mirror of
https://github.com/hanzoai/sign.git
synced 2026-11-02 15:28:54 +00:00
zeekay
be1d26a502
The socket the app's pages call over (/zap) opened only for a session, so a recipient signing by their link, who has no account, could not reach the routes that sign a field or complete a document: every field they clicked failed with "An error occurred while signing the field". tRPC had served those as public procedures; the port to ZAP kept their bodies and lost the door. A connection from the app's own pages with no session now opens as anonymous and reaches only the routes tRPC served publicly, each authorised by the token it carries; every other route answers it 401 before its handler runs. The operation API still refuses a request without a token.
23 lines
857 B
TypeScript
23 lines
857 B
TypeScript
// esign ZAP RPC — the routes an anonymous connection may call.
|
|
|
|
/**
|
|
* The routes a connection without a session may call: the ones tRPC served as
|
|
* public procedures, each authorised by the token its input carries (a
|
|
* recipient's signing token, a direct template link). Each is written against
|
|
* ZapConnectionContext, so its body handles a null user. Every other route
|
|
* answers an anonymous connection 401.
|
|
*/
|
|
export const publicRoutes: ReadonlySet<string> = new Set([
|
|
'document.accessAuth.request2FAEmail',
|
|
'document.share',
|
|
'envelope.attachment.find',
|
|
'envelope.field.sign',
|
|
'envelope.item.getManyByToken',
|
|
'envelope.signingStatus',
|
|
'field.removeSignedFieldWithToken',
|
|
'field.signFieldWithToken',
|
|
'recipient.completeDocumentWithToken',
|
|
'recipient.rejectDocumentWithToken',
|
|
'template.createDocumentFromDirectTemplate',
|
|
]);
|