1787 Commits (07f6883a37c8c4749ec7d248c94de9add302fe76)

Author	SHA1	Message	Date
Wabo	45ed368a26	Fix Google SSO boot order and route plumbing surfaced by specs ... Three fixes uncovered while running the new omniauth_callbacks specs in a Ruby 4.0.1 container: - config/initializers/devise.rb: read GOOGLE_CLIENT_ID / SECRET / ALLOWED_DOMAINS directly from ENV instead of via Wabosign::*. The module isn't autoloadable yet at initializer-load time (Rails.root isn't set), but ENV is. The User model and controllers still go through Wabosign helpers, which load fine once Rails is up. - app/models/user.rb: stop passing `omniauth_providers:` when :omniauthable isn't in the modules list. Devise raises NoMethodError omniauth_providers= otherwise. Now both the module inclusion and the keyword are gated on Wabosign.google_sso_enabled? - spec/requests/users/omniauth_callbacks_spec.rb: post to user_google_oauth2_omniauth_callback_path instead of the hardcoded /users/auth/... URL. With devise_for :users, path: '/' the actual callback route is /auth/google_oauth2/callback. Also create a placeholder admin user so ApplicationController#maybe_redirect_to_setup doesn't intercept the request before the callback action runs. Schema dump and .gitignore (adds /vendor) bundled in. All 5 specs now pass. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Wabo	ad12ef7fb5	Add Google Workspace SSO via omniauth-google-oauth2 ... Adds "Sign in with Google" as an additive auth path next to email and password. When GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set, the Google button appears on the sign-in page and the SSO settings page shows an env-driven status panel. Access is restricted to Workspace domains listed in GOOGLE_ALLOWED_DOMAINS (CSV); the hd claim is re-verified server-side on every callback so a misconfigured Google consent screen cannot bypass it. New users from an allowed domain are JIT-provisioned in the default account (oldest, or pinned via GOOGLE_DEFAULT_ACCOUNT_ID). Existing users with a matching email get linked to their Google identity on first sign-in; identity collisions (same email, different Google uid) are rejected. Google's MFA is trusted: users signed in via Google do not see the WaboSign OTP prompt or the FORCE_MFA setup redirect. Password sign-in keeps working unchanged, including its existing OTP gate. Implementation: - Devise gains :omniauthable when SSO is enabled; users get provider/uid columns with a partial unique index that allows NULL for password-only rows. - Users::OmniauthCallbacksController handles /users/auth/google_oauth2/ callback, sets session[:bypass_otp_for_sso], and redirects on failure. - SessionsController#destroy clears the bypass flag on sign-out. - DashboardController#maybe_redirect_mfa_setup honours the flag and User#signed_in_via_sso?. - The previously empty _omniauthable.html.erb stub now renders the Google button. Request specs cover happy path, link-existing-user, domain rejection, identity collision, and 2FA bypass. GOOGLE_SSO.md is the operator-facing setup, behaviour, verification, and troubleshooting guide. README links to it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Wabo	2796ddf424	Rebrand DocuSeal to WaboSign and unlock Pro features ... Renames the product to WaboSign across UI, mailers, locales, assets, and internal Ruby module. Keeps the upstream DocuSeal attribution required by AGPLv3 §7(b) in the powered-by footer, email attribution, README, and a new NOTICE file. Migration renames the AATL cert identifier in encrypted configs from docuseal_aatl to wabosign_aatl. Removes multitenant-gated Pro upsell UI (Plans/Console/Upgrade links, SMS/SSO/bulk-send/logo placeholders, reminder-duration restriction, the "DocuSeal Pro" email-attribution toggle, conditions/formula/payment pricing links) so every shipped feature is reachable on a self-hosted deployment. Multitenant routing logic is preserved. Drops Discord, Twitter, and ChatGPT/AI-assistant chrome. Embedding modal keeps the upstream <docuseal-form> / @docuseal/* SDK contract so existing embedded forms continue to work; documented in NOTICE. REBRANDING.md captures the change inventory for future maintainers. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Pete Matsyburka	f2479bd259	adjust open revisions	4 months ago
Pete Matsyburka	135f0826d2	fix style	4 months ago
Pete Matsyburka	5710f0177b	update gh stars	4 months ago
Pete Matsyburka	1a3a0528ba	fix i18n	4 months ago
Pete Matsyburka	59793ff374	adjust builder	5 months ago
Pete Matsyburka	3c4ed42419	fix i18n	5 months ago
Pete Matsyburka	76659497b7	typos	5 months ago
Pete Matsyburka	1fa953104a	update gh stars	5 months ago
Pete Matsyburka	50eb5b070e	fix typo	5 months ago
Pete Matsyburka	10fd624bec	add revisions	5 months ago
Alex Turchyn	04ec2f8260	allow permanent delete submissions in archived templates	5 months ago
Pete Matsyburka	d828d79574	improve log	5 months ago
Pete Matsyburka	01dd3fefe5	retry webhooks in test mode	5 months ago
Pete Matsyburka	45ae954c0c	add hmac webhook secret	5 months ago
Pete Matsyburka	1304849b55	update gh stars	5 months ago
Pete Matsyburka	6557329e97	gh 13k	5 months ago
Pete Matsyburka	310b16f54a	use mcp source	5 months ago
Pete Matsyburka	6d3ad4a869	update gh stars	5 months ago
Pete Matsyburka	07b4ada5be	optimize edit json	5 months ago
Pete Matsyburka	f70bf530ba	hide qr link	5 months ago
Pete Matsyburka	a26aa0f411	remove log	5 months ago
Pete Matsyburka	1503375eed	respond to HEAD file proxy	5 months ago
Pete Matsyburka	2dec099f20	fix signature canvas minimize	5 months ago
Pete Matsyburka	bf6eed4ea2	fix canvas error	5 months ago
Pete Matsyburka	9c9dc27537	fix new area order	5 months ago
Pete Matsyburka	7305637b8c	sort appears on	5 months ago
Pete Matsyburka	a6e22adf2e	fix preview	5 months ago
Pete Matsyburka	809c6b1aa8	fix modal open	5 months ago
Pete Matsyburka	6dec56198c	add require email 2fa to submitter update	5 months ago
Pete Matsyburka	d96d252df3	use post for test mode	5 months ago
Pete Matsyburka	3fca76a716	change state param	5 months ago
Pete Matsyburka	a184fa11f1	move auth links	5 months ago
Pete Matsyburka	e9c0b6a703	rate limit	5 months ago
Pete Matsyburka	ec7df08496	adjust send submission email	5 months ago
Pete Matsyburka	6627d7eac5	fix erblint	5 months ago
Pete Matsyburka	1f8945d710	fix expired filter	5 months ago
Pete Matsyburka	81a6a48d70	validate color	5 months ago
Pete Matsyburka	b93c7cd261	add has_many document_metadata	5 months ago
Pete Matsyburka	39407557f2	adjust page preview	5 months ago
Alex Turchyn	56ba3c2a52	add custom classes	5 months ago
Pete Matsyburka	c7afe33c72	add time formats	5 months ago
Pete Matsyburka	7c6a7513fd	add with custom field tab	5 months ago
Pete Matsyburka	6d13119ee0	input mode condition and formula	5 months ago
Pete Matsyburka	1e2c752937	detect existing fields	5 months ago
Pete Matsyburka	e82faf8320	queue page field detection	5 months ago
Pete Matsyburka	4adb1001b0	add rotate incremental config	5 months ago
Pete Matsyburka	992a1b26c0	adjust tooltip position	5 months ago