mirror of
https://github.com/documenso/documenso.git
synced 2026-06-22 04:12:06 +10:00
Lucas Smith
d5ce222482
Adds Cloud Signature Consortium (CSC) integration for AES/QES signing against a configured TSP. v1 ships as instance-wide configuration via environment variables, with per-envelope signature level selection, license gating, and an OAuth-driven signing flow (capture + FIFO signers, SAD session, blocking/in-progress recipient pages). Includes signature level compatibility checks (role, signing order, dictate next signer), envelope mutability assertions, Prisma migration for signature level and CSC tables, and docs for the new signing certificate options.
44 lines
1.5 KiB
TypeScript
44 lines
1.5 KiB
TypeScript
import { executeTspSign } from '@documenso/ee/server-only/signing/csc/execute-tsp-sign';
|
|
import { AppError, AppErrorCode } from '@documenso/lib/errors/app-error';
|
|
|
|
import { procedure } from '../trpc';
|
|
import { ZCscSignEnvelopeRequestSchema, ZCscSignEnvelopeResponseSchema } from './csc-sign-envelope.types';
|
|
|
|
/**
|
|
* Internal mutation that drives the CSC TSP sign-time pipeline.
|
|
*
|
|
* `executeTspSign` does the heavy lifting (capture → batched signHash →
|
|
* embed → tx). This route wraps it in a 15s `Promise.race` so an unresponsive
|
|
* TSP surfaces as `CSC_TSP_TIMEOUT` instead of hanging the request. The
|
|
* idle-timer is a soft cap on TSP round-trip latency; the underlying tx
|
|
* keeps running on the server until it completes or errors.
|
|
*/
|
|
|
|
const SIGN_TIMEOUT_MS = 15_000;
|
|
|
|
export const cscSignEnvelopeRoute = procedure
|
|
.input(ZCscSignEnvelopeRequestSchema)
|
|
.output(ZCscSignEnvelopeResponseSchema)
|
|
.mutation(async ({ input, ctx }) => {
|
|
const result = await Promise.race([
|
|
executeTspSign({
|
|
sessionId: input.sessionId,
|
|
recipientToken: input.recipientToken,
|
|
requestMetadata: ctx.metadata.requestMetadata,
|
|
}),
|
|
new Promise<never>((_, reject) =>
|
|
setTimeout(
|
|
() =>
|
|
reject(
|
|
new AppError(AppErrorCode.CSC_TSP_TIMEOUT, {
|
|
message: 'CSC TSP did not respond within 15s.',
|
|
}),
|
|
),
|
|
SIGN_TIMEOUT_MS,
|
|
),
|
|
),
|
|
]);
|
|
|
|
return result;
|
|
});
|