22 Commits (2cfa5533a2b54afdc48a8faaf8f7c45d310ec12a)

Author	SHA1	Message	Date
Ryan Arakawa	741c548d26	CP-11042 partnership features updated (#26) ... * Add partnership template authorization and ability system * Update template authorization to support partnership context * Add request context-based authorization for API access * Implement hybrid partnership/account authorization logic * Add submission authorization conditions for partnerships * Support global partnership template access * Add template cloning services for partnership workflows * Update template cloning to require explicit target parameters, to allow for cloning for either account or from partnership * Add Templates::CloneToAccount service for partnership to account cloning * Add Templates::CloneToPartnership service for global to partnership cloning * Add logic to detect account vs partnership template cloning with validation * Add folder assignment logic for cloned templates * Add external authentication and partnership support * Update ExternalAuthService to support partnership OR account authentication * Implement user assignment to accounts when partnership context is provided * Support pure partnership authentication without account assignment * Update API controllers for partnership template support * Add partnership request context to API base controller * Update submissions controller to support partnership templates * Add partnership template cloning to templates clone controller * Refactor template controller webhook logic to reduce complexity * Support external_account_id parameter for partnership workflows * Update web controllers and views for partnership template support * Add tests * erb_lint fixes * add local claude file * shared concern for handling partnership context * remove overly permissive case * global templates should be available for partnerships and accounts * pass through access context in vue * add tests * add partnership context and tests to submissions * add token refresh as last resort for a corrupted token	2 months ago
Bernardo Anderson	ded7adbf49	CP-10278 - Hardcode Employee/Manager parties	3 months ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Ryan Arakawa	c5963a422f	fix tests ... * rename spec file to fit how the repo does request tests	4 months ago
Ryan Arakawa	a6354e6802	add ability to request changes for a completed submission ... * new controller to handle change requests * add button and modal on completed submission view to request changes * webhook job will send out to external API when submission is updated for changes_requested_at * email will be sent to user that need to make changes * submission status steps back from "completed"	4 months ago
Pete Matsyburka	9d1860f038	fix specs	6 months ago
Pete Matsyburka	9544bb3d76	Revert "shared link true default" ... This reverts commit e41fe5fbca.	7 months ago
Pete Matsyburka	e41fe5fbca	shared link true default	7 months ago
Alex Turchyn	e77b5fa2c9	add optional shared link to templates	7 months ago
Pete Matsyburka	a7ed0b86a4	dot rspec	7 months ago
Alex Turchyn	e5db61e358	add API specs for completed submitter	9 months ago
Alex Turchyn	bb552d13d4	don't raise validation error if the message is empty	1 year ago
Alex Turchyn	18d60f5522	add signing form specs	1 year ago
Oleksandr Turchyn	3c616a824c	show error for cross-environment API key usage	1 year ago
Pete Matsyburka	4332b4ebb8	fix specs	1 year ago
Oleksandr Turchyn	e2f930f6f7	add completed submitters and documents	1 year ago
Oleksandr Turchyn	3d2046f227	add validation for submitters count	1 year ago
Alex Turchyn	ab810be250	validate email format	1 year ago
Alex Turchyn	178ee47093	add more specs	1 year ago
Alex Turchyn	6f90147a11	validate the uniqueness of submitter roles	1 year ago
Pete Matsyburka	bc4414a368	use png for previews	1 year ago
Oleksandr Turchyn	eead1b2bc4	add basic API specs	1 year ago