diff --git a/.erb-lint.yml b/.erb-lint.yml
new file mode 100644
index 000000000..5aa7b17ba
--- /dev/null
+++ b/.erb-lint.yml
@@ -0,0 +1,32 @@
+---
+EnableDefaultLinters: true
+linters:
+ ErbSafety:
+ enabled: false
+ HardCodedString:
+ enabled: false
+ Rubocop:
+ enabled: true
+ rubocop_config:
+ inherit_from:
+ - .rubocop.yml
+ Layout/InitialIndentation:
+ Enabled: false
+ Layout/LineLength:
+ Enabled: false
+ Layout/TrailingEmptyLines:
+ Enabled: false
+ Layout/TrailingWhitespace:
+ Enabled: false
+ Naming/FileName:
+ Enabled: false
+ Style/FrozenStringLiteralComment:
+ Enabled: false
+ Lint/UselessAssignment:
+ Enabled: false
+ Rails/OutputSafety:
+ Enabled: false
+ Style/NestedTernaryOperator:
+ Enabled: false
+ Style/ZeroLengthPredicate:
+ Enabled: false
diff --git a/.eslintrc b/.eslintrc
new file mode 100644
index 000000000..e7045bb52
--- /dev/null
+++ b/.eslintrc
@@ -0,0 +1,17 @@
+{
+ "extends": [
+ "standard",
+ "plugin:vue/vue3-recommended"
+ ],
+ "env": {
+ "browser": true
+ },
+ "rules": {
+ "vue/no-deprecated-html-element-is": 0,
+ "vue/no-mutating-props": 0
+ },
+ "parserOptions": {
+ "ecmaVersion": 2022,
+ "parser": "@babel/eslint-parser"
+ }
+}
diff --git a/.github/workflows/erblint.yml b/.github/workflows/erblint.yml
new file mode 100644
index 000000000..158cdc9f7
--- /dev/null
+++ b/.github/workflows/erblint.yml
@@ -0,0 +1,25 @@
+name: Erblint
+on: [push]
+jobs:
+ erblint:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - name: Install Ruby
+ uses: ruby/setup-ruby@v1
+ with:
+ ruby-version: 3.2.2
+ - name: Cache gems
+ uses: actions/cache@v1
+ with:
+ path: vendor/bundle
+ key: ${{ runner.os }}-gem-${{ hashFiles('**/Gemfile.lock') }}
+ restore-keys: |
+ ${{ runner.os }}-gem-
+ - name: Install gems
+ run: |
+ gem install bundler
+ bundle config path vendor/bundle
+ bundle install --jobs 4 --retry 4
+ - name: Run Erblint
+ run: bundle exec erblint ./app
diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml
new file mode 100644
index 000000000..e7a7a6026
--- /dev/null
+++ b/.github/workflows/eslint.yml
@@ -0,0 +1,28 @@
+name: ESLint
+on: [push]
+jobs:
+ eslint:
+ name: Run ESLint
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - name: Install Node.js
+ uses: actions/setup-node@v1
+ with:
+ node-version: 16.13.1
+ - name: Cache directory path
+ id: yarn-cache-dir-path
+ run: echo "::set-output name=dir::$(yarn cache dir)"
+ - uses: actions/cache@v1
+ id: yarn-cache
+ with:
+ path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
+ key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
+ restore-keys: |
+ ${{ runner.os }}-yarn-
+ - name: Install dependencies
+ run: |
+ yarn install
+ - name: Run eslint
+ run: |
+ ./node_modules/eslint/bin/eslint.js "app/javascript/**/*.js"
diff --git a/.github/workflows/rspec.yml b/.github/workflows/rspec.yml
new file mode 100644
index 000000000..eec999eaf
--- /dev/null
+++ b/.github/workflows/rspec.yml
@@ -0,0 +1,65 @@
+name: Rspec
+on: push
+
+jobs:
+ verify:
+ name: Build
+ runs-on: ubuntu-latest
+
+ services:
+ postgres:
+ image: postgres:14
+ env:
+ POSTGRES_USER: postgres
+ POSTGRES_PASSWORD: postgres
+ POSTGRES_DB: docuseal_test
+ ports: ["5432:5432"]
+ options: >-
+ --health-cmd pg_isready
+ --health-interval 10s
+ --health-timeout 5s
+ --health-retries 5
+
+ steps:
+ - uses: actions/checkout@v2
+ - name: Install Ruby
+ uses: ruby/setup-ruby@v1
+ with:
+ ruby-version: 3.2.1
+ - name: Set up Node
+ uses: actions/setup-node@v1
+ with:
+ node-version: 16.13.1
+ - name: Install Chrome
+ uses: browser-actions/setup-chrome@latest
+ - name: Cache node_modules
+ uses: actions/cache@v1
+ with:
+ path: node_modules
+ key: ${{ runner.os }}-node-${{ hashFiles('**/yarn.lock') }}
+ - name: Cache gems
+ uses: actions/cache@v1
+ with:
+ path: vendor/bundle
+ key: ${{ runner.os }}-gem-${{ hashFiles('**/Gemfile.lock') }}
+ restore-keys: |
+ ${{ runner.os }}-gem-
+ - name: Install dependencies
+ env:
+ RAILS_ENV: test
+ run: |
+ gem install bundler
+ bundle config path vendor/bundle
+ bundle install --jobs 4 --retry 4
+ yarn install
+ - name: Run
+ env:
+ RAILS_ENV: test
+ NODE_ENV: test
+ COVERAGE: true
+ DATABASE_URL: postgres://postgres:postgres@localhost:5432/docuseal_test
+ run: |
+ bundle exec rake db:create
+ bundle exec rake db:migrate
+ bundle exec rake assets:precompile
+ bundle exec rspec
diff --git a/.github/workflows/rubocop.yml b/.github/workflows/rubocop.yml
new file mode 100644
index 000000000..b591c79e7
--- /dev/null
+++ b/.github/workflows/rubocop.yml
@@ -0,0 +1,25 @@
+name: Rubocop
+on: [push]
+jobs:
+ rubocop:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - name: Install Ruby
+ uses: ruby/setup-ruby@v1
+ with:
+ ruby-version: 3.2.2
+ - name: Cache gems
+ uses: actions/cache@v1
+ with:
+ path: vendor/bundle
+ key: ${{ runner.os }}-gem-${{ hashFiles('**/Gemfile.lock') }}
+ restore-keys: |
+ ${{ runner.os }}-gem-
+ - name: Install gems
+ run: |
+ gem install bundler
+ bundle config path vendor/bundle
+ bundle install --jobs 4 --retry 4
+ - name: Run RuboCop
+ run: bundle exec rubocop
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 000000000..2e424bb88
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,36 @@
+/.bundle
+
+/db/*.sqlite3
+/db/*.sqlite3-*
+
+/log/*
+/tmp/*
+!/log/.keep
+!/tmp/.keep
+
+/tmp/pids/*
+!/tmp/pids/
+!/tmp/pids/.keep
+
+/storage/*
+!/storage/.keep
+/tmp/storage/*
+!/tmp/storage/
+!/tmp/storage/.keep
+
+/public/assets
+
+/config/master.key
+
+/public/packs
+/public/packs-test
+/node_modules
+/yarn-error.log
+yarn-debug.log*
+.yarn-integrity
+
+.env
+.DS_Store
+
+/coverage
+/docuseal-attachments
diff --git a/.rubocop.yml b/.rubocop.yml
new file mode 100644
index 000000000..721e6c955
--- /dev/null
+++ b/.rubocop.yml
@@ -0,0 +1,55 @@
+require:
+ - rubocop-performance
+ - rubocop-rails
+ - rubocop-rspec
+
+AllCops:
+ NewCops: enable
+ Exclude:
+ - db/schema.rb
+ - node_modules/**/*
+ - bin/*
+ TargetRubyVersion: '3.2'
+
+Metrics/BlockLength:
+ Exclude:
+ - Rakefile
+ - '**/*.rake'
+ - spec/**/*
+ - config/environments/**/*
+ - config/routes.rb
+
+Style/Documentation:
+ Enabled: false
+
+Lint/MissingSuper:
+ Enabled: false
+
+Metrics/MethodLength:
+ Max: 20
+ Exclude:
+ - 'db/migrate/**'
+
+Metrics/CyclomaticComplexity:
+ Max: 10
+
+Metrics/PerceivedComplexity:
+ Max: 10
+
+Metrics/AbcSize:
+ Max: 35
+
+RSpec/NestedGroups:
+ Max: 6
+
+RSpec/MultipleExpectations:
+ Max: 7
+
+RSpec/ExampleLength:
+ Max: 15
+
+Rails/I18nLocaleTexts:
+ Enabled: false
+
+Rails/ApplicationController:
+ Enabled: false
diff --git a/Gemfile b/Gemfile
new file mode 100644
index 000000000..204822876
--- /dev/null
+++ b/Gemfile
@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+source 'https://rubygems.org'
+
+ruby '3.2.2'
+
+gem 'audited'
+gem 'aws-sdk-s3'
+gem 'azure-storage-blob'
+gem 'bootsnap', require: false
+gem 'combine_pdf'
+gem 'devise'
+gem 'faraday'
+gem 'geoip'
+gem 'google-cloud-storage'
+gem 'image_processing'
+gem 'lograge'
+gem 'oj'
+gem 'pagy'
+gem 'pg'
+gem 'premailer-rails'
+gem 'puma'
+gem 'rails'
+gem 'ruby-vips'
+gem 'shakapacker'
+gem 'sqlite3'
+gem 'strip_attributes'
+gem 'turbo-rails'
+gem 'tzinfo-data'
+gem 'zip'
+
+group :development, :test do
+ gem 'annotate'
+ gem 'better_html'
+ gem 'bullet'
+ gem 'debug'
+ gem 'erb_lint', require: false
+ gem 'factory_bot_rails'
+ gem 'faker'
+ gem 'pry-rails'
+ gem 'rspec-rails'
+ gem 'rubocop', require: false
+ gem 'rubocop-performance', require: false
+ gem 'rubocop-rails', require: false
+ gem 'rubocop-rspec', require: false
+ gem 'simplecov', require: false
+end
+
+group :development do
+ gem 'letter_opener_web'
+ gem 'web-console'
+end
+
+group :test do
+ gem 'capybara'
+ gem 'cuprite'
+ gem 'webmock'
+end
diff --git a/Gemfile.lock b/Gemfile.lock
new file mode 100644
index 000000000..11f0cb244
--- /dev/null
+++ b/Gemfile.lock
@@ -0,0 +1,526 @@
+GEM
+ remote: https://rubygems.org/
+ specs:
+ actioncable (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ nio4r (~> 2.0)
+ websocket-driver (>= 0.6.1)
+ actionmailbox (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ activejob (= 7.0.4.3)
+ activerecord (= 7.0.4.3)
+ activestorage (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ mail (>= 2.7.1)
+ net-imap
+ net-pop
+ net-smtp
+ actionmailer (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ actionview (= 7.0.4.3)
+ activejob (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ mail (~> 2.5, >= 2.5.4)
+ net-imap
+ net-pop
+ net-smtp
+ rails-dom-testing (~> 2.0)
+ actionpack (7.0.4.3)
+ actionview (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ rack (~> 2.0, >= 2.2.0)
+ rack-test (>= 0.6.3)
+ rails-dom-testing (~> 2.0)
+ rails-html-sanitizer (~> 1.0, >= 1.2.0)
+ actiontext (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ activerecord (= 7.0.4.3)
+ activestorage (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ globalid (>= 0.6.0)
+ nokogiri (>= 1.8.5)
+ actionview (7.0.4.3)
+ activesupport (= 7.0.4.3)
+ builder (~> 3.1)
+ erubi (~> 1.4)
+ rails-dom-testing (~> 2.0)
+ rails-html-sanitizer (~> 1.1, >= 1.2.0)
+ activejob (7.0.4.3)
+ activesupport (= 7.0.4.3)
+ globalid (>= 0.3.6)
+ activemodel (7.0.4.3)
+ activesupport (= 7.0.4.3)
+ activerecord (7.0.4.3)
+ activemodel (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ activestorage (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ activejob (= 7.0.4.3)
+ activerecord (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ marcel (~> 1.0)
+ mini_mime (>= 1.1.0)
+ activesupport (7.0.4.3)
+ concurrent-ruby (~> 1.0, >= 1.0.2)
+ i18n (>= 1.6, < 2)
+ minitest (>= 5.1)
+ tzinfo (~> 2.0)
+ addressable (2.8.4)
+ public_suffix (>= 2.0.2, < 6.0)
+ annotate (3.2.0)
+ activerecord (>= 3.2, < 8.0)
+ rake (>= 10.4, < 14.0)
+ ast (2.4.2)
+ audited (5.3.3)
+ activerecord (>= 5.0, < 7.1)
+ request_store (~> 1.2)
+ aws-eventstream (1.2.0)
+ aws-partitions (1.765.0)
+ aws-sdk-core (3.172.0)
+ aws-eventstream (~> 1, >= 1.0.2)
+ aws-partitions (~> 1, >= 1.651.0)
+ aws-sigv4 (~> 1.5)
+ jmespath (~> 1, >= 1.6.1)
+ aws-sdk-kms (1.64.0)
+ aws-sdk-core (~> 3, >= 3.165.0)
+ aws-sigv4 (~> 1.1)
+ aws-sdk-s3 (1.122.0)
+ aws-sdk-core (~> 3, >= 3.165.0)
+ aws-sdk-kms (~> 1)
+ aws-sigv4 (~> 1.4)
+ aws-sigv4 (1.5.2)
+ aws-eventstream (~> 1, >= 1.0.2)
+ azure-storage-blob (2.0.3)
+ azure-storage-common (~> 2.0)
+ nokogiri (~> 1, >= 1.10.8)
+ azure-storage-common (2.0.4)
+ faraday (~> 1.0)
+ faraday_middleware (~> 1.0, >= 1.0.0.rc1)
+ net-http-persistent (~> 4.0)
+ nokogiri (~> 1, >= 1.10.8)
+ bcrypt (3.1.18)
+ better_html (2.0.1)
+ actionview (>= 6.0)
+ activesupport (>= 6.0)
+ ast (~> 2.0)
+ erubi (~> 1.4)
+ parser (>= 2.4)
+ smart_properties
+ bindex (0.8.1)
+ bootsnap (1.16.0)
+ msgpack (~> 1.2)
+ builder (3.2.4)
+ bullet (7.0.7)
+ activesupport (>= 3.0.0)
+ uniform_notifier (~> 1.11)
+ capybara (3.39.1)
+ addressable
+ matrix
+ mini_mime (>= 0.1.3)
+ nokogiri (~> 1.8)
+ rack (>= 1.6.0)
+ rack-test (>= 0.6.3)
+ regexp_parser (>= 1.5, < 3.0)
+ xpath (~> 3.2)
+ coderay (1.1.3)
+ combine_pdf (1.0.23)
+ matrix
+ ruby-rc4 (>= 0.1.5)
+ concurrent-ruby (1.2.2)
+ connection_pool (2.4.0)
+ crack (0.4.5)
+ rexml
+ crass (1.0.6)
+ css_parser (1.14.0)
+ addressable
+ cuprite (0.14.3)
+ capybara (~> 3.0)
+ ferrum (~> 0.13.0)
+ date (3.3.3)
+ debug (1.8.0)
+ irb (>= 1.5.0)
+ reline (>= 0.3.1)
+ declarative (0.0.20)
+ devise (4.9.2)
+ bcrypt (~> 3.0)
+ orm_adapter (~> 0.1)
+ railties (>= 4.1.0)
+ responders
+ warden (~> 1.2.3)
+ diff-lcs (1.5.0)
+ digest-crc (0.6.4)
+ rake (>= 12.0.0, < 14.0.0)
+ docile (1.4.0)
+ erb_lint (0.4.0)
+ activesupport
+ better_html (>= 2.0.1)
+ parser (>= 2.7.1.4)
+ rainbow
+ rubocop
+ smart_properties
+ erubi (1.12.0)
+ factory_bot (6.2.1)
+ activesupport (>= 5.0.0)
+ factory_bot_rails (6.2.0)
+ factory_bot (~> 6.2.0)
+ railties (>= 5.0.0)
+ faker (3.2.0)
+ i18n (>= 1.8.11, < 2)
+ faraday (1.10.3)
+ faraday-em_http (~> 1.0)
+ faraday-em_synchrony (~> 1.0)
+ faraday-excon (~> 1.1)
+ faraday-httpclient (~> 1.0)
+ faraday-multipart (~> 1.0)
+ faraday-net_http (~> 1.0)
+ faraday-net_http_persistent (~> 1.0)
+ faraday-patron (~> 1.0)
+ faraday-rack (~> 1.0)
+ faraday-retry (~> 1.0)
+ ruby2_keywords (>= 0.0.4)
+ faraday-em_http (1.0.0)
+ faraday-em_synchrony (1.0.0)
+ faraday-excon (1.1.0)
+ faraday-httpclient (1.0.1)
+ faraday-multipart (1.0.4)
+ multipart-post (~> 2)
+ faraday-net_http (1.0.1)
+ faraday-net_http_persistent (1.2.0)
+ faraday-patron (1.0.0)
+ faraday-rack (1.0.0)
+ faraday-retry (1.0.3)
+ faraday_middleware (1.2.0)
+ faraday (~> 1.0)
+ ferrum (0.13)
+ addressable (~> 2.5)
+ concurrent-ruby (~> 1.1)
+ webrick (~> 1.7)
+ websocket-driver (>= 0.6, < 0.8)
+ ffi (1.15.5)
+ geoip (1.6.4)
+ globalid (1.1.0)
+ activesupport (>= 5.0)
+ google-apis-core (0.11.0)
+ addressable (~> 2.5, >= 2.5.1)
+ googleauth (>= 0.16.2, < 2.a)
+ httpclient (>= 2.8.1, < 3.a)
+ mini_mime (~> 1.0)
+ representable (~> 3.0)
+ retriable (>= 2.0, < 4.a)
+ rexml
+ webrick
+ google-apis-iamcredentials_v1 (0.17.0)
+ google-apis-core (>= 0.11.0, < 2.a)
+ google-apis-storage_v1 (0.19.0)
+ google-apis-core (>= 0.9.0, < 2.a)
+ google-cloud-core (1.6.0)
+ google-cloud-env (~> 1.0)
+ google-cloud-errors (~> 1.0)
+ google-cloud-env (1.6.0)
+ faraday (>= 0.17.3, < 3.0)
+ google-cloud-errors (1.3.1)
+ google-cloud-storage (1.44.0)
+ addressable (~> 2.8)
+ digest-crc (~> 0.4)
+ google-apis-iamcredentials_v1 (~> 0.1)
+ google-apis-storage_v1 (~> 0.19.0)
+ google-cloud-core (~> 1.6)
+ googleauth (>= 0.16.2, < 2.a)
+ mini_mime (~> 1.0)
+ googleauth (1.5.2)
+ faraday (>= 0.17.3, < 3.a)
+ jwt (>= 1.4, < 3.0)
+ memoist (~> 0.16)
+ multi_json (~> 1.11)
+ os (>= 0.9, < 2.0)
+ signet (>= 0.16, < 2.a)
+ hashdiff (1.0.1)
+ htmlentities (4.3.4)
+ httpclient (2.8.3)
+ i18n (1.13.0)
+ concurrent-ruby (~> 1.0)
+ image_processing (1.12.2)
+ mini_magick (>= 4.9.5, < 5)
+ ruby-vips (>= 2.0.17, < 3)
+ io-console (0.6.0)
+ irb (1.6.4)
+ reline (>= 0.3.0)
+ jmespath (1.6.2)
+ json (2.6.3)
+ jwt (2.7.0)
+ launchy (2.5.2)
+ addressable (~> 2.8)
+ letter_opener (1.8.1)
+ launchy (>= 2.2, < 3)
+ letter_opener_web (2.0.0)
+ actionmailer (>= 5.2)
+ letter_opener (~> 1.7)
+ railties (>= 5.2)
+ rexml
+ lograge (0.12.0)
+ actionpack (>= 4)
+ activesupport (>= 4)
+ railties (>= 4)
+ request_store (~> 1.0)
+ loofah (2.21.3)
+ crass (~> 1.0.2)
+ nokogiri (>= 1.12.0)
+ mail (2.8.1)
+ mini_mime (>= 0.1.1)
+ net-imap
+ net-pop
+ net-smtp
+ marcel (1.0.2)
+ matrix (0.4.2)
+ memoist (0.16.2)
+ method_source (1.0.0)
+ mini_magick (4.12.0)
+ mini_mime (1.1.2)
+ minitest (5.18.0)
+ msgpack (1.7.0)
+ multi_json (1.15.0)
+ multipart-post (2.3.0)
+ net-http-persistent (4.0.2)
+ connection_pool (~> 2.2)
+ net-imap (0.3.4)
+ date
+ net-protocol
+ net-pop (0.1.2)
+ net-protocol
+ net-protocol (0.2.1)
+ timeout
+ net-smtp (0.3.3)
+ net-protocol
+ nio4r (2.5.9)
+ nokogiri (1.15.0-arm64-darwin)
+ racc (~> 1.4)
+ oj (3.14.3)
+ orm_adapter (0.5.0)
+ os (1.1.4)
+ pagy (6.0.4)
+ parallel (1.23.0)
+ parser (3.2.2.1)
+ ast (~> 2.4.1)
+ pg (1.5.3)
+ premailer (1.21.0)
+ addressable
+ css_parser (>= 1.12.0)
+ htmlentities (>= 4.0.0)
+ premailer-rails (1.12.0)
+ actionmailer (>= 3)
+ net-smtp
+ premailer (~> 1.7, >= 1.7.9)
+ pry (0.14.2)
+ coderay (~> 1.1)
+ method_source (~> 1.0)
+ pry-rails (0.3.9)
+ pry (>= 0.10.4)
+ public_suffix (5.0.1)
+ puma (6.2.2)
+ nio4r (~> 2.0)
+ racc (1.6.2)
+ rack (2.2.7)
+ rack-proxy (0.7.6)
+ rack
+ rack-test (2.1.0)
+ rack (>= 1.3)
+ rails (7.0.4.3)
+ actioncable (= 7.0.4.3)
+ actionmailbox (= 7.0.4.3)
+ actionmailer (= 7.0.4.3)
+ actionpack (= 7.0.4.3)
+ actiontext (= 7.0.4.3)
+ actionview (= 7.0.4.3)
+ activejob (= 7.0.4.3)
+ activemodel (= 7.0.4.3)
+ activerecord (= 7.0.4.3)
+ activestorage (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ bundler (>= 1.15.0)
+ railties (= 7.0.4.3)
+ rails-dom-testing (2.0.3)
+ activesupport (>= 4.2.0)
+ nokogiri (>= 1.6)
+ rails-html-sanitizer (1.5.0)
+ loofah (~> 2.19, >= 2.19.1)
+ railties (7.0.4.3)
+ actionpack (= 7.0.4.3)
+ activesupport (= 7.0.4.3)
+ method_source
+ rake (>= 12.2)
+ thor (~> 1.0)
+ zeitwerk (~> 2.5)
+ rainbow (3.1.1)
+ rake (13.0.6)
+ regexp_parser (2.8.0)
+ reline (0.3.3)
+ io-console (~> 0.5)
+ representable (3.2.0)
+ declarative (< 0.1.0)
+ trailblazer-option (>= 0.1.1, < 0.2.0)
+ uber (< 0.2.0)
+ request_store (1.5.1)
+ rack (>= 1.4)
+ responders (3.1.0)
+ actionpack (>= 5.2)
+ railties (>= 5.2)
+ retriable (3.1.2)
+ rexml (3.2.5)
+ rspec-core (3.12.2)
+ rspec-support (~> 3.12.0)
+ rspec-expectations (3.12.3)
+ diff-lcs (>= 1.2.0, < 2.0)
+ rspec-support (~> 3.12.0)
+ rspec-mocks (3.12.5)
+ diff-lcs (>= 1.2.0, < 2.0)
+ rspec-support (~> 3.12.0)
+ rspec-rails (6.0.2)
+ actionpack (>= 6.1)
+ activesupport (>= 6.1)
+ railties (>= 6.1)
+ rspec-core (~> 3.12)
+ rspec-expectations (~> 3.12)
+ rspec-mocks (~> 3.12)
+ rspec-support (~> 3.12)
+ rspec-support (3.12.0)
+ rubocop (1.51.0)
+ json (~> 2.3)
+ parallel (~> 1.10)
+ parser (>= 3.2.0.0)
+ rainbow (>= 2.2.2, < 4.0)
+ regexp_parser (>= 1.8, < 3.0)
+ rexml (>= 3.2.5, < 4.0)
+ rubocop-ast (>= 1.28.0, < 2.0)
+ ruby-progressbar (~> 1.7)
+ unicode-display_width (>= 2.4.0, < 3.0)
+ rubocop-ast (1.28.1)
+ parser (>= 3.2.1.0)
+ rubocop-capybara (2.18.0)
+ rubocop (~> 1.41)
+ rubocop-factory_bot (2.23.1)
+ rubocop (~> 1.33)
+ rubocop-performance (1.17.1)
+ rubocop (>= 1.7.0, < 2.0)
+ rubocop-ast (>= 0.4.0)
+ rubocop-rails (2.19.1)
+ activesupport (>= 4.2.0)
+ rack (>= 1.1)
+ rubocop (>= 1.33.0, < 2.0)
+ rubocop-rspec (2.22.0)
+ rubocop (~> 1.33)
+ rubocop-capybara (~> 2.17)
+ rubocop-factory_bot (~> 2.22)
+ ruby-progressbar (1.13.0)
+ ruby-rc4 (0.1.5)
+ ruby-vips (2.1.4)
+ ffi (~> 1.12)
+ ruby2_keywords (0.0.5)
+ semantic_range (3.0.0)
+ shakapacker (6.6.0)
+ activesupport (>= 5.2)
+ rack-proxy (>= 0.6.1)
+ railties (>= 5.2)
+ semantic_range (>= 2.3.0)
+ signet (0.17.0)
+ addressable (~> 2.8)
+ faraday (>= 0.17.5, < 3.a)
+ jwt (>= 1.5, < 3.0)
+ multi_json (~> 1.10)
+ simplecov (0.22.0)
+ docile (~> 1.1)
+ simplecov-html (~> 0.11)
+ simplecov_json_formatter (~> 0.1)
+ simplecov-html (0.12.3)
+ simplecov_json_formatter (0.1.4)
+ smart_properties (1.17.0)
+ sqlite3 (1.6.3-arm64-darwin)
+ strip_attributes (1.13.0)
+ activemodel (>= 3.0, < 8.0)
+ thor (1.2.2)
+ timeout (0.3.2)
+ trailblazer-option (0.1.2)
+ turbo-rails (1.4.0)
+ actionpack (>= 6.0.0)
+ activejob (>= 6.0.0)
+ railties (>= 6.0.0)
+ tzinfo (2.0.6)
+ concurrent-ruby (~> 1.0)
+ tzinfo-data (1.2023.3)
+ tzinfo (>= 1.0.0)
+ uber (0.1.0)
+ unicode-display_width (2.4.2)
+ uniform_notifier (1.16.0)
+ warden (1.2.9)
+ rack (>= 2.0.9)
+ web-console (4.2.0)
+ actionview (>= 6.0.0)
+ activemodel (>= 6.0.0)
+ bindex (>= 0.4.0)
+ railties (>= 6.0.0)
+ webmock (3.18.1)
+ addressable (>= 2.8.0)
+ crack (>= 0.3.2)
+ hashdiff (>= 0.4.0, < 2.0.0)
+ webrick (1.8.1)
+ websocket-driver (0.7.5)
+ websocket-extensions (>= 0.1.0)
+ websocket-extensions (0.1.5)
+ xpath (3.2.0)
+ nokogiri (~> 1.8)
+ zeitwerk (2.6.8)
+ zip (2.0.2)
+
+PLATFORMS
+ arm64-darwin-22
+
+DEPENDENCIES
+ annotate
+ audited
+ aws-sdk-s3
+ azure-storage-blob
+ better_html
+ bootsnap
+ bullet
+ capybara
+ combine_pdf
+ cuprite
+ debug
+ devise
+ erb_lint
+ factory_bot_rails
+ faker
+ faraday
+ geoip
+ google-cloud-storage
+ image_processing
+ letter_opener_web
+ lograge
+ oj
+ pagy
+ pg
+ premailer-rails
+ pry-rails
+ puma
+ rails
+ rspec-rails
+ rubocop
+ rubocop-performance
+ rubocop-rails
+ rubocop-rspec
+ ruby-vips
+ shakapacker
+ simplecov
+ sqlite3
+ strip_attributes
+ turbo-rails
+ tzinfo-data
+ web-console
+ webmock
+ zip
+
+RUBY VERSION
+ ruby 3.2.2p53
+
+BUNDLED WITH
+ 2.4.10
diff --git a/Procfile b/Procfile
new file mode 100644
index 000000000..c4f60a5ef
--- /dev/null
+++ b/Procfile
@@ -0,0 +1 @@
+web: puma -p $PORT -C ./config/puma.rb
diff --git a/Procfile.dev b/Procfile.dev
new file mode 100644
index 000000000..034c899b3
--- /dev/null
+++ b/Procfile.dev
@@ -0,0 +1,2 @@
+web: PORT=3000 bundle exec rails s -p 3000
+webpacker: bundle exec ./bin/webpacker-dev-server
diff --git a/README.md b/README.md
new file mode 100644
index 000000000..7db80e4ca
--- /dev/null
+++ b/README.md
@@ -0,0 +1,24 @@
+# README
+
+This README would normally document whatever steps are necessary to get the
+application up and running.
+
+Things you may want to cover:
+
+* Ruby version
+
+* System dependencies
+
+* Configuration
+
+* Database creation
+
+* Database initialization
+
+* How to run the test suite
+
+* Services (job queues, cache servers, search engines, etc.)
+
+* Deployment instructions
+
+* ...
diff --git a/Rakefile b/Rakefile
new file mode 100644
index 000000000..6d1041e3b
--- /dev/null
+++ b/Rakefile
@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+require_relative 'config/application'
+
+Rails.application.load_tasks
diff --git a/app/controllers/api/api_base_controller.rb b/app/controllers/api/api_base_controller.rb
new file mode 100644
index 000000000..1b49bfa97
--- /dev/null
+++ b/app/controllers/api/api_base_controller.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Api
+ class ApiBaseController < ActionController::API
+ include ActiveStorage::SetCurrent
+
+ before_action :authenticate_user!
+
+ private
+
+ def current_account
+ current_user&.account
+ end
+ end
+end
diff --git a/app/controllers/api/attachments_controller.rb b/app/controllers/api/attachments_controller.rb
new file mode 100644
index 000000000..1386220e2
--- /dev/null
+++ b/app/controllers/api/attachments_controller.rb
@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Api
+ class AttachmentsController < ApiBaseController
+ skip_before_action :authenticate_user!
+
+ def create
+ submission = Submission.find_by!(slug: params[:submission_slug])
+ blob = ActiveStorage::Blob.find_signed(params[:blob_signed_id])
+
+ attachment = ActiveStorage::Attachment.create!(
+ blob:,
+ name: params[:name],
+ record: submission
+ )
+
+ render json: attachment.as_json(only: %i[uuid], methods: %i[url filename content_type])
+ end
+ end
+end
diff --git a/app/controllers/api/flows_controller.rb b/app/controllers/api/flows_controller.rb
new file mode 100644
index 000000000..7c5fc163c
--- /dev/null
+++ b/app/controllers/api/flows_controller.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Api
+ class FlowsController < ApiBaseController
+ def update
+ @flow = current_account.flows.find(params[:id])
+
+ @flow.update!(flow_params)
+
+ render :ok
+ end
+
+ private
+
+ def flow_params
+ params.require(:flow).permit(:name,
+ schema: [%i[attachment_uuid name]],
+ fields: [[:uuid, :name, :type, :required,
+ { options: [], areas: [%i[x y w h attachment_uuid page]] }]])
+ end
+ end
+end
diff --git a/app/controllers/api/flows_documents_controller.rb b/app/controllers/api/flows_documents_controller.rb
new file mode 100644
index 000000000..d215c804f
--- /dev/null
+++ b/app/controllers/api/flows_documents_controller.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module Api
+ class FlowsDocumentsController < ApiBaseController
+ def create
+ @flow = current_account.flows.find(params[:flow_id])
+
+ documents =
+ params[:blobs].map do |blob|
+ blob = ActiveStorage::Blob.find_signed(blob[:signed_id])
+
+ document = @flow.documents.create!(blob:)
+
+ Flows::ProcessDocument.call(document)
+ end
+
+ schema = documents.map do |doc|
+ { attachment_uuid: doc.uuid, name: doc.filename.base }
+ end
+
+ render json: {
+ schema:,
+ documents: documents.as_json(
+ include: {
+ preview_images: { methods: %i[url metadata filename] }
+ }
+ )
+ }
+ end
+ end
+end
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
new file mode 100644
index 000000000..607a2f1ee
--- /dev/null
+++ b/app/controllers/application_controller.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+class ApplicationController < ActionController::Base
+ include ActiveStorage::SetCurrent
+
+ before_action :maybe_redirect_to_setup, unless: :signed_in?
+ before_action :authenticate_user!, unless: :devise_controller?
+
+ helper_method :button_title,
+ :current_account
+
+ private
+
+ def current_account
+ current_user&.account
+ end
+
+ def maybe_redirect_to_setup
+ redirect_to setup_index_path unless User.exists?
+ end
+
+ def button_title(title = 'Submit', disabled_with = 'Submitting...')
+ render_to_string(partial: 'shared/button_title', locals: { title:, disabled_with: })
+ end
+end
diff --git a/app/controllers/dashboard_controller.rb b/app/controllers/dashboard_controller.rb
new file mode 100644
index 000000000..bb1e826aa
--- /dev/null
+++ b/app/controllers/dashboard_controller.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class DashboardController < ApplicationController
+ def index
+ @flows = current_account.flows.active
+ end
+end
diff --git a/app/controllers/email_settings_controller.rb b/app/controllers/email_settings_controller.rb
new file mode 100644
index 000000000..d648f636a
--- /dev/null
+++ b/app/controllers/email_settings_controller.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+class EmailSettingsController < ApplicationController
+ before_action :load_encrypted_config
+
+ def index; end
+
+ def create
+ if @encrypted_config.update(storage_configs)
+ redirect_to settings_email_index_path, notice: 'Changes have been saved'
+ else
+ render :index, status: :unprocessable_entity
+ end
+ end
+
+ private
+
+ def load_encrypted_config
+ @encrypted_config =
+ EncryptedConfig.find_or_initialize_by(account: current_account, key: EncryptedConfig::EMAIL_SMTP_KEY)
+ end
+
+ def storage_configs
+ params.require(:encrypted_config).permit(value: {}).tap do |e|
+ e[:value].compact_blank!
+ end
+ end
+end
diff --git a/app/controllers/flows_controller.rb b/app/controllers/flows_controller.rb
new file mode 100644
index 000000000..d3ee678bb
--- /dev/null
+++ b/app/controllers/flows_controller.rb
@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+class FlowsController < ApplicationController
+ def show
+ @flow = current_account.flows.preload(documents_attachments: { preview_images_attachments: :blob })
+ .find(params[:id])
+ end
+
+ def new
+ @flow = current_account.flows.new
+ end
+
+ def create
+ @flow = current_account.flows.new(flow_params)
+ @flow.author = current_user
+
+ if @flow.save
+ redirect_to flow_path(@flow)
+ else
+ render turbo_stream: turbo_stream.replace(:modal, template: 'flows/new'), status: :unprocessable_entity
+ end
+ end
+
+ def destroy
+ @flow = current_account.flows.find(params[:id])
+ @flow.update!(deleted_at: Time.current)
+
+ redirect_to settings_users_path, notice: 'Flow has been archived.'
+ end
+
+ private
+
+ def flow_params
+ params.require(:flow).permit(:name, :schema)
+ end
+end
diff --git a/app/controllers/invitations_controller.rb b/app/controllers/invitations_controller.rb
new file mode 100644
index 000000000..7030e40f7
--- /dev/null
+++ b/app/controllers/invitations_controller.rb
@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class InvitationsController < Devise::PasswordsController
+end
diff --git a/app/controllers/registrations_controller.rb b/app/controllers/registrations_controller.rb
new file mode 100644
index 000000000..63f5523c6
--- /dev/null
+++ b/app/controllers/registrations_controller.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+class RegistrationsController < Devise::RegistrationsController
+ private
+
+ def build_resource(_hash = {})
+ account = Account.new(account_params)
+
+ self.resource = account.users.new(user_params)
+ end
+
+ def user_params
+ return {} if params[:user].blank?
+
+ params.require(:user).permit(:first_name, :last_name, :email, :password)
+ end
+
+ def account_params
+ return {} if params[:account].blank?
+
+ params.require(:account).permit(:name)
+ end
+end
diff --git a/app/controllers/send_submission_email_controller.rb b/app/controllers/send_submission_email_controller.rb
new file mode 100644
index 000000000..4f14125e6
--- /dev/null
+++ b/app/controllers/send_submission_email_controller.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class SendSubmissionEmailController < ApplicationController
+ layout 'flow'
+
+ skip_before_action :authenticate_user!
+
+ def success; end
+
+ def create
+ @submission = if params[:flow_slug]
+ Submission.joins(:flow).find_by!(email: params[:email], flow: { slug: params[:flow_slug] })
+ else
+ Submission.find_by!(slug: params[:submission_slug])
+ end
+
+ SubmissionMailer.copy_to_submitter(@submission).deliver_later!
+
+ redirect_to success_send_submission_email_index_path
+ end
+end
diff --git a/app/controllers/setup_controller.rb b/app/controllers/setup_controller.rb
new file mode 100644
index 000000000..90b6424a9
--- /dev/null
+++ b/app/controllers/setup_controller.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+class SetupController < ApplicationController
+ skip_before_action :maybe_redirect_to_setup
+ skip_before_action :authenticate_user!
+
+ before_action :redirect_to_root_if_signed, if: :signed_in?
+ before_action :ensure_first_user_not_created!
+
+ def index
+ @account = Account.new(account_params)
+ @user = @account.users.new(user_params)
+ end
+
+ def create
+ @account = Account.new(account_params)
+ @user = @account.users.new(user_params)
+
+ if @user.save
+ sign_in(@user)
+
+ redirect_to root_path
+ else
+ render :index, status: :unprocessable_entity
+ end
+ end
+
+ private
+
+ def user_params
+ return {} unless params[:user]
+
+ params.require(:user).permit(:first_name, :last_name, :email, :password)
+ end
+
+ def account_params
+ return {} unless params[:account]
+
+ params.require(:account).permit(:name)
+ end
+
+ def redirect_to_root_if_signed
+ redirect_to root_path, notice: 'You are already signed in'
+ end
+
+ def ensure_first_user_not_created!
+ redirect_to new_user_session_path, notice: 'Please sign in.' if User.exists?
+ end
+end
diff --git a/app/controllers/start_flow_controller.rb b/app/controllers/start_flow_controller.rb
new file mode 100644
index 000000000..e4481892c
--- /dev/null
+++ b/app/controllers/start_flow_controller.rb
@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+class StartFlowController < ApplicationController
+ layout 'flow'
+
+ skip_before_action :authenticate_user!
+
+ before_action :load_flow
+
+ def show
+ @submission = @flow.submissions.new
+ end
+
+ def update
+ @submission = @flow.submissions.find_or_initialize_by(
+ deleted_at: nil, **submission_params
+ )
+
+ if @submission.completed_at?
+ redirect_to start_flow_completed_path(@flow.slug, email: submission_params[:email])
+ else
+ @submission.assign_attributes(
+ opened_at: Time.current,
+ ip: request.remote_ip,
+ ua: request.user_agent
+ )
+
+ if @submission.save
+ redirect_to submit_flow_path(@submission.slug)
+ else
+ render :show
+ end
+ end
+ end
+
+ def completed
+ @submission = @flow.submissions.find_by(email: params[:email])
+ end
+
+ private
+
+ def submission_params
+ params.require(:submission).permit(:email)
+ end
+
+ def load_flow
+ slug = params[:slug] || params[:start_flow_slug]
+
+ @flow = Flow.find_by!(slug:)
+ end
+end
diff --git a/app/controllers/storage_settings_controller.rb b/app/controllers/storage_settings_controller.rb
new file mode 100644
index 000000000..83f5cdb00
--- /dev/null
+++ b/app/controllers/storage_settings_controller.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+class StorageSettingsController < ApplicationController
+ before_action :load_encrypted_config
+
+ def index; end
+
+ def create
+ if @encrypted_config.update(storage_configs)
+ LoadActiveStorageConfigs.reload
+
+ redirect_to settings_storage_index_path, notice: 'Changes have been saved'
+ else
+ render :index, status: :unprocessable_entity
+ end
+ end
+
+ private
+
+ def load_encrypted_config
+ @encrypted_config =
+ EncryptedConfig.find_or_initialize_by(account: current_account, key: EncryptedConfig::FILES_STORAGE_KEY)
+ end
+
+ def storage_configs
+ params.require(:encrypted_config).permit(value: {}).tap do |e|
+ e[:value].compact_blank!
+
+ e.dig(:value, :configs)&.compact_blank!
+ end
+ end
+end
diff --git a/app/controllers/submissions_controller.rb b/app/controllers/submissions_controller.rb
new file mode 100644
index 000000000..e44ddca0d
--- /dev/null
+++ b/app/controllers/submissions_controller.rb
@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+class SubmissionsController < ApplicationController
+ before_action :load_flow, only: %i[index new create]
+
+ def index
+ @submissions = @flow.submissions.active
+ end
+
+ def show
+ @submission =
+ Submission.joins(:flow).where(flow: { account_id: current_account.id })
+ .preload(flow: { documents_attachments: { preview_images_attachments: :blob } })
+ .find(params[:id])
+ end
+
+ def new; end
+
+ def create
+ emails = params[:emails].to_s.scan(User::EMAIL_REGEXP)
+
+ submissions =
+ emails.map do |email|
+ submission = @flow.submissions.create!(email:, sent_at: params[:send_email] == '1' ? Time.current : nil)
+
+ if params[:send_email] == '1'
+ SubmissionMailer.invitation_email(submission, message: params[:message]).deliver_later!
+ end
+
+ submission
+ end
+
+ redirect_to flow_submissions_path(@flow), notice: "#{submissions.size} recepients added"
+ end
+
+ def destroy
+ submission = Submission.joins(:flow).where(flow: { account_id: current_account.id })
+ .find(params[:id])
+
+ submission.update!(deleted_at: Time.current)
+
+ redirect_to flow_submissions_path(submission.flow), notice: 'Submission has been archieved'
+ end
+
+ private
+
+ def load_flow
+ @flow = current_account.flows.find(params[:flow_id])
+ end
+end
diff --git a/app/controllers/submissions_download_controller.rb b/app/controllers/submissions_download_controller.rb
new file mode 100644
index 000000000..23c805050
--- /dev/null
+++ b/app/controllers/submissions_download_controller.rb
@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+class SubmissionsDownloadController < ApplicationController
+ skip_before_action :authenticate_user!
+
+ def index
+ submission = Submission.find_by(slug: params[:submission_slug])
+
+ Submissions::GenerateResultAttachments.call(submission)
+
+ redirect_to submission.archive.url, allow_other_host: true
+ end
+end
diff --git a/app/controllers/submit_flow_controller.rb b/app/controllers/submit_flow_controller.rb
new file mode 100644
index 000000000..90e862a91
--- /dev/null
+++ b/app/controllers/submit_flow_controller.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+class SubmitFlowController < ApplicationController
+ layout 'flow'
+
+ skip_before_action :authenticate_user!
+
+ def show
+ @submission = Submission.preload(flow: { documents_attachments: { preview_images_attachments: :blob } })
+ .find_by!(slug: params[:slug])
+
+ return redirect_to submit_flow_completed_path(@submission.slug) if @submission.completed_at?
+ end
+
+ def update
+ submission = Submission.find_by!(slug: params[:slug])
+ submission.values.merge!(params[:values].to_unsafe_h)
+ submission.completed_at = Time.current if params[:completed] == 'true'
+
+ submission.save
+
+ head :ok
+ end
+
+ def completed
+ @submission = Submission.find_by!(slug: params[:submit_flow_slug])
+ end
+end
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
new file mode 100644
index 000000000..601f25940
--- /dev/null
+++ b/app/controllers/users_controller.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+class UsersController < ApplicationController
+ before_action :load_user, only: %i[edit update destroy]
+
+ def index
+ @users = current_account.users.active.order(id: :desc)
+ end
+
+ def new
+ @user = current_account.users.new
+ end
+
+ def edit; end
+
+ def create
+ @user = current_account.users.find_by(email: user_params[:email])&.tap do |user|
+ user.assign_attributes(user_params)
+ user.deleted_at = nil
+ end
+
+ @user ||= current_account.users.new(user_params)
+
+ if @user.save
+ UserMailer.invitation_email(@user).deliver_later!
+
+ redirect_to settings_users_path, notice: 'User has been invited.'
+ else
+ render turbo_stream: turbo_stream.replace(:modal, template: 'users/new'), status: :unprocessable_entity
+ end
+ end
+
+ def update
+ if @user.update(user_params.compact_blank)
+ redirect_to settings_users_path, notice: 'User has been updated.'
+ else
+ render turbo_stream: turbo_stream.replace(:modal, template: 'users/edit'), status: :unprocessable_entity
+ end
+ end
+
+ def destroy
+ @user.update!(deleted_at: Time.current)
+
+ redirect_to settings_users_path, notice: 'User has been removed.'
+ end
+
+ private
+
+ def load_user
+ @user = current_account.users.find(params[:id])
+ end
+
+ def user_params
+ params.require(:user).permit(:email, :first_name, :last_name, :password)
+ end
+end
diff --git a/app/javascript/application.js b/app/javascript/application.js
new file mode 100644
index 000000000..a2087482c
--- /dev/null
+++ b/app/javascript/application.js
@@ -0,0 +1,36 @@
+import '@hotwired/turbo-rails'
+
+import { createApp } from 'vue'
+
+import ToggleVisible from './elements/toggle_visible'
+import DisableHidden from './elements/disable_hidden'
+import TurboModal from './elements/turbo_modal'
+import FlowArea from './elements/flow_area'
+import FlowView from './elements/flow_view'
+
+import Builder from './components/builder'
+
+window.customElements.define('toggle-visible', ToggleVisible)
+window.customElements.define('disable-hidden', DisableHidden)
+window.customElements.define('turbo-modal', TurboModal)
+window.customElements.define('flow-view', FlowView)
+window.customElements.define('flow-area', FlowArea)
+
+window.customElements.define('flow-builder', class extends HTMLElement {
+ connectedCallback () {
+ this.appElem = document.createElement('div')
+
+ this.app = createApp(Builder, {
+ dataFlow: this.dataset.flow
+ })
+
+ this.app.mount(this.appElem)
+
+ this.appendChild(this.appElem)
+ }
+
+ disconnectedCallback () {
+ this.app?.unmount()
+ this.appElem?.remove()
+ }
+})
diff --git a/app/javascript/application.scss b/app/javascript/application.scss
new file mode 100644
index 000000000..44bce18c0
--- /dev/null
+++ b/app/javascript/application.scss
@@ -0,0 +1,32 @@
+@config "../../tailwind.application.config.js";
+
+@import "tailwindcss/base";
+@import "tailwindcss/components";
+@import "tailwindcss/utilities";
+
+a[href],
+input[type='checkbox'],
+input[type='submit'],
+input[type='image'],
+input[type='radio'],
+label[for],
+select,
+button {
+ cursor: pointer;
+}
+
+button .disabled {
+ display: none;
+}
+
+button[disabled] .disabled {
+ display: initial;
+}
+
+button .enabled {
+ display: initial;
+}
+
+button[disabled] .enabled {
+ display: none;
+}
diff --git a/app/javascript/components/area.vue b/app/javascript/components/area.vue
new file mode 100644
index 000000000..766dfd5d5
--- /dev/null
+++ b/app/javascript/components/area.vue
@@ -0,0 +1,107 @@
+
+
+
+ {{ field?.name || field.type }}
+
+
+
+
+
diff --git a/app/javascript/components/builder.vue b/app/javascript/components/builder.vue
new file mode 100644
index 000000000..beb1f2b6f
--- /dev/null
+++ b/app/javascript/components/builder.vue
@@ -0,0 +1,154 @@
+
+
+
+ Show documents preview (not pages but documents)
+ Allow to edit name
+ Allow to reorder
+ {{ flow.schema }}
+
+
+ Save changes
+
+
+
+ Add Recepients
+
+
+
+
+
+
+ Draw {{ drawField.name }} field on the page
+
+ Cancel
+
+
+
+ FIelds
+
+
+
+
+
diff --git a/app/javascript/components/document.vue b/app/javascript/components/document.vue
new file mode 100644
index 000000000..e26a2af1a
--- /dev/null
+++ b/app/javascript/components/document.vue
@@ -0,0 +1,44 @@
+
+
+
diff --git a/app/javascript/components/field.vue b/app/javascript/components/field.vue
new file mode 100644
index 000000000..694f9fa8e
--- /dev/null
+++ b/app/javascript/components/field.vue
@@ -0,0 +1,81 @@
+
+
+ {{ field.type }}
+
+ Name
+
+
+
+
+ Remove
+
+
+
+ Add option
+
+
+
+
+ {{ area }}
+
+ ×
+
+
+
+ Draw area
+
+
+
+ Required
+
+
+
+
diff --git a/app/javascript/components/fields.vue b/app/javascript/components/fields.vue
new file mode 100644
index 000000000..331e19a5f
--- /dev/null
+++ b/app/javascript/components/fields.vue
@@ -0,0 +1,68 @@
+
+
+
+
+ Add {{ item.label }}
+
+
+
+
diff --git a/app/javascript/components/page.vue b/app/javascript/components/page.vue
new file mode 100644
index 000000000..eb1f9105b
--- /dev/null
+++ b/app/javascript/components/page.vue
@@ -0,0 +1,146 @@
+
+
+
+
+
+
+
+
+
diff --git a/app/javascript/components/upload.vue b/app/javascript/components/upload.vue
new file mode 100644
index 000000000..23a516d19
--- /dev/null
+++ b/app/javascript/components/upload.vue
@@ -0,0 +1,59 @@
+
+
+
+
diff --git a/app/javascript/elements/disable_hidden.js b/app/javascript/elements/disable_hidden.js
new file mode 100644
index 000000000..1e5da77c7
--- /dev/null
+++ b/app/javascript/elements/disable_hidden.js
@@ -0,0 +1,38 @@
+export default class extends HTMLElement {
+ static observedAttributes = ['class']
+
+ connectedCallback () {
+ this.trigger()
+ }
+
+ attributeChangedCallback (attributeName, oldValue, newValue) {
+ if (attributeName === 'class' && oldValue !== newValue) {
+ this.trigger()
+ }
+ }
+
+ trigger () {
+ const hasHiddenClass = this.classList.contains('hidden')
+ const elements = this.querySelectorAll('input, textarea, select')
+
+ elements.forEach((element) => {
+ if (hasHiddenClass) {
+ element.disabled = true
+
+ if (!element.dataset.wasRequired) {
+ element.dataset.wasRequired = element.required
+ }
+
+ element.required = false
+ } else {
+ element.disabled = false
+
+ if (element.dataset.wasRequired) {
+ element.required = element.dataset.wasRequired === 'true'
+
+ delete element.dataset.wasRequired
+ }
+ }
+ })
+ }
+}
diff --git a/app/javascript/elements/file_dropzone.js b/app/javascript/elements/file_dropzone.js
new file mode 100644
index 000000000..f855e84d3
--- /dev/null
+++ b/app/javascript/elements/file_dropzone.js
@@ -0,0 +1,76 @@
+import { DirectUpload } from '@rails/activestorage'
+
+import { actionable } from '@github/catalyst/lib/actionable'
+import { target, targetable } from '@github/catalyst/lib/targetable'
+
+export default actionable(targetable(class extends HTMLElement {
+ static [target.static] = [
+ 'loading',
+ 'input'
+ ]
+
+ connectedCallback () {
+ this.addEventListener('drop', this.onDrop)
+
+ this.addEventListener('dragover', (e) => e.preventDefault())
+ }
+
+ onDrop (e) {
+ e.preventDefault()
+
+ this.uploadFiles(e.dataTransfer.files)
+ }
+
+ onSelectFiles (e) {
+ e.preventDefault()
+
+ this.uploadFiles(this.input.files).then(() => {
+ this.input.value = ''
+ })
+ }
+
+ async uploadFiles (files) {
+ const blobs = await Promise.all(
+ Array.from(files).map(async (file) => {
+ const upload = new DirectUpload(
+ file,
+ '/direct_uploads',
+ this.input
+ )
+
+ return new Promise((resolve, reject) => {
+ upload.create((error, blob) => {
+ if (error) {
+ console.error(error)
+
+ return reject(error)
+ } else {
+ return resolve(blob)
+ }
+ })
+ }).catch((error) => {
+ console.error(error)
+ })
+ })
+ )
+
+ await Promise.all(
+ blobs.map((blob) => {
+ return fetch('/api/attachments', {
+ method: 'POST',
+ body: JSON.stringify({
+ name: 'attachments',
+ blob_signed_id: blob.signed_id,
+ submission_slug: this.dataset.submissionSlug
+ }),
+ headers: { 'Content-Type': 'application/json' }
+ }).then(resp => resp.json()).then((data) => {
+ return data
+ })
+ })).then((result) => {
+ result.forEach((attachment) => {
+ this.dispatchEvent(new CustomEvent('upload', { detail: attachment }))
+ })
+ })
+ }
+}))
diff --git a/app/javascript/elements/files_list.js b/app/javascript/elements/files_list.js
new file mode 100644
index 000000000..b3623fd14
--- /dev/null
+++ b/app/javascript/elements/files_list.js
@@ -0,0 +1,16 @@
+import { actionable } from '@github/catalyst/lib/actionable'
+import { targets, targetable } from '@github/catalyst/lib/targetable'
+
+export default actionable(targetable(class extends HTMLElement {
+ static [targets.static] = [
+ 'items'
+ ]
+
+ add (e) {
+ const elem = document.createElement('input')
+ elem.value = e.detail.uuid
+ elem.name = `values[${this.dataset.fieldUuid}][]`
+
+ this.prepend(elem)
+ }
+}))
diff --git a/app/javascript/elements/flow_area.js b/app/javascript/elements/flow_area.js
new file mode 100644
index 000000000..0b82bef32
--- /dev/null
+++ b/app/javascript/elements/flow_area.js
@@ -0,0 +1,5 @@
+export default class extends HTMLElement {
+ setValue (value) {
+ this.innerHTML = value
+ }
+}
diff --git a/app/javascript/elements/flow_view.js b/app/javascript/elements/flow_view.js
new file mode 100644
index 000000000..9f9916eb3
--- /dev/null
+++ b/app/javascript/elements/flow_view.js
@@ -0,0 +1,93 @@
+import { targets, target, targetable } from '@github/catalyst/lib/targetable'
+import { actionable } from '@github/catalyst/lib/actionable'
+
+export default actionable(targetable(class extends HTMLElement {
+ static observedAttributes = ['data-scale']
+
+ static [target.static] = [
+ 'form',
+ 'completed',
+ 'submitButton'
+ ]
+
+ static [targets.static] = [
+ 'areas',
+ 'fields',
+ 'steps'
+ ]
+
+ passValueToArea (e) {
+ return (this.areas || []).forEach((area) => {
+ if (area.dataset.fieldUuid === e.target.id) {
+ area.setValue(e.target.value)
+ }
+ })
+ }
+
+ submitSignature () {
+ this.submitButton.click()
+ }
+
+ setVisibleStep (uuid) {
+ this.steps.forEach((step) => {
+ step.classList.toggle('hidden', step.dataset.fieldUuid !== uuid)
+ })
+
+ this.fields.find(f => f.id === uuid).focus()
+ }
+
+ submitForm (e) {
+ e.preventDefault()
+
+ e.submitter.setAttribute('disabled', true)
+
+ fetch(this.form.action, {
+ method: this.form.method,
+ body: new FormData(this.form)
+ }).then(response => {
+ console.log('Form submitted successfully!', response)
+ this.moveNextStep()
+ }).catch(error => {
+ console.error('Error submitting form:', error)
+ }).finally(() => {
+ e.submitter.removeAttribute('disabled')
+ })
+ }
+
+ moveStepBack (e) {
+ e.preventDefault()
+
+ const currentStepIndex = this.steps.findIndex((el) => !el.classList.contains('hidden'))
+
+ const previousStep = this.steps[currentStepIndex - 1]
+
+ if (previousStep) {
+ this.setVisibleStep(previousStep.dataset.fieldUuid)
+ }
+ }
+
+ moveNextStep () {
+ const currentStepIndex = this.steps.findIndex((el) => !el.classList.contains('hidden'))
+
+ const nextStep = this.steps[currentStepIndex + 1]
+
+ if (nextStep) {
+ this.setVisibleStep(nextStep.dataset.fieldUuid)
+ } else {
+ this.form.classList.add('hidden')
+ this.completed.classList.remove('hidden')
+ }
+ }
+
+ focusField ({ target }) {
+ this.setVisibleStep(target.dataset.fieldUuid)
+ }
+
+ focusArea ({ target }) {
+ const area = this.areas.find(a => target.id === a.dataset.fieldUuid)
+
+ if (area) {
+ area.scrollIntoView({ behavior: 'smooth', block: 'center' })
+ }
+ }
+}))
diff --git a/app/javascript/elements/signature_pad.js b/app/javascript/elements/signature_pad.js
new file mode 100644
index 000000000..4f1f9b087
--- /dev/null
+++ b/app/javascript/elements/signature_pad.js
@@ -0,0 +1,48 @@
+import SignaturePad from 'signature_pad'
+import { target, targetable } from '@github/catalyst/lib/targetable'
+import { actionable } from '@github/catalyst/lib/actionable'
+
+import { DirectUpload } from '@rails/activestorage'
+
+export default actionable(targetable(class extends HTMLElement {
+ static [target.static] = [
+ 'canvas',
+ 'input'
+ ]
+
+ connectedCallback () {
+ this.pad = new SignaturePad(this.canvas)
+ }
+
+ submit (e) {
+ e?.preventDefault()
+
+ this.canvas.toBlob((blob) => {
+ const file = new File([blob], 'signature.jpg', { type: 'image/jpg' })
+
+ new DirectUpload(
+ file,
+ '/direct_uploads'
+ ).create((_error, data) => {
+ fetch('/api/attachments', {
+ method: 'POST',
+ body: JSON.stringify({
+ submission_slug: this.dataset.submissionSlug,
+ blob_signed_id: data.signed_id,
+ name: 'signatures'
+ }),
+ headers: { 'Content-Type': 'application/json' }
+ }).then((resp) => resp.json()).then((attachment) => {
+ this.input.value = attachment.uuid
+ this.dispatchEvent(new CustomEvent('upload', { details: attachment }))
+ })
+ })
+ }, 'image/jpeg', 0.95)
+ }
+
+ clear (e) {
+ e?.preventDefault()
+
+ this.pad.clear()
+ }
+}))
diff --git a/app/javascript/elements/toggle_visible.js b/app/javascript/elements/toggle_visible.js
new file mode 100644
index 000000000..b7d29a9c1
--- /dev/null
+++ b/app/javascript/elements/toggle_visible.js
@@ -0,0 +1,11 @@
+import { actionable } from '@github/catalyst/lib/actionable'
+
+export default actionable(class extends HTMLElement {
+ trigger (event) {
+ const elementIds = JSON.parse(this.dataset.elementIds)
+
+ elementIds.forEach((elementId) => {
+ document.getElementById(elementId).classList.toggle('hidden', event.target.value !== elementId)
+ })
+ }
+})
diff --git a/app/javascript/elements/turbo_modal.js b/app/javascript/elements/turbo_modal.js
new file mode 100644
index 000000000..010beea07
--- /dev/null
+++ b/app/javascript/elements/turbo_modal.js
@@ -0,0 +1,37 @@
+import { actionable } from '@github/catalyst/lib/actionable'
+
+export default actionable(class extends HTMLElement {
+ connectedCallback () {
+ document.body.classList.add('overflow-hidden')
+
+ document.addEventListener('keyup', this.onEscKey)
+ document.addEventListener('turbo:submit-end', this.onSubmit)
+ document.addEventListener('turbo:before-cache', this.close)
+ }
+
+ disconnectedCallback () {
+ document.body.classList.remove('overflow-hidden')
+
+ document.removeEventListener('keyup', this.onEscKey)
+ document.removeEventListener('turbo:submit-end', this.handleSubmit)
+ document.removeEventListener('turbo:before-cache', this.close)
+ }
+
+ onSubmit = (e) => {
+ if (e.detail.success) {
+ this.close()
+ }
+ }
+
+ onEscKey = (e) => {
+ if (e.code === 'Escape') {
+ this.close()
+ }
+ }
+
+ close = (e) => {
+ e?.preventDefault()
+
+ this.remove()
+ }
+})
diff --git a/app/javascript/flow.js b/app/javascript/flow.js
new file mode 100644
index 000000000..a685cfd73
--- /dev/null
+++ b/app/javascript/flow.js
@@ -0,0 +1,13 @@
+import FlowArea from './elements/flow_area'
+import FlowView from './elements/flow_view'
+import DisableHidden from './elements/disable_hidden'
+import FileDropzone from './elements/file_dropzone'
+import SignaturePad from './elements/signature_pad'
+import FilesList from './elements/files_list'
+
+window.customElements.define('flow-view', FlowView)
+window.customElements.define('flow-area', FlowArea)
+window.customElements.define('disable-hidden', DisableHidden)
+window.customElements.define('file-dropzone', FileDropzone)
+window.customElements.define('signature-pad', SignaturePad)
+window.customElements.define('files-list', FilesList)
diff --git a/app/javascript/flow.scss b/app/javascript/flow.scss
new file mode 100644
index 000000000..dc7c1bfd9
--- /dev/null
+++ b/app/javascript/flow.scss
@@ -0,0 +1,32 @@
+@config "../../tailwind.flow.config.js";
+
+@import "tailwindcss/base";
+@import "tailwindcss/components";
+@import "tailwindcss/utilities";
+
+a[href],
+input[type='checkbox'],
+input[type='submit'],
+input[type='image'],
+input[type='radio'],
+label[for],
+select,
+button {
+ cursor: pointer;
+}
+
+button .disabled {
+ display: none;
+}
+
+button[disabled] .disabled {
+ display: initial;
+}
+
+button .enabled {
+ display: initial;
+}
+
+button[disabled] .enabled {
+ display: none;
+}
diff --git a/app/mailers/application_mailer.rb b/app/mailers/application_mailer.rb
new file mode 100644
index 000000000..0962aa129
--- /dev/null
+++ b/app/mailers/application_mailer.rb
@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+class ApplicationMailer < ActionMailer::Base
+ default from: 'from@example.com'
+ layout 'mailer'
+
+ register_interceptor ActionMailerConfigsInterceptor
+end
diff --git a/app/mailers/submission_mailer.rb b/app/mailers/submission_mailer.rb
new file mode 100644
index 000000000..339fc1c4b
--- /dev/null
+++ b/app/mailers/submission_mailer.rb
@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class SubmissionMailer < ApplicationMailer
+ DEFAULT_MESSAGE = "You've been invited to submit documents."
+
+ def invitation_email(submission, message: DEFAULT_MESSAGE)
+ @submission = submission
+ @message = message
+
+ mail(to: @submission.email,
+ subject: 'You have been invited to submit forms')
+ end
+
+ def copy_to_submitter(submission)
+ @submission = submission
+
+ mail(to: submission.email, subject: 'Here is your copy')
+ end
+end
diff --git a/app/mailers/user_mailer.rb b/app/mailers/user_mailer.rb
new file mode 100644
index 000000000..97c570750
--- /dev/null
+++ b/app/mailers/user_mailer.rb
@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class UserMailer < ApplicationMailer
+ def invitation_email(user)
+ @user = user
+ @token = @user.send(:set_reset_password_token)
+
+ mail(to: @user.friendly_name,
+ subject: 'You have been invited to Docuseal')
+ end
+end
diff --git a/app/models/account.rb b/app/models/account.rb
new file mode 100644
index 000000000..f7980d6e6
--- /dev/null
+++ b/app/models/account.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: accounts
+#
+# id :bigint not null, primary key
+# name :string not null
+# created_at :datetime not null
+# updated_at :datetime not null
+#
+class Account < ApplicationRecord
+ has_many :users, dependent: :destroy
+ has_many :encrypted_configs, dependent: :destroy
+ has_many :flows, dependent: :destroy
+ has_many :active_users, -> { active }, dependent: :destroy,
+ inverse_of: :account, class_name: 'User'
+end
diff --git a/app/models/application_record.rb b/app/models/application_record.rb
new file mode 100644
index 000000000..2156a1d9d
--- /dev/null
+++ b/app/models/application_record.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class ApplicationRecord < ActiveRecord::Base
+ primary_abstract_class
+
+ strip_attributes
+end
diff --git a/app/models/encrypted_config.rb b/app/models/encrypted_config.rb
new file mode 100644
index 000000000..ca2de91b7
--- /dev/null
+++ b/app/models/encrypted_config.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: encrypted_configs
+#
+# id :bigint not null, primary key
+# key :string not null
+# value :text not null
+# created_at :datetime not null
+# updated_at :datetime not null
+# account_id :bigint not null
+#
+# Indexes
+#
+# index_encrypted_configs_on_account_id (account_id)
+# index_encrypted_configs_on_account_id_and_key (account_id,key) UNIQUE
+#
+# Foreign Keys
+#
+# fk_rails_... (account_id => accounts.id)
+#
+class EncryptedConfig < ApplicationRecord
+ FILES_STORAGE_KEY = 'active_storage'
+ EMAIL_SMTP_KEY = 'action_mailer_smtp'
+
+ belongs_to :account
+
+ encrypts :value
+
+ serialize :value, JSON
+end
diff --git a/app/models/flow.rb b/app/models/flow.rb
new file mode 100644
index 000000000..16c0192cd
--- /dev/null
+++ b/app/models/flow.rb
@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: flows
+#
+# id :bigint not null, primary key
+# deleted_at :datetime
+# fields :string not null
+# name :string not null
+# schema :string not null
+# slug :string not null
+# created_at :datetime not null
+# updated_at :datetime not null
+# account_id :bigint not null
+# author_id :bigint not null
+#
+# Indexes
+#
+# index_flows_on_account_id (account_id)
+# index_flows_on_author_id (author_id)
+# index_flows_on_slug (slug) UNIQUE
+#
+# Foreign Keys
+#
+# fk_rails_... (account_id => accounts.id)
+# fk_rails_... (author_id => users.id)
+#
+class Flow < ApplicationRecord
+ belongs_to :author, class_name: 'User'
+ belongs_to :account
+
+ attribute :fields, :string, default: -> { [] }
+ attribute :schema, :string, default: -> { [] }
+ attribute :slug, :string, default: -> { SecureRandom.base58(8) }
+
+ serialize :fields, JSON
+ serialize :schema, JSON
+
+ has_many_attached :documents
+
+ has_many :submissions, dependent: :destroy
+
+ scope :active, -> { where(deleted_at: nil) }
+end
diff --git a/app/models/submission.rb b/app/models/submission.rb
new file mode 100644
index 000000000..c5d7744d0
--- /dev/null
+++ b/app/models/submission.rb
@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: submissions
+#
+# id :bigint not null, primary key
+# completed_at :datetime
+# deleted_at :datetime
+# email :string not null
+# ip :string
+# opened_at :datetime
+# sent_at :datetime
+# slug :string not null
+# ua :string
+# values :string not null
+# created_at :datetime not null
+# updated_at :datetime not null
+# flow_id :bigint not null
+#
+# Indexes
+#
+# index_submissions_on_email (email)
+# index_submissions_on_flow_id (flow_id)
+# index_submissions_on_slug (slug) UNIQUE
+#
+# Foreign Keys
+#
+# fk_rails_... (flow_id => flows.id)
+#
+class Submission < ApplicationRecord
+ belongs_to :flow
+
+ attribute :values, :string, default: -> { {} }
+ attribute :slug, :string, default: -> { SecureRandom.base58(8) }
+
+ serialize :values, JSON
+
+ has_one_attached :archive
+ has_many_attached :documents
+
+ has_many_attached :attachments
+ has_many_attached :images
+ has_many_attached :signatures
+
+ scope :active, -> { where(deleted_at: nil) }
+end
diff --git a/app/models/user.rb b/app/models/user.rb
new file mode 100644
index 000000000..00427dab8
--- /dev/null
+++ b/app/models/user.rb
@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: users
+#
+# id :bigint not null, primary key
+# current_sign_in_at :datetime
+# current_sign_in_ip :string
+# deleted_at :datetime
+# email :string not null
+# encrypted_password :string not null
+# failed_attempts :integer default(0), not null
+# first_name :string not null
+# last_name :string not null
+# last_sign_in_at :datetime
+# last_sign_in_ip :string
+# locked_at :datetime
+# remember_created_at :datetime
+# reset_password_sent_at :datetime
+# reset_password_token :string
+# role :string not null
+# sign_in_count :integer default(0), not null
+# unlock_token :string
+# created_at :datetime not null
+# updated_at :datetime not null
+# account_id :bigint not null
+#
+# Indexes
+#
+# index_users_on_account_id (account_id)
+# index_users_on_email (email) UNIQUE
+# index_users_on_reset_password_token (reset_password_token) UNIQUE
+# index_users_on_unlock_token (unlock_token) UNIQUE
+#
+# Foreign Keys
+#
+# fk_rails_... (account_id => accounts.id)
+#
+class User < ApplicationRecord
+ ROLES = %w[admin].freeze
+
+ EMAIL_REGEXP =
+ /[a-z0-9][.']?(?:(?:[a-z0-9_-]++[.'])*[a-z0-9_-]++)*@(?:[a-z0-9]++[.-])*[a-z0-9]++\.[a-z]{2,}/i
+
+ belongs_to :account
+
+ devise :database_authenticatable, :recoverable, :rememberable, :validatable, :trackable
+ devise :registerable # if ENV['APP_MULTITENANT']
+
+ attribute :role, :string, default: 'admin'
+
+ scope :active, -> { where(deleted_at: nil) }
+
+ def active_for_authentication?
+ !deleted_at?
+ end
+
+ def full_name
+ [first_name, last_name].join(' ')
+ end
+
+ def friendly_name
+ "#{full_name} <#{email}>"
+ end
+end
diff --git a/app/views/dashboard/index.html.erb b/app/views/dashboard/index.html.erb
new file mode 100644
index 000000000..1ff1c7b63
--- /dev/null
+++ b/app/views/dashboard/index.html.erb
@@ -0,0 +1,16 @@
+Hellp
+
+ <%= link_to 'Create Flow', new_flow_path, data: { turbo_frame: :modal } %>
+ <%= link_to 'Storage settings', settings_storage_index_path %>
+ <%= link_to 'Email settings', settings_email_index_path %>
+ <%= link_to 'Users', settings_users_path %>
+
+
+ <% @flows.each do |flow| %>
+
+ <% end %>
+
Hello <%= @resource.email %>!
+Someone has requested a link to change your password. You can do this through the link below.
+<%= link_to 'Change my password', edit_password_url(@resource, reset_password_token: @token) %>
+If you didn't request this, please ignore this email.
+Your password won't change until you access the link above and create a new one.
diff --git a/app/views/devise/passwords/edit.html.erb b/app/views/devise/passwords/edit.html.erb
new file mode 100644
index 000000000..dd54dce03
--- /dev/null
+++ b/app/views/devise/passwords/edit.html.erb
@@ -0,0 +1,20 @@
+Change your password
+<%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :put }) do |f| %>
+ <%= render 'devise/shared/error_messages', resource: %>
+ <%= f.hidden_field :reset_password_token %>
+
+ <%= f.label :password, 'New password' %>(<%= @minimum_password_length %> characters minimum)
+
+ <%= f.label :password_confirmation, 'Confirm new password' %>
+
+ <%= f.submit 'Change my password' %>
+
+<% end %>
+<%= render 'devise/shared/links' %>
diff --git a/app/views/devise/passwords/new.html.erb b/app/views/devise/passwords/new.html.erb
new file mode 100644
index 000000000..32e3f1a30
--- /dev/null
+++ b/app/views/devise/passwords/new.html.erb
@@ -0,0 +1,12 @@
+Forgot your password?
+<%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :post }) do |f| %>
+ <%= render 'devise/shared/error_messages', resource: %>
+
+ <%= f.label :email %>
+
+ <%= f.submit 'Send me reset password instructions' %>
+
+<% end %>
+<%= render 'devise/shared/links' %>
diff --git a/app/views/devise/registrations/new.html.erb b/app/views/devise/registrations/new.html.erb
new file mode 100644
index 000000000..179dd3ed8
--- /dev/null
+++ b/app/views/devise/registrations/new.html.erb
@@ -0,0 +1,34 @@
+Sign up
+<%= form_for('', as: resource_name, url: registration_path) do |f| %>
+ <%= render 'devise/shared/error_messages', resource: %>
+ <%= f.fields_for resource do |ff| %>
+
+ <%= ff.label :first_name %>
+ <%= ff.text_field :first_name, required: true %>
+
+
+ <%= ff.label :last_name %>
+ <%= ff.text_field :last_name, required: true %>
+
+ <% end %>
+ <%= f.fields_for resource.account do |ff| %>
+
+ <%= ff.label :name, 'Company name' %>
+ <%= ff.text_field :name, required: true %>
+
+ <% end %>
+ <%= f.fields_for resource do |ff| %>
+
+ <%= ff.label :email %>
+ <%= ff.email_field :email, required: true %>
+
+
+ <%= ff.label :password %>
+ <%= ff.password_field :password, required: true %>
+
+ <% end %>
+
+ <%= f.submit 'Sign up' %>
+
+<% end %>
+<%= render 'devise/shared/links' %>
diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
new file mode 100644
index 000000000..d4f9b9404
--- /dev/null
+++ b/app/views/devise/sessions/new.html.erb
@@ -0,0 +1,21 @@
+Log in
+<%= form_for(resource, as: resource_name, url: session_path(resource_name)) do |f| %>
+
+ <%= f.label :email %>
+
+ <%= f.label :password %>
+ <% if devise_mapping.rememberable? %>
+
+ <%= f.check_box :remember_me, checked: true %>
+ <%= f.label :remember_me %>
+
+ <% end %>
+
+ <%= f.submit 'Log in' %>
+
+<% end %>
+<%= render 'devise/shared/links' %>
diff --git a/app/views/devise/shared/_error_messages.html.erb b/app/views/devise/shared/_error_messages.html.erb
new file mode 100644
index 000000000..6b7735d6f
--- /dev/null
+++ b/app/views/devise/shared/_error_messages.html.erb
@@ -0,0 +1,14 @@
+<% if resource.errors.any? %>
+
+
+ <%= I18n.t('errors.messages.not_saved',
+ count: resource.errors.count,
+ resource: resource.class.model_name.human.downcase) %>
+
+
+ <% resource.errors.full_messages.each do |message| %>
+ <%= message %>
+ <% end %>
+
+
+ <%= ff.label :host %>
+ <%= ff.text_field :host, value: value['host'], required: true %>
+
+
+ <%= ff.label :port %>
+ <%= ff.text_field :port, value: value['port'], required: true %>
+
+
+ <%= ff.label :username %>
+ <%= ff.text_field :username, value: value['username'], required: true %>
+
+
+ <%= ff.label :password %>
+ <%= ff.password_field :password, value: value['password'], required: true %>
+
+
+ <%= ff.label :from_email, 'Send from' %>
+ <%= ff.email_field :from_email, value: value['from_email'], required: true %>
+
+ <% end %>
+ <%= f.button button_title %>
+<% end %>
diff --git a/app/views/flows/new.html.erb b/app/views/flows/new.html.erb
new file mode 100644
index 000000000..b7e518e4f
--- /dev/null
+++ b/app/views/flows/new.html.erb
@@ -0,0 +1,9 @@
+<%= render 'shared/turbo_modal' do %>
+ <%= form_for @flow, data: { turbo_frame: :_top } do |f| %>
+
+ <%= f.label :name %>
+ <%= f.text_field :name, required: true %>
+
+ <%= f.button button_title %>
+ <% end %>
+<% end %>
diff --git a/app/views/flows/show.html.erb b/app/views/flows/show.html.erb
new file mode 100644
index 000000000..7f919142f
--- /dev/null
+++ b/app/views/flows/show.html.erb
@@ -0,0 +1 @@
+Welcome to Docuseal
+<%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :put }) do |f| %>
+ <%= render 'devise/shared/error_messages', resource: %>
+ <%= f.hidden_field :reset_password_token %>
+
+ <%= f.label :password, 'Set password' %>(<%= @minimum_password_length %> characters minimum)
+
+ <%= f.label :password_confirmation, 'Confirm new password' %>
+
+ <%= f.submit 'Save password and Sign in' %>
+
+<% end %>
diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
new file mode 100644
index 000000000..d1b1fa9c1
--- /dev/null
+++ b/app/views/layouts/application.html.erb
@@ -0,0 +1,22 @@
+
+
+
+
+ Docuseal
+
+ <%= csrf_meta_tags %>
+ <%= csp_meta_tag %>
+
+ <%= flash[:notice] || flash[:alert] %>
+
+ <%= yield %>
+
+
diff --git a/app/views/layouts/flow.html.erb b/app/views/layouts/flow.html.erb
new file mode 100644
index 000000000..181005eac
--- /dev/null
+++ b/app/views/layouts/flow.html.erb
@@ -0,0 +1,17 @@
+
+
+
+
+ Docuseal
+
+ <%= csrf_meta_tags %>
+ <%= csp_meta_tag %>
+
+ <%= ff.label :first_name %>
+ <%= ff.text_field :first_name, required: true %>
+
+
+ <%= ff.label :last_name %>
+ <%= ff.text_field :last_name, required: true %>
+
+ <% end %>
+ <%= f.fields_for @account do |ff| %>
+
+ <%= ff.label :name, 'Company name' %>
+ <%= ff.text_field :name, required: true %>
+
+ <% end %>
+ <%= f.fields_for @user do |ff| %>
+
+ <%= ff.label :email %>
+ <%= ff.email_field :email, required: true %>
+
+
+ <%= ff.label :password %>
+ <%= ff.password_field :password, required: true %>
+
+ <% end %>
+ <%= f.button button_title %>
+<% end %>
diff --git a/app/views/shared/_button_title.html.erb b/app/views/shared/_button_title.html.erb
new file mode 100644
index 000000000..bb0a21cb7
--- /dev/null
+++ b/app/views/shared/_button_title.html.erb
@@ -0,0 +1,6 @@
+
+ <%= title %>
+
+
+ <%= disabled_with %>
+
diff --git a/app/views/shared/_navbar.html.erb b/app/views/shared/_navbar.html.erb
new file mode 100644
index 000000000..111be0d71
--- /dev/null
+++ b/app/views/shared/_navbar.html.erb
@@ -0,0 +1,7 @@
+<% if signed_in? %>
+
+ <%= link_to 'Home', root_path, class: 'bg-red-500' %>
+ <%= link_to 'Sign out', destroy_user_session_path, data: { turbo_method: :delete } %>
+ <%= current_user.email %>
+
+<% end %>
diff --git a/app/views/shared/_turbo_modal.html.erb b/app/views/shared/_turbo_modal.html.erb
new file mode 100644
index 000000000..bcc4dd7bf
--- /dev/null
+++ b/app/views/shared/_turbo_modal.html.erb
@@ -0,0 +1,11 @@
+
+
+
+ Modal window Title
+
×
+
+ <%= yield %>
+
+
+
diff --git a/app/views/start_flow/completed.html.erb b/app/views/start_flow/completed.html.erb
new file mode 100644
index 000000000..f8c199bda
--- /dev/null
+++ b/app/views/start_flow/completed.html.erb
@@ -0,0 +1,5 @@
+
+ Form has been submitted alredy by ypu - thanks!
+
+<%= button_to button_title('Send copy to Email'), send_submission_email_index_path, params: { flow_slug: @flow.slug, email: params[:email] }, form: { onsubmit: 'event.submitter.disabled = true' } %>
+<%# do not allow donwload for securetiy reaosnDownload documets %>
diff --git a/app/views/start_flow/show.html.erb b/app/views/start_flow/show.html.erb
new file mode 100644
index 000000000..33c7ac24a
--- /dev/null
+++ b/app/views/start_flow/show.html.erb
@@ -0,0 +1,9 @@
+You have been invited to submit flow <%= @flow.name %>
+<%= form_for @submission, url: start_flow_path(@flow.slug), data: { turbo_frame: :_top }, method: :put do |f| %>
+ Provide youe email to start
+
+ <%= f.label :email %>
+ <%= f.email_field :email, required: true %>
+
+ <%= f.button button_title %>
+<% end %>
diff --git a/app/views/storage_settings/index.html.erb b/app/views/storage_settings/index.html.erb
new file mode 100644
index 000000000..bbbb5a8a2
--- /dev/null
+++ b/app/views/storage_settings/index.html.erb
@@ -0,0 +1,67 @@
+Storage settings
+<% value = @encrypted_config.value || { 'service' => 'disk' } %>
+<% configs = value['configs'] || {} %>
+<%= form_for @encrypted_config, url: settings_storage_index_path, method: :post, html: { autocomplete: 'off' } do |f| %>
+ <% options = [['Disk', 'disk'], ['AWS S3', 'aws_s3'], ['Google Cloud', 'google']] %>
+
+ <% [['Disk', 'disk'], ['AWS S3', 'aws_s3'], ['Google Cloud', 'google']].each do |(label, val)| %>
+ <%= f.radio_button :selected, val, checked: value['service'] == val, data: { action: 'change:toggle-visible#trigger' } %>
+ <%= f.label :selected, label, value: val %>
+ <% end %>
+
+
+ <%= f.fields_for :value do |ff| %>
+ <%= ff.hidden_field :service, value: 'disk' %>
+ <% end %>
+
+ Disk storage - no configs needed but make sure you have a persistant disk (heroku doesnt not have one)
+
+
+
+ <%= f.fields_for :value do |ff| %>
+ <%= ff.hidden_field :service, value: 'aws_s3' %>
+ <%= ff.fields_for :configs, configs do |fff| %>
+
+ <%= fff.label :access_key_id, 'Access key ID' %>
+ <%= fff.text_field :access_key_id, value: configs['access_key_id'], required: true %>
+
+
+ <%= fff.label :secret_access_key %>
+ <%= fff.password_field :secret_access_key, value: configs['secret_access_key'], required: true %>
+
+
+ <%= fff.label :region %>
+ <%= fff.text_field :region, value: configs['region'], required: true %>
+
+
+ <%= fff.label :bucket %>
+ <%= fff.text_field :bucket, value: value['service'] == 'aws_s3' ? configs['bucket'] : '', required: true %>
+
+
+ <%= fff.label :endpoint %>
+ <%= fff.text_field :endpoint, value: configs['endpoint'], type: :url %>
+
+ <% end %>
+ <% end %>
+
+
+ <%= f.fields_for :value do |ff| %>
+ <%= ff.hidden_field :service, value: 'google' %>
+ <%= ff.fields_for :configs, configs do |fff| %>
+
+ <%= fff.label :project, 'Project' %>
+ <%= fff.text_field :project, value: configs['project'], required: true %>
+
+
+ <%= fff.label :bucket %>
+ <%= fff.text_field :bucket, value: value['service'] == 'google' ? configs['bucket'] : '', required: true %>
+
+
+ <%= fff.label :credentials, 'Credentials (JSON key content)' %>
+ <%= fff.text_area :credentials, value: configs['credentials'], required: true %>
+
+ <% end %>
+ <% end %>
+
+ <%= f.button button_title %>
+<% end %>
diff --git a/app/views/submission_mailer/copy_to_submitter.html.erb b/app/views/submission_mailer/copy_to_submitter.html.erb
new file mode 100644
index 000000000..99604333b
--- /dev/null
+++ b/app/views/submission_mailer/copy_to_submitter.html.erb
@@ -0,0 +1,3 @@
+Hi
+<%= @submission.values %>
+<%= link_to 'Download', submission_download_index_url(@submission.slug) %>
diff --git a/app/views/submission_mailer/invitation_email.html.erb b/app/views/submission_mailer/invitation_email.html.erb
new file mode 100644
index 000000000..3916775de
--- /dev/null
+++ b/app/views/submission_mailer/invitation_email.html.erb
@@ -0,0 +1,4 @@
+
Hi there
+You have been invited to submit a form:
+<%= link_to 'Submit', submit_flow_index_url(slug: @submission.slug) %>
+If you didn't request this, please ignore this email.
diff --git a/app/views/submissions/index.html.erb b/app/views/submissions/index.html.erb
new file mode 100644
index 000000000..6c4576213
--- /dev/null
+++ b/app/views/submissions/index.html.erb
@@ -0,0 +1,40 @@
+Submissions
+Flow <%= @flow.name %>
+Copy share link:
+Add Recepients
+
+
+
+ Email
+
+
+ Status
+
+
+
+
+ <% @submissions.each do |submission| %>
+
+
+ <%= submission.email %>
+
+
+ <% if submission.completed_at? %>
+ Completed
+ <% elsif submission.opened_at? %>
+ Opened
+ <% elsif submission.sent_at? %>
+ Sent
+ <% else %>
+ Awaiting
+ <% end %>
+
+
+ copy link
+
+ <% end %>
+
diff --git a/app/views/submissions/new.html.erb b/app/views/submissions/new.html.erb
new file mode 100644
index 000000000..05efe97e8
--- /dev/null
+++ b/app/views/submissions/new.html.erb
@@ -0,0 +1,19 @@
+<%= render 'shared/turbo_modal' do %>
+ <%= form_for '', url: flow_submissions_path(@flow), data: { turbo_frame: :_top } do |f| %>
+
+ <%= f.label :emails %>
+ <%= f.text_area :emails, required: true %>
+
+
+ <%= f.check_box :send_email, { onchange: "message_field.classList.toggle('hidden', !event.currentTarget.checked)" } %>
+ <%= f.label :send_email %>
+
+
+ Hi There,
+ <%= f.text_area :message, value: SubmissionMailer::DEFAULT_MESSAGE, required: true %>
+ Thanks,
+ <%= current_account.name %>
+
+ <%= f.button button_title %>
+ <% end %>
+<% end %>
diff --git a/app/views/submissions/show.html.erb b/app/views/submissions/show.html.erb
new file mode 100644
index 000000000..edbd89a85
--- /dev/null
+++ b/app/views/submissions/show.html.erb
@@ -0,0 +1,21 @@
+Flow: <%= @submission.flow.name %>
+Sub: <%= @submission.slug %>
+Copy share link:
+
+ <%= field['name'] %>:
+ <% if ['image', 'signature'].include?(field['type']) %>
+ <% Array.wrap(@submission.values[field['uuid']]).each do |uuid| %>
+
+ <% end %>
+ <% elsif ['attachment'].include?(field['type']) %>
+ <% Array.wrap(@submission.values[field['uuid']]).each do |uuid| %>
+ <% attachment = ActiveStorage::Attachment.find_by(uuid:) %>
+
<%= attachment.filename %>
+ <% end %>
+ <% else %>
+ <%= @submission.values[field['uuid']] %>
+ <% end %>
+
+ <%= submission.values[field['uuid']] %>
+
diff --git a/app/views/submit_flow/completed.html.erb b/app/views/submit_flow/completed.html.erb
new file mode 100644
index 000000000..5369cbc9e
--- /dev/null
+++ b/app/views/submit_flow/completed.html.erb
@@ -0,0 +1,5 @@
+
+ Form completed - thanks!
+
+<%= button_to button_title('Send copy to Email'), send_submission_email_index_path, params: { submission_slug: @submission.slug }, form: { onsubmit: 'event.submitter.disabled = true' } %>
+<%= button_to button_title('Download documents'), submission_download_index_path(@submission.slug), method: :get, form: { onsubmit: 'event.submitter.disabled = true' } %>
diff --git a/app/views/submit_flow/show.html.erb b/app/views/submit_flow/show.html.erb
new file mode 100644
index 000000000..e30b2786c
--- /dev/null
+++ b/app/views/submit_flow/show.html.erb
@@ -0,0 +1,83 @@
+<% fields_index = Flows.build_field_areas_index(@submission.flow) %>
+
+ <% @submission.flow.schema.each do |item| %>
+ <% document = @submission.flow.documents.find { |a| a.uuid == item['attachment_uuid'] } %>
+ <% document.preview_images.sort_by { |a| a.filename.base.to_i }.each_with_index do |page, index| %>
+
+
+
+ <% fields_index.dig(document.uuid, index)&.each do |values| %>
+ <%= render 'area', submission: @submission, page:, **values %>
+ <% end %>
+
+
+
+
+
+
+ Form completed - thanks!
+
+ <%= button_to 'Send copy to Email', send_submission_email_index_path, params: { submission_slug: @submission.slug }, form: { onsubmit: 'event.submitter.disabled = true' } %>
+ <%= button_to button_title('Download documents'), submission_download_index_path(@submission.slug), method: :get, form: { onsubmit: 'event.submitter.disabled = true' } %>
+
+
+
diff --git a/app/views/user_mailer/invitation_email.html.erb b/app/views/user_mailer/invitation_email.html.erb
new file mode 100644
index 000000000..db458a62c
--- /dev/null
+++ b/app/views/user_mailer/invitation_email.html.erb
@@ -0,0 +1,4 @@
+Hello <%= @user.first_name %>,
+You have been invited to Docuseal. You can sign up this through the link below.
+<%= link_to 'Set my password', invitation_url(reset_password_token: @token) %>
+If you didn't request this, please ignore this email.
diff --git a/app/views/users/_form.html.erb b/app/views/users/_form.html.erb
new file mode 100644
index 000000000..cb3028f95
--- /dev/null
+++ b/app/views/users/_form.html.erb
@@ -0,0 +1,19 @@
+<%= form_for user, data: { turbo_frame: :_top } do |f| %>
+
+ <%= f.label :first_name %>
+ <%= f.text_field :first_name, required: true %>
+
+
+ <%= f.label :last_name %>
+ <%= f.text_field :last_name, required: true %>
+
+
+ <%= f.label :email %>
+ <%= f.email_field :email, required: true %>
+
+
+ <%= f.label :password %>
+ <%= f.password_field :password, required: user.new_record? %>
+
+ <%= f.button button_title %>
+<% end %>
diff --git a/app/views/users/edit.html.erb b/app/views/users/edit.html.erb
new file mode 100644
index 000000000..057b88b98
--- /dev/null
+++ b/app/views/users/edit.html.erb
@@ -0,0 +1,3 @@
+<%= render 'shared/turbo_modal' do %>
+ <%= render 'form', user: @user %>
+<% end %>
diff --git a/app/views/users/index.html.erb b/app/views/users/index.html.erb
new file mode 100644
index 000000000..840387088
--- /dev/null
+++ b/app/views/users/index.html.erb
@@ -0,0 +1,37 @@
+
+
+
+
+ User
+
+
+ Role
+
+
+ Last session
+
+
+
+
+ <% @users.each do |user| %>
+
+
+ <%= user.full_name %>
+
+ <%= user.role %>
+
+
+ <%= user.last_sign_in_at ? l(user.last_sign_in_at) : '-' %>
+
+
+ <%= link_to 'Edit', edit_user_path(user), data: { turbo_frame: 'modal' } %>
+ <%= button_to 'Remove', user_path(user), method: :delete, data: { turbo_confirm: 'Are you sure?' } %>
+
+
+ <% end %>
+
diff --git a/app/views/users/new.html.erb b/app/views/users/new.html.erb
new file mode 100644
index 000000000..057b88b98
--- /dev/null
+++ b/app/views/users/new.html.erb
@@ -0,0 +1,3 @@
+<%= render 'shared/turbo_modal' do %>
+ <%= render 'form', user: @user %>
+<% end %>
diff --git a/bin/bundle b/bin/bundle
new file mode 100755
index 000000000..42c7fd7c5
--- /dev/null
+++ b/bin/bundle
@@ -0,0 +1,109 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+#
+# This file was generated by Bundler.
+#
+# The application 'bundle' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require "rubygems"
+
+m = Module.new do
+ module_function
+
+ def invoked_as_script?
+ File.expand_path($0) == File.expand_path(__FILE__)
+ end
+
+ def env_var_version
+ ENV["BUNDLER_VERSION"]
+ end
+
+ def cli_arg_version
+ return unless invoked_as_script? # don't want to hijack other binstubs
+ return unless "update".start_with?(ARGV.first || " ") # must be running `bundle update`
+ bundler_version = nil
+ update_index = nil
+ ARGV.each_with_index do |a, i|
+ if update_index && update_index.succ == i && a =~ Gem::Version::ANCHORED_VERSION_PATTERN
+ bundler_version = a
+ end
+ next unless a =~ /\A--bundler(?:[= ](#{Gem::Version::VERSION_PATTERN}))?\z/
+ bundler_version = $1
+ update_index = i
+ end
+ bundler_version
+ end
+
+ def gemfile
+ gemfile = ENV["BUNDLE_GEMFILE"]
+ return gemfile if gemfile && !gemfile.empty?
+
+ File.expand_path("../Gemfile", __dir__)
+ end
+
+ def lockfile
+ lockfile =
+ case File.basename(gemfile)
+ when "gems.rb" then gemfile.sub(/\.rb$/, ".locked")
+ else "#{gemfile}.lock"
+ end
+ File.expand_path(lockfile)
+ end
+
+ def lockfile_version
+ return unless File.file?(lockfile)
+ lockfile_contents = File.read(lockfile)
+ return unless lockfile_contents =~ /\n\nBUNDLED WITH\n\s{2,}(#{Gem::Version::VERSION_PATTERN})\n/
+ Regexp.last_match(1)
+ end
+
+ def bundler_requirement
+ @bundler_requirement ||=
+ env_var_version ||
+ cli_arg_version ||
+ bundler_requirement_for(lockfile_version)
+ end
+
+ def bundler_requirement_for(version)
+ return "#{Gem::Requirement.default}.a" unless version
+
+ bundler_gem_version = Gem::Version.new(version)
+
+ bundler_gem_version.approximate_recommendation
+ end
+
+ def load_bundler!
+ ENV["BUNDLE_GEMFILE"] ||= gemfile
+
+ activate_bundler
+ end
+
+ def activate_bundler
+ gem_error = activation_error_handling do
+ gem "bundler", bundler_requirement
+ end
+ return if gem_error.nil?
+ require_error = activation_error_handling do
+ require "bundler/version"
+ end
+ return if require_error.nil? && Gem::Requirement.new(bundler_requirement).satisfied_by?(Gem::Version.new(Bundler::VERSION))
+ warn "Activating bundler (#{bundler_requirement}) failed:\n#{gem_error.message}\n\nTo install the version of bundler this project requires, run `gem install bundler -v '#{bundler_requirement}'`"
+ exit 42
+ end
+
+ def activation_error_handling
+ yield
+ nil
+ rescue StandardError, LoadError => e
+ e
+ end
+end
+
+m.load_bundler!
+
+if m.invoked_as_script?
+ load Gem.bin_path("bundler", "bundle")
+end
diff --git a/bin/rails b/bin/rails
new file mode 100755
index 000000000..efc037749
--- /dev/null
+++ b/bin/rails
@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+APP_PATH = File.expand_path("../config/application", __dir__)
+require_relative "../config/boot"
+require "rails/commands"
diff --git a/bin/rake b/bin/rake
new file mode 100755
index 000000000..4fbf10b96
--- /dev/null
+++ b/bin/rake
@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require_relative "../config/boot"
+require "rake"
+Rake.application.run
diff --git a/bin/setup b/bin/setup
new file mode 100755
index 000000000..ec47b79b3
--- /dev/null
+++ b/bin/setup
@@ -0,0 +1,33 @@
+#!/usr/bin/env ruby
+require "fileutils"
+
+# path to your application root.
+APP_ROOT = File.expand_path("..", __dir__)
+
+def system!(*args)
+ system(*args) || abort("\n== Command #{args} failed ==")
+end
+
+FileUtils.chdir APP_ROOT do
+ # This script is a way to set up or update your development environment automatically.
+ # This script is idempotent, so that you can run it at any time and get an expectable outcome.
+ # Add necessary setup steps to this file.
+
+ puts "== Installing dependencies =="
+ system! "gem install bundler --conservative"
+ system("bundle check") || system!("bundle install")
+
+ # puts "\n== Copying sample files =="
+ # unless File.exist?("config/database.yml")
+ # FileUtils.cp "config/database.yml.sample", "config/database.yml"
+ # end
+
+ puts "\n== Preparing database =="
+ system! "bin/rails db:prepare"
+
+ puts "\n== Removing old logs and tempfiles =="
+ system! "bin/rails log:clear tmp:clear"
+
+ puts "\n== Restarting application server =="
+ system! "bin/rails restart"
+end
diff --git a/bin/webpacker b/bin/webpacker
new file mode 100755
index 000000000..47ef0c4ca
--- /dev/null
+++ b/bin/webpacker
@@ -0,0 +1,15 @@
+#!/usr/bin/env ruby
+
+require "pathname"
+require "bundler/setup"
+require "webpacker"
+require "webpacker/webpack_runner"
+
+ENV["RAILS_ENV"] ||= "development"
+ENV["NODE_ENV"] ||= ENV["RAILS_ENV"]
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../../Gemfile", Pathname.new(__FILE__).realpath)
+
+APP_ROOT = File.expand_path("..", __dir__)
+Dir.chdir(APP_ROOT) do
+ Webpacker::WebpackRunner.run(ARGV)
+end
diff --git a/bin/webpacker-dev-server b/bin/webpacker-dev-server
new file mode 100755
index 000000000..6629114a7
--- /dev/null
+++ b/bin/webpacker-dev-server
@@ -0,0 +1,18 @@
+#!/usr/bin/env ruby
+
+ENV["RAILS_ENV"] ||= "development"
+ENV["NODE_ENV"] ||= ENV["RAILS_ENV"]
+
+require "pathname"
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../../Gemfile",
+ Pathname.new(__FILE__).realpath)
+
+require "bundler/setup"
+
+require "webpacker"
+require "webpacker/dev_server_runner"
+
+APP_ROOT = File.expand_path("..", __dir__)
+Dir.chdir(APP_ROOT) do
+ Webpacker::DevServerRunner.run(ARGV)
+end
diff --git a/bin/yarn b/bin/yarn
new file mode 100755
index 000000000..fe7338622
--- /dev/null
+++ b/bin/yarn
@@ -0,0 +1,18 @@
+#!/usr/bin/env ruby
+
+APP_ROOT = File.expand_path("..", __dir__)
+Dir.chdir(APP_ROOT) do
+ yarn = ENV["PATH"].split(File::PATH_SEPARATOR).
+ select { |dir| File.expand_path(dir) != __dir__ }.
+ product(["yarn", "yarnpkg", "yarn.cmd", "yarn.ps1"]).
+ map { |dir, file| File.expand_path(file, dir) }.
+ find { |file| File.executable?(file) }
+
+ if yarn
+ exec yarn, *ARGV
+ else
+ $stderr.puts "Yarn executable was not detected in the system."
+ $stderr.puts "Download Yarn at https://yarnpkg.com/en/docs/install"
+ exit 1
+ end
+end
diff --git a/config.ru b/config.ru
new file mode 100644
index 000000000..5df2ee2fa
--- /dev/null
+++ b/config.ru
@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+require_relative 'config/environment'
+
+run Rails.application
+Rails.application.load_server
diff --git a/config/application.rb b/config/application.rb
new file mode 100644
index 000000000..d45d06882
--- /dev/null
+++ b/config/application.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require_relative 'boot'
+
+require 'active_record/railtie'
+require 'active_storage/engine'
+require 'action_controller/railtie'
+require 'action_view/railtie'
+require 'action_mailer/railtie'
+require 'active_job/railtie'
+
+Bundler.require(*Rails.groups)
+
+module Docuseal
+ class Application < Rails::Application
+ config.load_defaults 7.0
+
+ config.autoload_paths << Rails.root.join('lib')
+ config.eager_load_paths << Rails.root.join('lib')
+
+ config.active_storage.routes_prefix = ''
+ end
+end
diff --git a/config/boot.rb b/config/boot.rb
new file mode 100644
index 000000000..c04863fa7
--- /dev/null
+++ b/config/boot.rb
@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../Gemfile', __dir__)
+
+require 'bundler/setup' # Set up gems listed in the Gemfile.
+require 'bootsnap/setup' # Speed up boot time by caching expensive operations.
diff --git a/config/database.yml b/config/database.yml
new file mode 100644
index 000000000..8d1479e84
--- /dev/null
+++ b/config/database.yml
@@ -0,0 +1,15 @@
+default: &default
+ adapter: postgresql
+ encoding: unicode
+
+development:
+ <<: *default
+ database: docuseal_dev
+
+test:
+ <<: *default
+ database: docuseal_test
+
+production:
+ <<: *default
+ database: db/production.sqlite3
diff --git a/config/environment.rb b/config/environment.rb
new file mode 100644
index 000000000..d5abe5580
--- /dev/null
+++ b/config/environment.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# Load the Rails application.
+require_relative 'application'
+
+# Initialize the Rails application.
+Rails.application.initialize!
diff --git a/config/environments/development.rb b/config/environments/development.rb
new file mode 100644
index 000000000..e07ae1aa5
--- /dev/null
+++ b/config/environments/development.rb
@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+require 'active_support/core_ext/integer/time'
+
+Rails.application.configure do
+ config.after_initialize do
+ Bullet.enable = true
+ Bullet.alert = false
+ Bullet.bullet_logger = true
+ Bullet.console = true
+ Bullet.rails_logger = true
+ Bullet.add_footer = true
+ end
+
+ # Settings specified here will take precedence over those in config/application.rb.
+
+ # In the development environment your application's code is reloaded any time
+ # it changes. This slows down response time but is perfect for development
+ # since you don't have to restart the web server when you make code changes.
+ config.cache_classes = false
+
+ # Do not eager load code on boot.
+ config.eager_load = false
+
+ # Show full error reports.
+ config.consider_all_requests_local = true
+
+ # Enable server timing
+ config.server_timing = true
+
+ # Enable/disable caching. By default caching is disabled.
+ # Run rails dev:cache to toggle caching.
+ if Rails.root.join('tmp/caching-dev.txt').exist?
+ config.action_controller.perform_caching = true
+ config.action_controller.enable_fragment_cache_logging = true
+
+ config.cache_store = :memory_store
+ config.public_file_server.headers = {
+ 'Cache-Control' => "public, max-age=#{2.days.to_i}"
+ }
+ else
+ config.action_controller.perform_caching = false
+
+ config.cache_store = :null_store
+ end
+
+ # Store uploaded files on the local file system (see config/storage.yml for options).
+ config.active_storage.service = :disk
+
+ # Don't care if the mailer can't send.
+ config.action_mailer.raise_delivery_errors = true
+ config.action_mailer.perform_deliveries = true
+ config.action_mailer.delivery_method = :letter_opener_web
+
+ config.action_mailer.perform_caching = false
+
+ # Print deprecation notices to the Rails logger.
+ config.active_support.deprecation = :log
+
+ # Raise exceptions for disallowed deprecations.
+ config.active_support.disallowed_deprecation = :raise
+
+ # Tell Active Support which deprecation messages to disallow.
+ config.active_support.disallowed_deprecation_warnings = []
+
+ # Raise an error on page load if there are pending migrations.
+ # config.active_record.migration_error = :page_load
+
+ # Highlight code that triggered database queries in logs.
+ config.active_record.verbose_query_logs = true
+
+ config.active_record.encryption = {
+ primary_key: 'dev master key',
+ deterministic_key: 'dev deterministic key',
+ key_derivation_salt: 'dev key derivation salt'
+ }
+
+ config.action_mailer.default_url_options = { host: 'localhost', port: ENV.fetch('PORT', 3000).to_i }
+ config.action_controller.default_url_options = config.action_mailer.default_url_options
+ routes.default_url_options = config.action_mailer.default_url_options
+
+ # Raises error for missing translations.
+ # config.i18n.raise_on_missing_translations = true
+
+ # Annotate rendered view with file names.
+ # config.action_view.annotate_rendered_view_with_filenames = true
+
+ # Uncomment if you wish to allow Action Cable access from any origin.
+ # config.action_cable.disable_request_forgery_protection = true
+end
diff --git a/config/environments/production.rb b/config/environments/production.rb
new file mode 100644
index 000000000..833c9047d
--- /dev/null
+++ b/config/environments/production.rb
@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+require 'active_support/core_ext/integer/time'
+require 'active_support/core_ext/string'
+
+Rails.application.configure do
+ # Settings specified here will take precedence over those in config/application.rb.
+
+ # Code is not reloaded between requests.
+ config.cache_classes = true
+
+ # Eager load code on boot. This eager loads most of Rails and
+ # your application in memory, allowing both threaded web servers
+ # and those relying on copy on write to perform better.
+ # Rake tasks automatically ignore this option for performance.
+ config.eager_load = true
+
+ # Full error reports are disabled and caching is turned on.
+ config.consider_all_requests_local = false
+ config.action_controller.perform_caching = true
+
+ # Ensures that a master key has been made available in either ENV["RAILS_MASTER_KEY"]
+ # or in config/master.key. This key is used to decrypt credentials (and other encrypted files).
+ # config.require_master_key = true
+
+ # Disable serving static files from the `/public` folder by default since
+ # Apache or NGINX already handles this.
+ config.public_file_server.enabled = true
+
+ # Specifies the header that your server uses for sending files.
+ # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for Apache
+ # config.action_dispatch.x_sendfile_header = "X-Accel-Redirect" # for NGINX
+
+ # Store uploaded files on the local file system (see config/storage.yml for options).
+ config.active_storage.service = :local
+
+ # Mount Action Cable outside main process or domain.
+ # config.action_cable.mount_path = nil
+ # config.action_cable.url = "wss://example.com/cable"
+ # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ]
+
+ # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+ # config.force_ssl = true
+
+ # Include generic and useful information about system operation, but avoid logging too much
+ # information to avoid inadvertent exposure of personally identifiable information (PII).
+ config.log_level = :info
+
+ # Prepend all log lines with the following tags.
+ config.log_tags = [:request_id]
+
+ config.cache_store = :memory_store
+
+ config.action_mailer.perform_caching = false
+
+ # Ignore bad email addresses and do not raise email delivery errors.
+ # Set this to true and configure the email server for immediate delivery to raise delivery errors.
+ # config.action_mailer.raise_delivery_errors = false
+
+ # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
+ # the I18n.default_locale when a translation cannot be found).
+ config.i18n.fallbacks = true
+
+ # Don't log any deprecations.
+ config.active_support.report_deprecations = false
+
+ # Use default logging formatter so that PID and timestamp are not suppressed.
+ config.log_formatter = Logger::Formatter.new
+
+ # Use a different logger for distributed setups.
+ # require "syslog/logger"
+ # config.logger = ActiveSupport::TaggedLogging.new(Syslog::Logger.new "app-name")
+
+ logger = ActiveSupport::Logger.new($stdout)
+ logger.formatter = config.log_formatter
+ config.logger = ActiveSupport::TaggedLogging.new(logger)
+
+ config.active_record.encryption = {
+ primary_key: ENV['SECRET_KEY_BASE'].first(32),
+ deterministic_key: ENV['SECRET_KEY_BASE'].last(32),
+ key_derivation_salt: ENV.fetch('SECRET_KEY_BASE', nil)
+ }
+
+ config.action_mailer.default_url_options = { host: ENV.fetch('HOST', nil), port: ENV.fetch('PORT', nil) }
+ config.action_controller.default_url_options = config.action_mailer.default_url_options
+ routes.default_url_options = config.action_mailer.default_url_options
+
+ # Do not dump schema after migrations.
+ config.active_record.dump_schema_after_migration = false
+end
diff --git a/config/environments/test.rb b/config/environments/test.rb
new file mode 100644
index 000000000..8f3f63ce7
--- /dev/null
+++ b/config/environments/test.rb
@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+require 'active_support/core_ext/integer/time'
+
+# The test environment is used exclusively to run your application's
+# test suite. You never need to work with it otherwise. Remember that
+# your test database is "scratch space" for the test suite and is wiped
+# and recreated between test runs. Don't rely on the data there!
+
+Rails.application.configure do
+ # Settings specified here will take precedence over those in config/application.rb.
+
+ # Turn false under Spring and add config.action_view.cache_template_loading = true.
+ config.cache_classes = true
+
+ # Eager loading loads your whole application. When running a single test locally,
+ # this probably isn't necessary. It's a good idea to do in a continuous integration
+ # system, or in some way before deploying your code.
+ config.eager_load = ENV['CI'].present?
+
+ # Configure public file server for tests with Cache-Control for performance.
+ config.public_file_server.enabled = true
+ config.public_file_server.headers = {
+ 'Cache-Control' => "public, max-age=#{1.hour.to_i}"
+ }
+
+ # Show full error reports and disable caching.
+ config.consider_all_requests_local = true
+ config.action_controller.perform_caching = false
+ config.cache_store = :null_store
+
+ # Raise exceptions instead of rendering exception templates.
+ config.action_dispatch.show_exceptions = false
+
+ # Disable request forgery protection in test environment.
+ config.action_controller.allow_forgery_protection = false
+
+ # Store uploaded files on the local file system in a temporary directory.
+ config.active_storage.service = :test
+
+ config.action_mailer.perform_caching = false
+
+ # Tell Action Mailer not to deliver emails to the real world.
+ # The :test delivery method accumulates sent emails in the
+ # ActionMailer::Base.deliveries array.
+ config.action_mailer.delivery_method = :test
+
+ # Print deprecation notices to the stderr.
+ config.active_support.deprecation = :stderr
+
+ # Raise exceptions for disallowed deprecations.
+ config.active_support.disallowed_deprecation = :raise
+
+ # Tell Active Support which deprecation messages to disallow.
+ config.active_support.disallowed_deprecation_warnings = []
+
+ # Raises error for missing translations.
+ # config.i18n.raise_on_missing_translations = true
+
+ # Annotate rendered view with file names.
+ # config.action_view.annotate_rendered_view_with_filenames = true
+end
diff --git a/config/initializers/active_storage.rb b/config/initializers/active_storage.rb
new file mode 100644
index 000000000..ccbc18ae7
--- /dev/null
+++ b/config/initializers/active_storage.rb
@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+ActiveSupport.on_load(:active_storage_attachment) do
+ attribute :uuid, :string, default: -> { SecureRandom.uuid }
+
+ has_many_attached :preview_images
+end
+
+Rails.configuration.to_prepare do
+ ActiveStorage::DiskController.after_action do
+ response.set_header('Cache-Control', 'public, max-age=31536000') if action_name == 'show'
+ end
+
+ LoadActiveStorageConfigs.call
+rescue StandardError
+ nil
+end
diff --git a/config/initializers/better_html.rb b/config/initializers/better_html.rb
new file mode 100644
index 000000000..ff82aedb8
--- /dev/null
+++ b/config/initializers/better_html.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+ActionView::Helpers.include(BetterHtml::Helpers)
+
+if defined?(BetterHtml)
+ BetterHtml.configure do |config|
+ config.template_exclusion_filter = ->(filename) { filename.include?('/gems/') }
+ end
+end
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
new file mode 100644
index 000000000..11b76e9eb
--- /dev/null
+++ b/config/initializers/devise.rb
@@ -0,0 +1,308 @@
+# frozen_string_literal: true
+
+# Assuming you have not yet modified this file, each configuration option below
+# is set to its default value. Note that some are commented out while others
+# are not: uncommented lines are intended to protect your configuration from
+# breaking changes in upgrades (i.e., in the event that future versions of
+# Devise change the default values for those options).
+#
+# Use this hook to configure devise mailer, warden hooks and so forth.
+# Many of these configuration options can be set straight in your model.
+Devise.setup do |config|
+ # The secret key used by Devise. Devise uses this key to generate
+ # random tokens. Changing this key will render invalid all existing
+ # confirmation, reset password and unlock tokens in the database.
+ # Devise will use the `secret_key_base` as its `secret_key`
+ # by default. You can change it below and use your own secret key.
+
+ # ==> Controller configuration
+ # Configure the parent class to the devise controllers.
+ # config.parent_controller = 'DeviseController'
+
+ # ==> Mailer Configuration
+ # Configure the e-mail address which will be shown in Devise::Mailer,
+ # note that it will be overwritten if you use your own mailer class
+ # with default "from" parameter.
+ # Configure the class responsible to send e-mails.
+ # config.mailer = 'Devise::Mailer'
+
+ # Configure the parent class responsible to send e-mails.
+ config.parent_mailer = 'ApplicationMailer'
+
+ # ==> ORM configuration
+ # Load and configure the ORM. Supports :active_record (default) and
+ # :mongoid (bson_ext recommended) by default. Other ORMs may be
+ # available as additional gems.
+ require 'devise/orm/active_record'
+
+ # ==> Configuration for any authentication mechanism
+ # Configure which keys are used when authenticating a user. The default is
+ # just :email. You can configure it to use [:username, :subdomain], so for
+ # authenticating a user, both parameters are required. Remember that those
+ # parameters are used only when authenticating and not when retrieving from
+ # session. If you need permissions, you should implement that in a before filter.
+ # You can also supply a hash where the value is a boolean determining whether
+ # or not authentication should be aborted when the value is not present.
+ # config.authentication_keys = [:email]
+
+ # Configure parameters from the request object used for authentication. Each entry
+ # given should be a request method and it will automatically be passed to the
+ # find_for_authentication method and considered in your model lookup. For instance,
+ # if you set :request_keys to [:subdomain], :subdomain will be used on authentication.
+ # The same considerations mentioned for authentication_keys also apply to request_keys.
+ # config.request_keys = []
+
+ # Configure which authentication keys should be case-insensitive.
+ # These keys will be downcased upon creating or modifying a user and when used
+ # to authenticate or find a user. Default is :email.
+ config.case_insensitive_keys = [:email]
+
+ # Configure which authentication keys should have whitespace stripped.
+ # These keys will have whitespace before and after removed upon creating or
+ # modifying a user and when used to authenticate or find a user. Default is :email.
+ config.strip_whitespace_keys = [:email]
+
+ # Tell if authentication through request.params is enabled. True by default.
+ # It can be set to an array that will enable params authentication only for the
+ # given strategies, for example, `config.params_authenticatable = [:database]` will
+ # enable it only for database (email + password) authentication.
+ # config.params_authenticatable = true
+
+ # Tell if authentication through HTTP Auth is enabled. False by default.
+ # It can be set to an array that will enable http authentication only for the
+ # given strategies, for example, `config.http_authenticatable = [:database]` will
+ # enable it only for database authentication.
+ # For API-only applications to support authentication "out-of-the-box", you will likely want to
+ # enable this with :database unless you are using a custom strategy.
+ # The supported strategies are:
+ # :database = Support basic authentication with authentication key + password
+ # config.http_authenticatable = false
+
+ # If 401 status code should be returned for AJAX requests. True by default.
+ # config.http_authenticatable_on_xhr = true
+
+ # The realm used in Http Basic Authentication. 'Application' by default.
+ # config.http_authentication_realm = 'Application'
+
+ # It will change confirmation, password recovery and other workflows
+ # to behave the same regardless if the e-mail provided was right or wrong.
+ # Does not affect registerable.
+ # config.paranoid = true
+
+ # By default Devise will store the user in session. You can skip storage for
+ # particular strategies by setting this option.
+ # Notice that if you are skipping storage for all authentication paths, you
+ # may want to disable generating routes to Devise's sessions controller by
+ # passing skip: :sessions to `devise_for` in your config/routes.rb
+ config.skip_session_storage = [:http_auth]
+
+ # By default, Devise cleans up the CSRF token on authentication to
+ # avoid CSRF token fixation attacks. This means that, when using AJAX
+ # requests for sign in and sign up, you need to get a new CSRF token
+ # from the server. You can disable this option at your own risk.
+ # config.clean_up_csrf_token_on_authentication = true
+
+ # When false, Devise will not attempt to reload routes on eager load.
+ # This can reduce the time taken to boot the app but if your application
+ # requires the Devise mappings to be loaded during boot time the application
+ # won't boot properly.
+ # config.reload_routes = true
+
+ # ==> Configuration for :database_authenticatable
+ # For bcrypt, this is the cost for hashing the password and defaults to 12. If
+ # using other algorithms, it sets how many times you want the password to be hashed.
+ # The number of stretches used for generating the hashed password are stored
+ # with the hashed password. This allows you to change the stretches without
+ # invalidating existing passwords.
+ #
+ # Limiting the stretches to just one in testing will increase the performance of
+ # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
+ # a value less than 10 in other environments. Note that, for bcrypt (the default
+ # algorithm), the cost increases exponentially with the number of stretches (e.g.
+ # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
+ config.stretches = Rails.env.test? ? 1 : 12
+
+ # Set up a pepper to generate the hashed password.
+ # Send a notification to the original email when the user's email is changed.
+ # config.send_email_changed_notification = false
+
+ # Send a notification email when the user's password is changed.
+ # config.send_password_change_notification = false
+
+ # ==> Configuration for :confirmable
+ # A period that the user is allowed to access the website even without
+ # confirming their account. For instance, if set to 2.days, the user will be
+ # able to access the website for two days without confirming their account,
+ # access will be blocked just in the third day.
+ # You can also set it to nil, which will allow the user to access the website
+ # without confirming their account.
+ # Default is 0.days, meaning the user cannot access the website without
+ # confirming their account.
+ # config.allow_unconfirmed_access_for = 2.days
+
+ # A period that the user is allowed to confirm their account before their
+ # token becomes invalid. For example, if set to 3.days, the user can confirm
+ # their account within 3 days after the mail was sent, but on the fourth day
+ # their account can't be confirmed with the token any more.
+ # Default is nil, meaning there is no restriction on how long a user can take
+ # before confirming their account.
+ # config.confirm_within = 3.days
+
+ # If true, requires any email changes to be confirmed (exactly the same way as
+ # initial account confirmation) to be applied. Requires additional unconfirmed_email
+ # db field (see migrations). Until confirmed, new email is stored in
+ # unconfirmed_email column, and copied to email column on successful confirmation.
+ config.reconfirmable = true
+
+ # Defines which key will be used when confirming an account
+ # config.confirmation_keys = [:email]
+
+ # ==> Configuration for :rememberable
+ # The time the user will be remembered without asking for credentials again.
+ # config.remember_for = 2.weeks
+
+ # Invalidates all the remember me tokens when the user signs out.
+ config.expire_all_remember_me_on_sign_out = true
+
+ # If true, extends the user's remember period when remembered via cookie.
+ # config.extend_remember_period = false
+
+ # Options to be passed to the created cookie. For instance, you can set
+ # secure: true in order to force SSL only cookies.
+ # config.rememberable_options = {}
+
+ # ==> Configuration for :validatable
+ # Range for password length.
+ config.password_length = 6..128
+
+ # Email regex used to validate email formats. It simply asserts that
+ # one (and only one) @ exists in the given string. This is mainly
+ # to give user feedback and not to assert the e-mail validity.
+ config.email_regexp = /\A[^@\s]+@[^@\s]+\z/
+
+ # ==> Configuration for :timeoutable
+ # The time you want to timeout the user session without activity. After this
+ # time the user will be asked for credentials again. Default is 30 minutes.
+ # config.timeout_in = 30.minutes
+
+ # ==> Configuration for :lockable
+ # Defines which strategy will be used to lock an account.
+ # :failed_attempts = Locks an account after a number of failed attempts to sign in.
+ # :none = No lock strategy. You should handle locking by yourself.
+ # config.lock_strategy = :failed_attempts
+
+ # Defines which key will be used when locking and unlocking an account
+ # config.unlock_keys = [:email]
+
+ # Defines which strategy will be used to unlock an account.
+ # :email = Sends an unlock link to the user email
+ # :time = Re-enables login after a certain amount of time (see :unlock_in below)
+ # :both = Enables both strategies
+ # :none = No unlock strategy. You should handle unlocking by yourself.
+ # config.unlock_strategy = :both
+
+ # Number of authentication tries before locking an account if lock_strategy
+ # is failed attempts.
+ # config.maximum_attempts = 20
+
+ # Time interval to unlock the account if :time is enabled as unlock_strategy.
+ # config.unlock_in = 1.hour
+
+ # Warn on the last attempt before the account is locked.
+ # config.last_attempt_warning = true
+
+ # ==> Configuration for :recoverable
+ #
+ # Defines which key will be used when recovering the password for an account
+ # config.reset_password_keys = [:email]
+
+ # Time interval you can reset your password with a reset password key.
+ # Don't put a too small interval or your users won't have the time to
+ # change their passwords.
+ config.reset_password_within = 6.hours
+
+ # When set to false, does not sign a user in automatically after their password is
+ # reset. Defaults to true, so a user is signed in automatically after a reset.
+ config.sign_in_after_reset_password = true
+
+ # ==> Configuration for :encryptable
+ # Allow you to use another hashing or encryption algorithm besides bcrypt (default).
+ # You can use :sha1, :sha512 or algorithms from others authentication tools as
+ # :clearance_sha1, :authlogic_sha512 (then you should set stretches above to 20
+ # for default behavior) and :restful_authentication_sha1 (then you should set
+ # stretches to 10, and copy REST_AUTH_SITE_KEY to pepper).
+ #
+ # Require the `devise-encryptable` gem when using anything other than bcrypt
+ # config.encryptor = :sha512
+
+ # ==> Scopes configuration
+ # Turn scoped views on. Before rendering "sessions/new", it will first check for
+ # "users/sessions/new". It's turned off by default because it's slower if you
+ # are using only default views.
+ # config.scoped_views = false
+
+ # Configure the default scope given to Warden. By default it's the first
+ # devise role declared in your routes (usually :user).
+ # config.default_scope = :user
+
+ # Set this configuration to false if you want /users/sign_out to sign out
+ # only the current scope. By default, Devise signs out all scopes.
+ # config.sign_out_all_scopes = true
+
+ # ==> Navigation configuration
+ # Lists the formats that should be treated as navigational. Formats like
+ # :html should redirect to the sign in page when the user does not have
+ # access, but formats like :xml or :json, should return 401.
+ #
+ # If you have any extra navigational formats, like :iphone or :mobile, you
+ # should add them to the navigational formats lists.
+ #
+ # The "*/*" below is required to match Internet Explorer requests.
+ # config.navigational_formats = ['*/*', :html, :turbo_stream]
+
+ # The default HTTP method used to sign out a resource. Default is :delete.
+ config.sign_out_via = :delete
+
+ # ==> OmniAuth
+ # Add a new OmniAuth provider. Check the wiki for more information on setting
+ # up on your models and hooks.
+ # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo'
+
+ # ==> Warden configuration
+ # If you want to use other strategies, that are not supported by Devise, or
+ # change the failure app, you can configure them inside the config.warden block.
+ #
+ # config.warden do |manager|
+ # manager.intercept_401 = false
+ # manager.default_strategies(scope: :user).unshift :some_external_strategy
+ # end
+
+ # ==> Mountable engine configurations
+ # When using Devise inside an engine, let's call it `MyEngine`, and this engine
+ # is mountable, there are some extra configurations to be taken into account.
+ # The following options are available, assuming the engine is mounted as:
+ #
+ # mount MyEngine, at: '/my_engine'
+ #
+ # The router that invoked `devise_for`, in the example above, would be:
+ # config.router_name = :my_engine
+ #
+ # When using OmniAuth, Devise cannot automatically set OmniAuth path,
+ # so you need to do it manually. For the users scope, it would be:
+ # config.omniauth_path_prefix = '/my_engine/users/auth'
+
+ # ==> Hotwire/Turbo configuration
+ # When using Devise with Hotwire/Turbo, the http status for error responses
+ # and some redirects must match the following. The default in Devise for existing
+ # apps is `200 OK` and `302 Found respectively`, but new apps are generated with
+ # these new defaults that match Hotwire/Turbo behavior.
+ # Note: These might become the new default in future versions of Devise.
+ config.responder.error_status = :unprocessable_entity
+ config.responder.redirect_status = :see_other
+
+ # ==> Configuration for :registerable
+
+ # When set to false, does not sign a user in automatically after their password is
+ # changed. Defaults to true, so a user is signed in automatically after changing a password.
+ # config.sign_in_after_change_password = true
+end
diff --git a/config/initializers/field_error_proc.rb b/config/initializers/field_error_proc.rb
new file mode 100644
index 000000000..50a59c4be
--- /dev/null
+++ b/config/initializers/field_error_proc.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+ActionView::Base.field_error_proc = proc do |html_tag, instance|
+ next html_tag if html_tag.starts_with?(' :new, as: :new
+ end
+ end
+
+ resource :invitation, only: %i[update] do
+ get '' => :edit
+ end
+ end
+
+ namespace :api do
+ resources :attachments, only: %i[create]
+ resources :flows, only: %i[update] do
+ resources :documents, only: %i[create destroy], controller: 'flows_documents'
+ end
+ end
+
+ resources :dashboard, only: %i[index]
+ resources :setup, only: %i[index create]
+ resources :users, only: %i[new create edit update destroy]
+ resources :submissions, only: %i[show destroy]
+ resources :flows, only: %i[new create show destroy] do
+ resources :submissions, only: %i[index new create]
+ end
+
+ resources :start_flow, only: %i[show update], path: 'f', param: 'slug' do
+ get :completed
+ end
+
+ resources :submit_flow, only: %i[show update], path: 'l', param: 'slug' do
+ get :completed
+ end
+
+ resources :send_submission_email, only: %i[create] do
+ get :success, on: :collection
+ end
+
+ resources :submissions, only: %i[], param: 'slug' do
+ resources :download, only: %i[index], controller: 'submissions_download'
+ end
+
+ scope '/settings', as: :settings do
+ resources :storage, only: %i[index create], controller: 'storage_settings'
+ resources :email, only: %i[index create], controller: 'email_settings'
+ resources :users, only: %i[index]
+ end
+end
diff --git a/config/secrets.yml b/config/secrets.yml
new file mode 100644
index 000000000..66854c249
--- /dev/null
+++ b/config/secrets.yml
@@ -0,0 +1,8 @@
+development:
+ secret_key_base: 5e626815c7ef00cc5d7b46ff3099160f25e5271b00ced3b8eba1d5045eb0db0ddb925c85b2fea6b2acb4cbdcb779ba9c5a31600f31e6ee8944ada47a768f6a7f
+
+test:
+ secret_key_base: 7d754998067691dc61859c6c3109966c44e1756a46fd2409f1d81403599605c103ff84b12102673b498bdbaba04d9949d8d7a2f7af47529ee6dc4dd19f0aef3e
+
+production:
+ secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>
diff --git a/config/storage.yml b/config/storage.yml
new file mode 100644
index 000000000..cb97bc195
--- /dev/null
+++ b/config/storage.yml
@@ -0,0 +1,34 @@
+local:
+ service: Disk
+ root: <%= ENV['WORKDIR'] %>docuseal-attachments
+ public: true
+
+disk:
+ service: Disk
+ root: <%= ENV['WORKDIR'] %>docuseal-attachments
+ public: true
+
+aws_s3:
+ service: S3
+ access_key_id: <%= ENV['AWS_ACCESS_KEY_ID'] %>
+ secret_access_key: <%= ENV['AWS_SECRET_ACCESS_KEY'] %>
+ region: <%= ENV['AWS_REGION'] || 'us-east-1' %>
+ bucket: <%= ENV['S3_ATTACHMENTS_BUCKET'] %>
+ public: true
+ upload:
+ cache_control: 'public, max-age=31536000'
+
+google:
+ service: GCS
+ credentials: <%= JSON.parse(ENV['GCS_CREDENTIALS'] || '{}') %>
+ project: <%= ENV['GCS_PROJECT'] %>
+ bucket: <%= ENV['GCS_BUCKET'] %>
+ public: true
+ cache_control: "public, max-age=31536000"
+
+azure:
+ service: AzureStorage
+ storage_account_name: <%= ENV['AZURE_STORAGE_ACCOUNT_NAME'] %>
+ storage_access_key: <%= ENV['AZURE_STORAGE_ACCESS_KEY'] %>
+ container: <%= ENV['AZURE_CONTAINER'] %>
+ public: true
diff --git a/config/webpack/webpack.config.js b/config/webpack/webpack.config.js
new file mode 100644
index 000000000..123308539
--- /dev/null
+++ b/config/webpack/webpack.config.js
@@ -0,0 +1,39 @@
+const { webpackConfig, merge } = require('shakapacker')
+const BundleAnalyzerPlugin = require('webpack-bundle-analyzer').BundleAnalyzerPlugin
+const { VueLoaderPlugin } = require('vue-loader')
+
+const configs = merge(webpackConfig, {
+ resolve: {
+ extensions: ['.css', '.scss', '.vue']
+ },
+ optimization: {
+ runtimeChunk: false,
+ splitChunks: {
+ cacheGroups: {
+ default: false
+ }
+ }
+ },
+ plugins: [
+ process.env.BUNDLE_ANALYZE && new BundleAnalyzerPlugin(),
+ new VueLoaderPlugin()
+ ].filter(Boolean)
+})
+
+configs.module = merge({
+ rules: [
+ {
+ test: /\.vue$/,
+ use: [{
+ loader: 'vue-loader',
+ options: {
+ compilerOptions: {
+ isCustomElement: tag => tag.includes('-')
+ }
+ }
+ }]
+ }
+ ]
+}, configs.module)
+
+module.exports = configs
diff --git a/config/webpacker.yml b/config/webpacker.yml
new file mode 100644
index 000000000..96e28c740
--- /dev/null
+++ b/config/webpacker.yml
@@ -0,0 +1,47 @@
+default: &default
+ source_path: app/javascript
+ source_entry_path: /
+ nested_entries: false
+ public_root_path: public
+ public_output_path: packs
+ cache_path: tmp/webpacker
+ webpacker_precompile: true
+ webpack_compile_output: true
+ additional_paths: []
+ webpack_loader: 'babel'
+ compiler_strategy: digest
+ cache_manifest: false
+ ensure_consistent_versioning: false
+
+development:
+ <<: *default
+ compile: true
+ compiler_strategy: mtime
+
+ dev_server:
+ https: false
+ host: localhost
+ port: 3035
+ hmr: false
+ inline_css: true
+ live_reload: false
+ client:
+ overlay: false
+ compress: true
+ allowed_hosts: "all"
+ pretty: true
+ headers:
+ 'Access-Control-Allow-Origin': '*'
+ static:
+ watch:
+ ignored: '**/node_modules/**'
+
+test:
+ <<: *default
+ compile: true
+ public_output_path: packs-test
+
+production:
+ <<: *default
+ compile: false
+ cache_manifest: true
diff --git a/db/migrate/20230515182743_create_accounts.rb b/db/migrate/20230515182743_create_accounts.rb
new file mode 100644
index 000000000..bba0ae544
--- /dev/null
+++ b/db/migrate/20230515182743_create_accounts.rb
@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class CreateAccounts < ActiveRecord::Migration[7.0]
+ def change
+ create_table :accounts do |t|
+ t.string :name, null: false
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/migrate/20230515182744_devise_create_users.rb b/db/migrate/20230515182744_devise_create_users.rb
new file mode 100644
index 000000000..5bfc6044f
--- /dev/null
+++ b/db/migrate/20230515182744_devise_create_users.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+class DeviseCreateUsers < ActiveRecord::Migration[7.0]
+ def change
+ create_table :users do |t|
+ ## Database authenticatable
+ t.string :first_name, null: false
+ t.string :last_name, null: false
+ t.string :email, null: false
+ t.string :role, null: false
+ t.string :encrypted_password, null: false
+
+ t.references :account, null: false, foreign_key: true, index: true
+
+ ## Recoverable
+ t.string :reset_password_token
+ t.datetime :reset_password_sent_at
+
+ ## Rememberable
+ t.datetime :remember_created_at
+
+ # Trackable
+ t.integer :sign_in_count, default: 0, null: false
+ t.datetime :current_sign_in_at
+ t.datetime :last_sign_in_at
+ t.string :current_sign_in_ip
+ t.string :last_sign_in_ip
+
+ ## Confirmable
+ # t.string :confirmation_token
+ # t.datetime :confirmed_at
+ # t.datetime :confirmation_sent_at
+ # t.string :unconfirmed_email # Only if using reconfirmable
+
+ # Lockable
+ t.integer :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+ t.string :unlock_token # Only if unlock strategy is :email or :both
+ t.datetime :locked_at
+ t.datetime :deleted_at
+
+ t.timestamps null: false
+ end
+
+ add_index :users, :email, unique: true
+ add_index :users, :reset_password_token, unique: true
+ # add_index :users, :confirmation_token, unique: true
+ add_index :users, :unlock_token, unique: true
+ end
+end
diff --git a/db/migrate/20230515193039_create_encrypted_configs.rb b/db/migrate/20230515193039_create_encrypted_configs.rb
new file mode 100644
index 000000000..a15b7abc7
--- /dev/null
+++ b/db/migrate/20230515193039_create_encrypted_configs.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class CreateEncryptedConfigs < ActiveRecord::Migration[7.0]
+ def change
+ create_table :encrypted_configs do |t|
+ t.references :account, null: false, foreign_key: true, index: true
+ t.string :key, null: false
+ t.text :value, null: false
+
+ t.index %i[account_id key], unique: true
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/migrate/20230515205356_create_active_storage_tables.active_storage.rb b/db/migrate/20230515205356_create_active_storage_tables.active_storage.rb
new file mode 100644
index 000000000..e23a5bdc1
--- /dev/null
+++ b/db/migrate/20230515205356_create_active_storage_tables.active_storage.rb
@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+# This migration comes from active_storage (originally 20170806125915)
+class CreateActiveStorageTables < ActiveRecord::Migration[5.2]
+ def change
+ # Use Active Record's configured type for primary and foreign keys
+ primary_key_type, foreign_key_type = primary_and_foreign_key_types
+
+ create_table :active_storage_blobs, id: primary_key_type do |t|
+ t.string :key, null: false
+ t.string :filename, null: false
+ t.string :content_type
+ t.text :metadata
+ t.string :service_name, null: false
+ t.bigint :byte_size, null: false
+ t.string :checksum
+
+ if connection.supports_datetime_with_precision?
+ t.datetime :created_at, precision: 6, null: false
+ else
+ t.datetime :created_at, null: false
+ end
+
+ t.index [:key], unique: true
+ end
+
+ create_table :active_storage_attachments, id: primary_key_type do |t|
+ t.string :name, null: false
+ t.string :uuid, null: false
+ t.references :record, null: false, polymorphic: true, index: false, type: foreign_key_type
+ t.references :blob, null: false, type: foreign_key_type
+
+ if connection.supports_datetime_with_precision?
+ t.datetime :created_at, precision: 6, null: false
+ else
+ t.datetime :created_at, null: false
+ end
+
+ t.index %i[record_type record_id name blob_id], name: :index_active_storage_attachments_uniqueness,
+ unique: true
+
+ t.index :uuid
+ t.foreign_key :active_storage_blobs, column: :blob_id
+ end
+
+ create_table :active_storage_variant_records, id: primary_key_type do |t|
+ t.belongs_to :blob, null: false, index: false, type: foreign_key_type
+ t.string :variation_digest, null: false
+
+ t.index %i[blob_id variation_digest], name: :index_active_storage_variant_records_uniqueness, unique: true
+ t.foreign_key :active_storage_blobs, column: :blob_id
+ end
+ end
+
+ private
+
+ def primary_and_foreign_key_types
+ config = Rails.configuration.generators
+ setting = config.options[config.orm][:primary_key_type]
+ primary_key_type = setting || :primary_key
+ foreign_key_type = setting || :bigint
+ [primary_key_type, foreign_key_type]
+ end
+end
diff --git a/db/migrate/20230516180929_create_flows.rb b/db/migrate/20230516180929_create_flows.rb
new file mode 100644
index 000000000..61af8891a
--- /dev/null
+++ b/db/migrate/20230516180929_create_flows.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+class CreateFlows < ActiveRecord::Migration[7.0]
+ def change
+ create_table :flows do |t|
+ t.string :slug, null: false, index: { unique: true }
+ t.string :name, null: false
+ t.string :schema, null: false
+ t.string :fields, null: false
+
+ t.references :author, null: false, foreign_key: { to_table: :users }, index: true
+ t.references :account, null: false, foreign_key: true, index: true
+
+ t.datetime :deleted_at
+ t.timestamps
+ end
+ end
+end
diff --git a/db/migrate/20230519144036_create_submissions.rb b/db/migrate/20230519144036_create_submissions.rb
new file mode 100644
index 000000000..149e3d735
--- /dev/null
+++ b/db/migrate/20230519144036_create_submissions.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class CreateSubmissions < ActiveRecord::Migration[7.0]
+ def change
+ create_table :submissions do |t|
+ t.string :email, null: false, index: true
+ t.string :slug, null: false, index: { unique: true }
+ t.references :flow, null: false, foreign_key: true, index: true
+ t.string :values, null: false
+ t.string :ua
+ t.string :ip
+
+ t.datetime :sent_at
+ t.datetime :opened_at
+ t.datetime :completed_at
+ t.datetime :deleted_at
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/schema.rb b/db/schema.rb
new file mode 100644
index 000000000..8acf8f2a8
--- /dev/null
+++ b/db/schema.rb
@@ -0,0 +1,130 @@
+# This file is auto-generated from the current state of the database. Instead
+# of editing this file, please use the migrations feature of Active Record to
+# incrementally modify your database, and then regenerate this schema definition.
+#
+# This file is the source Rails uses to define your schema when running `bin/rails
+# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to
+# be faster and is potentially less error prone than running all of your
+# migrations from scratch. Old migrations may fail to apply correctly if those
+# migrations use external dependencies or application code.
+#
+# It's strongly recommended that you check this file into your version control system.
+
+ActiveRecord::Schema[7.0].define(version: 2023_05_19_144036) do
+ # These are extensions that must be enabled in order to support this database
+ enable_extension "plpgsql"
+
+ create_table "accounts", force: :cascade do |t|
+ t.string "name", null: false
+ t.datetime "created_at", null: false
+ t.datetime "updated_at", null: false
+ end
+
+ create_table "active_storage_attachments", force: :cascade do |t|
+ t.string "name", null: false
+ t.string "uuid", null: false
+ t.string "record_type", null: false
+ t.bigint "record_id", null: false
+ t.bigint "blob_id", null: false
+ t.datetime "created_at", null: false
+ t.index ["blob_id"], name: "index_active_storage_attachments_on_blob_id"
+ t.index ["record_type", "record_id", "name", "blob_id"], name: "index_active_storage_attachments_uniqueness", unique: true
+ t.index ["uuid"], name: "index_active_storage_attachments_on_uuid"
+ end
+
+ create_table "active_storage_blobs", force: :cascade do |t|
+ t.string "key", null: false
+ t.string "filename", null: false
+ t.string "content_type"
+ t.text "metadata"
+ t.string "service_name", null: false
+ t.bigint "byte_size", null: false
+ t.string "checksum"
+ t.datetime "created_at", null: false
+ t.index ["key"], name: "index_active_storage_blobs_on_key", unique: true
+ end
+
+ create_table "active_storage_variant_records", force: :cascade do |t|
+ t.bigint "blob_id", null: false
+ t.string "variation_digest", null: false
+ t.index ["blob_id", "variation_digest"], name: "index_active_storage_variant_records_uniqueness", unique: true
+ end
+
+ create_table "encrypted_configs", force: :cascade do |t|
+ t.bigint "account_id", null: false
+ t.string "key", null: false
+ t.text "value", null: false
+ t.datetime "created_at", null: false
+ t.datetime "updated_at", null: false
+ t.index ["account_id", "key"], name: "index_encrypted_configs_on_account_id_and_key", unique: true
+ t.index ["account_id"], name: "index_encrypted_configs_on_account_id"
+ end
+
+ create_table "flows", force: :cascade do |t|
+ t.string "slug", null: false
+ t.string "name", null: false
+ t.string "schema", null: false
+ t.string "fields", null: false
+ t.bigint "author_id", null: false
+ t.bigint "account_id", null: false
+ t.datetime "deleted_at"
+ t.datetime "created_at", null: false
+ t.datetime "updated_at", null: false
+ t.index ["account_id"], name: "index_flows_on_account_id"
+ t.index ["author_id"], name: "index_flows_on_author_id"
+ t.index ["slug"], name: "index_flows_on_slug", unique: true
+ end
+
+ create_table "submissions", force: :cascade do |t|
+ t.string "email", null: false
+ t.string "slug", null: false
+ t.bigint "flow_id", null: false
+ t.string "values", null: false
+ t.string "ua"
+ t.string "ip"
+ t.datetime "sent_at"
+ t.datetime "opened_at"
+ t.datetime "completed_at"
+ t.datetime "deleted_at"
+ t.datetime "created_at", null: false
+ t.datetime "updated_at", null: false
+ t.index ["email"], name: "index_submissions_on_email"
+ t.index ["flow_id"], name: "index_submissions_on_flow_id"
+ t.index ["slug"], name: "index_submissions_on_slug", unique: true
+ end
+
+ create_table "users", force: :cascade do |t|
+ t.string "first_name", null: false
+ t.string "last_name", null: false
+ t.string "email", null: false
+ t.string "role", null: false
+ t.string "encrypted_password", null: false
+ t.bigint "account_id", null: false
+ t.string "reset_password_token"
+ t.datetime "reset_password_sent_at"
+ t.datetime "remember_created_at"
+ t.integer "sign_in_count", default: 0, null: false
+ t.datetime "current_sign_in_at"
+ t.datetime "last_sign_in_at"
+ t.string "current_sign_in_ip"
+ t.string "last_sign_in_ip"
+ t.integer "failed_attempts", default: 0, null: false
+ t.string "unlock_token"
+ t.datetime "locked_at"
+ t.datetime "deleted_at"
+ t.datetime "created_at", null: false
+ t.datetime "updated_at", null: false
+ t.index ["account_id"], name: "index_users_on_account_id"
+ t.index ["email"], name: "index_users_on_email", unique: true
+ t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true
+ t.index ["unlock_token"], name: "index_users_on_unlock_token", unique: true
+ end
+
+ add_foreign_key "active_storage_attachments", "active_storage_blobs", column: "blob_id"
+ add_foreign_key "active_storage_variant_records", "active_storage_blobs", column: "blob_id"
+ add_foreign_key "encrypted_configs", "accounts"
+ add_foreign_key "flows", "accounts"
+ add_foreign_key "flows", "users", column: "author_id"
+ add_foreign_key "submissions", "flows"
+ add_foreign_key "users", "accounts"
+end
diff --git a/lib/action_mailer_configs_interceptor.rb b/lib/action_mailer_configs_interceptor.rb
new file mode 100644
index 000000000..c7706d48a
--- /dev/null
+++ b/lib/action_mailer_configs_interceptor.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module ActionMailerConfigsInterceptor
+ module_function
+
+ def delivering_email(message)
+ return message unless Rails.env.production?
+
+ email_configs = EncryptedConfig.find_by(key: EncryptedConfig::EMAIL_SMTP_KEY)
+
+ if email_configs
+ message.delivery_method(:smtp, user_name: email_configs.value['username'],
+ password: email_configs.value['password'],
+ address: email_configs.value['host'],
+ port: email_configs.value['port'],
+ tls: email_configs.value['port'].to_s == '465')
+
+ message.from = email_configs.value['from_email']
+ else
+ message.delivery_method(:test)
+ end
+
+ message
+ end
+end
diff --git a/lib/flows.rb b/lib/flows.rb
new file mode 100644
index 000000000..bac352d4f
--- /dev/null
+++ b/lib/flows.rb
@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Flows
+ module_function
+
+ def build_field_areas_index(flow)
+ hash = {}
+
+ flow.fields.each do |field|
+ (field['areas'] || []).each do |area|
+ hash[area['attachment_uuid']] ||= {}
+ acc = (hash[area['attachment_uuid']][area['page']] ||= [])
+
+ acc << { area:, field: }
+ end
+ end
+
+ hash
+ end
+end
diff --git a/lib/flows/process_document.rb b/lib/flows/process_document.rb
new file mode 100644
index 000000000..419872b9d
--- /dev/null
+++ b/lib/flows/process_document.rb
@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+module Flows
+ module ProcessDocument
+ DPI = 200
+ FORMAT = '.jpg'
+ ATTACHMENT_NAME = 'preview_images'
+
+ PDF_CONTENT_TYPE = 'application/pdf'
+ Q = 35
+ MAX_WIDTH = 1400
+
+ module_function
+
+ def call(attachment)
+ if attachment.content_type == PDF_CONTENT_TYPE
+ generate_pdf_preview_images(attachment)
+ elsif attachment.content_type.starts_with?('image/')
+ generate_preview_image(attachment)
+ end
+
+ attachment
+ end
+
+ def generate_preview_image(attachment)
+ binary = attachment.download
+
+ ActiveStorage::Attachment.where(name: ATTACHMENT_NAME, record: attachment).destroy_all
+
+ image = Vips::Image.new_from_buffer(binary, '')
+ image = image.resize(MAX_WIDTH / image.width.to_f)
+
+ io = StringIO.new(image.write_to_buffer(FORMAT, Q: Q))
+
+ ActiveStorage::Attachment.create!(
+ blob: ActiveStorage::Blob.create_and_upload!(
+ io:, filename: "0#{FORMAT}",
+ metadata: { analyzed: true, identified: true, width: image.width, height: image.height }
+ ),
+ name: ATTACHMENT_NAME,
+ record: attachment
+ )
+ end
+
+ def generate_pdf_preview_images(attachment)
+ binary = attachment.download
+
+ ActiveStorage::Attachment.where(name: ATTACHMENT_NAME, record: attachment).destroy_all
+
+ (0..).each do |page_number|
+ page = Vips::Image.new_from_buffer(binary, '', dpi: DPI, page: page_number)
+ page = page.resize(MAX_WIDTH / page.width.to_f)
+
+ io = StringIO.new(page.write_to_buffer(FORMAT, Q: Q))
+
+ ActiveStorage::Attachment.create!(
+ blob: ActiveStorage::Blob.create_and_upload!(
+ io:, filename: "#{page_number}#{FORMAT}",
+ metadata: { analyzed: true, identified: true, width: page.width, height: page.height }
+ ),
+ name: ATTACHMENT_NAME,
+ record: attachment
+ )
+ rescue Vips::Error
+ break
+ end
+ end
+ end
+end
diff --git a/lib/load_active_storage_configs.rb b/lib/load_active_storage_configs.rb
new file mode 100644
index 000000000..152955b3f
--- /dev/null
+++ b/lib/load_active_storage_configs.rb
@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module LoadActiveStorageConfigs
+ STORAGE_YML_PATH = Rails.root.join('config/storage.yml')
+
+ module_function
+
+ def call
+ reload unless loaded?
+ end
+
+ def loaded?
+ @loaded
+ end
+
+ def reload
+ encrypted_config = EncryptedConfig.find_by(key: EncryptedConfig::FILES_STORAGE_KEY)
+
+ return unless encrypted_config
+
+ service, configs = encrypted_config.value.values_at('service', 'configs')
+
+ service_configurations = ActiveSupport::ConfigurationFile.parse(STORAGE_YML_PATH)
+ service_configurations[service].merge!(configs) if configs.present?
+ service_configurations[service][:force_path_style] = true if configs&.dig('endpoint').present?
+
+ if service == 'google'
+ service_configurations[service][:credentials] = JSON.parse(configs.fetch('credentials', '{}'))
+ end
+
+ ActiveStorage::Blob.services = ActiveStorage::Service::Registry.new(service_configurations)
+ ActiveStorage::Blob.service = ActiveStorage::Blob.services.fetch(service.to_sym)
+ ensure
+ @loaded = true
+ end
+end
diff --git a/lib/submissions.rb b/lib/submissions.rb
new file mode 100644
index 000000000..e3e7cf1f5
--- /dev/null
+++ b/lib/submissions.rb
@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+module Submissions
+end
diff --git a/lib/submissions/generate_result_attachments.rb b/lib/submissions/generate_result_attachments.rb
new file mode 100644
index 000000000..92bc7d93b
--- /dev/null
+++ b/lib/submissions/generate_result_attachments.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Submissions
+ module GenerateResultAttachments
+ module_function
+
+ def call(submission)
+ zip_file = Tempfile.new
+ zip_stream = Zip::ZipOutputStream.open(zip_file)
+
+ submission.flow.schema.map do |item|
+ document = submission.flow.documents.find { |e| e.uuid == item['attachment_uuid'] }
+ field_area_index = Flows.build_field_areas_index(submission.flow)
+
+ document.open do |tempfile|
+ pdf = CombinePDF.load(tempfile.path)
+
+ pdf.pages.each_with_index do |page, index|
+ blocks = field_area_index.dig(document.uuid, index)
+
+ next if blocks.blank?
+
+ scale = page.page_size[2] / 1400.0
+
+ blocks.each do |block|
+ area, field = block.values_at(:area, :field)
+ page.textbox(submission.values[field['uuid']],
+ x: (area['x'] * scale) - 10,
+ y: page.page_size[2] - (area['y'] * scale) + 150,
+ width: area['w'] * scale,
+ height: area['h'] * scale)
+ end
+ end
+
+ string = pdf.to_pdf
+ io = StringIO.new(string)
+
+ zip_stream.put_next_entry("#{item['name']}.pdf")
+ zip_stream.write(string)
+
+ ActiveStorage::Attachment.create!(
+ blob: ActiveStorage::Blob.create_and_upload!(
+ io:, filename: "#{item['name']}.pdf"
+ ),
+ name: 'documents',
+ record: submission
+ )
+ end
+ end
+
+ zip_stream.close
+
+ submission.archive.attach(io: zip_file, filename: 'submission.zip')
+ end
+ end
+end
diff --git a/lib/tasks/.keep b/lib/tasks/.keep
new file mode 100644
index 000000000..e69de29bb
diff --git a/lib/tasks/auto_annotate_models.rake b/lib/tasks/auto_annotate_models.rake
new file mode 100644
index 000000000..d4cb58813
--- /dev/null
+++ b/lib/tasks/auto_annotate_models.rake
@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+if Rails.env.development?
+ require 'annotate'
+
+ task set_annotation_options: :environment do
+ Annotate.set_defaults(
+ 'active_admin' => 'false',
+ 'additional_file_patterns' => [],
+ 'routes' => 'false',
+ 'models' => 'true',
+ 'position_in_routes' => 'before',
+ 'position_in_class' => 'before',
+ 'position_in_test' => 'before',
+ 'position_in_fixture' => 'before',
+ 'position_in_factory' => 'before',
+ 'position_in_serializer' => 'before',
+ 'show_foreign_keys' => 'true',
+ 'show_complete_foreign_keys' => 'false',
+ 'show_indexes' => 'true',
+ 'simple_indexes' => 'false',
+ 'model_dir' => 'app/models',
+ 'root_dir' => '',
+ 'include_version' => 'false',
+ 'require' => '',
+ 'exclude_tests' => 'true',
+ 'exclude_fixtures' => 'true',
+ 'exclude_factories' => 'true',
+ 'exclude_serializers' => 'false',
+ 'exclude_scaffolds' => 'true',
+ 'exclude_controllers' => 'true',
+ 'exclude_helpers' => 'true',
+ 'exclude_sti_subclasses' => 'false',
+ 'ignore_model_sub_dir' => 'false',
+ 'ignore_columns' => nil,
+ 'ignore_routes' => nil,
+ 'ignore_unknown_models' => 'false',
+ 'hide_limit_column_types' => 'integer,bigint,boolean',
+ 'hide_default_column_types' => 'json,jsonb,hstore',
+ 'skip_on_db_migrate' => 'false',
+ 'format_bare' => 'true',
+ 'format_rdoc' => 'false',
+ 'format_yard' => 'false',
+ 'format_markdown' => 'false',
+ 'sort' => 'false',
+ 'force' => 'false',
+ 'frozen' => 'false',
+ 'classified_sort' => 'true',
+ 'trace' => 'false',
+ 'wrapper_open' => nil,
+ 'wrapper_close' => nil,
+ 'with_comment' => 'true'
+ )
+ end
+
+ Annotate.load_tasks
+end
diff --git a/log/.keep b/log/.keep
new file mode 100644
index 000000000..e69de29bb
diff --git a/package.json b/package.json
new file mode 100644
index 000000000..f1c999e98
--- /dev/null
+++ b/package.json
@@ -0,0 +1,62 @@
+{
+ "name": "docuseal",
+ "private": true,
+ "dependencies": {
+ "@babel/core": "7.21.8",
+ "@babel/plugin-transform-runtime": "7.21.4",
+ "@babel/preset-env": "7.21.5",
+ "@babel/runtime": "7.21.5",
+ "@github/catalyst": "^2.0.0-beta",
+ "@hotwired/turbo-rails": "^7.3.0",
+ "@rails/activestorage": "^7.0.4-3",
+ "@tailwindcss/forms": "^0.5.0",
+ "autoprefixer": "^10.4.14",
+ "babel-loader": "9.1.2",
+ "babel-plugin-dynamic-import-node": "^2.3.3",
+ "babel-plugin-macros": "^3.1.0",
+ "compression-webpack-plugin": "10.0.0",
+ "css-loader": "^6.7.3",
+ "css-minimizer-webpack-plugin": "^5.0.0",
+ "mini-css-extract-plugin": "^2.7.5",
+ "postcss": "^8.4.23",
+ "postcss-import": "^15.1.0",
+ "postcss-loader": "^7.3.0",
+ "sass": "^1.62.1",
+ "sass-loader": "^13.2.2",
+ "shakapacker": "6.6.0",
+ "signature_pad": "^4.1.5",
+ "tailwindcss": "^3.3.2",
+ "terser-webpack-plugin": "5.3.8",
+ "uuid": "^9.0.0",
+ "vue": "^3.3.2",
+ "vue-loader": "^17.1.1",
+ "webpack": "5.82.1",
+ "webpack-assets-manifest": "5",
+ "webpack-bundle-analyzer": "^4.7.0",
+ "webpack-cli": "5.1.1",
+ "webpack-dev-server": "^4.15.0",
+ "webpack-merge": "5"
+ },
+ "version": "0.1.0",
+ "scripts": {
+ "eslint": "./node_modules/eslint/bin/eslint.js \"app/javascript/**/*.{js,vue}\" --fix"
+ },
+ "babel": {
+ "presets": [
+ "./node_modules/shakapacker/package/babel/preset.js"
+ ]
+ },
+ "browserslist": [
+ "last 3 years"
+ ],
+ "devDependencies": {
+ "@babel/eslint-parser": "^7.21.8",
+ "babel-eslint": "^10.1.0",
+ "eslint": "^8.40.0",
+ "eslint-config-standard": "^17.0.0",
+ "eslint-plugin-import": "^2.26.0",
+ "eslint-plugin-n": "^15.7.0",
+ "eslint-plugin-promise": "^6.1.1",
+ "eslint-plugin-vue": "^9.12.0"
+ }
+}
diff --git a/postcss.config.js b/postcss.config.js
new file mode 100644
index 000000000..47244a199
--- /dev/null
+++ b/postcss.config.js
@@ -0,0 +1,8 @@
+module.exports = {
+ plugins: [
+ require('postcss-import'),
+ require('tailwindcss/nesting'),
+ require('tailwindcss'),
+ require('autoprefixer')
+ ]
+}
diff --git a/public/404.html b/public/404.html
new file mode 100644
index 000000000..2be3af26f
--- /dev/null
+++ b/public/404.html
@@ -0,0 +1,67 @@
+
+
+
+ The page you were looking for doesn't exist (404)
+
+
+
The page you were looking for doesn't exist.
+
You may have mistyped the address or the page may have moved.
+
+
If you are the application owner check the logs for more information.
+
The change you wanted was rejected (422)
+
+
+
The change you wanted was rejected.
+
Maybe you tried to change something you didn't have access to.
+
+
If you are the application owner check the logs for more information.
+
We're sorry, but something went wrong (500)
+
+
+
We're sorry, but something went wrong.
+
+
If you are the application owner check the logs for more information.
+