mirror of
https://github.com/documenso/documenso.git
synced 2025-11-13 08:13:56 +10:00
d11a68fc4c
## Description Direct templates links is a feature that provides template owners the ability to allow users to create documents based of their templates. ## General outline This works by allowing the template owner to configure a "direct recipient" in the template. When a user opens the direct link to the template, it will create a flow where they sign the fields configured by the template owner for the direct recipient. After these fields are signed the following will occur: - A document will be created where the owner is the template owner - The direct recipient fields will be signed - The document will be sent to any other recipients configured in the template - If there are none the document will be immediately completed ## Notes There's a custom prisma migration to migrate all documents to have 'DOCUMENT' as the source, then sets the column to required. --------- Co-authored-by: Lucas Smith <me@lucasjamessmith.me>
53 lines
1.5 KiB
TypeScript
53 lines
1.5 KiB
TypeScript
import type { Document, Field, Recipient } from '@documenso/prisma/client';
|
|
import { FieldType } from '@documenso/prisma/client';
|
|
|
|
import { AppError, AppErrorCode } from '../../errors/app-error';
|
|
import type { TRecipientActionAuth } from '../../types/document-auth';
|
|
import { extractDocumentAuthMethods } from '../../utils/document-auth';
|
|
import { isRecipientAuthorized } from './is-recipient-authorized';
|
|
|
|
export type ValidateFieldAuthOptions = {
|
|
documentAuthOptions: Document['authOptions'];
|
|
recipient: Pick<Recipient, 'authOptions' | 'email'>;
|
|
field: Field;
|
|
userId?: number;
|
|
authOptions?: TRecipientActionAuth;
|
|
};
|
|
|
|
/**
|
|
* Throws an error if the reauth for a field is invalid.
|
|
*
|
|
* Returns the derived recipient action authentication if valid.
|
|
*/
|
|
export const validateFieldAuth = async ({
|
|
documentAuthOptions,
|
|
recipient,
|
|
field,
|
|
userId,
|
|
authOptions,
|
|
}: ValidateFieldAuthOptions) => {
|
|
const { derivedRecipientActionAuth } = extractDocumentAuthMethods({
|
|
documentAuth: documentAuthOptions,
|
|
recipientAuth: recipient.authOptions,
|
|
});
|
|
|
|
// Override all non-signature fields to not require any auth.
|
|
if (field.type !== FieldType.SIGNATURE) {
|
|
return null;
|
|
}
|
|
|
|
const isValid = await isRecipientAuthorized({
|
|
type: 'ACTION',
|
|
documentAuthOptions,
|
|
recipient,
|
|
userId,
|
|
authOptions,
|
|
});
|
|
|
|
if (!isValid) {
|
|
throw new AppError(AppErrorCode.UNAUTHORIZED, 'Invalid authentication values');
|
|
}
|
|
|
|
return derivedRecipientActionAuth;
|
|
};
|