zeekay 3578254c60 Tie a webhook's eSign identity to its team as well as its URL, and follow no redirect with it ...

HANZO_WEBHOOKS entries are <team url>=<url>: another team pointing at a listed URL is posted as a stranger. A call made as eSign does not follow a redirect, so the token reaches the listed URL and nowhere else.

2026-10-20 18:21:45 -07:00

..

2fa

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

admin

fix: create documents and templates on a fresh database

2026-08-14 01:15:39 -07:00

ai

fix(pdf): tear a pdf.js document down through its loading task

2026-09-19 04:31:23 -07:00

auth

Sign in through Hanzo IAM only, and make accounts for invited people only

2026-10-16 01:52:24 -07:00

cert

Report the signing certificate missing when the signer would miss it

2026-10-20 12:05:09 -07:00

crypto

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

document

fix: send mail after the commit, not inside the transaction

2026-08-14 15:02:12 -07:00

document-data

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

document-meta

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

email

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

email-domain

fix: send mail after the commit, not inside the transaction

2026-08-14 15:02:12 -07:00

embedding-presign

Take an IAM token as the only bearer, and call out as eSign's own IAM identity

2026-10-20 18:04:07 -07:00

envelope

fix: create documents and templates on a fresh database

2026-08-14 01:15:39 -07:00

envelope-attachment

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

envelope-item

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

field

chore(lib): delete two queries on columns the schema no longer has

2026-09-19 04:53:29 -07:00

folder

fix(lint): drop assignments nothing reads

2026-09-19 05:04:46 -07:00

htmltopdf

fix(lint): drop disable comments for a rule typescript-eslint 8 removed

2026-09-19 05:00:55 -07:00

iam

Admit only an application IAM_APP_TEAMS names, for its one team

2026-10-20 18:14:18 -07:00

konva

fix: use cpu for field rendering (#2337)

2025-12-18 10:48:46 +11:00

license

fix(lint): drop assignments nothing reads

2026-09-19 05:04:46 -07:00

limits

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

organisation

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

pdf

fix(lint): drop assignments nothing reads

2026-09-19 05:04:46 -07:00

profile

fix(lint): drop assignments nothing reads

2026-09-19 05:04:46 -07:00

public-api

Post a webhook as eSign only to a URL HANZO_WEBHOOKS lists exactly

2026-10-20 18:18:40 -07:00

rate-limit

Sign in through Hanzo IAM only, and make accounts for invited people only

2026-10-16 01:52:24 -07:00

recipient

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

share

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

site-settings

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

team

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

telemetry

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

template

fix: send mail after the commit, not inside the transaction

2026-08-14 15:02:12 -07:00

user

Admit by one rule on every sign-in and every use of a credential

2026-10-16 06:51:56 -07:00

webhooks

Tie a webhook's eSign identity to its team as well as its URL, and follow no redirect with it

2026-10-20 18:21:45 -07:00

import.ts

feat: start a document from pasted content or a link

2026-08-14 02:50:07 -07:00