22 Commits (0467ac2cc23fef0932de9a236cb07ea58258447f)

Author	SHA1	Message	Date
Ryan Arakawa	741c548d26	CP-11042 partnership features updated (#26) ... * Add partnership template authorization and ability system * Update template authorization to support partnership context * Add request context-based authorization for API access * Implement hybrid partnership/account authorization logic * Add submission authorization conditions for partnerships * Support global partnership template access * Add template cloning services for partnership workflows * Update template cloning to require explicit target parameters, to allow for cloning for either account or from partnership * Add Templates::CloneToAccount service for partnership to account cloning * Add Templates::CloneToPartnership service for global to partnership cloning * Add logic to detect account vs partnership template cloning with validation * Add folder assignment logic for cloned templates * Add external authentication and partnership support * Update ExternalAuthService to support partnership OR account authentication * Implement user assignment to accounts when partnership context is provided * Support pure partnership authentication without account assignment * Update API controllers for partnership template support * Add partnership request context to API base controller * Update submissions controller to support partnership templates * Add partnership template cloning to templates clone controller * Refactor template controller webhook logic to reduce complexity * Support external_account_id parameter for partnership workflows * Update web controllers and views for partnership template support * Add tests * erb_lint fixes * add local claude file * shared concern for handling partnership context * remove overly permissive case * global templates should be available for partnerships and accounts * pass through access context in vue * add tests * add partnership context and tests to submissions * add token refresh as last resort for a corrupted token	2 months ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Pete Matsyburka	970e53a5a3	remove log	1 year ago
Oleksandr Turchyn	3c616a824c	show error for cross-environment API key usage	1 year ago
Pete Matsyburka	2c8942e888	add form events api	1 year ago
Pete Matsyburka	e7eb1d4f12	add noindex	2 years ago
Pete Matsyburka	fc679bcd72	add require file links auth toggle	2 years ago
Pete Matsyburka	943c76505d	remove api error log	2 years ago
Pete Matsyburka	749722a9df	add rate limit	2 years ago
Pete Matsyburka	398fae82cb	optimize api pagination	2 years ago
Pete Matsyburka	aa3bd24332	add cors headers	2 years ago
Pete Matsyburka	f8a654a5b6	reduce error log	2 years ago
Alex Turchyn	f9ccca1376	add base API error messages	2 years ago
Pete Matsyburka	6253e80a70	add testing environment	2 years ago
Pete Matsyburka	49cea59b94	do not authenticate archived users	2 years ago
Pete Matsyburka	31f8057bfa	fix api pagination	2 years ago
Pete Matsyburka	94d745cf1c	rescue json parse error	2 years ago
Pete Matsyburka	94a13ffca2	do not use devise strategy for api auth	2 years ago
DocuSeal	c227a1988a	fix api pagination limit	2 years ago
DocuSeal	1f41807412	add more api endpoints	2 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	2 years ago
Alex Turchyn	97c462ead2	initial commit	3 years ago