetzen-Button: Setzt alle Signaturen zurück.
+           Im Web-Projekt ist das der graue Button mit dem
+           Pfeil-gegen-den-Uhrzeigersinn-Icon. *@
+        <button class="btn btn-secondary" @onclick="HandleRefresh" title="Zurücksetzen">
+            <i class="bi bi-arrow-counterclockwise"></i>
+        </button>
+
+        @* Ablehnen-Button: Öffnet ConfirmDialog, dann EventCallback.
+           Im Web-Projekt ist das der rote Button mit dem X-Icon. *@
+        <button class="btn btn-danger" @onclick="HandleReject" title="Ablehnen">
+            <i class="bi bi-x-lg me-1"></i>
+            <span class="d-none d-md-inline">Ablehnen</span>
+        </button>
+
+        @* Unterschreiben-Button: Öffnet ConfirmDialog, dann EventCallback.
+           Im Web-Projekt ist das der grüne Button mit dem Briefumschlag-Icon. *@
+        <button class="btn btn-success" @onclick="HandleSign" title="Unterschreiben">
+            <i class="bi bi-pen me-1"></i>
+            <span class="d-none d-md-inline">Unterschreiben</span>
+        </button>
+    </div>
+}
+
+@* ConfirmDialog: Wird nur gerendert wenn nötig (wenn ShowAsync aufgerufen wird).
+   Die Referenz (_confirmDialog) erlaubt uns, ShowAsync von den Button-Handlern aufzurufen. *@
+<ConfirmDialog @ref="_confirmDialog" />
+
+@code {
+    // ── Parameter ──
+
+    /// <summary>Bei ReadOnly wird das gesamte Panel ausgeblendet</summary>
+    [Parameter]
+    public bool ReadOnly { get; set; }
+
+    /// <summary>Wird ausgelöst wenn der Benutzer "Unterschreiben" bestätigt</summary>
+    [Parameter]
+    public EventCallback OnSign { get; set; }
+
+    /// <summary>Wird ausgelöst wenn der Benutzer "Ablehnen" bestätigt</summary>
+    [Parameter]
+    public EventCallback OnReject { get; set; }
+
+    /// <summary>Wird ausgelöst wenn der Benutzer "Zurücksetzen" klickt</summary>
+    [Parameter]
+    public EventCallback OnRefresh { get; set; }
+
+    // ── Referenz auf den ConfirmDialog ──
+
+    /// <summary>
+    /// Referenz auf die ConfirmDialog-Komponente.
+    ///
+    /// WAS IST @ref?
+    /// Mit @ref speichert Blazor eine Referenz auf eine Kind-Komponente.
+    /// Dann kann man Methoden darauf aufrufen: _confirmDialog.ShowAsync(...)
+    /// Das ist wie document.getElementById() in JavaScript, nur typsicher.
+    /// </summary>
+    private ConfirmDialog _confirmDialog = default!;
+
+    // ── Button-Handler ──
+
+    /// <summary>
+    /// Unterschreiben: Erst bestätigen, dann Event auslösen.
+    /// Der ConfirmDialog zeigt "Möchten Sie das Dokument unterschreiben?"
+    /// Nur wenn der Benutzer "Ja" klickt, wird OnSign ausgelöst.
+    /// </summary>
+    private async Task HandleSign()
+    {
+        var confirmed = await _confirmDialog.ShowAsync(
+            "Unterschreiben",
+            "Möchten Sie das Dokument wirklich unterschreiben? Diese Aktion kann nicht rückgängig gemacht werden.",
+            confirmText: "Unterschreiben",
+            confirmColor: "success");
+
+        if (confirmed)
+            await OnSign.InvokeAsync();
+    }
+
+    /// <summary>
+    /// Ablehnen: Erst bestätigen, dann Event auslösen.
+    /// Roter Button im ConfirmDialog, weil Ablehnen destruktiv ist.
+    /// </summary>
+    private async Task HandleReject()
+    {
+        var confirmed = await _confirmDialog.ShowAsync(
+            "Ablehnen",
+            "Möchten Sie das Dokument wirklich ablehnen? Diese Aktion kann nicht rückgängig gemacht werden.",
+            confirmText: "Ablehnen",
+            confirmColor: "danger");
+
+        if (confirmed)
+            await OnReject.InvokeAsync();
+    }
+
+    /// <summary>
+    /// Zurücksetzen: Kein ConfirmDialog nötig, weil es nicht destruktiv ist.
+    /// Setzt nur die Signatur-Positionen zurück, der Empfänger kann danach
+    /// erneut signieren.
+    /// </summary>
+    private async Task HandleRefresh()
+    {
+        await OnRefresh.InvokeAsync();
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/EnvelopeInfoCard.razor

@@ -0,0 +1,121 @@
+@* EnvelopeInfoCard: Zeigt die Umschlag-Infos oberhalb des PDF-Viewers.
+   Entspricht dem Card-Bereich in ShowEnvelope.cshtml im Web-Projekt.
+   
+   Wird angezeigt wenn der Empfänger erfolgreich authentifiziert ist
+   und das Dokument sehen darf.
+   
+   "Dumme" Komponente: Keine Services, nur Parameter → Anzeige. *@
+
+<div class="card mb-3">
+    @* ── Card Header: Logo + Fortschrittsbalken ──
+       Im Web-Projekt gibt es hier das signFLOW-Logo und darunter
+       "2/3 Signatures". Wir zeigen den Fortschritt nur wenn es
+       KEIN ReadOnly-Dokument ist (ReadOnly = nur lesen, nicht signieren). *@
+    <div class="card-header bg-white">
+        <div class="d-flex justify-content-between align-items-center">
+            <strong class="text-primary">signFLOW</strong>
+
+            @if (!ReadOnly && SignatureTotal > 0)
+            {
+                <div class="d-flex align-items-center gap-2">
+                    <div class="progress" style="width: 120px; height: 8px;">
+                        <div class="progress-bar bg-success"
+                             role="progressbar"
+                             style="width: @ProgressPercent%"
+                             aria-valuenow="@SignaturesDone"
+                             aria-valuemin="0"
+                             aria-valuemax="@SignatureTotal">
+                        </div>
+                    </div>
+                    <small class="text-muted">@SignaturesDone/@SignatureTotal</small>
+                </div>
+            }
+
+            @if (ReadOnly)
+            {
+                <span class="badge bg-secondary">Nur Ansicht</span>
+            }
+        </div>
+    </div>
+
+    @* ── Card Body: Titel, Nachricht, Sender-Info ── *@
+    <div class="card-body">
+        @* Titel des Umschlags *@
+        <h5 class="card-title">@Title</h5>
+
+        @* Nachricht des Absenders — im Web-Projekt wird das mit Marked.js
+           als Markdown gerendert. Hier erstmal als Plain Text.
+           Markdown-Rendering kommt in Phase 6 (Feinschliff). *@
+        @if (!string.IsNullOrEmpty(Message))
+        {
+            <p class="card-text">@Message</p>
+        }
+
+        @* Sender-Info: Wer hat es gesendet, wann?
+           Im Web-Projekt steht hier:
+           "Gesendet am 15.03.2026 von Max Mustermann (max@firma.de)" *@
+        <p class="card-text">
+            <small class="text-muted">
+                @if (!string.IsNullOrEmpty(SenderName) && !string.IsNullOrEmpty(SenderEmail))
+                {
+                    <span>
+                        Gesendet
+                        @if (SentDate is not null)
+                        {
+                            <span>am @SentDate.Value.ToString("dd.MM.yyyy")</span>
+                        }
+                        von @SenderName
+                        (<a href="mailto:@SenderEmail">@SenderEmail</a>)
+                    </span>
+                }
+            </small>
+        </p>
+    </div>
+</div>
+
+@code {
+    // ── Parameter ──
+
+    /// <summary>Titel des Umschlags (z.B. "Vertragsdokument")</summary>
+    [Parameter, EditorRequired]
+    public string Title { get; set; } = string.Empty;
+
+    /// <summary>Nachricht des Absenders</summary>
+    [Parameter]
+    public string? Message { get; set; }
+
+    /// <summary>Name des Absenders (z.B. "Max Mustermann")</summary>
+    [Parameter]
+    public string? SenderName { get; set; }
+
+    /// <summary>E-Mail des Absenders</summary>
+    [Parameter]
+    public string? SenderEmail { get; set; }
+
+    /// <summary>Datum an dem der Umschlag gesendet wurde</summary>
+    [Parameter]
+    public DateTime? SentDate { get; set; }
+
+    /// <summary>Ob das Dokument nur zum Lesen ist (kein Signieren)</summary>
+    [Parameter]
+    public bool ReadOnly { get; set; }
+
+    /// <summary>Anzahl bereits geleisteter Unterschriften</summary>
+    [Parameter]
+    public int SignaturesDone { get; set; }
+
+    /// <summary>Gesamtanzahl benötigter Unterschriften</summary>
+    [Parameter]
+    public int SignatureTotal { get; set; }
+
+    // ── Berechnete Werte ──
+
+    /// <summary>
+    /// Fortschritt in Prozent für den Balken.
+    /// Vermeidet Division durch Null.
+    /// </summary>
+    private int ProgressPercent =>
+        SignatureTotal > 0
+            ? (int)((double)SignaturesDone / SignatureTotal * 100)
+            : 0;
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/PdfViewer.razor

@@ -0,0 +1,23 @@
+@inject IJSRuntime JS
+@implements IAsyncDisposable
+
+<div id="pspdfkit-container" class="pdf-container" style="width: 100%; height: 80vh;"></div>
+
+@code {
+    [Parameter] public byte[]? DocumentBytes { get; set; }
+
+    protected override async Task OnAfterRenderAsync(bool firstRender)
+    {
+        if (firstRender && DocumentBytes is not null)
+        {
+            // TODO: PSPDFKit JS-Interop implementieren (Phase 6)
+            // await JS.InvokeVoidAsync("initPdfViewer", DocumentBytes);
+        }
+    }
+
+    public async ValueTask DisposeAsync()
+    {
+        // TODO: PSPDFKit aufräumen
+        // await JS.InvokeVoidAsync("destroyPdfViewer");
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/SignaturePanel.razor

@@ -0,0 +1,5 @@
+<h3>SignaturePanel</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/TfaForm.razor

@@ -0,0 +1,202 @@
+@* TfaForm: Zwei-Faktor-Authentifizierung — SMS oder Authenticator.
+   Entspricht dem TFA-Teil von EnvelopeLocked.cshtml im Web-Projekt.
+   
+   Wird angezeigt NACH dem AccessCode-Schritt, wenn der Umschlag TFA erfordert.
+   
+   Zwei Varianten:
+   - TfaType="sms" → SMS wurde gesendet, Countdown-Timer zeigt verbleibende Zeit
+   - TfaType="authenticator" → Benutzer gibt Code aus seiner Authenticator-App ein
+   
+   "Dumme" Komponente: Keine Services, keine API-Calls. *@
+
+@implements IDisposable
+
+<div class="page">
+    @* ── Header: Icon + Titel ── *@
+    <header class="text-center">
+        <div class="status-icon locked mt-4 mb-1">
+            <i class="bi bi-shield-check"></i>
+        </div>
+        <h1>Zwei-Faktor-Authentifizierung</h1>
+    </header>
+
+    @* ── Erklärungstext: Unterschiedlich je nach TFA-Typ ── *@
+    <section class="text-center mb-4">
+        @if (TfaType == "sms")
+        {
+            <p class="text-muted">
+                Ein Bestätigungscode wurde per SMS an Ihre Telefonnummer gesendet.
+            </p>
+            @* SMS-Countdown-Timer: Zeigt wie lange der Code noch gültig ist.
+               Im Web-Projekt ist das JavaScript (setInterval).
+               Hier machen wir es mit einem C#-Timer — kein JS nötig. *@
+            @if (_remainingTime is not null)
+            {
+                <div class="alert @(_remainingTime > TimeSpan.Zero ? "alert-primary" : "alert-warning")">
+                    @if (_remainingTime > TimeSpan.Zero)
+                    {
+                        <span>Code gültig für: @_remainingTime.Value.ToString("mm\\:ss")</span>
+                    }
+                    else
+                    {
+                        <span>Code abgelaufen. Bitte fordern Sie einen neuen Code an.</span>
+                    }
+                </div>
+            }
+        }
+        else
+        {
+            <p class="text-muted">
+                Öffnen Sie Ihre Authenticator-App und geben Sie den angezeigten Code ein.
+            </p>
+        }
+    </section>
+
+    @* ── Formular ── *@
+    <div class="access-code-container">
+        <EditForm Model="_model" OnValidSubmit="Submit">
+            <DataAnnotationsValidator />
+
+            <div class="form-floating mb-3">
+                <InputText @bind-Value="_model.Code"
+                           type="password"
+                           class="form-control code-input"
+                           id="tfaCodeInput"
+                           placeholder="Code" />
+                <label for="tfaCodeInput">
+                    @(TfaType == "sms" ? "SMS-Code" : "Authenticator-Code")
+                </label>
+                <ValidationMessage For="() => _model.Code" />
+            </div>
+
+            @if (!string.IsNullOrEmpty(ErrorMessage))
+            {
+                <div class="alert alert-danger">@ErrorMessage</div>
+            }
+
+            <button type="submit"
+                    class="btn btn-primary w-100"
+                    disabled="@(_isSubmitting || _remainingTime <= TimeSpan.Zero)">
+                @if (_isSubmitting)
+                {
+                    <LoadingIndicator Small="true" />
+                }
+                else
+                {
+                    <i class="bi bi-unlock me-2"></i>
+                    <span>Bestätigen</span>
+                }
+            </button>
+        </EditForm>
+    </div>
+</div>
+
+@code {
+    // ── Parameter von der Eltern-Page ──
+
+    /// <summary>Der Envelope-Key aus der URL</summary>
+    [Parameter, EditorRequired]
+    public string EnvelopeKey { get; set; } = string.Empty;
+
+    /// <summary>
+    /// "sms" oder "authenticator" — bestimmt welche Variante angezeigt wird.
+    /// Kommt aus der API-Antwort nach dem AccessCode-Schritt.
+    /// </summary>
+    [Parameter, EditorRequired]
+    public string TfaType { get; set; } = "authenticator";
+
+    /// <summary>
+    /// Ablaufzeit des SMS-Codes. Nur bei TfaType="sms" relevant.
+    /// Der Timer zählt von jetzt bis zu diesem Zeitpunkt runter.
+    /// </summary>
+    [Parameter]
+    public DateTime? TfaExpiration { get; set; }
+
+    /// <summary>Ob der Empfänger eine Telefonnummer hat</summary>
+    [Parameter]
+    public bool HasPhoneNumber { get; set; }
+
+    /// <summary>Fehlermeldung (z.B. "Falscher Code")</summary>
+    [Parameter]
+    public string? ErrorMessage { get; set; }
+
+    /// <summary>
+    /// Callback: Gibt (Code, Type) an die Page zurück.
+    /// Die Page sendet das dann an die API.
+    /// </summary>
+    [Parameter]
+    public EventCallback<(string Code, string Type)> OnSubmit { get; set; }
+
+    // ── Interner State ──
+
+    private TfaCodeModel _model = new();
+    private bool _isSubmitting;
+    private TimeSpan? _remainingTime;
+    private System.Threading.Timer? _timer;
+
+    // ── Lifecycle ──
+
+    /// <summary>
+    /// Wird aufgerufen wenn die Komponente initialisiert wird.
+    /// Startet den SMS-Countdown-Timer falls nötig.
+    ///
+    /// OnInitialized (nicht Async) reicht hier, weil wir keinen
+    /// await brauchen — der Timer läuft über einen Callback.
+    /// </summary>
+    protected override void OnInitialized()
+    {
+        if (TfaType == "sms" && TfaExpiration is not null)
+        {
+            // Restzeit berechnen
+            _remainingTime = TfaExpiration.Value - DateTime.Now;
+
+            // Timer: Jede Sekunde _remainingTime aktualisieren.
+            // InvokeAsync + StateHasChanged sagt Blazor: "Zeichne die UI neu".
+            // Das ist das Blazor-Äquivalent zu setInterval + DOM-Update in JavaScript.
+            _timer = new System.Threading.Timer(_ =>
+            {
+                _remainingTime = TfaExpiration.Value - DateTime.Now;
+
+                if (_remainingTime <= TimeSpan.Zero)
+                {
+                    _remainingTime = TimeSpan.Zero;
+                    _timer?.Dispose();
+                }
+
+                // InvokeAsync ist nötig, weil der Timer auf einem anderen Thread läuft.
+                // Blazor erlaubt UI-Updates nur auf dem UI-Thread.
+                InvokeAsync(StateHasChanged);
+            },
+            state: null,
+            dueTime: TimeSpan.Zero,       // Sofort starten
+            period: TimeSpan.FromSeconds(1) // Jede Sekunde
+            );
+        }
+    }
+
+    private async Task Submit()
+    {
+        _isSubmitting = true;
+        await OnSubmit.InvokeAsync((_model.Code, TfaType));
+        _isSubmitting = false;
+    }
+
+    /// <summary>
+    /// Aufräumen: Timer stoppen wenn die Komponente entfernt wird.
+    /// Ohne Dispose würde der Timer weiterlaufen und Fehler verursachen,
+    /// weil er versucht eine nicht mehr existierende UI zu aktualisieren.
+    /// </summary>
+    public void Dispose()
+    {
+        _timer?.Dispose();
+    }
+
+    // ── Validierungs-Model ──
+
+    private class TfaCodeModel
+    {
+        [System.ComponentModel.DataAnnotations.Required(ErrorMessage = "Bitte Code eingeben")]
+        [System.ComponentModel.DataAnnotations.StringLength(6, MinimumLength = 6, ErrorMessage = "Der Code muss 6 Zeichen lang sein")]
+        public string Code { get; set; } = string.Empty;
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Envelope/TwoFactorForm.razor

@@ -0,0 +1,5 @@
+<h3>TwoFactorForm</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Layout/NavHeader.razor

@@ -0,0 +1,5 @@
+<h3>NavHeader</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/AlertMessage.razor

@@ -0,0 +1,5 @@
+<h3>AlertMessage</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/ConfirmDialog.razor

@@ -0,0 +1,133 @@
+@* ConfirmDialog: Ersetzt SweetAlert2 aus dem Web-Projekt.
+   
+   Zeigt einen modalen Bestätigungsdialog mit Titel, Text und Ja/Nein-Buttons.
+   Wird NICHT über Parameter gesteuert, sondern über eine Methode:
+   
+       var confirmed = await _dialog.ShowAsync("Titel", "Text");
+   
+   WARUM eine Methode statt Parameter?
+   - Ein Dialog ist ein "einmaliges Ereignis", kein dauerhafter Zustand
+   - Die aufrufende Komponente will auf das Ergebnis WARTEN (await)
+   - Mit Parametern müsste man den State manuell hin- und herschalten
+   
+   WARUM kein SweetAlert2?
+   - SweetAlert2 ist eine JavaScript-Bibliothek
+   - In Blazor können wir das nativ in C# lösen, ohne JS-Interop
+   - Weniger Abhängigkeiten = weniger Wartung = weniger Fehlerquellen *@
+
+@if (_isVisible)
+{
+    @* Hintergrund-Overlay: Dunkler Hintergrund hinter dem Dialog.
+       Im Web-Projekt macht SweetAlert2 das automatisch.
+       Hier bauen wir es selbst mit CSS. *@
+    <div class="modal-backdrop fade show"></div>
+
+    @* Modal-Dialog: Bootstrap 5 Modal-Markup.
+       Normalerweise braucht Bootstrap-Modal JavaScript (bootstrap.js)
+       um zu öffnen/schließen. Wir steuern die Sichtbarkeit stattdessen
+       über die _isVisible-Variable — Blazor macht das DOM-Update. *@
+    <div class="modal fade show d-block" tabindex="-1" role="dialog">
+        <div class="modal-dialog modal-dialog-centered" role="document">
+            <div class="modal-content">
+
+                @* Header: Titel + Schließen-Button *@
+                <div class="modal-header">
+                    <h5 class="modal-title">@_title</h5>
+                    <button type="button" class="btn-close" @onclick="Cancel"></button>
+                </div>
+
+                @* Body: Beschreibungstext *@
+                <div class="modal-body">
+                    <p>@_message</p>
+                </div>
+
+                @* Footer: Abbrechen + Bestätigen *@
+                <div class="modal-footer">
+                    <button type="button" class="btn btn-secondary" @onclick="Cancel">
+                        @_cancelText
+                    </button>
+                    <button type="button" class="btn btn-@_confirmColor" @onclick="Confirm">
+                        @_confirmText
+                    </button>
+                </div>
+
+            </div>
+        </div>
+    </div>
+}
+
+@code {
+    // ── Interner State (NICHT Parameter — wird über ShowAsync gesetzt) ──
+
+    private bool _isVisible;
+    private string _title = string.Empty;
+    private string _message = string.Empty;
+    private string _confirmText = "Ja";
+    private string _cancelText = "Abbrechen";
+    private string _confirmColor = "primary";
+
+    /// <summary>
+    /// TaskCompletionSource: Das Herzstück dieser Komponente.
+    ///
+    /// WAS IST DAS?
+    /// Ein TaskCompletionSource erstellt einen Task, der erst dann
+    /// "fertig" wird, wenn jemand SetResult() aufruft.
+    ///
+    /// WIE FUNKTIONIERT ES?
+    /// 1. ShowAsync() erstellt ein neues TaskCompletionSource
+    /// 2. ShowAsync() gibt dessen Task zurück → der Aufrufer wartet (await)
+    /// 3. Der Benutzer klickt "Ja" → Confirm() ruft SetResult(true) auf
+    /// 4. Der await in der aufrufenden Komponente kommt zurück mit true
+    ///
+    /// Das ist wie ein "Promise" in JavaScript, nur in C#.
+    /// </summary>
+    private TaskCompletionSource<bool>? _tcs;
+
+    /// <summary>
+    /// Zeigt den Dialog und wartet auf die Benutzer-Entscheidung.
+    ///
+    /// Beispiel-Aufruf:
+    ///     var confirmed = await _dialog.ShowAsync(
+    ///         "Unterschreiben",
+    ///         "Möchten Sie das Dokument wirklich unterschreiben?");
+    /// </summary>
+    /// <param name="title">Dialog-Überschrift</param>
+    /// <param name="message">Beschreibungstext</param>
+    /// <param name="confirmText">Text auf dem Bestätigen-Button (Standard: "Ja")</param>
+    /// <param name="cancelText">Text auf dem Abbrechen-Button (Standard: "Abbrechen")</param>
+    /// <param name="confirmColor">Bootstrap-Farbe des Bestätigen-Buttons (Standard: "primary")</param>
+    /// <returns>true wenn bestätigt, false wenn abgebrochen</returns>
+    public Task<bool> ShowAsync(
+        string title,
+        string message,
+        string confirmText = "Ja",
+        string cancelText = "Abbrechen",
+        string confirmColor = "primary")
+    {
+        _title = title;
+        _message = message;
+        _confirmText = confirmText;
+        _cancelText = cancelText;
+        _confirmColor = confirmColor;
+
+        _tcs = new TaskCompletionSource<bool>();
+        _isVisible = true;
+        StateHasChanged();
+
+        return _tcs.Task;
+    }
+
+    private void Confirm()
+    {
+        _isVisible = false;
+        _tcs?.TrySetResult(true);
+        StateHasChanged();
+    }
+
+    private void Cancel()
+    {
+        _isVisible = false;
+        _tcs?.TrySetResult(false);
+        StateHasChanged();
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/ErrorDisplay.razor

@@ -0,0 +1,19 @@
+<div class="text-center py-5">
+    @if (!string.IsNullOrEmpty(Icon))
+    {
+        <div class="mb-3">
+            <i class="bi bi-@Icon" style="font-size: 3rem;"></i>
+        </div>
+    }
+    <h2>@Title</h2>
+    @if (!string.IsNullOrEmpty(Message))
+    {
+        <p class="text-muted">@Message</p>
+    }
+</div>
+
+@code {
+    [Parameter] public string Title { get; set; } = "Fehler";
+    [Parameter] public string? Message { get; set; }
+    [Parameter] public string? Icon { get; set; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/LanguageSelector.razor

@@ -0,0 +1,5 @@
+<h3>LanguageSelector</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/LoadingIndicator.razor

@@ -0,0 +1,18 @@
+<div class="d-flex justify-content-center align-items-center @(Small ? "" : "py-5")" style="@(Small ? "" : "min-height: 40vh;")">
+    <div class="text-center">
+        <div class="spinner-border @(Small ? "spinner-border-sm" : "text-primary")"
+             style="@(Small ? "" : "width: 3rem; height: 3rem;")"
+             role="status">
+            <span class="visually-hidden">Laden...</span>
+        </div>
+        @if (!Small && Message is not null)
+        {
+            <p class="mt-3 text-muted">@Message</p>
+        }
+    </div>
+</div>
+
+@code {
+    [Parameter] public bool Small { get; set; }
+    [Parameter] public string? Message { get; set; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/StatusPage.razor

@@ -0,0 +1,79 @@
+@* StatusPage: Wiederverwendbare Status-Seite für alle Endzustände.
+   Ersetzt EnvelopeSigned.cshtml, EnvelopeRejected.cshtml, Error-Views und Expired.
+   "Dumme" Komponente: Keine Services, keine API-Calls, nur Parameter → Anzeige. *@
+
+<div class="page">
+    <header class="text-center">
+        @switch (Type)
+        {
+            case "signed":
+                <div class="status-icon signed">
+                    <i class="bi bi-check-circle"></i>
+                </div>
+                <h1>Dokument erfolgreich unterschrieben</h1>
+                <p class="text-muted">
+                    Sie erhalten eine Bestätigung per E-Mail, sobald alle Empfänger unterschrieben haben.
+                </p>
+                break;
+
+            case "rejected":
+                <div class="status-icon rejected">
+                    <i class="bi bi-x-circle"></i>
+                </div>
+                <h1>Dokument wurde abgelehnt</h1>
+                <p class="text-muted">
+                    @if (!string.IsNullOrEmpty(Title) && !string.IsNullOrEmpty(SenderEmail))
+                    {
+                        <span>
+                            Das Dokument «@Title» wurde abgelehnt.
+                            Bei Fragen wenden Sie sich an
+                            <a href="mailto:@SenderEmail">@SenderEmail</a>.
+                        </span>
+                    }
+                    else
+                    {
+                        <span>Dieses Dokument wurde von einem Empfänger abgelehnt.</span>
+                    }
+                </p>
+                break;
+
+            case "not_found":
+                <div class="status-icon locked">
+                    <i class="bi bi-question-circle"></i>
+                </div>
+                <h1>Dokument nicht gefunden</h1>
+                <p class="text-muted">
+                    Dieses Dokument existiert nicht oder ist nicht mehr verfügbar.
+                    Wenn Sie diese URL per E-Mail erhalten haben, wenden Sie sich bitte an das IT-Team.
+                </p>
+                break;
+
+            case "expired":
+                <div class="status-icon locked">
+                    <i class="bi bi-clock-history"></i>
+                </div>
+                <h1>Link abgelaufen</h1>
+                <p class="text-muted">
+                    Der Zugang zu diesem Dokument ist abgelaufen.
+                </p>
+                break;
+        }
+    </header>
+</div>
+
+@code {
+    /// <summary>
+    /// Bestimmt welche Status-Variante angezeigt wird.
+    /// Erlaubte Werte: "signed", "rejected", "not_found", "expired"
+    /// </summary>
+    [Parameter, EditorRequired]
+    public string Type { get; set; } = string.Empty;
+
+    /// <summary>E-Mail des Absenders — nur bei "rejected" relevant.</summary>
+    [Parameter]
+    public string? SenderEmail { get; set; }
+
+    /// <summary>Titel des Umschlags — nur bei "rejected" relevant.</summary>
+    [Parameter]
+    public string? Title { get; set; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Components/Shared/Toast.razor

@@ -0,0 +1,70 @@
+@* Toast: Zeigt kurze Benachrichtigungen an. Ersetzt AlertifyJS aus dem Web-Projekt.
+   
+   Wird einmal im MainLayout platziert. Hört auf den ToastService.
+   Wenn eine Komponente irgendwo _toast.ShowSuccess("Text") aufruft,
+   erscheint hier ein Toast und verschwindet nach 4 Sekunden automatisch.
+   
+   Bootstrap Toast-Klassen werden genutzt:
+   - toast-container: Positionierung (oben rechts)
+   - toast: Einzelner Toast
+   - bg-success/bg-danger/etc: Farbe basierend auf Typ *@
+
+@inject ToastService ToastService
+@implements IDisposable
+
+@if (ToastService.Messages.Count > 0)
+{
+    @* toast-container: Bootstrap-Klasse die Toasts oben rechts positioniert.
+       position-fixed: Bleibt an der Stelle auch beim Scrollen.
+       z-index 1080: Über dem Modal-Backdrop (1070) damit Toasts
+       auch während eines ConfirmDialogs sichtbar sind. *@
+    <div class="toast-container position-fixed top-0 end-0 p-3" style="z-index: 1080;">
+        @foreach (var message in ToastService.Messages)
+        {
+            <div class="toast show align-items-center text-white bg-@message.Type border-0"
+                 role="alert">
+                <div class="d-flex">
+                    <div class="toast-body">
+                        <i class="bi @message.IconClass me-2"></i>
+                        @message.Text
+                    </div>
+                    <button type="button"
+                            class="btn-close btn-close-white me-2 m-auto"
+                            @onclick="() => ToastService.Dismiss(message)">
+                    </button>
+                </div>
+            </div>
+        }
+    </div>
+}
+
+@code {
+    protected override void OnInitialized()
+    {
+        // Subscriber: Wenn der ToastService eine Änderung meldet,
+        // zeichnet diese Komponente sich neu (StateHasChanged).
+        // So erscheinen/verschwinden Toasts automatisch.
+        ToastService.OnChange += HandleChange;
+    }
+
+    /// <summary>
+    /// InvokeAsync ist nötig weil OnChange von einem
+    /// async void (dem Timer im ToastService) ausgelöst wird.
+    /// Das kann auf einem anderen Thread passieren.
+    /// InvokeAsync wechselt zurück auf den Blazor UI-Thread.
+    /// </summary>
+    private async void HandleChange()
+    {
+        await InvokeAsync(StateHasChanged);
+    }
+
+    /// <summary>
+    /// Event-Handler abmelden wenn die Komponente entfernt wird.
+    /// Ohne das würde der ToastService eine Referenz auf eine
+    /// nicht mehr existierende Komponente halten → Memory Leak.
+    /// </summary>
+    public void Dispose()
+    {
+        ToastService.OnChange -= HandleChange;
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/EnvelopeGenerator.ReceiverUI.Client.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk.BlazorWebAssembly">
+
+	<PropertyGroup>
+		<TargetFramework>net9.0</TargetFramework>
+		<ImplicitUsings>enable</ImplicitUsings>
+		<Nullable>enable</Nullable>
+		<NoDefaultLaunchSettingsFile>true</NoDefaultLaunchSettingsFile>
+		<StaticWebAssetProjectMode>Default</StaticWebAssetProjectMode>
+	</PropertyGroup>
+
+	<ItemGroup>
+		<PackageReference Include="Microsoft.AspNetCore.Components.Authorization" Version="9.0.3" />
+		<PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly" Version="9.0.3" />
+		<PackageReference Include="Microsoft.Extensions.Http" Version="9.0.3" />
+	</ItemGroup>
+
+</Project>

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/AuthState.cs

@@ -0,0 +1,13 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Hält den aktuellen Authentifizierungs-Zustand im Client.
+/// Wird vom ApiAuthStateProvider gesetzt und von Komponenten gelesen.
+/// </summary>
+public class AuthState
+{
+    public bool IsAuthenticated { get; set; }
+    public string? Role { get; set; }
+    public string? EnvelopeUuid { get; set; }
+    public string? ReceiverEmail { get; set; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/DocumentModel.cs

@@ -0,0 +1,12 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für Dokument-Daten.
+/// </summary>
+public record DocumentModel
+{
+    public int Id { get; init; }
+    public int EnvelopeId { get; init; }
+    public DateTime AddedWhen { get; init; }
+    public byte[]? ByteData { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/EnvelopeModel.cs

@@ -0,0 +1,27 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für Umschlag-Daten.
+/// Muss nur die JSON-Properties matchen, die die API zurückgibt
+/// und die der Client tatsächlich braucht.
+/// 
+/// WARUM eigene DTOs statt die aus EnvelopeGenerator.Application?
+/// - Application hat Server-Abhängigkeiten (SqlClient, JwtBearer, EF Core)
+/// - Diese Pakete existieren nicht für browser-wasm → Build-Fehler
+/// - Der Client braucht nur eine Teilmenge der Felder
+/// - Eigene DTOs machen den Client unabhängig vom Server
+/// </summary>
+public record EnvelopeModel
+{
+    public int Id { get; init; }
+    public string Uuid { get; init; } = string.Empty;
+    public string Title { get; init; } = string.Empty;
+    public string Message { get; init; } = string.Empty;
+    public bool UseAccessCode { get; init; }
+    public bool TFAEnabled { get; init; }
+    public bool ReadOnly { get; init; }
+    public string Language { get; init; } = "de-DE";
+    public DateTime AddedWhen { get; init; }
+    public UserModel? User { get; init; }
+    public IEnumerable<DocumentModel>? Documents { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/EnvelopeReceiverModel.cs

@@ -0,0 +1,15 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für die Envelope-Receiver-Zuordnung.
+/// </summary>
+public record EnvelopeReceiverModel
+{
+    public EnvelopeModel? Envelope { get; init; }
+    public ReceiverModel? Receiver { get; init; }
+    public int EnvelopeId { get; init; }
+    public int ReceiverId { get; init; }
+    public int Sequence { get; init; }
+    public string? Name { get; init; }
+    public bool HasPhoneNumber { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/EnvelopeViewModel.cs

@@ -0,0 +1,6 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models
+{
+    public class EnvelopeViewModel
+    {
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/ReceiverAuthModel.cs

@@ -0,0 +1,31 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für die Antwort des ReceiverAuthControllers.
+/// Wird 1:1 aus dem JSON deserialisiert.
+/// 
+/// WARUM ein eigenes Client-Model statt das API-Model zu referenzieren?
+/// - Das API-Projekt hat Server-Abhängigkeiten (EF Core, SqlClient, etc.)
+/// - Diese Pakete existieren nicht für browser-wasm → Build-Fehler
+/// - Die Property-Namen müssen nur zum JSON passen (case-insensitive)
+/// </summary>
+public record ReceiverAuthModel
+{
+    /// <summary>
+    /// Aktueller Status des Empfänger-Flows.
+    /// Werte: "requires_access_code", "requires_tfa", "show_document",
+    ///        "already_signed", "rejected", "not_found", "expired", "error"
+    /// </summary>
+    public string Status { get; init; } = string.Empty;
+
+    public string? Title { get; init; }
+    public string? Message { get; init; }
+    public string? SenderEmail { get; init; }
+    public string? ReceiverName { get; init; }
+    public bool TfaEnabled { get; init; }
+    public bool HasPhoneNumber { get; init; }
+    public bool ReadOnly { get; init; }
+    public string? TfaType { get; init; }
+    public DateTime? TfaExpiration { get; init; }
+    public string? ErrorMessage { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/ReceiverModel.cs

@@ -0,0 +1,13 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für Empfänger-Daten.
+/// </summary>
+public record ReceiverModel
+{
+    public int Id { get; init; }
+    public string EmailAddress { get; init; } = string.Empty;
+    public string Signature { get; init; } = string.Empty;
+    public DateTime AddedWhen { get; init; }
+    public DateTime? TfaRegDeadline { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Models/UserModel.cs

@@ -0,0 +1,10 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Models;
+
+/// <summary>
+/// Client-seitiges DTO für Benutzer-Daten (Absender).
+/// </summary>
+public record UserModel
+{
+    public string? Email { get; init; }
+    public string? DisplayName { get; init; }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Envelope/EnvelopeExpired.razor

@@ -0,0 +1,5 @@
+<h3>EnvelopeExpired</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Envelope/EnvelopeLocked.razor

@@ -0,0 +1,5 @@
+<h3>EnvelopeLocked</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Envelope/EnvelopePage.razor

@@ -0,0 +1,159 @@
+@page "/envelope/{EnvelopeKey}"
+@rendermode InteractiveAuto
+@inject IReceiverAuthService ReceiverAuthService
+@inject EnvelopeState State
+@implements IDisposable
+
+<PageTitle>Dokument</PageTitle>
+
+@switch (State.Status)
+{
+    case EnvelopePageStatus.Loading:
+        <LoadingIndicator Message="Dokument wird geladen..." />
+        break;
+
+    case EnvelopePageStatus.NotFound:
+        <StatusPage Type="not_found" />
+        break;
+
+    case EnvelopePageStatus.AlreadySigned:
+        <StatusPage Type="signed"
+                    Title="@State.Title"
+                    SenderEmail="@State.SenderEmail" />
+        break;
+
+    case EnvelopePageStatus.Rejected:
+        <StatusPage Type="rejected"
+                    Title="@State.Title"
+                    SenderEmail="@State.SenderEmail" />
+        break;
+
+    case EnvelopePageStatus.Expired:
+        <StatusPage Type="expired" />
+        break;
+
+    case EnvelopePageStatus.RequiresAccessCode:
+        <AccessCodeForm EnvelopeKey="@EnvelopeKey"
+                        ErrorMessage="@State.ErrorMessage"
+                        SenderEmail="@State.SenderEmail"
+                        Title="@State.Title"
+                        TfaEnabled="@State.TfaEnabled"
+                        HasPhoneNumber="@State.HasPhoneNumber"
+                        OnSubmit="HandleAccessCodeSubmit" />
+        break;
+
+    case EnvelopePageStatus.RequiresTwoFactor:
+        <TfaForm EnvelopeKey="@EnvelopeKey"
+                 TfaType="@(State.TfaType ?? "authenticator")"
+                 TfaExpiration="@State.TfaExpiration"
+                 HasPhoneNumber="@State.HasPhoneNumber"
+                 ErrorMessage="@State.ErrorMessage"
+                 OnSubmit="HandleTfaSubmit" />
+        break;
+
+    case EnvelopePageStatus.ShowDocument:
+        @* Phase 4 (PSPDFKit) kommt später — vorerst Platzhalter *@
+        <div class="text-center mt-5">
+            <div class="status-icon signed">
+                <i class="bi bi-file-earmark-check"></i>
+            </div>
+            <h2>Dokument bereit</h2>
+            <p class="text-muted">
+                «@State.Title» — PDF-Viewer wird in Phase 4 integriert.
+            </p>
+            @if (State.ReadOnly)
+            {
+                <span class="badge bg-secondary">Nur Lesen</span>
+            }
+        </div>
+        break;
+
+    case EnvelopePageStatus.Error:
+        <ErrorDisplay Title="Fehler" Message="@State.ErrorMessage" />
+        break;
+}
+
+@code {
+    [Parameter] public string EnvelopeKey { get; set; } = default!;
+
+    protected override async Task OnInitializedAsync()
+    {
+        State.OnChange += StateHasChanged;
+        await LoadStatusAsync();
+    }
+
+    /// <summary>
+    /// Erster API-Call: Status prüfen.
+    /// Entspricht dem GET /Envelope/{key} im Web-Projekt.
+    /// Die API entscheidet, was passiert (AccessCode nötig? Bereits signiert? etc.)
+    /// </summary>
+    private async Task LoadStatusAsync()
+    {
+        State.SetLoading();
+
+        var result = await ReceiverAuthService.GetStatusAsync(EnvelopeKey);
+
+        if (result.IsSuccess && result.Data is not null)
+        {
+            State.ApplyApiResponse(result.Data);
+        }
+        else if (result.StatusCode == 404)
+        {
+            State.SetNotFound();
+        }
+        else
+        {
+            State.SetError(result.ErrorMessage ?? "Verbindung zum Server fehlgeschlagen.");
+        }
+    }
+
+    /// <summary>
+    /// Zweiter API-Call: AccessCode senden.
+    /// Wird von AccessCodeForm aufgerufen (OnSubmit-Callback).
+    /// Die API prüft den Code und antwortet mit dem nächsten Status.
+    /// </summary>
+    private async Task HandleAccessCodeSubmit((string Code, bool PreferSms) submission)
+    {
+        var result = await ReceiverAuthService.SubmitAccessCodeAsync(
+            EnvelopeKey, submission.Code, submission.PreferSms);
+
+        if (result.IsSuccess && result.Data is not null)
+        {
+            State.ApplyApiResponse(result.Data);
+        }
+        else if (result.Data is not null)
+        {
+            // 401 mit Body → falscher Code, API gibt trotzdem ReceiverAuthModel zurück
+            State.ApplyApiResponse(result.Data);
+        }
+        else
+        {
+            State.SetError(result.ErrorMessage ?? "Fehler bei der Code-Prüfung.");
+        }
+    }
+
+    /// <summary>
+    /// Dritter API-Call: TFA-Code senden.
+    /// Wird von TfaForm aufgerufen (OnSubmit-Callback).
+    /// </summary>
+    private async Task HandleTfaSubmit((string Code, string Type) submission)
+    {
+        var result = await ReceiverAuthService.SubmitTfaCodeAsync(
+            EnvelopeKey, submission.Code, submission.Type);
+
+        if (result.IsSuccess && result.Data is not null)
+        {
+            State.ApplyApiResponse(result.Data);
+        }
+        else if (result.Data is not null)
+        {
+            State.ApplyApiResponse(result.Data);
+        }
+        else
+        {
+            State.SetError(result.ErrorMessage ?? "Fehler bei der TFA-Prüfung.");
+        }
+    }
+
+    public void Dispose() => State.OnChange -= StateHasChanged;
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Envelope/EnvelopeRejected.razor

@@ -0,0 +1,5 @@
+<h3>EnvelopeRejected</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Envelope/EnvelopeSigned.razor

@@ -0,0 +1,5 @@
+<h3>EnvelopeSigned</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/Home.razor

@@ -0,0 +1,5 @@
+<h3>Home</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Pages/NotFound.razor

@@ -0,0 +1,5 @@
+<h3>NotFound</h3>
+
+@code {
+
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Program.cs

@@ -0,0 +1,30 @@
+using Microsoft.AspNetCore.Components.Authorization;
+using Microsoft.AspNetCore.Components.WebAssembly.Hosting;
+using EnvelopeGenerator.ReceiverUI.Client.Auth;
+using EnvelopeGenerator.ReceiverUI.Client.Services;
+using EnvelopeGenerator.ReceiverUI.Client.State;
+
+var builder = WebAssemblyHostBuilder.CreateDefault(args);
+
+// HttpClient: BaseAddress zeigt auf den ReceiverUI-Server (gleiche Domain)
+// Von dort werden alle /api/* Calls via YARP an die echte API weitergeleitet
+builder.Services.AddScoped(sp =>
+    new HttpClient { BaseAddress = new Uri(builder.HostEnvironment.BaseAddress) });
+
+// Auth: Blazor fragt über diesen Provider "Ist der Nutzer eingeloggt?"
+builder.Services.AddAuthorizationCore();
+builder.Services.AddScoped<ApiAuthStateProvider>();
+builder.Services.AddScoped<AuthenticationStateProvider>(sp =>
+    sp.GetRequiredService<ApiAuthStateProvider>());
+
+// API-Services: Je ein Service pro API-Controller
+builder.Services.AddScoped<IAuthService, AuthService>();
+builder.Services.AddScoped<IEnvelopeService, EnvelopeService>();
+builder.Services.AddScoped<IReceiverAuthService, ReceiverAuthService>();
+
+// State: Ein State-Objekt pro Browser-Tab
+builder.Services.AddScoped<EnvelopeState>();
+
+builder.Services.AddScoped<ToastService>();
+
+await builder.Build().RunAsync();

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/AuthService.cs

@@ -0,0 +1,54 @@
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+/// <summary>
+/// Spricht mit dem bestehenden AuthController der API.
+/// Die API erkennt den Nutzer über das Cookie "AuthToken" automatisch.
+/// </summary>
+public class AuthService : ApiServiceBase, IAuthService
+{
+    public AuthService(HttpClient http, ILogger<AuthService> logger) : base(http, logger) { }
+
+    public async Task<ApiResponse> CheckAuthAsync(string? role = null, CancellationToken ct = default)
+    {
+        var endpoint = role is not null ? $"api/auth/check?role={role}" : "api/auth/check";
+        try
+        {
+            var response = await Http.GetAsync(endpoint, ct);
+            return response.IsSuccessStatusCode
+                ? ApiResponse.Success((int)response.StatusCode)
+                : ApiResponse.Failure((int)response.StatusCode);
+        }
+        catch (HttpRequestException ex)
+        {
+            Logger.LogError(ex, "HTTP error calling GET {Endpoint}", endpoint);
+            return ApiResponse.Failure(0, "Verbindung zum Server fehlgeschlagen.");
+        }
+        catch (TaskCanceledException)
+        {
+            return ApiResponse.Failure(0, "Anfrage abgebrochen.");
+        }
+    }
+
+    public async Task<ApiResponse> LogoutAsync(CancellationToken ct = default)
+    {
+        const string endpoint = "api/auth/logout";
+        try
+        {
+            var response = await Http.PostAsync(endpoint, null, ct);
+            return response.IsSuccessStatusCode
+                ? ApiResponse.Success((int)response.StatusCode)
+                : ApiResponse.Failure((int)response.StatusCode);
+        }
+        catch (HttpRequestException ex)
+        {
+            Logger.LogError(ex, "HTTP error calling POST {Endpoint}", endpoint);
+            return ApiResponse.Failure(0, "Verbindung zum Server fehlgeschlagen.");
+        }
+        catch (TaskCanceledException)
+        {
+            return ApiResponse.Failure(0, "Anfrage abgebrochen.");
+        }
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/Base/ApiResponse.cs

@@ -0,0 +1,46 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+/// <summary>
+/// Einheitliches Response-Objekt für ALLE API-Aufrufe.
+/// 
+/// WARUM: Jeder API-Aufruf kann fehlschlagen (Netzwerk, 401, 500...).
+/// Statt überall try-catch zu haben, kapselt dieses Objekt Erfolg/Fehler einheitlich.
+/// So kann jede Blazor-Komponente einheitlich darauf reagieren.
+/// </summary>
+public record ApiResponse<T>
+{
+    public bool IsSuccess { get; init; }
+    public T? Data { get; init; }
+    public int StatusCode { get; init; }
+    public string? ErrorMessage { get; init; }
+
+    public static ApiResponse<T> Success(T data, int statusCode = 200)
+        => new() { IsSuccess = true, Data = data, StatusCode = statusCode };
+
+    public static ApiResponse<T> Failure(int statusCode, string? error = null)
+        => new() { IsSuccess = false, StatusCode = statusCode, ErrorMessage = error };
+
+    /// <summary>
+    /// Failure mit deserialisiertem Body — für Fälle wo die API
+    /// bei 401/404 trotzdem ein strukturiertes JSON zurückgibt
+    /// (z.B. ReceiverAuthResponse mit ErrorMessage + Status).
+    /// </summary>
+    public static ApiResponse<T> Failure(int statusCode, string? error, T? data)
+        => new() { IsSuccess = false, StatusCode = statusCode, ErrorMessage = error, Data = data };
+}
+
+/// <summary>
+/// Response ohne Daten (für POST/PUT/DELETE die nur Status zurückgeben).
+/// </summary>
+public record ApiResponse
+{
+    public bool IsSuccess { get; init; }
+    public int StatusCode { get; init; }
+    public string? ErrorMessage { get; init; }
+
+    public static ApiResponse Success(int statusCode = 200)
+        => new() { IsSuccess = true, StatusCode = statusCode };
+
+    public static ApiResponse Failure(int statusCode, string? error = null)
+        => new() { IsSuccess = false, StatusCode = statusCode, ErrorMessage = error };
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/Base/ApiServiceBase.cs

@@ -0,0 +1,141 @@
+using System.Net.Http.Json;
+using Microsoft.Extensions.Logging;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+/// <summary>
+/// Basisklasse für ALLE API-Services.
+/// 
+/// WARUM eine Basisklasse?
+/// - Einheitliches Error-Handling: Jeder API-Aufruf wird gleich behandelt
+/// - DRY (Don't Repeat Yourself): Logging, Fehlerbehandlung, Serialisierung nur einmal
+/// - Einfache Erweiterung: Retry-Logik, Token-Refresh etc. nur hier ändern
+/// </summary>
+public abstract class ApiServiceBase
+{
+    protected readonly HttpClient Http;
+    protected readonly ILogger Logger;
+
+    protected ApiServiceBase(HttpClient http, ILogger logger)
+    {
+        Http = http;
+        Logger = logger;
+    }
+
+    /// <summary>
+    /// GET-Request mit Deserialisierung.
+    /// Alle API GET-Aufrufe gehen durch diese Methode.
+    /// </summary>
+    protected async Task<ApiResponse<T>> GetAsync<T>(string endpoint, CancellationToken ct = default)
+    {
+        try
+        {
+            var response = await Http.GetAsync(endpoint, ct);
+
+            if (!response.IsSuccessStatusCode)
+            {
+                var errorBody = await response.Content.ReadAsStringAsync(ct);
+                Logger.LogWarning("GET {Endpoint} failed: {Status} - {Body}",
+                    endpoint, (int)response.StatusCode, errorBody);
+
+                // Versuche den Body trotzdem zu deserialisieren —
+                // die API gibt bei 401/404 oft strukturierte JSON-Antworten zurück
+                // (z.B. ReceiverAuthResponse mit ErrorMessage + Status)
+                var errorData = await TryDeserializeAsync<T>(response, ct);
+
+                return ApiResponse<T>.Failure((int)response.StatusCode, errorBody, errorData);
+            }
+
+            var data = await response.Content.ReadFromJsonAsync<T>(cancellationToken: ct);
+            return ApiResponse<T>.Success(data!, (int)response.StatusCode);
+        }
+        catch (HttpRequestException ex)
+        {
+            Logger.LogError(ex, "HTTP error calling GET {Endpoint}", endpoint);
+            return ApiResponse<T>.Failure(0, "Verbindung zum Server fehlgeschlagen.");
+        }
+        catch (TaskCanceledException)
+        {
+            Logger.LogWarning("GET {Endpoint} was cancelled", endpoint);
+            return ApiResponse<T>.Failure(0, "Anfrage abgebrochen.");
+        }
+    }
+
+    /// <summary>
+    /// POST-Request mit Body und Response-Deserialisierung.
+    /// </summary>
+    protected async Task<ApiResponse<TResponse>> PostAsync<TRequest, TResponse>(
+        string endpoint, TRequest body, CancellationToken ct = default)
+    {
+        try
+        {
+            var response = await Http.PostAsJsonAsync(endpoint, body, ct);
+
+            if (!response.IsSuccessStatusCode)
+            {
+                var errorBody = await response.Content.ReadAsStringAsync(ct);
+                Logger.LogWarning("POST {Endpoint} failed: {Status} - {Body}",
+                    endpoint, (int)response.StatusCode, errorBody);
+
+                var errorData = await TryDeserializeAsync<TResponse>(response, ct);
+
+                return ApiResponse<TResponse>.Failure((int)response.StatusCode, errorBody, errorData);
+            }
+
+            var data = await response.Content.ReadFromJsonAsync<TResponse>(cancellationToken: ct);
+            return ApiResponse<TResponse>.Success(data!, (int)response.StatusCode);
+        }
+        catch (HttpRequestException ex)
+        {
+            Logger.LogError(ex, "HTTP error calling POST {Endpoint}", endpoint);
+            return ApiResponse<TResponse>.Failure(0, "Verbindung zum Server fehlgeschlagen.");
+        }
+    }
+
+    /// <summary>
+    /// POST-Request ohne Response-Body (z.B. Logout).
+    /// </summary>
+    protected async Task<ApiResponse> PostAsync<TRequest>(
+        string endpoint, TRequest body, CancellationToken ct = default)
+    {
+        try
+        {
+            var response = await Http.PostAsJsonAsync(endpoint, body, ct);
+
+            if (!response.IsSuccessStatusCode)
+            {
+                var errorBody = await response.Content.ReadAsStringAsync(ct);
+                return ApiResponse.Failure((int)response.StatusCode, errorBody);
+            }
+
+            return ApiResponse.Success((int)response.StatusCode);
+        }
+        catch (HttpRequestException ex)
+        {
+            Logger.LogError(ex, "HTTP error calling POST {Endpoint}", endpoint);
+            return ApiResponse.Failure(0, "Verbindung zum Server fehlgeschlagen.");
+        }
+    }
+
+    /// <summary>
+    /// Versucht den Response-Body als JSON zu deserialisieren.
+    /// Gibt null zurück wenn es nicht klappt (z.B. bei HTML-Fehlerseiten).
+    /// </summary>
+    private static async Task<T?> TryDeserializeAsync<T>(HttpResponseMessage response, CancellationToken ct)
+    {
+        try
+        {
+            // Nur versuchen wenn der Content-Type JSON ist
+            if (response.Content.Headers.ContentType?.MediaType == "application/json")
+            {
+                return await response.Content.ReadFromJsonAsync<T>(cancellationToken: ct);
+            }
+        }
+        catch
+        {
+            // Ignorieren — der Body war kein valides JSON
+        }
+
+        return default;
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/EnvelopeService.cs

@@ -0,0 +1,16 @@
+using EnvelopeGenerator.ReceiverUI.Client.Models;
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+public class EnvelopeService : ApiServiceBase, IEnvelopeService
+{
+    public EnvelopeService(HttpClient http, ILogger<EnvelopeService> logger) : base(http, logger) { }
+
+    public Task<ApiResponse<IEnumerable<EnvelopeModel>>> GetEnvelopesAsync(CancellationToken ct = default)
+        => GetAsync<IEnumerable<EnvelopeModel>>("api/envelope", ct);
+
+    public Task<ApiResponse<IEnumerable<EnvelopeReceiverModel>>> GetEnvelopeReceiversAsync(
+        CancellationToken ct = default)
+        => GetAsync<IEnumerable<EnvelopeReceiverModel>>("api/envelopereceiver", ct);
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/HistoryService.cs

@@ -0,0 +1,6 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Services
+{
+    public class HistoryService
+    {
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/IAuthService.cs

@@ -0,0 +1,20 @@
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+/// <summary>
+/// Kommuniziert mit dem AuthController der API.
+/// 
+/// WARUM Interface + Implementierung?
+/// - Testbarkeit: In Unit-Tests kann man einen Mock verwenden
+/// - Austauschbarkeit: Wenn sich die API ändert, ändert sich nur die Implementierung
+/// - Blazor-Konvention: Services werden über Interfaces per DI registriert
+/// </summary>
+public interface IAuthService
+{
+    /// <summary>Prüft ob der Nutzer eingeloggt ist → GET /api/auth/check</summary>
+    Task<ApiResponse> CheckAuthAsync(string? role = null, CancellationToken ct = default);
+
+    /// <summary>Logout → POST /api/auth/logout</summary>
+    Task<ApiResponse> LogoutAsync(CancellationToken ct = default);
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/IEnvelopeService.cs

@@ -0,0 +1,18 @@
+using EnvelopeGenerator.ReceiverUI.Client.Models;
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+/// <summary>
+/// Kommuniziert mit EnvelopeController und EnvelopeReceiverController.
+/// Verwendet Client-eigene Models statt der Server-DTOs.
+/// </summary>
+public interface IEnvelopeService
+{
+    /// <summary>Lädt Umschläge → GET /api/envelope</summary>
+    Task<ApiResponse<IEnumerable<EnvelopeModel>>> GetEnvelopesAsync(CancellationToken ct = default);
+
+    /// <summary>Lädt EnvelopeReceiver → GET /api/envelopereceiver</summary>
+    Task<ApiResponse<IEnumerable<EnvelopeReceiverModel>>> GetEnvelopeReceiversAsync(
+        CancellationToken ct = default);
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/IHistoryService.cs

@@ -0,0 +1,6 @@
+namespace EnvelopeGenerator.ReceiverUI.Client.Services
+{
+    public interface IHistoryService
+    {
+    }
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/IReceiverAuthSerive.cs

@@ -0,0 +1,26 @@
+using EnvelopeGenerator.ReceiverUI.Client.Models;
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+/// <summary>
+/// Kommuniziert mit dem ReceiverAuthController der API.
+/// 
+/// Drei Methoden — eine pro Endpunkt:
+/// 1. GetStatusAsync    → GET  /api/receiverauth/{key}/status
+/// 2. SubmitAccessCodeAsync → POST /api/receiverauth/{key}/access-code
+/// 3. SubmitTfaCodeAsync    → POST /api/receiverauth/{key}/tfa
+/// </summary>
+public interface IReceiverAuthService
+{
+    /// <summary>Prüft den aktuellen Status des Empfänger-Flows</summary>
+    Task<ApiResponse<ReceiverAuthModel>> GetStatusAsync(string key, CancellationToken ct = default);
+
+    /// <summary>Sendet den Zugangscode zur Prüfung</summary>
+    Task<ApiResponse<ReceiverAuthModel>> SubmitAccessCodeAsync(
+        string key, string accessCode, bool preferSms, CancellationToken ct = default);
+
+    /// <summary>Sendet den TFA-Code (SMS oder Authenticator) zur Prüfung</summary>
+    Task<ApiResponse<ReceiverAuthModel>> SubmitTfaCodeAsync(
+        string key, string code, string type, CancellationToken ct = default);
+}

EnvelopeGenerator.ReceiverUI/EnvelopeGenerator.ReceiverUI.Client/Services/ReceiverAuthService.cs

@@ -0,0 +1,41 @@
+using EnvelopeGenerator.ReceiverUI.Client.Models;
+using EnvelopeGenerator.ReceiverUI.Client.Services.Base;
+
+namespace EnvelopeGenerator.ReceiverUI.Client.Services;
+
+/// <summary>
+/// Spricht mit dem ReceiverAuthController der API.
+/// 
+/// Nutzt die Basisklasse ApiServiceBase für einheitliches Error-Handling.
+/// Jede Methode gibt ApiResponse&lt;ReceiverAuthModel&gt; zurück —
+/// egal ob Erfolg oder Fehler. Die aufrufende Komponente prüft dann
+/// result.IsSuccess und result.Data.Status.
+/// 
+/// WARUM gibt die API bei 401 trotzdem ein ReceiverAuthModel zurück?
+/// Weil auch bei "falscher Code" der Client wissen muss, welchen
+/// Status er anzeigen soll (z.B. "requires_access_code" + ErrorMessage).
+/// Deshalb deserialisieren wir auch bei Fehler-Statuscodes den Body.
+/// </summary>
+public class ReceiverAuthService : ApiServiceBase, IReceiverAuthService
+{
+    public ReceiverAuthService(HttpClient http, ILogger<ReceiverAuthService> logger)
+        : base(http, logger) { }
+
+    public Task<ApiResponse<ReceiverAuthModel>> GetStatusAsync(
+        string key, CancellationToken ct = default)
+        => GetAsync<ReceiverAuthModel>($"api/receiverauth/{key}/status", ct);
+
+    public Task<ApiResponse<ReceiverAuthModel>> SubmitAccessCodeAsync(
+        string key, string accessCode, bool preferSms, CancellationToken ct = default)
+        => PostAsync<object, ReceiverAuthModel>(
+            $"api/receiverauth/{key}/access-code",
+            new { AccessCode = accessCode, PreferSms = preferSms },
+            ct);
+
+    public Task<ApiResponse<ReceiverAuthModel>> SubmitTfaCodeAsync(
+        string key, string code, string type, CancellationToken ct = default)
+        => PostAsync<object, ReceiverAuthModel>(
+            $"api/receiverauth/{key}/tfa",
+            new { Code = code, Type = type },
+            ct);
+}