54 Commits (eda0eec6c30d01dd0d1b56aa616b659f88b0cd73)

Author	SHA1	Message	Date
Bernardo Anderson	24cf871bcc	CP-10361 - Due to Docuseal being a public repo, we want to rename these values/fields to be generic instead of labeling 'ats'	4 months ago
Bernardo Anderson	d4a0dd379a	Merge branch 'main' into CP-10361	4 months ago
Bernardo Anderson	5d790f57bd	CP-10361 - Extract ATS prefill logic into dedicated service layer ... - Extract complex ATS prefill logic from PrefillFieldsHelper into dedicated AtsPrefill service - Create modular service objects: FieldExtractor, FieldMapper, ValueMerger, and CacheManager - Implement proper caching strategy with Rails.cache for performance optimization - Add comprehensive test coverage for all new service components - Maintain backward compatibility through facade methods in PrefillFieldsHelper - Improve security by validating field name patterns and sanitizing inputs - Enhance performance with optimized field lookup caching BREAKING CHANGE: PrefillFieldsHelper now delegates to AtsPrefill service layer. Direct usage of helper methods remains unchanged, but internal implementation has been refactored.	4 months ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Bernardo Anderson	e82a2ecee5	CP-10361 - Simplify ATS prefill values processing ... - Remove redundant logging and validation checks - Streamline error handling with early returns - Simplify hash validation logic - Reduce code complexity while maintaining security	4 months ago
Bernardo Anderson	ca85f002f5	CP-10361 - Improve security and performance for ATS form prefill integration ... - Replace present? check with blank? for better nil handling - Add input size validation to prevent DoS attacks (64KB limit) - Fix string formatting and indentation in audit logging - Optimize caching with proper error handling for Redis failures - Simplify conditional logic in field value merging - Add frozen string literal comments for Ruby 3.4 compatibility - Improve test coverage with better mocking and assertions Security improvements include input validation and audit logging for ATS prefill usage tracking.	4 months ago
Bernardo Anderson	7f89975d29	CP-10361 - Add security and performance improvements for ATS form prefill ... - Add input size limits (64KB for encoded, 32KB for decoded JSON) to prevent DoS attacks - Implement audit logging for ATS prefill usage tracking - Add caching layer for field UUID lookups with 30-minute TTL - Optimize field resolution with O(1) lookup cache instead of O(n) search - Add comprehensive error handling and logging throughout prefill pipeline - Validate ATS field names against allowed patterns with security checks	4 months ago
Bernardo Anderson	f50b6b89f2	CP-10361 - Integrate automatic form prefill values from ATS system ... - Add Base64-encoded JSON parameter support for ATS prefill values - Implement field mapping between ATS field names and template field UUIDs - Enhance merge logic to preserve existing submitter values while adding ATS prefill data - Add comprehensive error handling for invalid Base64 and JSON parsing - Update form rendering to use merged ATS values for prefill functionality - Add integration tests for complete ATS prefill workflow	4 months ago
Bernardo Anderson	dca1c1f20d	CP-10361 - Add ATS integration for automatic form prefill values ... Add support for fetching prefill values from ATS system when task_assignment_id parameter is provided. This includes: - New ATS API integration in PrefillFieldsHelper to fetch prefill values - Cache layer for ATS prefill values with 30-minute TTL - Merge logic to respect existing submitter values over ATS prefill values - Error handling and logging for ATS API failures - Integration with SubmitFormController to fetch values before form rendering The feature allows forms to be pre-populated with candidate data from the ATS system while preserving any values already entered by submitters.	4 months ago
Ryan Arakawa	5fe00d3206	export submission status ... * when submitter status changes, export to external API * update ExportSubmissionService to send payload to external API	4 months ago
Pete Matsyburka	f03166b4ea	one-off submission	6 months ago
Pete Matsyburka	f090e79002	fix required	8 months ago
Pete Matsyburka	c4505e67f0	require 2fa placeholder	8 months ago
Pete Matsyburka	28e3d65e63	improve required field handling	9 months ago
Pete Matsyburka	47c7270911	enforce signing order	9 months ago
Pete Matsyburka	ca8de23082	use account archived at	1 year ago
Pete Matsyburka	0e2fd8ee4f	use email host	1 year ago
Pete Matsyburka	f669045362	redirect com	1 year ago
Pete Matsyburka	2fcb08d27d	await for completion when order enforced	1 year ago
Oleksandr Turchyn	e9d728fa4a	add i18n	1 year ago
Pete Matsyburka	2764a18252	decline submission	1 year ago
Pete Matsyburka	3a2910f717	add expire at	1 year ago
Pete Matsyburka	d25c4fa766	remove log	1 year ago
Pete Matsyburka	04295f4540	adjust signature prefill	1 year ago
Pete Matsyburka	f9d52e56a2	prefill signature	2 years ago
Pete Matsyburka	0d9a709fa3	disable prefill signature	2 years ago
Pete Matsyburka	2389c3fc40	prefill signature	2 years ago
Pete Matsyburka	964b1444a5	adjust completed action	2 years ago
Pete Matsyburka	f3f08797f7	optimize document upload	2 years ago
Pete Matsyburka	d0ba180729	add submitter completed redirect url	2 years ago
Pete Matsyburka	2edc76414b	do not show archived submission	2 years ago
Pete Matsyburka	9356247ef0	add signer user forms translations	2 years ago
Pete Matsyburka	6d7d8ae87c	rename deleted_at to archived_at	2 years ago
Pete Matsyburka	203f4633f7	return 422 when submit archived submission	2 years ago
Pete Matsyburka	62eb0cda6b	return 422 on form update values when completed	2 years ago
DocuSeal	ce39494f84	optimize for large files	2 years ago
DocuSeal	518bbe3d1c	do not allow to submit archived forms	2 years ago
Alex Turchyn	5643094a7a	add default user signatures	2 years ago
Alex Turchyn	2f1843151d	add cancan for authorization	2 years ago
Alex Turchyn	c38830dd1c	add phone type placeholder	2 years ago
Alex Turchyn	52ef0ae929	make pdf links clickable	2 years ago
Alex Turchyn	e5c5620b20	collect ua and ip on form completion	2 years ago
Alex Turchyn	47c57158f4	refactor and fixes	2 years ago
Alex Turchyn	e4bb5466f5	add webhook settings	2 years ago
Alex Turchyn	e1eb2da6f9	preserve template fields per submission	2 years ago
Alex Turchyn	dcbdc9e60c	fix submit form	2 years ago
Alex Turchyn	2112b2f3d3	minor UI fixes	2 years ago
Alex Turchyn	4180d02a1b	synchronize documents generation	3 years ago
Alex Turchyn	c904d51302	adjust templates, add timezone and locale	3 years ago
Alex Turchyn	d53fa5613b	adjust email templates	3 years ago