113 Commits (f180d704741c940e5cb6f61cd52f60fd0860a8b6)

Author	SHA1	Message	Date
Bernardo Anderson	f180d70474	CP-10361 - Forgot a few things	4 months ago
Bernardo Anderson	24cf871bcc	CP-10361 - Due to Docuseal being a public repo, we want to rename these values/fields to be generic instead of labeling 'ats'	4 months ago
Bernardo Anderson	d4a0dd379a	Merge branch 'main' into CP-10361	4 months ago
Bernardo Anderson	5d790f57bd	CP-10361 - Extract ATS prefill logic into dedicated service layer ... - Extract complex ATS prefill logic from PrefillFieldsHelper into dedicated AtsPrefill service - Create modular service objects: FieldExtractor, FieldMapper, ValueMerger, and CacheManager - Implement proper caching strategy with Rails.cache for performance optimization - Add comprehensive test coverage for all new service components - Maintain backward compatibility through facade methods in PrefillFieldsHelper - Improve security by validating field name patterns and sanitizing inputs - Enhance performance with optimized field lookup caching BREAKING CHANGE: PrefillFieldsHelper now delegates to AtsPrefill service layer. Direct usage of helper methods remains unchanged, but internal implementation has been refactored.	4 months ago
Ryan Arakawa	4ec9e7fc5e	CP-10370 authentication (#15) ... * Add external_id fields to accounts and users tables Adds external_account_id and external_user_id fields to support integration with external ATS systems. These fields will map DocuSeal accounts/users to their corresponding ATS entities. * Add external ID support to Account and User models Implements find_or_create_by_external_id methods for both Account and User models to support automatic provisioning from external ATS systems. Users now have access tokens for authentication. * Add external authentication API endpoint Creates /api/external_auth/get_user_token endpoint for external API systems to authenticate users and receive access tokens. * Refactor authentication to support token-based login Replaces demo user authentication and setup redirect logic with token-based authentication via params, session, or X-Auth-Token header. Users do not login, they are just authenticated via token. * Replace authenticate_user! with authenticate_via_token! Refactored controllers to use authenticate_via_token! instead of authenticate_user! for authentication. Added authenticate_via_token! method to ApiBaseController. * Update controller authentication and authorization logic Removed and replaced several before_action and authorization checks in ExportController, SetupController, and TemplateDocumentsController. * Add external authentication API endpoint * Add IframeAuthentication concern for AJAX requests in iframe context * Create shared concern to handle authentication from HTTP referer * Extracts auth token from referer URL when AJAX requests don't include token * Supports Vue component requests within iframes * Remove old user authentication from dashboard controller * Quick fix for request changes Now that we have scoped users, we're changing this to compare to the template authot * rubocop fixes * Add and update authentication and model specs Introduces new specs for iframe authentication, account, user, application controller, and external auth API. * add safe navigation and remove dead method	4 months ago
Bernardo Anderson	ca85f002f5	CP-10361 - Improve security and performance for ATS form prefill integration ... - Replace present? check with blank? for better nil handling - Add input size validation to prevent DoS attacks (64KB limit) - Fix string formatting and indentation in audit logging - Optimize caching with proper error handling for Redis failures - Simplify conditional logic in field value merging - Add frozen string literal comments for Ruby 3.4 compatibility - Improve test coverage with better mocking and assertions Security improvements include input validation and audit logging for ATS prefill usage tracking.	4 months ago
Bernardo Anderson	f50b6b89f2	CP-10361 - Integrate automatic form prefill values from ATS system ... - Add Base64-encoded JSON parameter support for ATS prefill values - Implement field mapping between ATS field names and template field UUIDs - Enhance merge logic to preserve existing submitter values while adding ATS prefill data - Add comprehensive error handling for invalid Base64 and JSON parsing - Update form rendering to use merged ATS values for prefill functionality - Add integration tests for complete ATS prefill workflow	4 months ago
Ryan Arakawa	ba325ec5a4	Merge pull request #11 from CareerPlug/CP-10319-approve-reject-changes ... CP-10319 changes requested feature	4 months ago
Ryan Arakawa	c5963a422f	fix tests ... * rename spec file to fit how the repo does request tests	4 months ago
Ryan Arakawa	a6354e6802	add ability to request changes for a completed submission ... * new controller to handle change requests * add button and modal on completed submission view to request changes * webhook job will send out to external API when submission is updated for changes_requested_at * email will be sent to user that need to make changes * submission status steps back from "completed"	4 months ago
Bernardo Anderson	c8c7fbd57c	CP-10359 - Improve cache logging assertions in ATS field extraction specs ... Update test expectations to use more flexible logging verification that handles both string and block-based debug calls. This ensures compatibility with Rails.logger's different calling patterns while maintaining test reliability for cache hit/miss logging.	4 months ago
Bernardo Anderson	2aac5f428b	CP-10359 - Add caching for ATS field extraction to improve performance ... - Implement Rails.cache-based caching for expensive Base64 decoding and JSON parsing - Add configurable TTL (1 hour) for successful results and shorter TTL (5 minutes) for errors - Include cache key generation using SHA256 hash for security and uniqueness - Add comprehensive test coverage for caching behavior and edge cases - Handle cache read/write failures gracefully with fallback to normal processing	4 months ago
Bernardo Anderson	be41cebcca	CP-10359 - Add ATS prefill field extraction for template and submission views ... - Add PrefillFieldsHelper module to extract ATS field data from base64 encoded parameters - Integrate ATS field extraction into TemplatesController and SubmissionsController - Support employee, manager, account, and location field name patterns - Add comprehensive test coverage for field validation and error handling - Remove unused backgroundColor style from template builder	4 months ago
Ryan Arakawa	371fdbd6a8	rubocop fixes and minor test refactors	4 months ago
Ryan Arakawa	5fe00d3206	export submission status ... * when submitter status changes, export to external API * update ExportSubmissionService to send payload to external API	4 months ago
Bernardo Anderson	481cc226ee	CP-10288 - Fix NoMethodError	5 months ago
Bernardo Anderson	d0f024cf8d	CP-10288 - Attempt another fix	5 months ago
Bernardo Anderson	f7a6d89190	CP-10288 - Fix rubocop issues	5 months ago
Bernardo Anderson	98cc484cc9	CP-10288 - Update specs	5 months ago
Bernardo Anderson	5d6ec15c79	CP-10288 - Header bar updates	5 months ago
Bernardo Anderson	2c4457fccc	CP-9771 - Update specs	5 months ago
Ryan Arakawa	b7963f63ae	move API specific code into a service and subclass services ... * ExportService handles the connection and post endpoint * separate subclasses for template and submission * add specs	5 months ago
Alex Turchyn	36331bb993	show found submissions when searching on templates	6 months ago
Pete Matsyburka	9d1860f038	fix specs	6 months ago
Pete Matsyburka	1d48fe9621	fix spec	7 months ago
Pete Matsyburka	9544bb3d76	Revert "shared link true default" ... This reverts commit e41fe5fbca.	7 months ago
Pete Matsyburka	4e94664008	refactor start form	7 months ago
Pete Matsyburka	e41fe5fbca	shared link true default	7 months ago
Alex Turchyn	e77b5fa2c9	add optional shared link to templates	7 months ago
Alex Turchyn	fa0733f480	improve user email validation	7 months ago
Alex Turchyn	a3bd37c9a2	Improve error message when does not match in completed form	7 months ago
Pete Matsyburka	a7ed0b86a4	dot rspec	7 months ago
Alex Turchyn	23631b75f2	add template_accesses factory	7 months ago
Pete Matsyburka	0122a237e3	remove request helper	7 months ago
Alex Turchyn	2dca7d8a8e	add builder 'replace' button specs	7 months ago
Pete Matsyburka	ff46993de6	fix spec	8 months ago
Pete Matsyburka	7964d6e0f0	improve signature validation	8 months ago
Alex Turchyn	e5db61e358	add API specs for completed submitter	9 months ago
Alex Turchyn	b0110d9340	update signature validation	9 months ago
Alex Turchyn	3ae98bf03e	improve multiple submitters error message	9 months ago
Alex Turchyn	febdc0b48d	add specs for masked fields	10 months ago
Alex Turchyn	8d953f210f	add attachment count attribute to template factory	10 months ago
Alex Turchyn	db60810272	add email OTP	12 months ago
Pete Matsyburka	616aced4e4	fix spec	12 months ago
Pete Matsyburka	4ad0b04b7f	remove sleep	12 months ago
Alex Turchyn	bc4c21f804	fix CI	1 year ago
Alex Turchyn	bb552d13d4	don't raise validation error if the message is empty	1 year ago
Alex Turchyn	b6a2aae970	restrict user invites	1 year ago
Alex Turchyn	75683631f0	add logical 'or' to field conditions	1 year ago
Pete Matsyburka	9beaaa0851	adjust filters	1 year ago