423 Commits (aa1eb1413ca0da8db76d7020ffd4d57f2de3571d)

Author	SHA1	Message	Date
shipeasy-ai	3c05712819	Token-authenticated embedded builder (no cross-origin cookies) ... Adds a JWT-authenticated entry point so the embedding app can mount <docuseal-builder data-token="…"> without the host pre-establishing a DocuSeal session via cross-origin cookies + an external auth gate. - EmbedBuilderController (GET /embed/builder?token=…): verifies a short-lived HS256 JWT against the owner account's API access token (the same key the JSON API uses; raw value is recoverable via the encrypted `token` column), signs that user in (a first-party session inside the iframe), records a template-scoped grant in the session, and redirects into the regular builder — /templates/:id/edit for an existing template, or /new?url=… to download + create from `document_urls`. Requires `exp` and caps token lifetime (replay bound). Only opens template_ids the account owns. - EmbedScoped concern: confines an embed session to its own template (by id, or by external_id for the /new→create→edit redirect) plus the create + builder-support paths; refuses enumeration / other templates / the JSON template API. Fails closed. Path rules mirror the allow-list the host app enforced at the edge, so the builder keeps working while the cross-origin cookie + gate machinery on the host side can be removed. - builder.js shim now iframes /embed/builder?token=… (the server decides edit vs. new) instead of a bare authenticated /new that 404s without a pre-set session cookie. - Request specs for token verification, ownership, exp/lifetime, and scope.	2 months ago
Vadym Shaveiko	b66ccdc206	Enable Devise :lockable — brute-force protection on /users/sign_in ... User model already includes :lockable (DB columns are migrated) but the config block in `devise.rb` was entirely commented out, so the strategy defaulted to :none — no lockout, no rate limit, nothing standing between the internet and Devise's bcrypt loop. Self-hosted deployments expose docuseal.<apex>/users/sign_in publicly (the embedded builder requires an admin session). Lock the account on 10 failed attempts, recover via email OR 1-hour wait.	3 months ago
Vadym Shaveiko	e59c8b421e	Env-driven seed for admin user, API key, and webhook URL ... Adds `config/initializers/env_seed.rb` — idempotent, resilient boot-time seeder that replaces both the manual /setup wizard run and our standalone `bin/seed-docuseal-webhook` script. Works in dev and prod: just set the env vars in the deploy config. When `DOCUSEAL_ADMIN_EMAIL` + `DOCUSEAL_ADMIN_PASSWORD` are set, on every boot the initializer upserts: * Account (org row, name/timezone/locale from env) * User (admin, password updated only if encrypted_password blank) * AccessToken (rewritten when `DOCUSEAL_API_KEY` set and differs) * EncryptedConfig APP_URL_KEY + ESIGN_CERTS_KEY * WebhookUrl (when `DOCUSEAL_WEBHOOK_URL` set; events optional) Resilience: * Skips quietly when admin email/password missing — `/setup` still works * Catches NoDatabaseError / ConnectionNotEstablished / StatementInvalid so `db:create` before `db:migrate` doesn't crash boot * Re-runs are no-ops (find_or_initialize_by + diff before save) * Survives DB drop + recreate: rows are re-seeded on next boot .env.example documents the new vars.	3 months ago
Vadym Shaveiko	f4324122cc	Self-hosted embed: JWT shim + Rails-side glue for cross-origin iframe ... Lets the EnWella EHR mount <docuseal-builder> (and -form) without a paid Pro license. Upstream's `EmbedScriptsController` returns an "Upgrade to Pro" stub; we override it via the static-asset path so the real shim wins without touching the controller. JS shim (public/js/builder.js) - Web component that decodes the JWT minted by the embedder (`name`, `document_urls`, `external_id`, optional `template_id`). - Iframes /templates/:id/edit for existing templates, /new?... for the upload-from-URL flow. - Relays a `save` postMessage from the inner builder up as a DOM `CustomEvent('save')` on the outer element so @docuseal/react's onSave callback fires. - Discovers host from its own <script src> so embedders don't have to set data-host. JWT signature not re-verified (session cookies + shared HMAC at the calling app are authoritative). Builder (app/javascript/template_builder/builder.vue) - isEmbedded computed (window.parent !== window). - Hide #title_container in embed (sheet already shows the consent name). - Fire the `save` postMessage at the end of the manual SAVE handler so the outer shim can dispatch the DOM event. Rails glue - application_controller.rb / config/application.rb: when EMBED_ALLOWED_ORIGIN is set, add `frame-ancestors 'self' <origin>` to the per-request CSP and drop the default `X-Frame-Options: SAMEORIGIN` header (different scheme/host/port = different origin, so SAMEORIGIN blocks the EHR's iframe even in same-domain prod). - templates_uploads_controller.rb: persist `external_id` from the upload params so the host app can later look the template up via `GET /api/templates?external_id=...` (deterministic fallback link path when the `template.created` webhook doesn't reach us). - templates_uploads_controller.rb: skip the SSRF guard when fetching documents in development — it rejects http / non-443 / localhost, which is exactly the Active Storage URLs the EHR sends from https://localhost:3000. - templates_uploads/show.html.erb: carry `external_id` through the resubmit form (used on the encrypted-PDF prompt path). Local HTTPS dev (puma.rb, Procfile.dev, .env.example) - Bind ssl://0.0.0.0:PORT when LOCAL_HTTPS_CERT/KEY are set (wired by ../bin/docuseal-dev to ../.certs/lvh.me.pem). EHR runs HTTPS too, so HTTPS iframe avoids mixed-content blocking. - Procfile.dev runs `puma -C config/puma.rb` directly so the ssl bind applies. - SSL_CERT_FILE example for trusting the mkcert root so DocuSeal's outbound HTTPS to Rails (Active Storage downloads) verifies.	3 months ago
Pete Matsyburka	1a3a0528ba	fix i18n	3 months ago
Pete Matsyburka	3c4ed42419	fix i18n	3 months ago
Pete Matsyburka	76659497b7	typos	3 months ago
Pete Matsyburka	10fd624bec	add revisions	3 months ago
Pete Matsyburka	45ae954c0c	add hmac webhook secret	3 months ago
Pete Matsyburka	310b16f54a	use mcp source	3 months ago
Pete Matsyburka	d96d252df3	use post for test mode	3 months ago
Pete Matsyburka	7cdf263da1	add screen reader mode	4 months ago
Pete Matsyburka	ee65a5693c	improve accessibility	4 months ago
Pete Matsyburka	f995e1864c	add shared link qr code	4 months ago
Pete Matsyburka	bb2fb7a0c2	refactor download	4 months ago
Pete Matsyburka	8f8b36617a	fix first party download from preview	4 months ago
Pete Matsyburka	89e797b95f	update message	4 months ago
Pete Matsyburka	bd7ad5fce8	update gems	4 months ago
Pete Matsyburka	8d3f0b5b98	silence not found trace	4 months ago
Pete Matsyburka	640b451727	adjust shared link	4 months ago
Pete Matsyburka	486cc493e6	add i18n	4 months ago
Pete Matsyburka	3eb0b8a89f	allow to delegate	4 months ago
Pete Matsyburka	e3dfb0ae83	add SMTP_ENABLE_TLS	4 months ago
Alex Turchyn	342b64d502	add translations	5 months ago
Pete Matsyburka	ac01b7129d	add i18n	5 months ago
Pete Matsyburka	b3bb29f383	fix brakeman	5 months ago
Alex Turchyn	62a969d8fe	add MCP support	5 months ago
Pete Matsyburka	37196ff89f	add dynamic documents	5 months ago
Pete Matsyburka	b50d982497	smtp timeout env vars	5 months ago
Pete Matsyburka	e9c8e4d325	adjust editor	5 months ago
Alex Turchyn	39cc82ce0c	add markdown editor	5 months ago
Pete Matsyburka	f1d146eca3	fix typos	5 months ago
Pete Matsyburka	b6635fcc4f	change user only when root	5 months ago
Pete Matsyburka	ba84741a64	invite party via field	6 months ago
Pete Matsyburka	65c275ac17	rename	6 months ago
Pete Matsyburka	825322d489	adjust for custom domain	6 months ago
Pete Matsyburka	118f4a231b	detailed time format	6 months ago
Pete Matsyburka	ed8c313bd4	timestamp controller multitenant	6 months ago
Pete Matsyburka	3e434c0878	fix	6 months ago
Pete Matsyburka	7c5372a8e2	fix pdf sign	6 months ago
Pete Matsyburka	eb63113227	use trilogy mysql	6 months ago
Pete Matsyburka	33e226861e	add SMTP_SSL_VERIFY env	6 months ago
Pete Matsyburka	cf31e12348	adjust smtp configs	6 months ago
Alex Turchyn	7b5494468f	update rails to 8.1.2	6 months ago
Pete Matsyburka	91814ca105	custom fields	6 months ago
Pete Matsyburka	9128f24270	fix synology acl	6 months ago
Pete Matsyburka	81eee56e1e	i18n	6 months ago
Pete Matsyburka	c05f8d47aa	require 2fa	7 months ago
Pete Matsyburka	d1768be636	secure env	7 months ago
Pete Matsyburka	c4ba892559	refactor clone	7 months ago