- Ya
- 10 Juni 2026, 03:35 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 6e704a5
Implement the /api/esig/public/* signing API the kamo-signer app calls, turning the live signer from preview-stub into a working backend. - validate (recipient token -> signer session), session, consent, stepup/start+verify (email OTP), submit, decoder, delegate, document - Redis-backed signer sessions (X-Signer-Session), distinct from staff OTK - Document bytes via the real Img/MinIO pipeline (template imgId -> converted-PDF ImgDat -> MinIO), not the never-wired /api/imaging/blobs stub - PDFBox flatten: overlay field values + signature images at design coordinates, append E-SIGN/UETA audit certificate pages; signed PDF stored in MinIO under the envelope signedBlobId with recorded SHA-256 - Append-only EsignSignature audit rows + EsignFieldValue persistence - Emits **************** API-origin metering follows in #3/#4 - Branding resolved from Organization + OrgDomain for first-paint theming - OTKAuthFilter bypasses /api/esig/public (token-authed, not staff OTK) Additive only; existing /api/esig/templates/* untouched.