mirror of
https://github.com/documenso/documenso.git
synced 2026-06-22 04:12:06 +10:00
d5ce222482
Adds Cloud Signature Consortium (CSC) integration for AES/QES signing against a configured TSP. v1 ships as instance-wide configuration via environment variables, with per-envelope signature level selection, license gating, and an OAuth-driven signing flow (capture + FIFO signers, SAD session, blocking/in-progress recipient pages). Includes signature level compatibility checks (role, signing order, dictate next signer), envelope mutability assertions, Prisma migration for signature level and CSC tables, and docs for the new signing certificate options.
248 lines
7.7 KiB
TypeScript
248 lines
7.7 KiB
TypeScript
import { prisma } from '@documenso/prisma';
|
|
import { DocumentSource, EnvelopeType, WebhookTriggerEvents } from '@prisma/client';
|
|
import pMap from 'p-map';
|
|
import { omit } from 'remeda';
|
|
|
|
import { AppError, AppErrorCode } from '../../errors/app-error';
|
|
import { ZSignatureLevelSchema } from '../../types/signature-level';
|
|
import { mapEnvelopeToWebhookDocumentPayload, ZWebhookDocumentSchema } from '../../types/webhook-payload';
|
|
import { nanoid, prefixedId } from '../../universal/id';
|
|
import type { EnvelopeIdOptions } from '../../utils/envelope';
|
|
import { getEnvelopeWhereInput } from '../envelope/get-envelope-by-id';
|
|
import { incrementDocumentId, incrementTemplateId } from '../envelope/increment-id';
|
|
import { resolveSignatureLevel } from '../signature-level/resolve-signature-level';
|
|
import { assertOrganisationRatesAndLimits } from '../rate-limit/assert-organisation-rates-and-limits';
|
|
import { triggerWebhook } from '../webhooks/trigger/trigger-webhook';
|
|
|
|
export interface DuplicateEnvelopeOptions {
|
|
id: EnvelopeIdOptions;
|
|
userId: number;
|
|
teamId: number;
|
|
overrides?: {
|
|
duplicateAsTemplate?: boolean;
|
|
includeRecipients?: boolean;
|
|
includeFields?: boolean;
|
|
};
|
|
}
|
|
|
|
export const duplicateEnvelope = async ({ id, userId, teamId, overrides }: DuplicateEnvelopeOptions) => {
|
|
const { duplicateAsTemplate = false, includeRecipients = true, includeFields = true } = overrides ?? {};
|
|
|
|
const { envelopeWhereInput, team } = await getEnvelopeWhereInput({
|
|
id,
|
|
type: null,
|
|
userId,
|
|
teamId,
|
|
});
|
|
|
|
const envelope = await prisma.envelope.findFirst({
|
|
where: envelopeWhereInput,
|
|
select: {
|
|
type: true,
|
|
title: true,
|
|
userId: true,
|
|
internalVersion: true,
|
|
signatureLevel: true,
|
|
templateType: true,
|
|
publicTitle: true,
|
|
publicDescription: true,
|
|
envelopeItems: {
|
|
include: {
|
|
documentData: {
|
|
select: {
|
|
data: true,
|
|
initialData: true,
|
|
type: true,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
authOptions: true,
|
|
visibility: true,
|
|
documentMeta: true,
|
|
recipients: {
|
|
select: {
|
|
email: true,
|
|
name: true,
|
|
role: true,
|
|
signingOrder: true,
|
|
fields: true,
|
|
},
|
|
},
|
|
teamId: true,
|
|
},
|
|
});
|
|
|
|
if (!envelope) {
|
|
throw new AppError(AppErrorCode.NOT_FOUND, {
|
|
message: 'Document not found',
|
|
});
|
|
}
|
|
|
|
if (duplicateAsTemplate && envelope.type !== EnvelopeType.DOCUMENT) {
|
|
throw new AppError(AppErrorCode.INVALID_REQUEST, {
|
|
message: 'Only documents can be saved as templates',
|
|
});
|
|
}
|
|
|
|
const targetType = duplicateAsTemplate ? EnvelopeType.TEMPLATE : envelope.type;
|
|
|
|
// Enforce the organisation document-creation limit before creating the duplicate.
|
|
if (targetType === EnvelopeType.DOCUMENT) {
|
|
await assertOrganisationRatesAndLimits({
|
|
organisationId: team.organisationId,
|
|
type: 'document',
|
|
count: 1,
|
|
});
|
|
}
|
|
|
|
const [{ legacyNumberId, secondaryId }, createdDocumentMeta] = await Promise.all([
|
|
targetType === EnvelopeType.DOCUMENT
|
|
? incrementDocumentId().then(({ documentId, formattedDocumentId }) => ({
|
|
legacyNumberId: documentId,
|
|
secondaryId: formattedDocumentId,
|
|
}))
|
|
: incrementTemplateId().then(({ templateId, formattedTemplateId }) => ({
|
|
legacyNumberId: templateId,
|
|
secondaryId: formattedTemplateId,
|
|
})),
|
|
prisma.documentMeta.create({
|
|
data: {
|
|
...omit(envelope.documentMeta, ['id']),
|
|
emailSettings: envelope.documentMeta.emailSettings || undefined,
|
|
},
|
|
}),
|
|
]);
|
|
|
|
const duplicatedTemplateType =
|
|
envelope.templateType === 'ORGANISATION' && envelope.teamId !== teamId
|
|
? 'PRIVATE'
|
|
: (envelope.templateType ?? undefined);
|
|
|
|
// The source level is a free-form TEXT column — parse defensively before
|
|
// handing to the resolver. Coerce (not strict) because instance mode may have
|
|
// changed since the source envelope was created.
|
|
const duplicatedSignatureLevel = resolveSignatureLevel({
|
|
requested: ZSignatureLevelSchema.parse(envelope.signatureLevel),
|
|
strict: false,
|
|
});
|
|
|
|
const duplicatedEnvelope = await prisma.envelope.create({
|
|
data: {
|
|
id: prefixedId('envelope'),
|
|
secondaryId,
|
|
type: targetType,
|
|
internalVersion: envelope.internalVersion,
|
|
signatureLevel: duplicatedSignatureLevel,
|
|
userId,
|
|
teamId,
|
|
title: envelope.title + ' (copy)',
|
|
documentMetaId: createdDocumentMeta.id,
|
|
authOptions: envelope.authOptions || undefined,
|
|
visibility: envelope.visibility,
|
|
templateType: duplicatedTemplateType,
|
|
publicTitle: envelope.publicTitle ?? undefined,
|
|
publicDescription: envelope.publicDescription ?? undefined,
|
|
source: targetType === EnvelopeType.DOCUMENT ? DocumentSource.DOCUMENT : DocumentSource.TEMPLATE,
|
|
},
|
|
include: {
|
|
recipients: true,
|
|
documentMeta: true,
|
|
},
|
|
});
|
|
|
|
// Key = original envelope item ID
|
|
// Value = duplicated envelope item ID.
|
|
const oldEnvelopeItemToNewEnvelopeItemIdMap: Record<string, string> = {};
|
|
|
|
// Duplicate the envelope items.
|
|
await Promise.all(
|
|
envelope.envelopeItems.map(async (envelopeItem) => {
|
|
const duplicatedDocumentData = await prisma.documentData.create({
|
|
data: {
|
|
type: envelopeItem.documentData.type,
|
|
data: envelopeItem.documentData.initialData,
|
|
initialData: envelopeItem.documentData.initialData,
|
|
},
|
|
});
|
|
|
|
const duplicatedEnvelopeItem = await prisma.envelopeItem.create({
|
|
data: {
|
|
id: prefixedId('envelope_item'),
|
|
title: envelopeItem.title,
|
|
order: envelopeItem.order,
|
|
envelopeId: duplicatedEnvelope.id,
|
|
documentDataId: duplicatedDocumentData.id,
|
|
},
|
|
});
|
|
|
|
oldEnvelopeItemToNewEnvelopeItemIdMap[envelopeItem.id] = duplicatedEnvelopeItem.id;
|
|
}),
|
|
);
|
|
|
|
if (includeRecipients) {
|
|
await pMap(
|
|
envelope.recipients,
|
|
async (recipient) =>
|
|
prisma.recipient.create({
|
|
data: {
|
|
envelopeId: duplicatedEnvelope.id,
|
|
email: recipient.email,
|
|
name: recipient.name,
|
|
role: recipient.role,
|
|
signingOrder: recipient.signingOrder,
|
|
token: nanoid(),
|
|
fields: includeFields
|
|
? {
|
|
createMany: {
|
|
data: recipient.fields.map((field) => ({
|
|
envelopeId: duplicatedEnvelope.id,
|
|
envelopeItemId: oldEnvelopeItemToNewEnvelopeItemIdMap[field.envelopeItemId],
|
|
type: field.type,
|
|
page: field.page,
|
|
positionX: field.positionX,
|
|
positionY: field.positionY,
|
|
width: field.width,
|
|
height: field.height,
|
|
customText: '',
|
|
inserted: false,
|
|
fieldMeta: field.fieldMeta as PrismaJson.FieldMeta,
|
|
})),
|
|
},
|
|
}
|
|
: undefined,
|
|
},
|
|
}),
|
|
{ concurrency: 5 },
|
|
);
|
|
}
|
|
|
|
if (duplicatedEnvelope.type === EnvelopeType.DOCUMENT) {
|
|
const refetchedEnvelope = await prisma.envelope.findFirstOrThrow({
|
|
where: {
|
|
id: duplicatedEnvelope.id,
|
|
},
|
|
include: {
|
|
documentMeta: true,
|
|
recipients: true,
|
|
},
|
|
});
|
|
|
|
await triggerWebhook({
|
|
event: WebhookTriggerEvents.DOCUMENT_CREATED,
|
|
data: ZWebhookDocumentSchema.parse(mapEnvelopeToWebhookDocumentPayload(refetchedEnvelope)),
|
|
userId: userId,
|
|
teamId: teamId,
|
|
});
|
|
}
|
|
|
|
return {
|
|
id: duplicatedEnvelope.id,
|
|
envelope: duplicatedEnvelope,
|
|
legacyId: {
|
|
type: duplicatedEnvelope.type,
|
|
id: legacyNumberId,
|
|
},
|
|
};
|
|
};
|