12 Commits (4ec9e7fc5efd8a7f849d9277cf37b1ab94b67d90)

Author	SHA1	Message	Date
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Bernardo Anderson	f7a6d89190	CP-10288 - Fix rubocop issues	5 months ago
Bernardo Anderson	98cc484cc9	CP-10288 - Update specs	5 months ago
Bernardo Anderson	2c4457fccc	CP-9771 - Update specs	5 months ago
Alex Turchyn	e77b5fa2c9	add optional shared link to templates	7 months ago
Pete Matsyburka	a7ed0b86a4	dot rspec	7 months ago
Pete Matsyburka	7964d6e0f0	improve signature validation	8 months ago
Alex Turchyn	b0110d9340	update signature validation	9 months ago
Alex Turchyn	3ae98bf03e	improve multiple submitters error message	9 months ago
Alex Turchyn	febdc0b48d	add specs for masked fields	10 months ago
Alex Turchyn	75683631f0	add logical 'or' to field conditions	1 year ago
Alex Turchyn	18d60f5522	add signing form specs	1 year ago