58 Commits (b378d30635ac6efb00d09fff52183abe6c70d6d0)

Author	SHA1	Message	Date
Wabo	977a98a5da	Sync to upstream 3.0.2 — integrate 28 upstream commits with WaboSign rebrand	3 weeks ago
Wabo	53e677417f	Per-account product-name branding ... Account admins can now replace "WaboSign" in the UI, emails, audit-trail PDFs, and authenticator-app issuer with their own product name. The brand override is stored as an AccountConfig row (brand_name key), managed from /settings/personalization above the logo upload. Resolution flows through Wabosign.branded_product_name(account = nil): 1. account&.brand_name if a record is passed 2. else the deployment's oldest non-archived account's brand_name (so anonymous surfaces like the landing page, PWA manifest, and og:title get the operator's brand on single-tenant installs) 3. else Wabosign::PRODUCT_NAME ("WaboSign") AGPL §7(b) DocuSeal attribution stays untouched: - _powered_by.html.erb second line keeps Wabosign::UPSTREAM_NAME - _email_attribution.html.erb second paragraph keeps it - completed.vue keeps its hardcoded DocuSeal link The Wabosign::UPSTREAM_NAME and UPSTREAM_URL constants stay constants — they are never overridable. Swapped 41 direct Wabosign.product_name callers to pass the most-local account in scope (current_account, @template.account, @submitter.submission.account, submission.account, or nil for chrome without account context). Mailers' default `from:` is now a lambda that reads @current_account per message. SIGN_REASON constant in generate_result_attachments became sign_reason_template(account) so PDF signature reasons reflect the brand. The two i18n keys actually rendered with literal "WaboSign" (welcome_to_wabosign in templates_dashboard, connect_to_wabosign_mcp in mcp_settings) are parameterized to %{product_name} across the 7 locales that defined them. The other ~9 WaboSign-branded i18n keys are unreferenced dead code from the Pro paywall and stay as-is. Specs: spec/models/account_spec.rb (new) — Account#brand_name spec/lib/wabosign_spec.rb (new) — branded_product_name precedence spec/requests/personalization_settings_spec.rb (new) — end-to-end Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Wabo	ad12ef7fb5	Add Google Workspace SSO via omniauth-google-oauth2 ... Adds "Sign in with Google" as an additive auth path next to email and password. When GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set, the Google button appears on the sign-in page and the SSO settings page shows an env-driven status panel. Access is restricted to Workspace domains listed in GOOGLE_ALLOWED_DOMAINS (CSV); the hd claim is re-verified server-side on every callback so a misconfigured Google consent screen cannot bypass it. New users from an allowed domain are JIT-provisioned in the default account (oldest, or pinned via GOOGLE_DEFAULT_ACCOUNT_ID). Existing users with a matching email get linked to their Google identity on first sign-in; identity collisions (same email, different Google uid) are rejected. Google's MFA is trusted: users signed in via Google do not see the WaboSign OTP prompt or the FORCE_MFA setup redirect. Password sign-in keeps working unchanged, including its existing OTP gate. Implementation: - Devise gains :omniauthable when SSO is enabled; users get provider/uid columns with a partial unique index that allows NULL for password-only rows. - Users::OmniauthCallbacksController handles /users/auth/google_oauth2/ callback, sets session[:bypass_otp_for_sso], and redirects on failure. - SessionsController#destroy clears the bypass flag on sign-out. - DashboardController#maybe_redirect_mfa_setup honours the flag and User#signed_in_via_sso?. - The previously empty _omniauthable.html.erb stub now renders the Google button. Request specs cover happy path, link-existing-user, domain rejection, identity collision, and 2FA bypass. GOOGLE_SSO.md is the operator-facing setup, behaviour, verification, and troubleshooting guide. README links to it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Wabo	2796ddf424	Rebrand DocuSeal to WaboSign and unlock Pro features ... Renames the product to WaboSign across UI, mailers, locales, assets, and internal Ruby module. Keeps the upstream DocuSeal attribution required by AGPLv3 §7(b) in the powered-by footer, email attribution, README, and a new NOTICE file. Migration renames the AATL cert identifier in encrypted configs from docuseal_aatl to wabosign_aatl. Removes multitenant-gated Pro upsell UI (Plans/Console/Upgrade links, SMS/SSO/bulk-send/logo placeholders, reminder-duration restriction, the "DocuSeal Pro" email-attribution toggle, conditions/formula/payment pricing links) so every shipped feature is reachable on a self-hosted deployment. Multitenant routing logic is preserved. Drops Discord, Twitter, and ChatGPT/AI-assistant chrome. Embedding modal keeps the upstream <docuseal-form> / @docuseal/* SDK contract so existing embedded forms continue to work; documented in NOTICE. REBRANDING.md captures the change inventory for future maintainers. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Pete Matsyburka	a184fa11f1	move auth links	2 months ago
Alex Turchyn	7a7d3c6ee3	add translations for reset password instructions email	7 months ago
Pete Matsyburka	189f7b2d7b	add dutch langauge	9 months ago
Pete Matsyburka	cd83d918e5	fix csp	9 months ago
Pete Matsyburka	b64a84a362	add csp	9 months ago
Alex Turchyn	30115fc0dc	adjust login OTP form	9 months ago
Pete Matsyburka	6c1d4b466f	adjust server selector	1 year ago
Pete Matsyburka	f2bf1461f0	adjust selector	1 year ago
Alex Turchyn	fc6f796f30	adjust server selector	1 year ago
Alex Turchyn	db60810272	add email OTP	1 year ago
Pete Matsyburka	cb6d24dfca	add canonical urls	2 years ago
Pete Matsyburka	889103aa5e	use com	2 years ago
Pete Matsyburka	2948910c25	fix com selector	2 years ago
Oleksandr Turchyn	e9d728fa4a	add i18n	2 years ago
Pete Matsyburka	8f975c2898	fix lang	2 years ago
Pete Matsyburka	af787887d8	i18n sign in	2 years ago
Alex Turchyn	8b3b90a7e2	replace emojis	2 years ago
Pete Matsyburka	519e6f1f79	cleanup	2 years ago
Pete Matsyburka	68196d6af0	better on prem console sign up	2 years ago
Pete Matsyburka	e6785b0afd	fix sign in form without oauth	2 years ago
Pete Matsyburka	e16202c9f7	ajust 2fa message	2 years ago
Pete Matsyburka	82a2bc561a	remove talk to sales checkbox	2 years ago
Pete Matsyburka	af4cf7257f	extra sign in links	3 years ago
Pete Matsyburka	23c49f8706	add sign up email placeholder	3 years ago
Alex Turchyn	9f48c6e625	add MS oauth	3 years ago
DocuSeal	cdd034e72d	redirect with google oauth	3 years ago
DocuSeal	036f6049a2	Revert "add new signup page" ... This reverts commit f7132445a1.	3 years ago
Alex Turchyn	f7132445a1	add new signup page	3 years ago
DocuSeal	74bef133b3	add enqueries checkbox	3 years ago
DocuSeal	79f1061353	improve signup form links	3 years ago
Alex Turchyn	92d7bc65f5	replace 'log in' with 'sign in'	3 years ago
Alex Turchyn	84e879bad0	fix email typos	3 years ago
Alex Turchyn	a1a0205d33	narrow devise forms	3 years ago
Alex Turchyn	ef618f8f49	add 2FA	3 years ago
Alex Turchyn	8c8c34cb75	add server switch	3 years ago
Alex Turchyn	e1342860c4	add redirect handler	3 years ago
Alex Turchyn	1f29e624e7	remember signed in user session	3 years ago
Alex Turchyn	3d75443d6e	adjust registration links	3 years ago
Alex Turchyn	c40a8e1a69	adjust registration for SaaS	3 years ago
Alex Turchyn	6f3fe1dd7b	improve registration and add oauth	3 years ago
Alex Turchyn	f5caed502f	adjust for multitenant	3 years ago
Alex Turchyn	c904d51302	adjust templates, add timezone and locale	3 years ago
Alex Turchyn	d0c7d449d5	style template show page	3 years ago
Alex Turchyn	ed157dc952	fix erblint	3 years ago
Alex Turchyn	18b6a77b15	move all svg icons to 'icons' folder	3 years ago
Alex Turchyn	21f684ed4a	add loading text for form submit buttons	3 years ago