10 Commits (eda0eec6c30d01dd0d1b56aa616b659f88b0cd73)

Author	SHA1	Message	Date
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Pete Matsyburka	5b1a4ebffd	improve log	8 months ago
Pete Matsyburka	2542f26d96	adjust webhooks	1 year ago
Alex Turchyn	84edb6dbda	use webhook urls instead of encrypted configs	1 year ago
Pete Matsyburka	3034c00bb3	use sidekiq	2 years ago
Pete Matsyburka	acf06084bf	simplify job params	2 years ago
Pete Matsyburka	74634ba96b	mark as opened on form view	2 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	2 years ago
Alex Turchyn	3faec9d174	add started and viewed webhook events	2 years ago
Alex Turchyn	8cabe31827	add submission tracking events	2 years ago