mirror of
https://github.com/documenso/documenso.git
synced 2026-06-22 04:12:06 +10:00
Lucas Smith
d5ce222482
Adds Cloud Signature Consortium (CSC) integration for AES/QES signing against a configured TSP. v1 ships as instance-wide configuration via environment variables, with per-envelope signature level selection, license gating, and an OAuth-driven signing flow (capture + FIFO signers, SAD session, blocking/in-progress recipient pages). Includes signature level compatibility checks (role, signing order, dictate next signer), envelope mutability assertions, Prisma migration for signature level and CSC tables, and docs for the new signing certificate options.
64 lines
1.7 KiB
TypeScript
64 lines
1.7 KiB
TypeScript
import { AppError, AppErrorCode } from '@documenso/lib/errors/app-error';
|
|
import { Hono } from 'hono';
|
|
import { HTTPException } from 'hono/http-exception';
|
|
import type { ContentfulStatusCode } from 'hono/utils/http-status';
|
|
|
|
import type { HonoCscEnv } from './context';
|
|
import { cscOAuthAuthorizeRoute } from './oauth-authorize';
|
|
import { cscOAuthCallbackRoute } from './oauth-callback';
|
|
|
|
/**
|
|
* `@documenso/ee` CSC subapp. Mount under `/api/csc` in the remix host (see
|
|
* `apps/remix/server/router.ts`). All CSC endpoints — OAuth authorize +
|
|
* callback — are composed here so the host only has to wire one route.
|
|
*
|
|
* Routes throw `AppError` freely; the `.onError` handler below normalises
|
|
* them into REST responses (mirrors `@documenso/auth/server`'s pattern).
|
|
*/
|
|
export const csc = new Hono<HonoCscEnv>()
|
|
.route('/oauth/authorize', cscOAuthAuthorizeRoute)
|
|
.route('/oauth/callback', cscOAuthCallbackRoute);
|
|
|
|
csc.onError((err, c) => {
|
|
const logger = c.get('logger');
|
|
|
|
if (err instanceof HTTPException) {
|
|
return c.json(
|
|
{
|
|
code: AppErrorCode.UNKNOWN_ERROR,
|
|
message: err.message,
|
|
statusCode: err.status,
|
|
},
|
|
err.status,
|
|
);
|
|
}
|
|
|
|
if (err instanceof AppError) {
|
|
const { status, body } = AppError.toRestAPIError(err);
|
|
|
|
logger.error({
|
|
event: 'csc.error',
|
|
code: err.code,
|
|
message: err.message,
|
|
});
|
|
|
|
return c.json(body, status as ContentfulStatusCode);
|
|
}
|
|
|
|
logger.error({
|
|
event: 'csc.unknown_error',
|
|
error: err,
|
|
});
|
|
|
|
return c.json(
|
|
{
|
|
code: AppErrorCode.UNKNOWN_ERROR,
|
|
message: 'Internal Server Error',
|
|
statusCode: 500,
|
|
},
|
|
500,
|
|
);
|
|
});
|
|
|
|
export type CscAppType = typeof csc;
|