- Shipped
- June 10, 2026 at 3:35 AM UTC
- Author
- Kamo
- Commit
- 6e704a5
Implement the /api/esig/public/* signing API the kamo-signer app calls, turning the live signer from preview-stub into a working backend. - validate (recipient token -> signer session), session, consent, stepup/start+verify (email OTP), submit, decoder, delegate, document - Redis-backed signer sessions (X-Signer-Session), distinct from staff OTK - Document bytes via the real Img/MinIO pipeline (template imgId -> converted-PDF ImgDat -> MinIO), not the never-wired /api/imaging/blobs stub - PDFBox flatten: overlay field values + signature images at design coordinates, append E-SIGN/UETA audit certificate pages; signed PDF stored in MinIO under the envelope signedBlobId with recorded SHA-256 - Append-only EsignSignature audit rows + EsignFieldValue persistence - Emits **************** API-origin metering follows in #3/#4 - Branding resolved from Organization + OrgDomain for first-paint theming - OTKAuthFilter bypasses /api/esig/public (token-authed, not staff OTK) Additive only; existing /api/esig/templates/* untouched.