CASE FILES VIDEOPRO CONNECTOR v3 — PERSISTENT SIGN-IN AND BRANDED AUTHORIZATION
For the existing Case Files Professional GIB / Commercial installation.

INSTALL ON THE DOMAIN FIRST
Back up the existing connector files. Copy these FIVE files from this folder into the Case Files application root, preserving relative paths:
  videopro-connect.php
  videopro-api.php
  app/videopro-connector.php
  app/videopro-upload.php
  assets/videopro-connect.css
The assets CSS file is required for the branded page and works with the existing Content Security Policy. Do not upload the desktop source folder to your website. No database migration is required. Existing app license, HTTPS, account and storage protections remain in effect.

Then start desktop v0.18.1 and authorize once using a NEW code. Old desktop versions did not save their credentials; they cannot be recovered after exit. A non-expired saved older token can be upgraded by the session endpoint. Already-expired or revoked credentials require a new authorization.

Authorization grants still last five minutes and can be used once. Successful desktop credentials have no scheduled expiry. They remain valid until sign-out, website revocation, account deactivation, security-session invalidation, or loss of the local Windows credential store. Every remote request rechecks the current account and permissions. The server stores token hashes; desktop credentials are encrypted with Windows user-scoped DPAPI. Other Windows accounts/computers cannot simply reuse the saved credentials.

CASE VISIBILITY
Administrators: all active surveillance cases, without assignment required.
Case managers / investigators: directly assigned active surveillance cases only.
Closed, cancelled, on-hold, new and non-surveillance cases are excluded.
Case/subject access and uploads are rechecked server-side; removing an assignment removes access. Case lists refresh after connection and after application startup. Use Refresh active surveillance cases after changing assignments or status on the website. Empty results are explained in the desktop status line.

Existing pending-release upload behavior remains unchanged. VideoPro does not release or publish client videos. Maximum upload 2 GiB. Keep the existing protected storage rules and at least 2 MiB request body allowance.

This add-on was tested against local GIB and Commercial code fixtures. It has NOT been deployed to or verified on your live domain by this update.
