mirror of
https://github.com/documenso/documenso.git
synced 2026-06-22 04:12:06 +10:00
d5ce222482
Adds Cloud Signature Consortium (CSC) integration for AES/QES signing against a configured TSP. v1 ships as instance-wide configuration via environment variables, with per-envelope signature level selection, license gating, and an OAuth-driven signing flow (capture + FIFO signers, SAD session, blocking/in-progress recipient pages). Includes signature level compatibility checks (role, signing order, dictate next signer), envelope mutability assertions, Prisma migration for signature level and CSC tables, and docs for the new signing certificate options.
158 lines
4.4 KiB
TypeScript
158 lines
4.4 KiB
TypeScript
import { DOCUMENT_AUDIT_LOG_TYPE } from '@documenso/lib/types/document-audit-logs';
|
|
import type { ApiRequestMetadata } from '@documenso/lib/universal/extract-request-metadata';
|
|
import { createDocumentAuditLogData, diffDocumentMetaChanges } from '@documenso/lib/utils/document-audit-logs';
|
|
import { prisma } from '@documenso/prisma';
|
|
import { type DocumentDistributionMethod, type DocumentSigningOrder, EnvelopeType } from '@prisma/client';
|
|
|
|
import type { SupportedLanguageCodes } from '../../constants/i18n';
|
|
import { AppError, AppErrorCode } from '../../errors/app-error';
|
|
import type { TDocumentEmailSettings } from '../../types/document-email';
|
|
import type { EnvelopeIdOptions } from '../../utils/envelope';
|
|
import { assertEnvelopeMutable } from '../envelope/assert-envelope-mutable';
|
|
import { getEnvelopeWhereInput } from '../envelope/get-envelope-by-id';
|
|
import { assertCompatibleDictateNextSigner } from '../signature-level/assert-compatible-dictate-next-signer';
|
|
import { assertCompatibleSigningOrder } from '../signature-level/assert-compatible-signing-order';
|
|
|
|
export type CreateDocumentMetaOptions = {
|
|
userId: number;
|
|
teamId: number;
|
|
id: EnvelopeIdOptions;
|
|
subject?: string;
|
|
message?: string;
|
|
timezone?: string;
|
|
dateFormat?: string;
|
|
redirectUrl?: string;
|
|
emailId?: string | null;
|
|
emailReplyTo?: string | null;
|
|
emailSettings?: TDocumentEmailSettings;
|
|
signingOrder?: DocumentSigningOrder;
|
|
allowDictateNextSigner?: boolean;
|
|
distributionMethod?: DocumentDistributionMethod;
|
|
typedSignatureEnabled?: boolean;
|
|
uploadSignatureEnabled?: boolean;
|
|
drawSignatureEnabled?: boolean;
|
|
language?: SupportedLanguageCodes;
|
|
requestMetadata: ApiRequestMetadata;
|
|
};
|
|
|
|
export const updateDocumentMeta = async ({
|
|
id,
|
|
userId,
|
|
teamId,
|
|
subject,
|
|
message,
|
|
timezone,
|
|
dateFormat,
|
|
redirectUrl,
|
|
signingOrder,
|
|
allowDictateNextSigner,
|
|
emailId,
|
|
emailReplyTo,
|
|
emailSettings,
|
|
distributionMethod,
|
|
typedSignatureEnabled,
|
|
uploadSignatureEnabled,
|
|
drawSignatureEnabled,
|
|
language,
|
|
requestMetadata,
|
|
}: CreateDocumentMetaOptions) => {
|
|
const { envelopeWhereInput, team } = await getEnvelopeWhereInput({
|
|
id,
|
|
type: null, // Allow updating both documents and templates meta.
|
|
userId,
|
|
teamId,
|
|
});
|
|
|
|
const envelope = await prisma.envelope.findFirst({
|
|
where: envelopeWhereInput,
|
|
include: {
|
|
documentMeta: true,
|
|
},
|
|
});
|
|
|
|
if (!envelope) {
|
|
throw new AppError(AppErrorCode.NOT_FOUND, {
|
|
message: 'Document not found',
|
|
});
|
|
}
|
|
|
|
await assertEnvelopeMutable(envelope);
|
|
|
|
if (signingOrder !== undefined) {
|
|
assertCompatibleSigningOrder({
|
|
signatureLevel: envelope.signatureLevel,
|
|
signingOrder,
|
|
});
|
|
}
|
|
|
|
if (allowDictateNextSigner !== undefined) {
|
|
assertCompatibleDictateNextSigner({
|
|
signatureLevel: envelope.signatureLevel,
|
|
allowDictateNextSigner,
|
|
});
|
|
}
|
|
|
|
const { documentMeta: originalDocumentMeta } = envelope;
|
|
|
|
// Validate the emailId belongs to the organisation.
|
|
if (emailId) {
|
|
const email = await prisma.organisationEmail.findFirst({
|
|
where: {
|
|
id: emailId,
|
|
organisationId: team.organisationId,
|
|
},
|
|
});
|
|
|
|
if (!email) {
|
|
throw new AppError(AppErrorCode.NOT_FOUND, {
|
|
message: 'Email not found',
|
|
});
|
|
}
|
|
}
|
|
|
|
return await prisma.$transaction(async (tx) => {
|
|
await assertEnvelopeMutable(envelope, tx);
|
|
|
|
const upsertedDocumentMeta = await tx.documentMeta.update({
|
|
where: {
|
|
id: envelope.documentMetaId,
|
|
},
|
|
data: {
|
|
subject,
|
|
message,
|
|
dateFormat,
|
|
timezone,
|
|
redirectUrl,
|
|
signingOrder,
|
|
allowDictateNextSigner,
|
|
emailId,
|
|
emailReplyTo,
|
|
emailSettings,
|
|
distributionMethod,
|
|
typedSignatureEnabled,
|
|
uploadSignatureEnabled,
|
|
drawSignatureEnabled,
|
|
language,
|
|
},
|
|
});
|
|
|
|
const changes = diffDocumentMetaChanges(originalDocumentMeta ?? {}, upsertedDocumentMeta);
|
|
|
|
// Create audit logs only for document type envelopes.
|
|
if (changes.length > 0 && envelope.type === EnvelopeType.DOCUMENT) {
|
|
await tx.documentAuditLog.create({
|
|
data: createDocumentAuditLogData({
|
|
type: DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_META_UPDATED,
|
|
envelopeId: envelope.id,
|
|
metadata: requestMetadata,
|
|
data: {
|
|
changes: diffDocumentMetaChanges(originalDocumentMeta ?? {}, upsertedDocumentMeta),
|
|
},
|
|
}),
|
|
});
|
|
}
|
|
|
|
return upsertedDocumentMeta;
|
|
});
|
|
};
|