423 Commits (07f6883a37c8c4749ec7d248c94de9add302fe76)

Author	SHA1	Message	Date
Wabo	07f6883a37	Fix container boot crash when Google SSO env vars are not set ... Devise raises "Mapping omniauth_callbacks on a resource that is not omniauthable" at route-load time if `controllers[:omniauth_callbacks]` is set on `devise_for`, regardless of whether `:omniauth_callbacks` is in the `only:` list (see devise-5.0.3 lib/devise/rails/routes.rb:251). The previous routes.rb only gated the `only:` array. Adding the same gate to the `controllers:` hash so the omniauth callback controller is only declared when GOOGLE_CLIENT_ID + GOOGLE_CLIENT_SECRET are present. Reproduced the crash by running the image without the env vars; fix verified in both states: - No env vars: container boots, /sign_in renders 200, no Google button present. - Env vars set + admin user created: container boots, /sign_in renders 200, "Sign in with Google" form posts to /auth/google_oauth2 with the /google_g.svg logo. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Wabo	45ed368a26	Fix Google SSO boot order and route plumbing surfaced by specs ... Three fixes uncovered while running the new omniauth_callbacks specs in a Ruby 4.0.1 container: - config/initializers/devise.rb: read GOOGLE_CLIENT_ID / SECRET / ALLOWED_DOMAINS directly from ENV instead of via Wabosign::*. The module isn't autoloadable yet at initializer-load time (Rails.root isn't set), but ENV is. The User model and controllers still go through Wabosign helpers, which load fine once Rails is up. - app/models/user.rb: stop passing `omniauth_providers:` when :omniauthable isn't in the modules list. Devise raises NoMethodError omniauth_providers= otherwise. Now both the module inclusion and the keyword are gated on Wabosign.google_sso_enabled? - spec/requests/users/omniauth_callbacks_spec.rb: post to user_google_oauth2_omniauth_callback_path instead of the hardcoded /users/auth/... URL. With devise_for :users, path: '/' the actual callback route is /auth/google_oauth2/callback. Also create a placeholder admin user so ApplicationController#maybe_redirect_to_setup doesn't intercept the request before the callback action runs. Schema dump and .gitignore (adds /vendor) bundled in. All 5 specs now pass. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Wabo	ad12ef7fb5	Add Google Workspace SSO via omniauth-google-oauth2 ... Adds "Sign in with Google" as an additive auth path next to email and password. When GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set, the Google button appears on the sign-in page and the SSO settings page shows an env-driven status panel. Access is restricted to Workspace domains listed in GOOGLE_ALLOWED_DOMAINS (CSV); the hd claim is re-verified server-side on every callback so a misconfigured Google consent screen cannot bypass it. New users from an allowed domain are JIT-provisioned in the default account (oldest, or pinned via GOOGLE_DEFAULT_ACCOUNT_ID). Existing users with a matching email get linked to their Google identity on first sign-in; identity collisions (same email, different Google uid) are rejected. Google's MFA is trusted: users signed in via Google do not see the WaboSign OTP prompt or the FORCE_MFA setup redirect. Password sign-in keeps working unchanged, including its existing OTP gate. Implementation: - Devise gains :omniauthable when SSO is enabled; users get provider/uid columns with a partial unique index that allows NULL for password-only rows. - Users::OmniauthCallbacksController handles /users/auth/google_oauth2/ callback, sets session[:bypass_otp_for_sso], and redirects on failure. - SessionsController#destroy clears the bypass flag on sign-out. - DashboardController#maybe_redirect_mfa_setup honours the flag and User#signed_in_via_sso?. - The previously empty _omniauthable.html.erb stub now renders the Google button. Request specs cover happy path, link-existing-user, domain rejection, identity collision, and 2FA bypass. GOOGLE_SSO.md is the operator-facing setup, behaviour, verification, and troubleshooting guide. README links to it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Wabo	2796ddf424	Rebrand DocuSeal to WaboSign and unlock Pro features ... Renames the product to WaboSign across UI, mailers, locales, assets, and internal Ruby module. Keeps the upstream DocuSeal attribution required by AGPLv3 §7(b) in the powered-by footer, email attribution, README, and a new NOTICE file. Migration renames the AATL cert identifier in encrypted configs from docuseal_aatl to wabosign_aatl. Removes multitenant-gated Pro upsell UI (Plans/Console/Upgrade links, SMS/SSO/bulk-send/logo placeholders, reminder-duration restriction, the "DocuSeal Pro" email-attribution toggle, conditions/formula/payment pricing links) so every shipped feature is reachable on a self-hosted deployment. Multitenant routing logic is preserved. Drops Discord, Twitter, and ChatGPT/AI-assistant chrome. Embedding modal keeps the upstream <docuseal-form> / @docuseal/* SDK contract so existing embedded forms continue to work; documented in NOTICE. REBRANDING.md captures the change inventory for future maintainers. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 months ago
Pete Matsyburka	1a3a0528ba	fix i18n	4 months ago
Pete Matsyburka	3c4ed42419	fix i18n	5 months ago
Pete Matsyburka	76659497b7	typos	5 months ago
Pete Matsyburka	10fd624bec	add revisions	5 months ago
Pete Matsyburka	45ae954c0c	add hmac webhook secret	5 months ago
Pete Matsyburka	310b16f54a	use mcp source	5 months ago
Pete Matsyburka	d96d252df3	use post for test mode	5 months ago
Pete Matsyburka	7cdf263da1	add screen reader mode	5 months ago
Pete Matsyburka	ee65a5693c	improve accessibility	5 months ago
Pete Matsyburka	f995e1864c	add shared link qr code	5 months ago
Pete Matsyburka	bb2fb7a0c2	refactor download	5 months ago
Pete Matsyburka	8f8b36617a	fix first party download from preview	5 months ago
Pete Matsyburka	89e797b95f	update message	6 months ago
Pete Matsyburka	bd7ad5fce8	update gems	6 months ago
Pete Matsyburka	8d3f0b5b98	silence not found trace	6 months ago
Pete Matsyburka	640b451727	adjust shared link	6 months ago
Pete Matsyburka	486cc493e6	add i18n	6 months ago
Pete Matsyburka	3eb0b8a89f	allow to delegate	6 months ago
Pete Matsyburka	e3dfb0ae83	add SMTP_ENABLE_TLS	6 months ago
Alex Turchyn	342b64d502	add translations	6 months ago
Pete Matsyburka	ac01b7129d	add i18n	6 months ago
Pete Matsyburka	b3bb29f383	fix brakeman	7 months ago
Alex Turchyn	62a969d8fe	add MCP support	7 months ago
Pete Matsyburka	37196ff89f	add dynamic documents	7 months ago
Pete Matsyburka	b50d982497	smtp timeout env vars	7 months ago
Pete Matsyburka	e9c8e4d325	adjust editor	7 months ago
Alex Turchyn	39cc82ce0c	add markdown editor	7 months ago
Pete Matsyburka	f1d146eca3	fix typos	7 months ago
Pete Matsyburka	b6635fcc4f	change user only when root	7 months ago
Pete Matsyburka	ba84741a64	invite party via field	7 months ago
Pete Matsyburka	65c275ac17	rename	7 months ago
Pete Matsyburka	825322d489	adjust for custom domain	7 months ago
Pete Matsyburka	118f4a231b	detailed time format	7 months ago
Pete Matsyburka	ed8c313bd4	timestamp controller multitenant	7 months ago
Pete Matsyburka	3e434c0878	fix	8 months ago
Pete Matsyburka	7c5372a8e2	fix pdf sign	8 months ago
Pete Matsyburka	eb63113227	use trilogy mysql	8 months ago
Pete Matsyburka	33e226861e	add SMTP_SSL_VERIFY env	8 months ago
Pete Matsyburka	cf31e12348	adjust smtp configs	8 months ago
Alex Turchyn	7b5494468f	update rails to 8.1.2	8 months ago
Pete Matsyburka	91814ca105	custom fields	8 months ago
Pete Matsyburka	9128f24270	fix synology acl	8 months ago
Pete Matsyburka	81eee56e1e	i18n	8 months ago
Pete Matsyburka	c05f8d47aa	require 2fa	8 months ago
Pete Matsyburka	d1768be636	secure env	8 months ago
Pete Matsyburka	c4ba892559	refactor clone	9 months ago