55 Commits (5db78f9737b7244b23d6a62a884d5faafe679d2b)

Author	SHA1	Message	Date
Bernardo Anderson	5db78f9737	CP-11565 - DocuSeal Audit Logging Improvements ... This pull request enhances the audit logging capabilities within DocuSeal to granularly track user actions and data changes. Key Changes: * User Attribution: Added user_id to SubmissionEvent to identify exactly who performed an action. * Granular Change Tracking: Implemented a new form_update event type that records specific field changes, capturing both previous and new values (from -> to). * Enhanced Exports & Webhooks: Updated ExportSubmissionService and SendFormCompletedWebhookRequestJob to include detailed form values and the full submission event history in their outputs. * Refactoring: Updated controllers and services to propagate the current_user context for accurate tracking. * Testing: Added specs to verify the correct recording of form field updates and data integrity in exports.	2 months ago
Bernardo Anderson	24cf871bcc	CP-10361 - Due to Docuseal being a public repo, we want to rename these values/fields to be generic instead of labeling 'ats'	7 months ago
Bernardo Anderson	d4a0dd379a	Merge branch 'main' into CP-10361	7 months ago
Bernardo Anderson	5d790f57bd	CP-10361 - Extract ATS prefill logic into dedicated service layer ... - Extract complex ATS prefill logic from PrefillFieldsHelper into dedicated AtsPrefill service - Create modular service objects: FieldExtractor, FieldMapper, ValueMerger, and CacheManager - Implement proper caching strategy with Rails.cache for performance optimization - Add comprehensive test coverage for all new service components - Maintain backward compatibility through facade methods in PrefillFieldsHelper - Improve security by validating field name patterns and sanitizing inputs - Enhance performance with optimized field lookup caching BREAKING CHANGE: PrefillFieldsHelper now delegates to AtsPrefill service layer. Direct usage of helper methods remains unchanged, but internal implementation has been refactored.	7 months ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	7 months ago
Bernardo Anderson	e82a2ecee5	CP-10361 - Simplify ATS prefill values processing ... - Remove redundant logging and validation checks - Streamline error handling with early returns - Simplify hash validation logic - Reduce code complexity while maintaining security	7 months ago
Bernardo Anderson	ca85f002f5	CP-10361 - Improve security and performance for ATS form prefill integration ... - Replace present? check with blank? for better nil handling - Add input size validation to prevent DoS attacks (64KB limit) - Fix string formatting and indentation in audit logging - Optimize caching with proper error handling for Redis failures - Simplify conditional logic in field value merging - Add frozen string literal comments for Ruby 3.4 compatibility - Improve test coverage with better mocking and assertions Security improvements include input validation and audit logging for ATS prefill usage tracking.	7 months ago
Bernardo Anderson	7f89975d29	CP-10361 - Add security and performance improvements for ATS form prefill ... - Add input size limits (64KB for encoded, 32KB for decoded JSON) to prevent DoS attacks - Implement audit logging for ATS prefill usage tracking - Add caching layer for field UUID lookups with 30-minute TTL - Optimize field resolution with O(1) lookup cache instead of O(n) search - Add comprehensive error handling and logging throughout prefill pipeline - Validate ATS field names against allowed patterns with security checks	7 months ago
Bernardo Anderson	f50b6b89f2	CP-10361 - Integrate automatic form prefill values from ATS system ... - Add Base64-encoded JSON parameter support for ATS prefill values - Implement field mapping between ATS field names and template field UUIDs - Enhance merge logic to preserve existing submitter values while adding ATS prefill data - Add comprehensive error handling for invalid Base64 and JSON parsing - Update form rendering to use merged ATS values for prefill functionality - Add integration tests for complete ATS prefill workflow	7 months ago
Bernardo Anderson	dca1c1f20d	CP-10361 - Add ATS integration for automatic form prefill values ... Add support for fetching prefill values from ATS system when task_assignment_id parameter is provided. This includes: - New ATS API integration in PrefillFieldsHelper to fetch prefill values - Cache layer for ATS prefill values with 30-minute TTL - Merge logic to respect existing submitter values over ATS prefill values - Error handling and logging for ATS API failures - Integration with SubmitFormController to fetch values before form rendering The feature allows forms to be pre-populated with candidate data from the ATS system while preserving any values already entered by submitters.	7 months ago
Ryan Arakawa	5fe00d3206	export submission status ... * when submitter status changes, export to external API * update ExportSubmissionService to send payload to external API	8 months ago
Pete Matsyburka	f03166b4ea	one-off submission	10 months ago
Pete Matsyburka	f090e79002	fix required	12 months ago
Pete Matsyburka	c4505e67f0	require 2fa placeholder	12 months ago
Pete Matsyburka	28e3d65e63	improve required field handling	12 months ago
Pete Matsyburka	47c7270911	enforce signing order	12 months ago
Pete Matsyburka	ca8de23082	use account archived at	1 year ago
Pete Matsyburka	0e2fd8ee4f	use email host	1 year ago
Pete Matsyburka	f669045362	redirect com	1 year ago
Pete Matsyburka	2fcb08d27d	await for completion when order enforced	1 year ago
Oleksandr Turchyn	e9d728fa4a	add i18n	2 years ago
Pete Matsyburka	2764a18252	decline submission	2 years ago
Pete Matsyburka	3a2910f717	add expire at	2 years ago
Pete Matsyburka	d25c4fa766	remove log	2 years ago
Pete Matsyburka	04295f4540	adjust signature prefill	2 years ago
Pete Matsyburka	f9d52e56a2	prefill signature	2 years ago
Pete Matsyburka	0d9a709fa3	disable prefill signature	2 years ago
Pete Matsyburka	2389c3fc40	prefill signature	2 years ago
Pete Matsyburka	964b1444a5	adjust completed action	2 years ago
Pete Matsyburka	f3f08797f7	optimize document upload	2 years ago
Pete Matsyburka	d0ba180729	add submitter completed redirect url	2 years ago
Pete Matsyburka	2edc76414b	do not show archived submission	2 years ago
Pete Matsyburka	9356247ef0	add signer user forms translations	2 years ago
Pete Matsyburka	6d7d8ae87c	rename deleted_at to archived_at	2 years ago
Pete Matsyburka	203f4633f7	return 422 when submit archived submission	2 years ago
Pete Matsyburka	62eb0cda6b	return 422 on form update values when completed	2 years ago
DocuSeal	ce39494f84	optimize for large files	2 years ago
DocuSeal	518bbe3d1c	do not allow to submit archived forms	2 years ago
Alex Turchyn	5643094a7a	add default user signatures	3 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	3 years ago
Alex Turchyn	c38830dd1c	add phone type placeholder	3 years ago
Alex Turchyn	52ef0ae929	make pdf links clickable	3 years ago
Alex Turchyn	e5c5620b20	collect ua and ip on form completion	3 years ago
Alex Turchyn	47c57158f4	refactor and fixes	3 years ago
Alex Turchyn	e4bb5466f5	add webhook settings	3 years ago
Alex Turchyn	e1eb2da6f9	preserve template fields per submission	3 years ago
Alex Turchyn	dcbdc9e60c	fix submit form	3 years ago
Alex Turchyn	2112b2f3d3	minor UI fixes	3 years ago
Alex Turchyn	4180d02a1b	synchronize documents generation	3 years ago
Alex Turchyn	c904d51302	adjust templates, add timezone and locale	3 years ago