112 Commits (24cf871bcc0a2be62eb2bfd3283d339fcf2ec38a)

Author	SHA1	Message	Date
Bernardo Anderson	24cf871bcc	CP-10361 - Due to Docuseal being a public repo, we want to rename these values/fields to be generic instead of labeling 'ats'	1 year ago
Bernardo Anderson	d4a0dd379a	Merge branch 'main' into CP-10361	1 year ago
Bernardo Anderson	5d790f57bd	CP-10361 - Extract ATS prefill logic into dedicated service layer ... - Extract complex ATS prefill logic from PrefillFieldsHelper into dedicated AtsPrefill service - Create modular service objects: FieldExtractor, FieldMapper, ValueMerger, and CacheManager - Implement proper caching strategy with Rails.cache for performance optimization - Add comprehensive test coverage for all new service components - Maintain backward compatibility through facade methods in PrefillFieldsHelper - Improve security by validating field name patterns and sanitizing inputs - Enhance performance with optimized field lookup caching BREAKING CHANGE: PrefillFieldsHelper now delegates to AtsPrefill service layer. Direct usage of helper methods remains unchanged, but internal implementation has been refactored.	1 year ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	1 year ago
Bernardo Anderson	ca85f002f5	CP-10361 - Improve security and performance for ATS form prefill integration ... - Replace present? check with blank? for better nil handling - Add input size validation to prevent DoS attacks (64KB limit) - Fix string formatting and indentation in audit logging - Optimize caching with proper error handling for Redis failures - Simplify conditional logic in field value merging - Add frozen string literal comments for Ruby 3.4 compatibility - Improve test coverage with better mocking and assertions Security improvements include input validation and audit logging for ATS prefill usage tracking.	1 year ago
Bernardo Anderson	f50b6b89f2	CP-10361 - Integrate automatic form prefill values from ATS system ... - Add Base64-encoded JSON parameter support for ATS prefill values - Implement field mapping between ATS field names and template field UUIDs - Enhance merge logic to preserve existing submitter values while adding ATS prefill data - Add comprehensive error handling for invalid Base64 and JSON parsing - Update form rendering to use merged ATS values for prefill functionality - Add integration tests for complete ATS prefill workflow	1 year ago
Ryan Arakawa	ba325ec5a4	Merge pull request #11 from CareerPlug/CP-10319-approve-reject-changes ... CP-10319 changes requested feature	1 year ago
Ryan Arakawa	c5963a422f	fix tests ... * rename spec file to fit how the repo does request tests	1 year ago
Ryan Arakawa	a6354e6802	add ability to request changes for a completed submission ... * new controller to handle change requests * add button and modal on completed submission view to request changes * webhook job will send out to external API when submission is updated for changes_requested_at * email will be sent to user that need to make changes * submission status steps back from "completed"	1 year ago
Bernardo Anderson	c8c7fbd57c	CP-10359 - Improve cache logging assertions in ATS field extraction specs ... Update test expectations to use more flexible logging verification that handles both string and block-based debug calls. This ensures compatibility with Rails.logger's different calling patterns while maintaining test reliability for cache hit/miss logging.	1 year ago
Bernardo Anderson	2aac5f428b	CP-10359 - Add caching for ATS field extraction to improve performance ... - Implement Rails.cache-based caching for expensive Base64 decoding and JSON parsing - Add configurable TTL (1 hour) for successful results and shorter TTL (5 minutes) for errors - Include cache key generation using SHA256 hash for security and uniqueness - Add comprehensive test coverage for caching behavior and edge cases - Handle cache read/write failures gracefully with fallback to normal processing	1 year ago
Bernardo Anderson	be41cebcca	CP-10359 - Add ATS prefill field extraction for template and submission views ... - Add PrefillFieldsHelper module to extract ATS field data from base64 encoded parameters - Integrate ATS field extraction into TemplatesController and SubmissionsController - Support employee, manager, account, and location field name patterns - Add comprehensive test coverage for field validation and error handling - Remove unused backgroundColor style from template builder	1 year ago
Ryan Arakawa	371fdbd6a8	rubocop fixes and minor test refactors	1 year ago
Ryan Arakawa	5fe00d3206	export submission status ... * when submitter status changes, export to external API * update ExportSubmissionService to send payload to external API	1 year ago
Bernardo Anderson	481cc226ee	CP-10288 - Fix NoMethodError	1 year ago
Bernardo Anderson	d0f024cf8d	CP-10288 - Attempt another fix	1 year ago
Bernardo Anderson	f7a6d89190	CP-10288 - Fix rubocop issues	1 year ago
Bernardo Anderson	98cc484cc9	CP-10288 - Update specs	1 year ago
Bernardo Anderson	5d6ec15c79	CP-10288 - Header bar updates	1 year ago
Bernardo Anderson	2c4457fccc	CP-9771 - Update specs	1 year ago
Ryan Arakawa	b7963f63ae	move API specific code into a service and subclass services ... * ExportService handles the connection and post endpoint * separate subclasses for template and submission * add specs	1 year ago
Alex Turchyn	36331bb993	show found submissions when searching on templates	1 year ago
Pete Matsyburka	9d1860f038	fix specs	1 year ago
Pete Matsyburka	1d48fe9621	fix spec	1 year ago
Pete Matsyburka	9544bb3d76	Revert "shared link true default" ... This reverts commit e41fe5fbca.	1 year ago
Pete Matsyburka	4e94664008	refactor start form	1 year ago
Pete Matsyburka	e41fe5fbca	shared link true default	1 year ago
Alex Turchyn	e77b5fa2c9	add optional shared link to templates	1 year ago
Alex Turchyn	fa0733f480	improve user email validation	1 year ago
Alex Turchyn	a3bd37c9a2	Improve error message when does not match in completed form	1 year ago
Pete Matsyburka	a7ed0b86a4	dot rspec	1 year ago
Alex Turchyn	23631b75f2	add template_accesses factory	1 year ago
Pete Matsyburka	0122a237e3	remove request helper	1 year ago
Alex Turchyn	2dca7d8a8e	add builder 'replace' button specs	1 year ago
Pete Matsyburka	ff46993de6	fix spec	1 year ago
Pete Matsyburka	7964d6e0f0	improve signature validation	1 year ago
Alex Turchyn	e5db61e358	add API specs for completed submitter	2 years ago
Alex Turchyn	b0110d9340	update signature validation	2 years ago
Alex Turchyn	3ae98bf03e	improve multiple submitters error message	2 years ago
Alex Turchyn	febdc0b48d	add specs for masked fields	2 years ago
Alex Turchyn	8d953f210f	add attachment count attribute to template factory	2 years ago
Alex Turchyn	db60810272	add email OTP	2 years ago
Pete Matsyburka	616aced4e4	fix spec	2 years ago
Pete Matsyburka	4ad0b04b7f	remove sleep	2 years ago
Alex Turchyn	bc4c21f804	fix CI	2 years ago
Alex Turchyn	bb552d13d4	don't raise validation error if the message is empty	2 years ago
Alex Turchyn	b6a2aae970	restrict user invites	2 years ago
Alex Turchyn	75683631f0	add logical 'or' to field conditions	2 years ago
Pete Matsyburka	9beaaa0851	adjust filters	2 years ago
Alex Turchyn	b86aac86d1	add template submissions filters	2 years ago