OpenSignLabs/OpenSign

Issue Description Every time I try to open OR download a completed document, I get a "Something went wrong, refreshing this page may solve this issue." error. I've rebooted, refreshed half a dozen times, cleared cache and cookies... I need this contract copy. Expected Behavior download or view of contract Current Behavior Nothing Steps to reproduce No response Screenshots of the issue(optional) No response Operating System [e.g. MacOS Sonoma 14.1, Windows 11] Windows 11 What browsers are you seeing the problem on? Chrome What version of OpenSign™ are you seeing this issue on? [e.g. 1.0.6] version: v2.41.2 What environment are you seeing the problem on? Production (app.opensignlabs.com) Please check the boxes that apply to this issue report. I have searched the existing issues & discussions to make sure that this is not a duplicate. Code of Conduct I agree to follow this project's Code of Conduct I have searched the existing issues & discussions to make sure that this is not a

Issue Description OpenSign Exposes a Hardcoded Parse Server Master Key Summary OpenSign publishes a Master Key in .env.local_dev: MASTER_KEY=XnAadwKxxByMr Source: .env.local_dev The backend passes MASTER_KEY directly to Parse Server: masterKey: process.env.MASTER_KEY, masterKeyIps: ['0.0.0.0/0', '::/0'], Source: index.js The published value can be supplied as X-Parse-Master-Key. A valid Parse Server Master Key bypasses application ACL and class-level permissions and provides privileged access to application data. Parse Server documents the Master Key as an override for ACL and class-level permission checks: Parse Server guide. Additional deployment defaults The Heroku application template provides another predictable Master Key: "MASTER_KEY": { "description": "A key that overrides all permissions. Keep this secret.", "value": "myMasterKey" } Source: app.json The App Engine template accepts a user-provided value but does not generate or require a strong one: MASTER_KEY: <your-master

Issue Description When first pulling and deploying OpenSign, browser access goes straight to login and does not allow me to /addadmin at all. I haven't been able to get the other fix solutions to this issue to work, so I'm hoping it's because I'm using Ubuntu Server 26.04. I'd really like to use OpenSign over DocuSeal due to having more self-hosted features avaiable. Expected Behavior Upon first access in the browser, I'm expecting to be taken to a signup page to create credentials. Current Behavior Upon first browser access, I am taken straight to the login screen. When I attempt to add /addadmin, /signup, or /register, the screen says that an admin already exists. When I check MongoDB, there is a _User DB available, but it's empty. /app and /api/app extensions do not work either. I have attempted to change the ports, URLs, leave the URLs alone — nothing seems to work. Steps to reproduce SSH into home server Install in dedicated ~/docker/opensign directory (editing the URL to the o

Issue Description No matter what I do, I cannot get this damn tool working, so I'm giving up on it. Wasted an entire day, including evening, trying to get it working. Farthest I got was the login page (as in it wasn't trying to let me create the first user) and dev console keeps saying (when loading the page): parse-DTHAhQYD.js:4 POST https://redacted.domain.com/api/app/functions/getlogobydomain 405 (Method Not Allowed) obviously changed the domain from the actual one I'm using I have been using multiple different docker methods and even kubernetes to try and get this working. And oh my god nothing works. A few times in Kubernetes I got to the point of the "create first user" page only to have a javascript error thrown once I click on the button to create the new user. I'm pretty sure the installation documentation is set up intentionally to fail. Expected Behavior No response Current Behavior No response Steps to reproduce No response Screenshots of the issue(optional) No response Op

Issue Description After promoting an existing self-hosted user to role "Admin" (UserRole field in contracts_Users), logging in triggers an "Additional Information" modal asking for Company and Job Title. Both fields are already correctly populated in MongoDB (contracts_Users.Company, contracts_Users.JobTitle), and the linked contracts_Organizations.Name / partners_Tenant.TenantName are also populated. Submitting the modal (with the fields filled in) throws uncaught exceptions in the client bundle and never proceeds - the user is completely locked out of the web GUI (login succeeds, but the app never gets past this modal). Console errors on submit: Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'message') at J (Login-CbVm_cSH.js:1:5399) at onClick (Login-CbVm_cSH.js:1) ... Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'replace') at J (Login-CbVm_cSH.js:1:5426) at onClick (Login-CbVm_cSH.js:1:12250) ... Network tab shows no f