Relay Esign Bundle Laravel Package

• Add POST method for /preview endpoint to allow to pass user_text (annotations) to pdf-as through the request body.

• Remove the preview_image_resolution config option for qualified and advanced signatures. The preview image resolution can now be passed via the resolution query parameter of the preview API (in DPI, defaults to 72) and via the --resolution option of the dbp:relay:esign:preview command (in DPI, defaults to 72).
• Remove the width query parameter of the preview API in favor of the resolution query parameter.
• Fix leaking the existence of unauthorized profiles in the preview endpoint

• Restore the pre-0.5 behavior for omitted signature block positioning values: PDF-AS profile defaults are used again instead of explicitly sending automatic placement/zero values from the bundle.

• Remove config parameters display_name_en and display_name_de
• Add Resources/translations directory for storing translations for the display name of the profiles

• Add config parameter language to qualified and advanced signatures which indicates the language of the text

• Add config parameter preview_image_resolution to qualified signatures which controls the resolution of the generated signature preview image
• Add config parameter allow_annotations to qualified signatures which indicates if the annotations are allowed or not
• Add config parameter allow_manual_positioning to qualified signatures which indicates if the manual positioning of the signature is allowed or not
• Add config parameter display_name_de to qualified signatures which is the german display name of the profile (for the frontend)
• Add config parameter display_name_en to qualified signatures which is the english display name of the profile (for the frontend)
• Add config option invisible to qualified signatures that indicates whether the signature is visible or not

• Add config parameter preview_image_resolution to advanced signatures which controls the resolution of the generated signature preview image

• Rename /esign/preview/{identifier} to /esign/previews/{identifier}
• Add config option invisible to advanced signatures that indicates whether the signature is visible or not

• /esign/preview/{identifier} generates preview images now on request instead of serving them from a cache
• /esign/profiles returns translations for the display name of the profiles

• Add new endpoint /esign/profiles that lists all available signing profiles for a given signature type
• Add new endpoint /esign/preview/{identifier} that generates a preview of the signature block for a given profile

• batch API: error out if more than 10 documents are passed, and in case they have different user_text/visibility settings. Both things are currently not working with pdf-as.
• Enable the batch API by default.

• Add more translations for additional profiles
• Add possibility to change styling of name in signature through config option name_table

• Remove date table and add date into system table instead

• Add optional separator between system and user content in the signature block, which can be configured via the separator config parameter.

• Add config parameters system_text, which mirrors user_text but is used for system content instead of user added content.

• Added three new health checks for pdf-as. Checks if endpoints are accessible, signing works and all referenced profiles exist.

• The deprecated callback_url and error_callback_url options in the bundle config have been removed. The callback handling is now handled by the bundle itself. In case pdf-as-web has URL whitelisting enabled make sure that the bundle provided endpoints are allowed.
• New experimental batch signing API, not enabled by default
• The signing parameters w/r/p have been renamed to width/rotation/page, the old names still work as before.
• docs: add examples for the qualified signature flow
• For the qualified flow the identifier format for fetching the document has changed, though this format was never documented to begin with.

• The frontend callback message gained a new code field, which replaces the sessionId field, which is now deprecated. Pass the code value to the API endpoints instead of the sessionId value.
• (potential API break) The CLI signing commands now take multiple input and output paths. Instead of passing in.pdf out.pdf you now have to pass in.pdf -o out.pdf. You can also pass multiple PDFs at once, for example in.pdf in2.pdf -o out.pdf -o out2.pdf, to sign multiple documents. They will be matched by the order they are passed. Note that the same signing parameters are used for all passed documents.

• Add support for zbateson/mail-mime-parser v4

• Dependency cleanups

• Add support for Symfony 7.4

• Add API parameter invisible to create invisible signatures via the API.
• Add dbp:relay:esign:preview CLI command for generating signature block previews.

• Add support for PHP 8.5

• Add CLI-only option for creating invisible signatures for all profiles.
• Drop support for api-platform <4.1

• Drop support for PHP 8.1
• Drop support for Psalm
• Add support for api-platform 4.1+, drop support for <3.4

• Fix a regression where signing profiles without user text configuration would fail.

• The CLI commands gained a new --user-text option for specifying custom user text to be included in the signature block
• The CLI commands gained a new --user-image-path option for passing a path to a PNG file for overriding the signature block image

Note: This release only contains some breaking changes for the configuration.

• config: Rework the structure of the user_text config:
  • user_text_table -> user_text.target_table
  • user_text_row -> user_text.target_row
  • user_text_attach_parent -> user_text.attach.parent_table
  • user_text_attach_child -> user_text.attach.child_table
  • user_text_attach_row -> user_text.attach.parent_row
• config: profile names across both the advanced and qualified signature flows are now required to be unique.
• authz: new authorization config using authz expressions and authz attributes. The old Symfony role based system is still supported and works as before. See the docs for more information.

• Update to psalm v5

• Drop support for PHP 7.4/8.0

• Drop support for PHP 7.3

• Remove embedded json-ld context from the signature responses.

• Port to the new api-platform metadata system. No user visible changes.

• Update to api-platform v2.7

• tests: don't fail if symfony/dotenv is installed

• Fix running under phpstan v1 for integration tests pruposes

• Drop support for api-platform v2
• Drop support for Symfony v5
• Fix some endpoints in the API docs not being hidden if the experimental signature verification isn't enabled.
• Support for PHP 8.4
• Update to phpstan v2

• Update core

• Fix an assertion error when running the unit tests

• Port to PHPUnit 10
• Add support for zbateson/mail-mime-parser v3
• Add support for api-platform 3.3
• Port from doctrine annotations to PHP attributes

• Add support for api-platform 3.2

• Some preparations for api-platform v3
• docs: minor updates for the Python example

• Add support for Symfony 6

• dev: replace abandoned composer-git-hooks with captainhook. Run vendor/bin/captainhook install -f to replace the old hooks with the new ones on an existing checkout.

• Improved documentation on signature parameters and signature block positioning.
• Added health checks that check if the configured pdf-as-web instances are reachable and their SOAP interfaces are available.
• Show the duration of the signature operations in the Symfony profiler.
• Support for PHP 8.2

Added:

• A new dbp:relay:esign:sign:qualified Symfony command for creating a qualified signature from the CLI.
• A new dbp:relay:esign:sign:advanced Symfony command for creating an advanced signature from the CLI.

Deprecated:

• The callback_url and error_callback_url options are now deprecated. The callback pages are now provided by this bundle and exposed via the API server if the the options aren't set.

Breaking:

• Setting a "profile" when creating a qualified signature is now mandatory.
• Switch all API paths from "snake_case" to "kebap-case" to match other bundles.

• Support for PHP 8.0/8.1
• Fixed some deprecations with Symfony 5.4