54 Commits (eb82d63774de9aa1816784fa30cfc3fd738dc6be)

Author	SHA1	Message	Date
Wabo	5360d5420b	Add omniauth gems to Gemfile (required for Google SSO)	3 weeks ago
Wabo	977a98a5da	Sync to upstream 3.0.2 — integrate 28 upstream commits with WaboSign rebrand	3 weeks ago
Wabo	dca4a705ce	Merge upstream/master (tag 3.0.1) via sync/upstream-3.0.1 ... Upstream highlights (17 commits, DocuSeal 3.0.1): - convert images on upload (JPEG for opaque images, PNG for alpha) - security headers - handle dangerous file extensions - isolate editor nodes - gem updates - image autorotation fix WaboSign conflict resolutions: - Kept per-account branded_product_name() calls throughout PDF generation - Took upstream's smarter image format selection (JPEG/PNG based on alpha) - Kept deleted SaaS-only controllers (newsletters, enquiries, console_redirect) - Kept deleted docs/api/ (intentionally removed in WaboSign 1.0.0) - Took upstream convert-upload custom element for template upload button - Removed vendor/bundle (upstream added in 3.0.1; fork excludes /vendor) - Applied encoding-error fix to bin/rebrand-sync Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	3 weeks ago
Pete Matsyburka	90fef58684	ruby 4.0.5	4 weeks ago
Wabo	8dbf5b6cab	Fix CI lint + flaky dashboard test on first fork-Actions run ... Previously CI had never run on the wabolabs/wabosign fork (Actions gated until owner consent). Now that the gate is lifted, run rubocop / erblint / brakeman / rspec against current master uncovered backlog: - rubocop: 97 auto-corrected across the WaboSign-fork files (account logo, SMS, SSO, ability specs, role auth specs, omniauth callbacks). Remaining 8 fixed by hand: * lib/wabosign.rb chained map collapsed to filter_map; `hd` param renamed to `hosted_domain` (Naming/MethodParameterName) * app/models/user.rb default_sso_account split for line length + SafeNavigation * spec/rails_helper.rb abort calls marked `# rubocop:disable Rails/Exit` (upstream pattern, intentional) * spec/requests/users/omniauth_callbacks_spec.rb let! used for side-effect-only setup -> moved into before blocks - erblint: 21 auto-corrected (mostly Style/StringLiterals from a sed substitution that picked double quotes) + a missing autocomplete attribute added to the SMS test-message input. - brakeman: clean. Removed one obsolete ignore entry (was for the deleted enquiries controller) and added one new ignore for the MCP-settings token preview (HighlightCode returns escaped HTML). - rspec: dashboard "shows the list of templates" was flaky because other_template's Faker::Book.title could randomly collide with one of the 5 in-account templates. Pin the name to a unique suffix. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Wabo	ad12ef7fb5	Add Google Workspace SSO via omniauth-google-oauth2 ... Adds "Sign in with Google" as an additive auth path next to email and password. When GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set, the Google button appears on the sign-in page and the SSO settings page shows an env-driven status panel. Access is restricted to Workspace domains listed in GOOGLE_ALLOWED_DOMAINS (CSV); the hd claim is re-verified server-side on every callback so a misconfigured Google consent screen cannot bypass it. New users from an allowed domain are JIT-provisioned in the default account (oldest, or pinned via GOOGLE_DEFAULT_ACCOUNT_ID). Existing users with a matching email get linked to their Google identity on first sign-in; identity collisions (same email, different Google uid) are rejected. Google's MFA is trusted: users signed in via Google do not see the WaboSign OTP prompt or the FORCE_MFA setup redirect. Password sign-in keeps working unchanged, including its existing OTP gate. Implementation: - Devise gains :omniauthable when SSO is enabled; users get provider/uid columns with a partial unique index that allows NULL for password-only rows. - Users::OmniauthCallbacksController handles /users/auth/google_oauth2/ callback, sets session[:bypass_otp_for_sso], and redirects on failure. - SessionsController#destroy clears the bypass flag on sign-out. - DashboardController#maybe_redirect_mfa_setup honours the flag and User#signed_in_via_sso?. - The previously empty _omniauthable.html.erb stub now renders the Google button. Request specs cover happy path, link-existing-user, domain rejection, identity collision, and 2FA bypass. GOOGLE_SSO.md is the operator-facing setup, behaviour, verification, and troubleshooting guide. README links to it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Pete Matsyburka	b11775ebda	remove premailer	3 months ago
Pete Matsyburka	608191183a	update deps	3 months ago
Pete Matsyburka	47822ecc15	remove autolink	4 months ago
Pete Matsyburka	eb63113227	use trilogy mysql	5 months ago
Alex Turchyn	7b5494468f	update rails to 8.1.2	5 months ago
Pete Matsyburka	1c8a7b6a7c	detect fields	8 months ago
Pete Matsyburka	f39b8b000e	use csv safe	10 months ago
Alex Turchyn	988a5361a6	add webhook events	12 months ago
Pete Matsyburka	c133fef99d	ruby 3.4.2	1 year ago
Pete Matsyburka	b0d8e47a75	fix annotate model	1 year ago
Pete Matsyburka	8a507339af	add brakeman	1 year ago
Pete Matsyburka	b950b1c63e	ruby 3.4.1	2 years ago
Pete Matsyburka	3dd3877ea9	update deps	2 years ago
Pete Matsyburka	b4dba0d809	fix smtp without password	2 years ago
Pete Matsyburka	25fe35e212	ruby 3.3.4	2 years ago
Pete Matsyburka	1efaf30fb7	fix net smtp without creds	2 years ago
Pete Matsyburka	e5b0a2355f	use aws secret	2 years ago
Pete Matsyburka	e872fa2497	ruby 3.3.3	2 years ago
Pete Matsyburka	3034c00bb3	use sidekiq	2 years ago
Pete Matsyburka	a773f63a65	remove pdf reader	2 years ago
Pete Matsyburka	897750ba1e	fix build	2 years ago
Pete Matsyburka	2e597fcf43	ruby 3.3.1	2 years ago
Pete Matsyburka	179ae01551	remove rollbar	2 years ago
Pete Matsyburka	6253e80a70	add testing environment	2 years ago
Pete Matsyburka	298c64a119	fix RTL reverse	2 years ago
Pete Matsyburka	0d0b248988	use arabic letter connector	2 years ago
Pete Matsyburka	cfb1bdcd52	back to ruby 3.2.2	3 years ago
Alex Turchyn	fe845bfa36	rails v7.1.2 and ruby to v3.3.0	3 years ago
Pete Matsyburka	0e9343d9e2	process payment fields	3 years ago
Alex Turchyn	9f48c6e625	add MS oauth	3 years ago
Alex Turchyn	db1e2b9aa2	download submitter default value attachments	3 years ago
Alex Turchyn	84e879bad0	fix email typos	3 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	3 years ago
Alex Turchyn	ef618f8f49	add 2FA	3 years ago
Alex Turchyn	52ef0ae929	make pdf links clickable	3 years ago
Alex Turchyn	bc3b1b477e	add export button	3 years ago
Alex Turchyn	187b354605	add personalization settings	3 years ago
Alex Turchyn	7912c9a1ee	add submitters api	3 years ago
Alex Turchyn	7ed1b71a6b	add optional sidekiq for background jobs	3 years ago
Alex Turchyn	6f3fe1dd7b	improve registration and add oauth	3 years ago
Alex Turchyn	dac7594aeb	do not require optional gems	3 years ago
Alex Turchyn	b112fc0c81	add analytics tools	3 years ago
Alex Turchyn	70211b24c5	add mysql support	3 years ago
Alex Turchyn	c904d51302	adjust templates, add timezone and locale	3 years ago