37 Commits (e042fad308d23c802e03e7d0299b1a554cad5c9c)

Author	SHA1	Message	Date
shipeasy-ai	ff567ee260	CSP: allow multiple space-separated EMBED_ALLOWED_ORIGIN values ... The embedding EHR spans an apex plus an app/tenant subdomain; frame-ancestors must list each origin separately. Split EMBED_ALLOWED_ORIGIN on whitespace so "https://enwella.com https://app.enwella.com" both become sources. The deploy already sets two space-separated origins; the single-value form emitted one malformed token and the browser blocked the iframe.	2 months ago
shipeasy-ai	3c05712819	Token-authenticated embedded builder (no cross-origin cookies) ... Adds a JWT-authenticated entry point so the embedding app can mount <docuseal-builder data-token="…"> without the host pre-establishing a DocuSeal session via cross-origin cookies + an external auth gate. - EmbedBuilderController (GET /embed/builder?token=…): verifies a short-lived HS256 JWT against the owner account's API access token (the same key the JSON API uses; raw value is recoverable via the encrypted `token` column), signs that user in (a first-party session inside the iframe), records a template-scoped grant in the session, and redirects into the regular builder — /templates/:id/edit for an existing template, or /new?url=… to download + create from `document_urls`. Requires `exp` and caps token lifetime (replay bound). Only opens template_ids the account owns. - EmbedScoped concern: confines an embed session to its own template (by id, or by external_id for the /new→create→edit redirect) plus the create + builder-support paths; refuses enumeration / other templates / the JSON template API. Fails closed. Path rules mirror the allow-list the host app enforced at the edge, so the builder keeps working while the cross-origin cookie + gate machinery on the host side can be removed. - builder.js shim now iframes /embed/builder?token=… (the server decides edit vs. new) instead of a bare authenticated /new that 404s without a pre-set session cookie. - Request specs for token verification, ownership, exp/lifetime, and scope.	2 months ago
Vadym Shaveiko	f4324122cc	Self-hosted embed: JWT shim + Rails-side glue for cross-origin iframe ... Lets the EnWella EHR mount <docuseal-builder> (and -form) without a paid Pro license. Upstream's `EmbedScriptsController` returns an "Upgrade to Pro" stub; we override it via the static-asset path so the real shim wins without touching the controller. JS shim (public/js/builder.js) - Web component that decodes the JWT minted by the embedder (`name`, `document_urls`, `external_id`, optional `template_id`). - Iframes /templates/:id/edit for existing templates, /new?... for the upload-from-URL flow. - Relays a `save` postMessage from the inner builder up as a DOM `CustomEvent('save')` on the outer element so @docuseal/react's onSave callback fires. - Discovers host from its own <script src> so embedders don't have to set data-host. JWT signature not re-verified (session cookies + shared HMAC at the calling app are authoritative). Builder (app/javascript/template_builder/builder.vue) - isEmbedded computed (window.parent !== window). - Hide #title_container in embed (sheet already shows the consent name). - Fire the `save` postMessage at the end of the manual SAVE handler so the outer shim can dispatch the DOM event. Rails glue - application_controller.rb / config/application.rb: when EMBED_ALLOWED_ORIGIN is set, add `frame-ancestors 'self' <origin>` to the per-request CSP and drop the default `X-Frame-Options: SAMEORIGIN` header (different scheme/host/port = different origin, so SAMEORIGIN blocks the EHR's iframe even in same-domain prod). - templates_uploads_controller.rb: persist `external_id` from the upload params so the host app can later look the template up via `GET /api/templates?external_id=...` (deterministic fallback link path when the `template.created` webhook doesn't reach us). - templates_uploads_controller.rb: skip the SSRF guard when fetching documents in development — it rejects http / non-443 / localhost, which is exactly the Active Storage URLs the EHR sends from https://localhost:3000. - templates_uploads/show.html.erb: carry `external_id` through the resubmit form (used on the encrypted-PDF prompt path). Local HTTPS dev (puma.rb, Procfile.dev, .env.example) - Bind ssl://0.0.0.0:PORT when LOCAL_HTTPS_CERT/KEY are set (wired by ../bin/docuseal-dev to ../.certs/lvh.me.pem). EHR runs HTTPS too, so HTTPS iframe avoids mixed-content blocking. - Procfile.dev runs `puma -C config/puma.rb` directly so the ssl bind applies. - SSL_CERT_FILE example for trusting the mkcert root so DocuSeal's outbound HTTPS to Rails (Active Storage downloads) verifies.	3 months ago
Pete Matsyburka	825322d489	adjust for custom domain	6 months ago
Alex Turchyn	7b5494468f	update rails to 8.1.2	6 months ago
Pete Matsyburka	c4ba892559	refactor clone	7 months ago
Pete Matsyburka	39eb67b162	refactor csp	10 months ago
Pete Matsyburka	cd83d918e5	fix csp	10 months ago
Pete Matsyburka	b64a84a362	add csp	10 months ago
Alex Turchyn	9645332e48	add countless pagination	1 year ago
Alex Turchyn	a15624690b	show unauthorized message in test environment	2 years ago
Pete Matsyburka	9beaaa0851	adjust filters	2 years ago
Alex Turchyn	b86aac86d1	add template submissions filters	2 years ago
Pete Matsyburka	5a48ab0360	configure form link	2 years ago
Pete Matsyburka	f669045362	redirect com	2 years ago
Pete Matsyburka	1d20c79cf4	com host	2 years ago
Pete Matsyburka	fd4bef1706	fix i18n	2 years ago
Pete Matsyburka	37bb987e3e	fix i18n	2 years ago
Alex Turchyn	c7b08e8d30	add languages	2 years ago
Oleksandr Turchyn	e9d728fa4a	add i18n	2 years ago
Pete Matsyburka	af787887d8	i18n sign in	2 years ago
Pete Matsyburka	749722a9df	add rate limit	2 years ago
Pete Matsyburka	f8a654a5b6	reduce error log	3 years ago
Pete Matsyburka	6253e80a70	add testing environment	3 years ago
Pete Matsyburka	9356247ef0	add signer user forms translations	3 years ago
Pete Matsyburka	e67854fe56	better sign yourself flow	3 years ago
DocuSeal	8e2da83f9e	adjust demo	3 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	3 years ago
Alex Turchyn	e4bb5466f5	add webhook settings	3 years ago
Alex Turchyn	4ffd198505	adjust demo	3 years ago
Alex Turchyn	4234198b46	add demo configs	3 years ago
Alex Turchyn	d0c7d449d5	style template show page	3 years ago
Alex Turchyn	419ede5b1d	add pagination to templates/users/submissions	3 years ago
Alex Turchyn	0ac30a5fc0	add the app url input on the first setup page	3 years ago
Alex Turchyn	878af5d250	remove better html html_attributes	3 years ago
Alex Turchyn	21f684ed4a	add loading text for form submit buttons	3 years ago
Alex Turchyn	97c462ead2	initial commit	3 years ago