Merge pull request #1396 from OpenSignLabs/validation

feat: draft template api

apps/OpenSign/src/App.js

@@ -35,6 +35,7 @@ const GenerateToken = lazy(() => import("./pages/GenerateToken"));
 const Webhook = lazy(() => import("./pages/Webhook"));
 const AddAdmin = lazy(() => import("./pages/AddAdmin"));
 const UpdateExistUserAdmin = lazy(() => import("./pages/UpdateExistUserAdmin"));
+const DraftTemplate = lazy(() => import("./pages/DraftTemplate"));
 
 pdfjs.GlobalWorkerOptions.workerSrc = `//unpkg.com/pdfjs-dist@${pdfjs.version}/legacy/build/pdf.worker.min.mjs`;
 const AppLoader = () => {
@@ -200,6 +201,10 @@ function App() {
               <Route path="/users" element={<UserList />} />
             </Route>
             <Route path="/sso" element={<SSOVerify />} />
+            <Route
+              path="/drafttemplate/:jwttoken"
+              element={<DraftTemplate />}
+            />
             <Route path="*" element={<PageNotFound />} />
           </Routes>
         </BrowserRouter>

apps/OpenSign/src/components/BulkSendUi.js

@@ -69,7 +69,21 @@ const BulkSendUi = (props) => {
         if (subscription?.plan === "freeplan") {
           setIsFreePlan(true);
         }
-        const resCredits = await Parse.Cloud.run("allowedcredits");
+        const token = props.jwttoken
+          ? { jwttoken: props.jwttoken }
+          : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+        const axiosres = await axios.post(
+          `${localStorage.getItem("baseUrl")}functions/allowedcredits`,
+          {},
+          {
+            headers: {
+              "Content-Type": "application/json",
+              "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
+              ...token
+            }
+          }
+        );
+        const resCredits = axiosres.data && axiosres.data.result;
         if (resCredits) {
           const allowedcredits = resCredits?.allowedcredits || 0;
           const addoncredits = resCredits?.addoncredits || 0;
@@ -81,7 +95,7 @@ const BulkSendUi = (props) => {
           }
           setAmount((obj) => ({ ...obj, totalcredits: totalcredits }));
         }
-        const getPlaceholder = props.item?.Placeholders;
+        const getPlaceholder = props?.Placeholders;
         const checkIsSignatureExistt = getPlaceholder?.every((placeholderObj) =>
           placeholderObj?.placeHolder?.some((holder) =>
             holder?.pos?.some((posItem) => posItem?.type === "signature")
@@ -97,7 +111,7 @@ const BulkSendUi = (props) => {
     } else {
       setIsBulkAvailable(true);
       setAdmin((obj) => ({ ...obj, isAdmin: true }));
-      const getPlaceholder = props.item?.Placeholders;
+      const getPlaceholder = props?.Placeholders;
       const checkIsSignatureExistt = getPlaceholder?.every((placeholderObj) =>
         placeholderObj?.placeHolder?.some((holder) =>
           holder?.pos?.some((posItem) => posItem?.type === "signature")
@@ -194,7 +208,7 @@ const BulkSendUi = (props) => {
     setIsSubmit(true);
 
     // Create a copy of Placeholders array from props.item
-    let Placeholders = [...props.item.Placeholders];
+    let Placeholders = [...props.Placeholders];
     // Initialize an empty array to store updated documents
     let Documents = [];
     // Loop through each form
@@ -251,12 +265,16 @@ const BulkSendUi = (props) => {
   };
 
   const batchQuery = async (Documents) => {
-    const serverUrl = localStorage.getItem("baseUrl");
-    const functionsUrl = `${serverUrl}functions/batchdocuments`;
+    const token = props.jwttoken
+      ? { jwttoken: props.jwttoken }
+      : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+    const functionsUrl = `${localStorage.getItem(
+      "baseUrl"
+    )}functions/batchdocuments`;
     const headers = {
       "Content-Type": "application/json",
       "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
-      sessionToken: localStorage.getItem("accesstoken")
+      ...token
     };
     const params = { Documents: JSON.stringify(Documents) };
     try {
@@ -362,6 +380,7 @@ const BulkSendUi = (props) => {
                                           fieldIndex
                                         )
                                       }
+                                      jwttoken={props?.jwttoken}
                                     />
                                   </div>
                                 ))}

apps/OpenSign/src/components/shared/fields/SelectSigners.js

@@ -1,7 +1,7 @@
 import React, { useState } from "react";
-import Parse from "parse";
 import AsyncSelect from "react-select/async";
 import { useTranslation } from "react-i18next";
+import axios from "axios";
 
 const SelectSigners = (props) => {
   const { t } = useTranslation();
@@ -31,17 +31,19 @@ const SelectSigners = (props) => {
 
   const loadOptions = async (inputValue) => {
     try {
-      const currentUser = Parse.User.current();
-      const contactbook = new Parse.Query("contracts_Contactbook");
-      contactbook.equalTo(
-        "CreatedBy",
-        Parse.User.createWithoutData(currentUser.id)
-      );
-      if (inputValue.length > 1) {
-        contactbook.matches("Name", new RegExp(inputValue, "i"));
-      }
-      contactbook.notEqualTo("IsDeleted", true);
-      const contactRes = await contactbook.find();
+      const baseURL = localStorage.getItem("baseUrl");
+      const url = `${baseURL}functions/getsigners`;
+      const token = props?.jwttoken
+        ? { jwttoken: props?.jwttoken }
+        : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+      const headers = {
+        "Content-Type": "application/json",
+        "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
+        ...token
+      };
+      const search = inputValue;
+      const axiosRes = await axios.post(url, { search }, { headers });
+      const contactRes = axiosRes?.data?.result || [];
       if (contactRes) {
         const res = JSON.parse(JSON.stringify(contactRes));
         //compareArrays is a function where compare between two array (total signersList and dcument signers list)

apps/OpenSign/src/components/shared/fields/SuggestionInput.js

@@ -25,7 +25,7 @@ const SuggestionInput = (props) => {
       if (timer) clearTimeout(timer);
       timer = setTimeout(() => {
         (async () => {
-          const res = await findContact(inputValue);
+          const res = await findContact(inputValue, props.jwttoken);
           if (res?.length > 0) {
             setSuggestions(res);
             setShowSuggestions(true);
@@ -37,6 +37,7 @@ const SuggestionInput = (props) => {
       }, 1000);
     }
     return () => clearTimeout(timer);
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [inputValue]);
 
   const handleInputChange = async (e) => {

apps/OpenSign/src/constant/Utils.js

@@ -34,7 +34,8 @@ export async function fetchSubscription(
   extUserId,
   contactObjId,
   isGuestSign = false,
-  isPublic = false
+  isPublic = false,
+  jwtToken
 ) {
   try {
     const Extand_Class = localStorage.getItem("Extand_Class");
@@ -48,10 +49,13 @@ export async function fetchSubscription(
     }
     const baseURL = localStorage.getItem("baseUrl");
     const url = `${baseURL}functions/getsubscriptions`;
+    const token = jwtToken
+      ? { jwttoken: jwtToken }
+      : { sessionToken: localStorage.getItem("accesstoken") };
     const headers = {
       "Content-Type": "application/json",
       "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
-      sessionToken: localStorage.getItem("accesstoken")
+      ...token
     };
     const params = isGuestSign
       ? { contactId: contactObjId }
@@ -226,12 +230,25 @@ export const pdfNewWidthFun = (divRef) => {
 };
 
 //`contractUsers` function is used to get contract_User details
-export const contractUsers = async () => {
+export const contractUsers = async (jwttoken) => {
   try {
-    const userDetails = await Parse.Cloud.run("getUserDetails");
+    const url = `${localStorage.getItem("baseUrl")}functions/getUserDetails`;
+    const parseAppId = localStorage.getItem("parseAppId");
+    const accesstoken = localStorage.getItem("accesstoken");
+    const token = jwttoken
+      ? { jwttoken: jwttoken }
+      : { "X-Parse-Session-Token": accesstoken };
+    const headers = {
+      headers: {
+        "Content-Type": "application/json",
+        "X-Parse-Application-Id": parseAppId,
+        ...token
+      }
+    };
+    const userDetails = await axios.post(url, {}, headers);
     let data = [];
-    if (userDetails) {
-      const json = JSON.parse(JSON.stringify(userDetails));
+    if (userDetails?.data?.result) {
+      const json = JSON.parse(JSON.stringify(userDetails.data.result));
       data.push(json);
     }
     return data;
@@ -1762,14 +1779,17 @@ export const contactBook = async (objectId) => {
 };
 
 //function for getting document details from contract_Documents class
-export const contractDocument = async (documentId) => {
+export const contractDocument = async (documentId, JwtToken) => {
   const data = { docId: documentId };
+  const token = JwtToken
+    ? { jwtToken: JwtToken }
+    : { sessionToken: localStorage.getItem("accesstoken") };
   const documentDeatils = await axios
     .post(`${localStorage.getItem("baseUrl")}functions/getDocument`, data, {
       headers: {
         "Content-Type": "application/json",
         "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
-        sessionToken: localStorage.getItem("accesstoken")
+        ...token
       }
     })
     .then((Listdata) => {
@@ -1969,20 +1989,28 @@ export const getAppLogo = async () => {
   }
 };
 
-export const getTenantDetails = async (objectId) => {
+export const getTenantDetails = async (objectId, jwttoken) => {
   try {
-    const tenantCreditsQuery = new Parse.Query("partners_Tenant");
-    tenantCreditsQuery.equalTo("UserId", {
-      __type: "Pointer",
-      className: "_User",
-      objectId: objectId
+    const url = `${localStorage.getItem("baseUrl")}functions/gettenant`;
+    const parseAppId = localStorage.getItem("parseAppId");
+    const accesstoken = localStorage.getItem("accesstoken");
+    const token = jwttoken
+      ? { jwttoken: jwttoken }
+      : { "X-Parse-Session-Token": accesstoken };
+    const data = jwttoken ? {} : { userId: objectId };
+    const res = await axios.post(url, data, {
+      headers: {
+        "Content-Type": "application/json",
+        "X-Parse-Application-Id": parseAppId,
+        ...token
+      }
     });
-    const res = await tenantCreditsQuery.first();
     if (res) {
-      const updateRes = JSON.parse(JSON.stringify(res));
+      const updateRes = JSON.parse(JSON.stringify(res.data.result));
       return updateRes;
     }
-  } catch (e) {
+  } catch (err) {
+    console.log("err in gettenant", err);
     return "user does not exist!";
   }
 };
@@ -2231,18 +2259,21 @@ export const handleDownloadCertificate = async (
     }
   }
 };
-export async function findContact(value) {
+export async function findContact(value, jwttoken) {
   try {
-    const currentUser = Parse.User.current();
-    const contactbook = new Parse.Query("contracts_Contactbook");
-    contactbook.equalTo(
-      "CreatedBy",
-      Parse.User.createWithoutData(currentUser.id)
-    );
-    contactbook.notEqualTo("IsDeleted", true);
-    contactbook.matches("Email", new RegExp(value, "i"));
-
-    const contactRes = await contactbook.find();
+    const baseURL = localStorage.getItem("baseUrl");
+    const url = `${baseURL}functions/getsigners`;
+    const token = jwttoken
+      ? { jwttoken: jwttoken }
+      : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
+      ...token
+    };
+    const searchEmail = value;
+    const axiosRes = await axios.post(url, { searchEmail }, { headers });
+    const contactRes = axiosRes?.data?.result || [];
     if (contactRes) {
       const res = JSON.parse(JSON.stringify(contactRes));
       return res;

apps/OpenSign/src/pages/PdfRequestFiles.js

@@ -132,12 +132,10 @@ function PdfRequestFiles(props) {
   const [publicRes, setPublicRes] = useState({});
   const [documentId, setDocumentId] = useState("");
   const [isPublicContact, setIsPublicContact] = useState(false);
-  const [pdfArrayBuffer, setPdfArrayBuffer] = useState("");
   const [plancode, setPlanCode] = useState("");
   const isHeader = useSelector((state) => state.showHeader);
   const divRef = useRef(null);
   const [isDownloadModal, setIsDownloadModal] = useState(false);
-
   const isMobile = window.innerWidth < 767;
 
   let isGuestSignFlow = false;
@@ -323,8 +321,6 @@ function PdfRequestFiles(props) {
             const arrayBuffer = await convertPdfArrayBuffer(url);
             if (arrayBuffer === "Error") {
               setHandleError(t("something-went-wrong-mssg"));
-            } else {
-              setPdfArrayBuffer(arrayBuffer);
             }
           } else {
             setHandleError(t("something-went-wrong-mssg"));
@@ -408,8 +404,6 @@ function PdfRequestFiles(props) {
           const arrayBuffer = await convertPdfArrayBuffer(url);
           if (arrayBuffer === "Error") {
             setHandleError(t("something-went-wrong-mssg"));
-          } else {
-            setPdfArrayBuffer(arrayBuffer);
           }
         } else {
           setHandleError(t("something-went-wrong-mssg"));

apps/OpenSign/src/primitives/AddContact.js

@@ -1,7 +1,8 @@
 import React, { useState, useEffect } from "react";
-import Parse from "parse";
 import Loader from "./Loader";
 import { useTranslation } from "react-i18next";
+import axios from "axios";
+import { getTenantDetails } from "../constant/Utils";
 const AddContact = (props) => {
   const { t } = useTranslation();
   const [name, setName] = useState("");
@@ -12,6 +13,7 @@ const AddContact = (props) => {
   const [isUserExist, setIsUserExist] = useState(false);
   useEffect(() => {
     checkUserExist();
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
   // Load user details from localStorage when the component mounts
   useEffect(() => {
@@ -26,19 +28,24 @@ const AddContact = (props) => {
   }, [addYourself]);
 
   const checkUserExist = async () => {
-    const user = Parse.User.current();
     try {
-      const query = new Parse.Query("contracts_Contactbook");
-      query.equalTo("CreatedBy", user);
-      query.notEqualTo("IsDeleted", true);
-      query.equalTo("Email", user.getEmail());
-      const res = await query.first();
-      // console.log(res);
-      if (!res) {
+      const baseURL = localStorage.getItem("baseUrl");
+      const url = `${baseURL}functions/isuserincontactbook`;
+      const token = props?.jwttoken
+        ? { jwttoken: props?.jwttoken }
+        : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+      const headers = {
+        "Content-Type": "application/json",
+        "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
+        ...token
+      };
+      const axiosRes = await axios.post(url, {}, { headers });
+      const contactRes = axiosRes?.data?.result || {};
+      if (!contactRes?.objectId) {
         setIsUserExist(true);
       }
     } catch (err) {
-      console.log("err", err);
+      console.log("err ", err);
     }
   };
   // Define a function to handle form submission
@@ -46,123 +53,51 @@ const AddContact = (props) => {
     e.preventDefault();
     e.stopPropagation();
     setIsLoader(true);
-    if (localStorage.getItem("TenantId")) {
+    const user = JSON.parse(
+      localStorage.getItem(
+        `Parse/${localStorage.getItem("parseAppId")}/currentUser`
+      )
+    );
+    const userId = user?.objectId || "";
+    const tenantDetails = await getTenantDetails(userId, props.jwttoken);
+    console.log("tenantDetails", tenantDetails);
+    const tenantId = tenantDetails?.objectId || "";
+    if (tenantId) {
       try {
-        const user = Parse.User.current();
-        const query = new Parse.Query("contracts_Contactbook");
-        query.equalTo("CreatedBy", user);
-        query.notEqualTo("IsDeleted", true);
-        query.equalTo("Email", email);
-        const res = await query.first();
-        if (!res) {
-          const contactQuery = new Parse.Object("contracts_Contactbook");
-          contactQuery.set("Name", name);
-          if (phone) {
-            contactQuery.set("Phone", phone);
+        const baseURL = localStorage.getItem("baseUrl");
+        const url = `${baseURL}functions/savecontact`;
+        const token = props?.jwttoken
+          ? { jwttoken: props?.jwttoken }
+          : { "X-Parse-Session-Token": localStorage.getItem("accesstoken") };
+        const data = { name, email, phone, tenantId };
+        const headers = {
+          "Content-Type": "application/json",
+          "X-Parse-Application-Id": localStorage.getItem("parseAppId"),
+          ...token
+        };
+        const axiosRes = await axios.post(url, data, { headers });
+        const contactRes = axiosRes?.data?.result || {};
+        if (contactRes?.objectId) {
+          console.log("contactRes ", contactRes);
+          props.details(contactRes);
+          if (props.closePopup) {
+            props.closePopup();
+            setIsLoader(false);
+            // Reset the form fields
+            setAddYourself(false);
+            setName("");
+            setPhone("");
+            setEmail("");
           }
-          contactQuery.set("Email", email);
-          contactQuery.set("UserRole", "contracts_Guest");
-
-          if (localStorage.getItem("TenantId")) {
-            contactQuery.set("TenantId", {
-              __type: "Pointer",
-              className: "partners_Tenant",
-              objectId: localStorage.getItem("TenantId")
-            });
-          }
-
-          try {
-            const _users = Parse.Object.extend("User");
-            const _user = new _users();
-            _user.set("name", name);
-            _user.set("username", email);
-            _user.set("email", email);
-            _user.set("password", email);
-            if (phone) {
-              _user.set("phone", phone);
-            }
-
-            const user = await _user.save();
-            if (user) {
-              const currentUser = Parse.User.current();
-              contactQuery.set(
-                "CreatedBy",
-                Parse.User.createWithoutData(currentUser.id)
-              );
-
-              contactQuery.set("UserId", user);
-              const acl = new Parse.ACL();
-              acl.setPublicReadAccess(true);
-              acl.setPublicWriteAccess(true);
-              acl.setReadAccess(currentUser.id, true);
-              acl.setWriteAccess(currentUser.id, true);
-
-              contactQuery.setACL(acl);
-
-              const res = await contactQuery.save();
-
-              const parseData = JSON.parse(JSON.stringify(res));
-              props.details(parseData);
-              if (props.closePopup) {
-                props.closePopup();
-              }
-
-              setIsLoader(false);
-              // Reset the form fields
-              setAddYourself(false);
-              setName("");
-              setPhone("");
-              setEmail("");
-            }
-          } catch (err) {
-            console.log("err ", err);
-            if (err.code === 202) {
-              const params = { email: email };
-              const userRes = await Parse.Cloud.run("getUserId", params);
-              const currentUser = Parse.User.current();
-              contactQuery.set(
-                "CreatedBy",
-                Parse.User.createWithoutData(currentUser.id)
-              );
-
-              contactQuery.set("UserId", {
-                __type: "Pointer",
-                className: "_User",
-                objectId: userRes.id
-              });
-              const acl = new Parse.ACL();
-              acl.setPublicReadAccess(true);
-              acl.setPublicWriteAccess(true);
-              acl.setReadAccess(currentUser.id, true);
-              acl.setWriteAccess(currentUser.id, true);
-
-              contactQuery.setACL(acl);
-              const res = await contactQuery.save();
-
-              const parseData = JSON.parse(JSON.stringify(res));
-              if (props.details) {
-                props.details(parseData);
-              }
-
-              if (props.closePopup) {
-                props.closePopup();
-              }
-              setIsLoader(false);
-              // Reset the form fields
-              setAddYourself(false);
-              setName("");
-              setPhone("");
-              setEmail("");
-            }
-          }
-        } else {
-          alert(t("add-signer-alert"));
-          setIsLoader(false);
         }
       } catch (err) {
-        // console.log("err", err);
+        console.log("Err", err);
         setIsLoader(false);
-        alert(t("something-went-wrong-mssg"));
+        if (err?.response?.data?.error?.includes("already exists")) {
+          alert(t("add-signer-alert"));
+        } else {
+          alert(t("something-went-wrong-mssg"));
+        }
       }
     } else {
       setIsLoader(false);

apps/OpenSign/src/primitives/LinkUserModal.js

@@ -19,11 +19,16 @@ const LinkUserModal = (props) => {
         details={props.handleAddUser}
         closePopup={props.closePopup}
         signersData={props?.signersData}
+        jwttoken={props?.jwttoken}
       />
       <div className="op-divider text-base-content mx-[25%] my-1">
         {t("or")}
       </div>
-      <AddContact details={props.handleAddUser} closePopup={props.closePopup} />
+      <AddContact
+        details={props.handleAddUser}
+        closePopup={props.closePopup}
+        jwttoken={props?.jwttoken}
+      />
     </ModalUi>
   );
 };

apps/OpenSignServer/Utils.js

@@ -234,3 +234,7 @@ export const planCredits = {
   'teams-monthly': 100,
   'teams-yearly': 500,
 };
+
+export function parseJwt(token) {
+  return JSON.parse(Buffer.from(token.split('.')[1], 'base64').toString());
+}

apps/OpenSignServer/cloud/customRoute/v1/apiV1.js

@@ -9,7 +9,6 @@ import getDocument from './routes/getDocument.js';
 import getContact from './routes/getContact.js';
 import deleteContact from './routes/deleteContact.js';
 import getContactList from './routes/getContactList.js';
-import draftDocument from './routes/draftDocument.js';
 import getTemplate from './routes/getTemplate.js';
 import deletedTemplate from './routes/deleteTemplate.js';
 import getTemplatetList from './routes/getTemplateList.js';
@@ -30,6 +29,7 @@ import createFolder from './routes/createFolder.js';
 import updateFolder from './routes/updateFolder.js';
 import getFolderList from './routes/getFolderList.js';
 import deleteFolder from './routes/deleteFolder.js';
+import draftTemplate from './routes/draftTemplate.js';
 dotenv.config();
 const storage = multer.memoryStorage();
 const upload = multer({ storage: storage });
@@ -59,9 +59,6 @@ app.post('/createdocumentwithbinary', upload.array('file', 1), createDocumentwit
 // create Document with co-ordinate
 app.post('/createdocument', createDocumentwithCoordinate);
 
-// create Document with base64 without placeholder
-app.post('/draftdocument', draftDocument);
-
 // create Document with templateId
 app.post('/createdocument/:template_id', createDocumentWithTemplate);
 
@@ -77,6 +74,9 @@ app.delete('/document/:document_id', deleteDocument);
 // get all types of documents on the basis of doctype
 app.get('/documentlist/:doctype', getDocumentList);
 
+// create draft template with file base64
+app.post('/drafttemplate', draftTemplate);
+
 // create Template with co-ordinate
 app.post('/createtemplate', createTemplatewithCoordinate);
 

apps/OpenSignServer/cloud/customRoute/v1/routes/CreateDocumentWithTemplate.js

@@ -49,7 +49,7 @@ export default async function createDocumentWithTemplate(request, response) {
   const send_email = request.body.send_email;
   const email_subject = request.body.email_subject;
   const email_body = request.body.email_body;
-  const sendInOrder = request.body.sendInOrder || false;
+  const sendInOrder = request.body.sendInOrder || true;
   const TimeToCompleteDays = request.body.timeToCompleteDays || 15;
 
   try {

apps/OpenSignServer/cloud/customRoute/v1/routes/createDocumentwithCoordinate.js

@@ -62,7 +62,7 @@ export default async function createDocumentwithCoordinate(request, response) {
   const fileData = request.files?.[0] ? request.files[0].buffer : null;
   const email_subject = request.body.email_subject;
   const email_body = request.body.email_body;
-  const sendInOrder = request.body.sendInOrder || false;
+  const sendInOrder = request.body.sendInOrder || true;
   const TimeToCompleteDays = request.body.timeToCompleteDays || 15;
   const IsEnableOTP = request.body?.enableOTP === true ? true : false;
   const isTourEnabled = request.body?.enableTour || false;

apps/OpenSignServer/cloud/customRoute/v1/routes/createTemplatewithCoordinate.js

@@ -17,7 +17,7 @@ export default async function createTemplatewithCoordinate(request, response) {
   const folderId = request.body.folderId;
   const base64File = request.body.file;
   const fileData = request.files?.[0] ? request.files[0].buffer : null;
-  const SendinOrder = request.body.sendInOrder || false;
+  const SendinOrder = request.body.sendInOrder || true;
   const isEnableOTP = request.body?.enableOTP === true ? true : false;
   const isTourEnabled = request.body?.enableTour || false;
 

apps/OpenSignServer/cloud/customRoute/v1/routes/draftDocument.js

@@ -1,168 +0,0 @@
-import axios from 'axios';
-import { customAPIurl, saveFileUsage } from '../../../../Utils.js';
-
-// const randomId = () => Math.floor(1000 + Math.random() * 9000);
-export default async function draftDocument(request, response) {
-  const name = request.body.title;
-  const note = request.body.note;
-  const description = request.body.description;
-  const signers = request.body.signers;
-  const folderId = request.body.folderId;
-  const base64File = request.body.file;
-  const send_email = request.body.send_email || true;
-  const fileData = request.files?.[0] ? request.files[0].buffer : null;
-  const SendinOrder = request.body.sendInOrder || false;
-  const isEnableOTP = request.body?.enableOTP === true ? true : false;
-  const isTourEnabled = request.body?.enableTour || false;
-
-  // console.log('fileData ', fileData);
-  const protocol = customAPIurl();
-  const baseUrl = new URL(process.env.PUBLIC_URL);
-
-  try {
-    const reqToken = request.headers['x-api-token'];
-    if (!reqToken) {
-      return response.status(400).json({ error: 'Please Provide API Token' });
-    }
-    const tokenQuery = new Parse.Query('appToken');
-    tokenQuery.equalTo('token', reqToken);
-    tokenQuery.include('userId');
-    const token = await tokenQuery.first({ useMasterKey: true });
-    if (token !== undefined) {
-      const parseUser = JSON.parse(JSON.stringify(token));
-      const userPtr = {
-        __type: 'Pointer',
-        className: '_User',
-        objectId: parseUser.userId.objectId,
-      };
-      // Valid Token then proceed request
-      if (signers && signers.length > 0) {
-        let fileUrl;
-        if (request.files?.[0]) {
-          const base64 = fileData?.toString('base64');
-          const file = new Parse.File(request.files?.[0]?.originalname, {
-            base64: base64,
-          });
-          await file.save({ useMasterKey: true });
-          fileUrl = file.url();
-          const buffer = Buffer.from(base64, 'base64');
-          saveFileUsage(buffer.length, fileUrl, parseUser.userId.objectId);
-        } else {
-          const file = new Parse.File(`${name}.pdf`, {
-            base64: base64File,
-          });
-          await file.save({ useMasterKey: true });
-          fileUrl = file.url();
-          const buffer = Buffer.from(base64File, 'base64');
-          saveFileUsage(buffer.length, fileUrl, parseUser.userId.objectId);
-        }
-        const contractsUser = new Parse.Query('contracts_Users');
-        contractsUser.equalTo('UserId', userPtr);
-        const extUser = await contractsUser.first({ useMasterKey: true });
-        const extUserPtr = {
-          __type: 'Pointer',
-          className: 'contracts_Users',
-          objectId: extUser.id,
-        };
-
-        const folderPtr = {
-          __type: 'Pointer',
-          className: 'contracts_Document',
-          objectId: folderId,
-        };
-
-        const object = new Parse.Object('contracts_Document');
-        object.set('Name', name);
-        if (note) {
-          object.set('Note', note);
-        }
-        if (description) {
-          object.set('Description', description);
-        }
-        if (SendinOrder) {
-          object.set('SendinOrder', SendinOrder);
-        }
-        object.set('URL', fileUrl);
-        object.set('CreatedBy', userPtr);
-        object.set('ExtUserPtr', extUserPtr);
-        object.set('IsSendMail', send_email);
-        object.set('IsEnableOTP', isEnableOTP);
-        object.set('IsTourEnabled', isTourEnabled);
-        if (signers && signers.length > 0) {
-          let parseSigners;
-          if (base64File) {
-            parseSigners = signers;
-          } else {
-            parseSigners = JSON.parse(signers);
-          }
-          let createContactUrl = protocol + '/v1/createcontact';
-
-          let contact = [];
-          for (const obj of parseSigners) {
-            const body = {
-              name: obj?.name || '',
-              email: obj?.email || '',
-              phone: obj?.phone || '',
-            };
-            try {
-              const res = await axios.post(createContactUrl, body, {
-                headers: { 'Content-Type': 'application/json', 'x-api-token': reqToken },
-              });
-              // console.log('res ', res.data);
-              contact.push({
-                __type: 'Pointer',
-                className: 'contracts_Contactbook',
-                objectId: res.data?.objectId,
-              });
-            } catch (err) {
-              // console.log('err ', err.response);
-              if (err?.response?.data?.objectId) {
-                contact.push({
-                  __type: 'Pointer',
-                  className: 'contracts_Contactbook',
-                  objectId: err.response.data?.objectId,
-                });
-              }
-            }
-          }
-          object.set('Signers', contact);
-        }
-        if (folderId) {
-          object.set('Folder', folderPtr);
-        }
-        const newACL = new Parse.ACL();
-        newACL.setPublicReadAccess(false);
-        newACL.setPublicWriteAccess(false);
-        newACL.setReadAccess(userPtr.objectId, true);
-        newACL.setWriteAccess(userPtr.objectId, true);
-        object.setACL(newACL);
-        const res = await object.save(null, { useMasterKey: true });
-        if (request.posthog) {
-          request.posthog?.capture({
-            distinctId: parseUser.userId.email,
-            event: 'api_draft_document',
-            properties: { response_code: 200 },
-          });
-        }
-        return response.json({
-          objectId: res.id,
-          url: `${baseUrl.origin}/placeholdersign/${res.id}`,
-        });
-      } else {
-        if (request.posthog) {
-          request.posthog?.capture({
-            distinctId: parseUser.userId.email,
-            event: 'api_draft_document',
-            properties: { response_code: 400 },
-          });
-        }
-        return response.status(400).json({ error: 'Please provide signers!' });
-      }
-    } else {
-      return response.status(405).json({ error: 'Invalid API Token!' });
-    }
-  } catch (err) {
-    console.log('err ', err);
-    return response.status(400).json({ error: 'Something went wrong, please try again later!' });
-  }
-}

apps/OpenSignServer/cloud/customRoute/v1/routes/draftTemplate.js

@@ -0,0 +1,238 @@
+import axios from 'axios';
+import {
+  color,
+  customAPIurl,
+  saveFileUsage,
+  formatWidgetOptions,
+  sanitizeFileName,
+} from '../../../../Utils.js';
+import uploadFileToS3 from '../../../parsefunction/uploadFiletoS3.js';
+import jwt from 'jsonwebtoken';
+
+const randomId = () => Math.floor(1000 + Math.random() * 9000);
+export default async function draftTemplate(request, response) {
+  const name = request.body.title;
+  const note = request.body.note;
+  const description = request.body.description;
+  const signers = request.body.signers;
+  const folderId = request.body.folderId;
+  const base64File = request.body.file;
+  const fileData = request.files?.[0] ? request.files[0].buffer : null;
+  const SendinOrder = request.body.sendInOrder || true;
+  const isEnableOTP = request.body?.enableOTP === true ? true : false;
+  const isTourEnabled = request.body?.enableTour || false;
+  const isPublic = request.body?.isPublic;
+  const protocol = customAPIurl();
+  const baseUrl = new URL(process.env.PUBLIC_URL).origin;
+
+  try {
+    const reqToken = request.headers['x-api-token'];
+    if (!reqToken) {
+      return response.status(400).json({ error: 'Please Provide API Token' });
+    }
+    const tokenQuery = new Parse.Query('appToken');
+    tokenQuery.equalTo('token', reqToken);
+    tokenQuery.include('userId');
+    const token = await tokenQuery.first({ useMasterKey: true });
+    if (token !== undefined) {
+      // Valid Token then proceed request
+      const parseUser = JSON.parse(JSON.stringify(token));
+      const userPtr = {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: parseUser.userId.objectId,
+      };
+      const contractsUser = new Parse.Query('contracts_Users');
+      contractsUser.equalTo('UserId', userPtr);
+      contractsUser.include('TenantId');
+      const extUser = await contractsUser.first({ useMasterKey: true });
+      const parseExtUser = JSON.parse(JSON.stringify(extUser));
+      let fileUrl;
+      if (request.files?.[0]) {
+        const base64 = fileData?.toString('base64');
+        const file = new Parse.File(request.files?.[0]?.originalname, {
+          base64: base64,
+        });
+        await file.save({ useMasterKey: true });
+        fileUrl = file.url();
+        const buffer = Buffer.from(base64, 'base64');
+        saveFileUsage(buffer.length, fileUrl, parseUser.userId.objectId);
+      } else {
+        const filename = sanitizeFileName(`${name}.pdf`);
+        let adapter = {};
+        const ActiveFileAdapter = parseExtUser?.TenantId?.ActiveFileAdapter || '';
+        if (ActiveFileAdapter) {
+          adapter =
+            parseExtUser?.TenantId?.FileAdapters?.find(x => (x.id = ActiveFileAdapter)) || {};
+        }
+        if (adapter?.id) {
+          const filedata = Buffer.from(base64File, 'base64');
+          // `uploadFileToS3` is used to save document in user's file storage
+          fileUrl = await uploadFileToS3(filedata, filename, 'application/pdf', adapter);
+        } else {
+          const file = new Parse.File(filename, { base64: base64File }, 'application/pdf');
+          await file.save({ useMasterKey: true });
+          fileUrl = file.url();
+        }
+        const buffer = Buffer.from(base64File, 'base64');
+        saveFileUsage(buffer.length, fileUrl, parseUser.userId.objectId);
+      }
+      const extUserPtr = {
+        __type: 'Pointer',
+        className: 'contracts_Users',
+        objectId: extUser.id,
+      };
+      const object = new Parse.Object('contracts_Template');
+      object.set('Name', name);
+      if (note) {
+        object.set('Note', note);
+      }
+      if (description) {
+        object.set('Description', description);
+      }
+      if (SendinOrder) {
+        object.set('SendinOrder', SendinOrder);
+      }
+      object.set('URL', fileUrl);
+      object.set('CreatedBy', userPtr);
+      object.set('ExtUserPtr', extUserPtr);
+      object.set('IsEnableOTP', isEnableOTP);
+      object.set('IsTourEnabled', isTourEnabled);
+      const Public = isPublic !== undefined ? template?.IsPublic : false;
+      if (template?.IsPublic !== undefined) {
+        object.set('IsPublic', Public);
+      }
+      let contact = [];
+      if (signers && signers.length > 0) {
+        let parseSigners;
+        if (base64File) {
+          parseSigners = signers;
+        } else {
+          parseSigners = JSON.parse(signers);
+        }
+        let createContactUrl = protocol + '/v1/createcontact';
+
+        for (const [index, element] of parseSigners.entries()) {
+          if (element?.name && element?.email) {
+            const body = {
+              name: element?.name,
+              email: element?.email,
+              phone: element?.phone || '',
+            };
+            try {
+              const res = await axios.post(createContactUrl, body, {
+                headers: { 'Content-Type': 'application/json', 'x-api-token': reqToken },
+              });
+              // console.log('res ', res.data);
+              const contactPtr = {
+                __type: 'Pointer',
+                className: 'contracts_Contactbook',
+                objectId: res.data?.objectId,
+              };
+              const newObj = { ...element, contactPtr: contactPtr, index: index };
+              contact.push(newObj);
+            } catch (err) {
+              // console.log('err ', err.response);
+              if (err?.response?.data?.objectId) {
+                const contactPtr = {
+                  __type: 'Pointer',
+                  className: 'contracts_Contactbook',
+                  objectId: err.response.data?.objectId,
+                };
+                const newObj = { ...element, contactPtr: contactPtr, index: index };
+                contact.push(newObj);
+              }
+            }
+          } else {
+            const newObj = { ...element, contactPtr: {}, index: index };
+            contact.push(newObj);
+          }
+        }
+        const updatedSigners = contact?.filter(x => x.contactPtr && x.contactPtr.objectId);
+        if (updatedSigners && updatedSigners.length > 0) {
+          object.set(
+            'Signers',
+            updatedSigners?.map(x => x.contactPtr)
+          );
+        }
+        let updatePlaceholders = [];
+        for (const signer of contact) {
+          const placeHolder = [];
+          if (signer.widgets?.length > 0) {
+            for (const widget of signer.widgets) {
+              const pageNumber = widget.page;
+              const page = placeHolder.find(page => page.pageNumber === pageNumber);
+              const options = formatWidgetOptions(widget.type, widget.options);
+              const widgetData = {
+                isStamp: widget.type === 'stamp' || widget.type === 'image',
+                key: randomId(),
+                isDrag: false,
+                scale: 1,
+                isMobile: false,
+                zIndex: 1,
+                type: widget.type === 'textbox' ? 'text input' : widget.type,
+                options: options,
+                Width: widget.w,
+                Height: widget.h,
+                xPosition: widget.x,
+                yPosition: widget.y,
+              };
+
+              if (page) {
+                page.pos.push(widgetData);
+              } else {
+                placeHolder.push({ pageNumber, pos: [widgetData] });
+              }
+            }
+          }
+          updatePlaceholders.push({
+            signerObjId: signer?.contactPtr?.objectId || '',
+            signerPtr: signer?.contactPtr,
+            Role: signer.role,
+            Id: randomId(),
+            blockColor: color[signer?.index],
+            placeHolder,
+          });
+        }
+        if (updatePlaceholders?.length > 0) {
+          object.set('Placeholders', updatePlaceholders);
+        }
+      }
+      if (folderId) {
+        object.set('Folder', {
+          __type: 'Pointer',
+          className: 'contracts_Template',
+          objectId: folderId,
+        });
+      }
+      if (parseExtUser?.TenantId?.ActiveFileAdapter) {
+        object.set('FileAdapterId', parseExtUser?.TenantId?.ActiveFileAdapter);
+      }
+      const newACL = new Parse.ACL();
+      newACL.setPublicReadAccess(false);
+      newACL.setPublicWriteAccess(false);
+      newACL.setReadAccess(userPtr.objectId, true);
+      newACL.setWriteAccess(userPtr.objectId, true);
+      object.setACL(newACL);
+      const res = await object.save(null, { useMasterKey: true });
+      if (request.posthog) {
+        request.posthog?.capture({
+          distinctId: parseUser.userId.email,
+          event: 'api_draft_template',
+          properties: { response_code: 200 },
+        });
+      }
+      const JwtToken = jwt.sign(
+        { user_email: parseUser.userId.email, template_id: res.id },
+        reqToken
+      );
+
+      return response.json({ objectId: res.id, url: `${baseUrl}/drafttemplate/${JwtToken}` });
+    } else {
+      return response.status(405).json({ error: 'Invalid API Token!' });
+    }
+  } catch (err) {
+    console.log('err ', err);
+    return response.status(400).json({ error: 'Something went wrong, please try again later!' });
+  }
+}

apps/OpenSignServer/cloud/main.js

@@ -75,6 +75,14 @@ import saveToFileAdapter from './parsefunction/saveToFileAdapter.js';
 import getFileAdapter from './parsefunction/getFileAdapter.js';
 import addPfxFile from './parsefunction/addPfxFile.js';
 import getPfxFile from './parsefunction/getPfxFile.js';
+import getTenant from './parsefunction/getTenant.js';
+import getSigners from './parsefunction/getSigners.js';
+import saveFile from './parsefunction/saveFile.js';
+import savecontact from './parsefunction/savecontact.js';
+import isUserInContactBook from './parsefunction/isUserInContactBook.js';
+import updateTourStatus from './parsefunction/updateTourStatus.js';
+import saveTemplate from './parsefunction/saveTemplate.js';
+import updateToPublicTemplate from './parsefunction/updateToPublicTemplate.js';
 
 // This afterSave function triggers after an object is added or updated in the specified class, allowing for post-processing logic.
 Parse.Cloud.afterSave('contracts_Document', DocumentAftersave);
@@ -162,3 +170,11 @@ Parse.Cloud.define('addfileadapter', addFileAdapter);
 Parse.Cloud.define('getfileadapter', getFileAdapter);
 Parse.Cloud.define('addpfx', addPfxFile);
 Parse.Cloud.define('getpfx', getPfxFile);
+Parse.Cloud.define('gettenant', getTenant);
+Parse.Cloud.define('getsigners', getSigners);
+Parse.Cloud.define('savetemplate', saveTemplate);
+Parse.Cloud.define('savefile', saveFile);
+Parse.Cloud.define('savecontact', savecontact);
+Parse.Cloud.define('isuserincontactbook', isUserInContactBook);
+Parse.Cloud.define('updatetourstatus', updateTourStatus);
+Parse.Cloud.define('updatetopublictemplate', updateToPublicTemplate);

apps/OpenSignServer/cloud/parsefunction/AllowedCredits.js

@@ -1,33 +1,64 @@
-export default async function AllowedCredits(request) {
-  if (!request?.user) {
-    throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
-  }
-  try {
-    const extUser = new Parse.Query('contracts_Users');
-    extUser.equalTo('UserId', {
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+async function checkCredits(userId) {
+  const extUser = new Parse.Query('contracts_Users');
+  extUser.equalTo('UserId', {
+    __type: 'Pointer',
+    className: '_User',
+    objectId: userId,
+  });
+  const resExtUser = await extUser.first({ useMasterKey: true });
+  if (resExtUser) {
+    const _resExtUser = JSON.parse(JSON.stringify(resExtUser));
+    const subscription = new Parse.Query('contracts_Subscriptions');
+    subscription.equalTo('TenantId', {
       __type: 'Pointer',
-      className: '_User',
-      objectId: request.user.id,
+      className: 'partners_Tenant',
+      objectId: _resExtUser.TenantId.objectId,
     });
-    const resExtUser = await extUser.first({ useMasterKey: true });
-    if (resExtUser) {
-      const _resExtUser = JSON.parse(JSON.stringify(resExtUser));
-      const subscription = new Parse.Query('contracts_Subscriptions');
-      subscription.equalTo('TenantId', {
-        __type: 'Pointer',
-        className: 'partners_Tenant',
-        objectId: _resExtUser.TenantId.objectId,
-      });
-      subscription.include('ExtUserPtr');
-      const resSub = await subscription.first({ useMasterKey: true });
-      if (resSub) {
-        const _resSub = JSON.parse(JSON.stringify(resSub));
-        const AllowedCredits = _resSub?.AllowedCredits || 0;
-        const AddonCredits = _resSub?.AddonCredits || 0;
-        return { allowedcredits: AllowedCredits, addoncredits: AddonCredits };
+    subscription.include('ExtUserPtr');
+    const resSub = await subscription.first({ useMasterKey: true });
+    if (resSub) {
+      const _resSub = JSON.parse(JSON.stringify(resSub));
+      const AllowedCredits = _resSub?.AllowedCredits || 0;
+      const AddonCredits = _resSub?.AddonCredits || 0;
+      return { allowedcredits: AllowedCredits, addoncredits: AddonCredits };
+    }
+  } else {
+    throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+  }
+}
+export default async function AllowedCredits(request) {
+  const jwttoken = request?.headers?.jwttoken || '';
+
+  try {
+    if (request?.user) {
+      return await checkCredits(request.user.id);
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      if (jwtDecode?.user_email) {
+        const userCls = new Parse.Query(Parse.User);
+        userCls.equalTo('email', jwtDecode?.user_email);
+        const userRes = await userCls.first({ useMasterKey: true });
+        const userId = userRes?.id;
+        const tokenQuery = new Parse.Query('appToken');
+        tokenQuery.equalTo('userId', {
+          __type: 'Pointer',
+          className: '_User',
+          objectId: userId,
+        });
+        const appRes = await tokenQuery.first({ useMasterKey: true });
+        const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+        if (decoded?.user_email) {
+          return await checkCredits(userId);
+        } else {
+          throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token.');
+        }
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token.');
       }
     } else {
-      throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
     }
   } catch (err) {
     console.log('err in allowedCredits', err);

apps/OpenSignServer/cloud/parsefunction/GetTemplate.js

@@ -1,21 +1,54 @@
 import axios from 'axios';
-import { cloudServerUrl } from '../../Utils.js';
+import { cloudServerUrl, parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
 
 export default async function GetTemplate(request) {
   const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
   const templateId = request.params.templateId;
   const ispublic = request.params.ispublic;
-
+  const jwttoken = request.headers?.jwttoken;
+  const sessiontoken = request.headers?.sessiontoken;
   try {
     if (!ispublic) {
-      const userRes = await axios.get(serverUrl + '/users/me', {
-        headers: {
-          'X-Parse-Application-Id': process.env.APP_ID,
-          'X-Parse-Session-Token': request.headers['sessiontoken'],
-        },
-      });
-      const userId = userRes.data && userRes.data.objectId;
-      if (templateId && userId) {
+      let userEmail;
+      if (jwttoken) {
+        try {
+          const jwtDecode = parseJwt(jwttoken);
+          if (jwtDecode?.user_email) {
+            const userCls = new Parse.Query(Parse.User);
+            userCls.equalTo('email', jwtDecode?.user_email);
+            const userRes = await userCls.first({ useMasterKey: true });
+            const userId = userRes?.id;
+            const tokenQuery = new Parse.Query('appToken');
+            tokenQuery.equalTo('userId', {
+              __type: 'Pointer',
+              className: '_User',
+              objectId: userId,
+            });
+            const appRes = await tokenQuery.first({ useMasterKey: true });
+            const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+            if (decoded?.user_email) {
+              userEmail = decoded?.user_email;
+            } else {
+              return { error: 'Invalid token!' };
+            }
+          } else {
+            return { error: 'Invalid token!' };
+          }
+        } catch (err) {
+          console.log('err in jwt', err);
+          return { error: "You don't have access of this document!" };
+        }
+      } else if (sessiontoken) {
+        const userRes = await axios.get(serverUrl + '/users/me', {
+          headers: {
+            'X-Parse-Application-Id': process.env.APP_ID,
+            'X-Parse-Session-Token': sessiontoken,
+          },
+        });
+        userEmail = userRes.data && userRes.data.email;
+      }
+      if (templateId && userEmail) {
         try {
           let template = new Parse.Query('contracts_Template');
           template.equalTo('objectId', templateId);
@@ -24,7 +57,7 @@ export default async function GetTemplate(request) {
           template.include('CreatedBy');
           template.include('ExtUserPtr.TenantId');
           const extUserQuery = new Parse.Query('contracts_Users');
-          extUserQuery.equalTo('Email', userRes.data.email);
+          extUserQuery.equalTo('Email', userEmail);
           extUserQuery.include('TeamIds');
           const extUser = await extUserQuery.first({ useMasterKey: true });
           if (extUser) {
@@ -64,6 +97,8 @@ export default async function GetTemplate(request) {
           console.log('err', err);
           return err;
         }
+      } else {
+        return { error: "You don't have access of this document!" };
       }
     } else if (templateId && ispublic) {
       try {
@@ -92,7 +127,7 @@ export default async function GetTemplate(request) {
     }
   } catch (err) {
     console.log('err', err);
-    if (err.code == 209) {
+    if (err?.response?.data?.code === 209 || err.code == 209) {
       return { error: 'Invalid session token' };
     } else {
       return { error: "You don't have access of this document!" };

apps/OpenSignServer/cloud/parsefunction/createBatchDocs.js

@@ -1,6 +1,6 @@
 import axios from 'axios';
-import { cloudServerUrl } from '../../Utils.js';
-
+import { cloudServerUrl, parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
 const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
 const appId = process.env.APP_ID;
 const licenseKey = process.env.LICENSE_KEY;
@@ -30,7 +30,8 @@ async function deductcount(docsCount, extUserId, subscription) {
     console.log('Err in deduct in quick send', err);
   }
 }
-async function sendMail(document, sessionToken) {
+async function sendMail(document) {
+  //sessionToken
   const baseUrl = new URL(process.env.PUBLIC_URL);
 
   // console.log("pdfDetails", pdfDetails);
@@ -57,7 +58,7 @@ async function sendMail(document, sessionToken) {
       const headers = {
         'Content-Type': 'application/json',
         'X-Parse-Application-Id': appId,
-        sessionToken: sessionToken,
+        // sessionToken: sessionToken,
       };
       const objectId = signerMail[i]?.signerObjId;
       const hostUrl = baseUrl.origin;
@@ -112,13 +113,161 @@ async function sendMail(document, sessionToken) {
     }
   }
 }
+async function batchQuery(userId, Documents, Ip, parseConfig) {
+  const extCls = new Parse.Query('contracts_Users');
+  extCls.equalTo('UserId', {
+    __type: 'Pointer',
+    className: '_User',
+    objectId: userId,
+  });
+  const resExt = await extCls.first({ useMasterKey: true });
+  if (resExt) {
+    const _resExt = JSON.parse(JSON.stringify(resExt));
+    try {
+      const requests = Documents.map(x => {
+        const Signers = x.Signers;
+        const allSigner = x?.Placeholders?.map(
+          item => Signers?.find(e => item?.signerPtr?.objectId === e?.objectId) || item?.signerPtr
+        ).filter(signer => Object.keys(signer).length > 0);
+        const date = new Date();
+        const isoDate = date.toISOString();
+        let Acl = { [x.CreatedBy.objectId]: { read: true, write: true } };
+        if (allSigner && allSigner.length > 0) {
+          allSigner.forEach(x => {
+            const obj = { [x.CreatedBy.objectId]: { read: true, write: true } };
+            Acl = { ...Acl, ...obj };
+          });
+        }
+        return {
+          method: 'POST',
+          path: '/app/classes/contracts_Document',
+          body: {
+            Name: x.Name,
+            URL: x.URL,
+            Note: x.Note,
+            Description: x.Description,
+            CreatedBy: x.CreatedBy,
+            SendinOrder: x.SendinOrder || true,
+            ExtUserPtr: {
+              __type: 'Pointer',
+              className: x.ExtUserPtr.className,
+              objectId: x.ExtUserPtr?.objectId,
+            },
+            Placeholders: x.Placeholders.map(y =>
+              y?.signerPtr?.objectId
+                ? {
+                    ...y,
+                    signerPtr: {
+                      __type: 'Pointer',
+                      className: 'contracts_Contactbook',
+                      objectId: y.signerPtr.objectId,
+                    },
+                    signerObjId: y.signerObjId,
+                  }
+                : { ...y, signerPtr: {}, signerObjId: '' }
+            ),
+            SignedUrl: x.URL || x.SignedUrl,
+            SentToOthers: true,
+            Signers: allSigner?.map(y => ({
+              __type: 'Pointer',
+              className: 'contracts_Contactbook',
+              objectId: y.objectId,
+            })),
+            ACL: Acl,
+            SentToOthers: true,
+            RemindOnceInEvery: x.RemindOnceInEvery || 5,
+            AutomaticReminders: x.AutomaticReminders || false,
+            TimeToCompleteDays: x.TimeToCompleteDays || 15,
+            OriginIp: Ip,
+            DocSentAt: { __type: 'Date', iso: isoDate },
+            IsEnableOTP: x?.IsEnableOTP || false,
+            IsTourEnabled: x?.IsTourEnabled || false,
+            FileAdapterId: x?.FileAdapterId || '',
+          },
+        };
+      });
+      // console.log('requests ', requests);
+      if (licenseKey) {
+        const subscription = new Parse.Query('contracts_Subscriptions');
+        subscription.equalTo('TenantId', {
+          __type: 'Pointer',
+          className: 'partners_Tenant',
+          objectId: _resExt.TenantId.objectId,
+        });
+        subscription.include('ExtUserPtr');
+        subscription.greaterThanOrEqualTo('Next_billing_date', new Date());
+        const resSub = await subscription.first({ useMasterKey: true });
+        if (resSub) {
+          const _resSub = JSON.parse(JSON.stringify(resSub));
+          const allowedCredits = _resSub?.AllowedCredits || 0;
+          const addonCredits = _resSub?.AddonCredits || 0;
+          const totalcredits = allowedCredits + addonCredits;
+          if (requests?.length <= totalcredits) {
+            const response = await axios.post('batch', { requests: requests }, parseConfig);
+            // Handle the batch query response
+            // console.log('Batch query response:', response.data);
+            if (response.data && response.data.length > 0) {
+              const updateDocuments = Documents.map((x, i) => ({
+                ...x,
+                objectId: response.data[i]?.success?.objectId,
+                createdAt: response.data[i]?.success?.createdAt,
+              }));
+              deductcount(response.data.length, resExt.id, _resSub);
+              for (let i = 0; i < updateDocuments.length; i++) {
+                sendMail(updateDocuments[i], ''); //sessionToken
+              }
+              return 'success';
+            }
+          } else {
+            throw new Parse.Error(429, 'Quota reached, Please buy credits and try again later.');
+          }
+        } else {
+          throw new Parse.Error(
+            Parse.Error.INVALID_QUERY,
+            'Please purchase or renew your subscription.'
+          );
+        }
+      } else {
+        if (requests?.length > 0) {
+          const newrequests = [requests?.[0]];
+          const response = await axios.post('batch', { requests: newrequests }, parseConfig);
+          // Handle the batch query response
+          // console.log('Batch query response:', response.data);
+          if (response.data && response.data.length > 0) {
+            const document = Documents?.[0];
+            const updateDocuments = {
+              ...document,
+              objectId: response.data[0]?.success?.objectId,
+              createdAt: response.data[0]?.success?.createdAt,
+            };
+            deductcount(response.data.length, resExt.id);
+            sendMail(updateDocuments); //sessionToken
+            return 'success';
+          }
+        }
+      }
+    } catch (error) {
+      const code = error?.response?.data?.code || error?.response?.status || error?.code || 400;
+      const msg =
+        error?.response?.data?.error ||
+        error?.response?.data ||
+        error?.message ||
+        'Something went wrong.';
+      console.log('Error performing batch query:', code, msg);
+      throw new Parse.Error(code, msg);
+    }
+  } else {
+    throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+  }
+}
 export default async function createBatchDocs(request) {
   const strDocuments = request.params.Documents;
-  const sessionToken = request.headers['sessiontoken'];
+  const sessionToken = request.headers?.sessiontoken;
+  const jwttoken = request.headers?.jwttoken;
   const Documents = JSON.parse(strDocuments);
   const Ip = request?.headers?.['x-real-ip'] || '';
   const parseConfig = {
-    baseURL: serverUrl, //localStorage.getItem('baseUrl'),
+    baseURL: serverUrl,
     headers: {
       'X-Parse-Application-Id': appId,
       'X-Parse-Session-Token': sessionToken,
@@ -126,167 +275,38 @@ export default async function createBatchDocs(request) {
     },
   };
   try {
-    const user = await axios.get(serverUrl + '/users/me', {
-      headers: {
-        'X-Parse-Application-Id': appId,
-        'X-Parse-Session-Token': request.headers['sessiontoken'],
-      },
-    });
-    if (user.data) {
-      const extCls = new Parse.Query('contracts_Users');
-      extCls.equalTo('UserId', {
-        __type: 'Pointer',
-        className: '_User',
-        objectId: user.data.objectId,
-      });
-      const resExt = await extCls.first({ useMasterKey: true });
-      if (resExt) {
-        const _resExt = JSON.parse(JSON.stringify(resExt));
-        try {
-          const requests = Documents.map(x => {
-            const Signers = x.Signers;
-            const allSigner = x?.Placeholders?.map(
-              item =>
-                Signers?.find(e => item?.signerPtr?.objectId === e?.objectId) || item?.signerPtr
-            ).filter(signer => Object.keys(signer).length > 0);
-            const date = new Date();
-            const isoDate = date.toISOString();
-            let Acl = { [x.CreatedBy.objectId]: { read: true, write: true } };
-            if (allSigner && allSigner.length > 0) {
-              allSigner.forEach(x => {
-                const obj = { [x.CreatedBy.objectId]: { read: true, write: true } };
-                Acl = { ...Acl, ...obj };
-              });
-            }
-            return {
-              method: 'POST',
-              path: '/app/classes/contracts_Document',
-              body: {
-                Name: x.Name,
-                URL: x.URL,
-                Note: x.Note,
-                Description: x.Description,
-                CreatedBy: x.CreatedBy,
-                SendinOrder: x.SendinOrder || true,
-                ExtUserPtr: {
-                  __type: 'Pointer',
-                  className: x.ExtUserPtr.className,
-                  objectId: x.ExtUserPtr.objectId,
-                },
-                Placeholders: x.Placeholders.map(y =>
-                  y?.signerPtr?.objectId
-                    ? {
-                        ...y,
-                        signerPtr: {
-                          __type: 'Pointer',
-                          className: 'contracts_Contactbook',
-                          objectId: y.signerPtr.objectId,
-                        },
-                        signerObjId: y.signerObjId,
-                      }
-                    : { ...y, signerPtr: {}, signerObjId: '' }
-                ),
-                SignedUrl: x.URL || x.SignedUrl,
-                SentToOthers: true,
-                Signers: allSigner?.map(y => ({
-                  __type: 'Pointer',
-                  className: 'contracts_Contactbook',
-                  objectId: y.objectId,
-                })),
-                ACL: Acl,
-                SentToOthers: true,
-                RemindOnceInEvery: x.RemindOnceInEvery || 5,
-                AutomaticReminders: x.AutomaticReminders || false,
-                TimeToCompleteDays: x.TimeToCompleteDays || 15,
-                OriginIp: Ip,
-                DocSentAt: { __type: 'Date', iso: isoDate },
-                IsEnableOTP: x?.IsEnableOTP || false,
-                IsTourEnabled: x?.IsTourEnabled || false,
-                FileAdapterId: x?.FileAdapterId || '',
-              },
-            };
-          });
-          // console.log('requests ', requests);
-          if (licenseKey) {
-            const subscription = new Parse.Query('contracts_Subscriptions');
-            subscription.equalTo('TenantId', {
-              __type: 'Pointer',
-              className: 'partners_Tenant',
-              objectId: _resExt.TenantId.objectId,
-            });
-            subscription.include('ExtUserPtr');
-            subscription.greaterThanOrEqualTo('Next_billing_date', new Date());
-            const resSub = await subscription.first({ useMasterKey: true });
-            if (resSub) {
-              const _resSub = JSON.parse(JSON.stringify(resSub));
-              const allowedCredits = _resSub?.AllowedCredits || 0;
-              const addonCredits = _resSub?.AddonCredits || 0;
-              const totalcredits = allowedCredits + addonCredits;
-              if (requests?.length <= totalcredits) {
-                const response = await axios.post('batch', { requests: requests }, parseConfig);
-                // // Handle the batch query response
-                // console.log('Batch query response:', response.data);
-                if (response.data && response.data.length > 0) {
-                  const updateDocuments = Documents.map((x, i) => ({
-                    ...x,
-                    objectId: response.data[i]?.success?.objectId,
-                    createdAt: response.data[i]?.success?.createdAt,
-                  }));
-                  deductcount(response.data.length, resExt.id, _resSub);
-                  for (let i = 0; i < updateDocuments.length; i++) {
-                    sendMail(updateDocuments[i], sessionToken);
-                  }
-                  return 'success';
-                }
-              } else {
-                throw new Parse.Error(
-                  429,
-                  'Quota reached, Please buy credits and try again later.'
-                );
-              }
-            } else {
-              throw new Parse.Error(
-                Parse.Error.INVALID_QUERY,
-                'Please purchase or renew your subscription.'
-              );
-            }
-          } else {
-            if (requests?.length > 0) {
-              const newrequests = [requests?.[0]];
-              const response = await axios.post('batch', { requests: newrequests }, parseConfig);
-              // Handle the batch query response
-              // console.log('Batch query response:', response.data);
-              if (response.data && response.data.length > 0) {
-                const document = Documents?.[0];
-                const updateDocuments = {
-                  ...document,
-                  objectId: response.data[0]?.success?.objectId,
-                  createdAt: response.data[0]?.success?.createdAt,
-                };
-                deductcount(response.data.length, resExt.id);
-                sendMail(updateDocuments, sessionToken);
-                return 'success';
-              }
-            }
-          }
-        } catch (error) {
-          const code = error?.response?.data?.code || error?.response?.status || error?.code || 400;
-          const msg =
-            error?.response?.data?.error ||
-            error?.response?.data ||
-            error?.message ||
-            'Something went wrong.';
-          console.log('Error performing batch query:', code, msg);
-          throw new Parse.Error(code, msg);
+    if (request?.user) {
+      return await batchQuery(request.user.id, Documents, Ip, parseConfig);
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      if (jwtDecode?.user_email) {
+        const userCls = new Parse.Query(Parse.User);
+        userCls.equalTo('email', jwtDecode?.user_email);
+        const userRes = await userCls.first({ useMasterKey: true });
+        const userId = userRes?.id;
+        const tokenQuery = new Parse.Query('appToken');
+        tokenQuery.equalTo('userId', {
+          __type: 'Pointer',
+          className: '_User',
+          objectId: userId,
+        });
+        const appRes = await tokenQuery.first({ useMasterKey: true });
+        const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+        if (decoded?.user_email) {
+          return await batchQuery(userId, Documents, Ip, parseConfig);
+        } else {
+          throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token.');
         }
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token.');
       }
     } else {
-      throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
     }
   } catch (err) {
     console.log('err in createbatchdoc', err);
     const code = err?.code || 400;
     const msg = err?.message || 'Something went wrong.';
-    new Parse.Error(code, msg);
+    throw new Parse.Error(code, msg);
   }
 }

apps/OpenSignServer/cloud/parsefunction/getDocument.js

@@ -1,10 +1,12 @@
 import axios from 'axios';
-import { cloudServerUrl } from '../../Utils.js';
+import { cloudServerUrl, parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
 
 export default async function getDocument(request) {
   const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
   const docId = request.params.docId;
-
+  const jwttoken = request?.headers?.jwttoken || '';
+  const sessiontoken = request?.headers?.sessiontoken || '';
   try {
     if (docId) {
       try {
@@ -27,12 +29,12 @@ export default async function getDocument(request) {
           if (!IsEnableOTP) {
             return document;
           } else {
-            if (request?.headers?.['sessiontoken']) {
+            if (sessiontoken) {
               try {
                 const userRes = await axios.get(serverUrl + '/users/me', {
                   headers: {
                     'X-Parse-Application-Id': process.env.APP_ID,
-                    'X-Parse-Session-Token': request.headers['sessiontoken'],
+                    'X-Parse-Session-Token': sessiontoken,
                   },
                 });
                 const userId = userRes.data && userRes.data?.objectId;
@@ -46,6 +48,37 @@ export default async function getDocument(request) {
                 console.log('err user in not authenticated', err);
                 return { error: "You don't have access of this document!" };
               }
+            } else if (jwttoken) {
+              try {
+                const jwtDecode = parseJwt(jwttoken);
+                if (jwtDecode?.user_email) {
+                  const userCls = new Parse.Query(Parse.User);
+                  userCls.equalTo('email', jwtDecode?.user_email);
+                  const userRes = await userCls.first({ useMasterKey: true });
+                  const userId = userRes?.id;
+                  const tokenQuery = new Parse.Query('appToken');
+                  tokenQuery.equalTo('userId', {
+                    __type: 'Pointer',
+                    className: '_User',
+                    objectId: userId,
+                  });
+                  const appRes = await tokenQuery.first({ useMasterKey: true });
+                  const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+                  if (decoded?.user_email) {
+                    const acl = res.getACL();
+                    if (userId && acl && acl.getReadAccess(userId)) {
+                      return document;
+                    } else {
+                      return { error: "You don't have access of this document!" };
+                    }
+                  } else {
+                    return { status: 'error', result: 'Invalid token!' };
+                  }
+                }
+              } catch (err) {
+                console.log('err in jwt', err);
+                return { error: "You don't have access of this document!" };
+              }
             } else {
               return { error: "You don't have access of this document!" };
             }

apps/OpenSignServer/cloud/parsefunction/getSigners.js

@@ -0,0 +1,66 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+export default async function getSigners(request) {
+  const jwttoken = request.headers.jwttoken || '';
+  const search = request.params.search || '';
+  const searchEmail = request.params.searchEmail || '';
+  try {
+    if (request.user) {
+      const contactbook = new Parse.Query('contracts_Contactbook');
+      contactbook.equalTo('CreatedBy', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: request?.user?.id,
+      });
+
+      if (search) {
+        contactbook.matches('Name', new RegExp(search, 'i'));
+      } else if (searchEmail) {
+        contactbook.matches('Email', new RegExp(searchEmail, 'i'));
+      }
+      contactbook.notEqualTo('IsDeleted', true);
+      const contactRes = await contactbook.find();
+      const _contactRes = JSON.parse(JSON.stringify(contactRes));
+      return _contactRes;
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        const contactbook = new Parse.Query('contracts_Contactbook');
+        contactbook.equalTo('CreatedBy', {
+          __type: 'Pointer',
+          className: '_User',
+          objectId: userId,
+        });
+        if (search) {
+          contactbook.matches('Name', new RegExp(search, 'i'));
+        } else if (searchEmail) {
+          contactbook.matches('Email', new RegExp(searchEmail, 'i'));
+        }
+        contactbook.notEqualTo('IsDeleted', true);
+        const contactRes = await contactbook.find({ useMasterKey: true });
+        const _contactRes = JSON.parse(JSON.stringify(contactRes));
+        return _contactRes;
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token');
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid session token');
+    }
+  } catch (err) {
+    console.log('err in get signers', err);
+    throw err;
+  }
+}

apps/OpenSignServer/cloud/parsefunction/getSubscriptions.js

@@ -1,13 +1,57 @@
 import axios from 'axios';
-import { cloudServerUrl } from '../../Utils.js';
+import { cloudServerUrl, parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
 const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
 const appId = process.env.APP_ID;
 export default async function getSubscription(request) {
   const extUserId = request.params.extUserId || '';
   const contactId = request.params.contactId || '';
   const ispublic = request.params.ispublic || false;
+  const jwttoken = request.headers?.jwttoken || '';
 
-  if (extUserId) {
+  if (jwttoken) {
+    const jwtDecode = parseJwt(jwttoken);
+    if (jwtDecode?.user_email) {
+      const verifyToken = jwttoken;
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(verifyToken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        const extCls = new Parse.Query('contracts_Users');
+        extCls.equalTo('Email', decoded?.user_email);
+        const exUser = await extCls.first({ useMasterKey: true });
+        if (exUser) {
+          const subscriptionCls = new Parse.Query('contracts_Subscriptions');
+          subscriptionCls.equalTo('TenantId', {
+            __type: 'Pointer',
+            className: 'partners_Tenant',
+            objectId: exUser.get('TenantId').id,
+          });
+          subscriptionCls.descending('createdAt');
+          const subcripitions = await subscriptionCls.first({ useMasterKey: true });
+          if (subcripitions) {
+            const _subcripitions = JSON.parse(JSON.stringify(subcripitions));
+            return { status: 'success', result: _subcripitions };
+          } else {
+            return { status: 'success', result: {} };
+          }
+        } else {
+          return { status: 'error', result: 'User not found!' };
+        }
+      } else {
+        return { status: 'error', result: 'Invalid token!' };
+      }
+    }
+  } else if (extUserId) {
     try {
       let userId;
       //`ispublic` is used in public profile to get subscription details

apps/OpenSignServer/cloud/parsefunction/getTenant.js

@@ -0,0 +1,59 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+export default async function getTenant(request) {
+  const jwttoken = request.headers.jwttoken || '';
+  const userId = request.params.userId || '';
+  if (jwttoken) {
+    const jwtDecode = parseJwt(jwttoken);
+    if (jwtDecode?.user_email) {
+      const verifyToken = jwttoken;
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(verifyToken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        try {
+          const tenantCreditsQuery = new Parse.Query('partners_Tenant');
+          tenantCreditsQuery.equalTo('UserId', {
+            __type: 'Pointer',
+            className: '_User',
+            objectId: userId,
+          });
+          tenantCreditsQuery.exclude('FileAdapters');
+          tenantCreditsQuery.exclude('PfxFile');
+          const res = await tenantCreditsQuery.first({ useMasterKey: true });
+          if (res) {
+            return res;
+          }
+        } catch (e) {
+          return 'user does not exist!';
+        }
+      } else {
+        return { status: 'error', result: 'Invalid token!' };
+      }
+    }
+  } else if (userId) {
+    try {
+      const tenantCreditsQuery = new Parse.Query('partners_Tenant');
+      tenantCreditsQuery.equalTo('UserId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const res = await tenantCreditsQuery.first();
+      if (res) {
+        return res;
+      }
+    } catch (e) {
+      return 'user does not exist!';
+    }
+  }
+}

apps/OpenSignServer/cloud/parsefunction/getUserDetails.js

@@ -1,5 +1,9 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
 async function getUserDetails(request) {
   const reqEmail = request.params.email;
+  const jwttoken = request?.headers?.jwttoken || '';
   if (reqEmail || request.user) {
     try {
       const userId = request.params.userId;
@@ -36,6 +40,48 @@ async function getUserDetails(request) {
       const msg = err?.message || 'Something went wrong.';
       throw new Parse.Error(code, msg);
     }
+  } else if (jwttoken) {
+    const jwtDecode = parseJwt(jwttoken);
+    if (jwtDecode?.user_email) {
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        try {
+          const userQuery = new Parse.Query('contracts_Users');
+          userQuery.equalTo('Email', decoded?.user_email);
+          userQuery.include('TenantId');
+          userQuery.include('UserId');
+          userQuery.include('CreatedBy');
+          userQuery.exclude('CreatedBy.authData');
+          userQuery.exclude('TenantId.FileAdapters');
+          userQuery.exclude('google_refresh_token');
+          userQuery.exclude('TenantId.PfxFile');
+          const res = await userQuery.first({ useMasterKey: true });
+          if (res) {
+            return res;
+          } else {
+            return '';
+          }
+        } catch (err) {
+          console.log('Err ', err);
+          const code = err?.code || 400;
+          const msg = err?.message || 'Something went wrong.';
+          throw new Parse.Error(code, msg);
+        }
+      } else {
+        return { status: 'error', result: 'Invalid token!' };
+      }
+    }
   } else {
     throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
   }

apps/OpenSignServer/cloud/parsefunction/isUserInContactBook.js

@@ -0,0 +1,47 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+export default async function isUserInContactBook(request) {
+  try {
+    const jwttoken = request.headers.jwttoken;
+    if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        const email = userRes?.get('email');
+        const userPtr = { __type: 'Pointer', className: '_User', objectId: userId };
+        const query = new Parse.Query('contracts_Contactbook');
+        query.equalTo('CreatedBy', userPtr);
+        query.notEqualTo('IsDeleted', true);
+        query.equalTo('Email', email);
+        const res = await query.first({ useMasterKey: true });
+        return res;
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token');
+      }
+    } else if (request.user) {
+      const email = request.user.get('email');
+      const userPtr = { __type: 'Pointer', className: '_User', objectId: request.user?.id };
+      const query = new Parse.Query('contracts_Contactbook');
+      query.equalTo('CreatedBy', userPtr);
+      query.notEqualTo('IsDeleted', true);
+      query.equalTo('Email', email);
+      const res = await query.first();
+      return res;
+    }
+  } catch (err) {
+    console.log('err', err);
+    throw err;
+  }
+}

apps/OpenSignServer/cloud/parsefunction/saveFile.js

@@ -0,0 +1,131 @@
+import uploadFileToS3 from './uploadFiletoS3.js';
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+export default async function saveFile(request) {
+  const jwttoken = request.headers.jwttoken || '';
+
+  if (!request.params.fileBase64) {
+    throw new Parse.Error(Parse.Error.INVALID_QUERY, 'Please provide file.');
+  }
+  const fileBase64 = request.params.fileBase64;
+  const id = request.params.id;
+  try {
+    if (request.user) {
+      const extCls = new Parse.Query('contracts_Users');
+      extCls.equalTo('UserId', request.user);
+      extCls.include('TenantId');
+      const resExt = await extCls.first({ useMasterKey: true });
+      if (resExt) {
+        const _resExt = JSON.parse(JSON.stringify(resExt));
+        const fileAdapters = _resExt?.TenantId.FileAdapters || [];
+        const fileAdapter = fileAdapters?.find(x => x.id === id) || {};
+        if (fileAdapter?.accessKeyId) {
+          const adapterConfig = {
+            id: id,
+            fileAdapter: fileAdapter?.fileAdapter,
+            bucketName: fileAdapter?.bucketName,
+            region: fileAdapter?.region,
+            endpoint: fileAdapter?.endpoint,
+            accessKeyId: fileAdapter?.accessKeyId,
+            secretAccessKey: fileAdapter?.secretAccessKey,
+            baseUrl: fileAdapter?.baseUrl,
+          };
+          const buffer = Buffer.from(fileBase64, 'base64');
+          const fileName = request.params.fileName;
+          const ext = request.params.fileName?.split('.')?.pop();
+          let mimeType;
+          if (ext === 'pdf') {
+            mimeType = 'application/pdf';
+          } else if (ext === 'png' || ext === 'jpeg' || ext === 'jpg') {
+            mimeType = `image/${ext}`;
+          }
+          try {
+            const presignedUrl = await uploadFileToS3(buffer, fileName, mimeType, adapterConfig);
+            return { url: presignedUrl };
+          } catch (err) {
+            console.error('Error generate presigned url:', err);
+            const msg = 'Fileadapter credentials are invalid.';
+            throw new Parse.Error(400, msg);
+          }
+        } else {
+          const fileName = request.params.fileName;
+          const pdfFile = new Parse.File(fileName, { base64: fileBase64 });
+          // Save the Parse File if needed
+          const pdfData = await pdfFile.save({ useMasterKey: true });
+          const presignedUrl = pdfData.url();
+          return { url: presignedUrl };
+        }
+      } else {
+        throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+      }
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        const extCls = new Parse.Query('contracts_Users');
+        extCls.equalTo('Email', decoded?.user_email);
+        extCls.include('TenantId');
+        const resExt = await extCls.first({ useMasterKey: true });
+        if (resExt) {
+          const _resExt = JSON.parse(JSON.stringify(resExt));
+          const fileAdapters = _resExt?.TenantId.FileAdapters || [];
+          const fileAdapter = fileAdapters?.find(x => x.id === id) || {};
+          if (fileAdapter?.accessKeyId) {
+            const adapterConfig = {
+              id: id,
+              fileAdapter: fileAdapter?.fileAdapter,
+              bucketName: fileAdapter?.bucketName,
+              region: fileAdapter?.region,
+              endpoint: fileAdapter?.endpoint,
+              accessKeyId: fileAdapter?.accessKeyId,
+              secretAccessKey: fileAdapter?.secretAccessKey,
+              baseUrl: fileAdapter?.baseUrl,
+            };
+            const buffer = Buffer.from(fileBase64, 'base64');
+            const fileName = request.params.fileName;
+            const ext = request.params.fileName?.split('.')?.pop();
+            let mimeType;
+            if (ext === 'pdf') {
+              mimeType = 'application/pdf';
+            } else if (ext === 'png' || ext === 'jpeg' || ext === 'jpg') {
+              mimeType = `image/${ext}`;
+            }
+            try {
+              const presignedUrl = await uploadFileToS3(buffer, fileName, mimeType, adapterConfig);
+              return { url: presignedUrl };
+            } catch (err) {
+              console.error('Error generate presigned url:', err);
+              const msg = 'Fileadapter credentials are invalid.';
+              throw new Parse.Error(400, msg);
+            }
+          } else {
+            const fileName = request.params.fileName;
+            const pdfFile = new Parse.File(fileName, { base64: fileBase64 });
+            // Save the Parse File if needed
+            const pdfData = await pdfFile.save({ useMasterKey: true });
+            const presignedUrl = pdfData.url();
+            return { url: presignedUrl };
+          }
+        } else {
+          throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'User not found.');
+        }
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
+    }
+  } catch (err) {
+    console.log('err in savetoS3', err);
+    throw err;
+  }
+}

apps/OpenSignServer/cloud/parsefunction/saveTemplate.js

@@ -0,0 +1,110 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+async function updateTemplate(template, isJwt = false) {
+  try {
+    if (template?.Id) {
+      const updateTemplate = new Parse.Object('contracts_Template');
+      updateTemplate.id = template.Id;
+      if (template?.URL) {
+        updateTemplate.set('URL', template.URL);
+      }
+      if (template?.Name) {
+        updateTemplate.set('Name', template.Name);
+      }
+      if (template?.Note) {
+        updateTemplate.set('Note', template.Note);
+      }
+      if (template?.Description) {
+        updateTemplate.set('Description', template.Description);
+      }
+      if (template?.SendinOrder) {
+        updateTemplate.set('SendinOrder', template.SendinOrder);
+      }
+      if (template?.AutomaticReminders) {
+        updateTemplate.set('AutomaticReminders', template.AutomaticReminders);
+      }
+      if (template?.RemindOnceInEvery) {
+        updateTemplate.set('RemindOnceInEvery', template.RemindOnceInEvery);
+      }
+      if (template?.NextReminderDate) {
+        updateTemplate.set('NextReminderDate', new Date(template.NextReminderDate));
+      }
+      if (template?.IsEnableOTP) {
+        updateTemplate.set('IsEnableOTP', template.IsEnableOTP);
+      }
+      if (template?.IsTourEnabled) {
+        updateTemplate.set('IsTourEnabled', template.IsTourEnabled);
+      }
+      const isPublic = template?.IsPublic !== undefined ? template?.IsPublic : false;
+      if (template?.IsPublic !== undefined) {
+        updateTemplate.set('IsPublic', isPublic);
+      }
+      updateTemplate.set('Placeholders', template.Placeholders);
+      updateTemplate.set('Signers', template.Signers);
+
+      let updateTemplateRes;
+      if (isJwt) {
+        updateTemplateRes = await updateTemplate.save(null, { useMasterKey: true });
+      } else {
+        updateTemplateRes = await updateTemplate.save();
+      }
+      return updateTemplateRes;
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_QUERY, 'Please provide Id.');
+    }
+  } catch (err) {
+    console.log('err in update template', err);
+    throw err;
+  }
+}
+export default async function saveTemplate(request) {
+  const jwttoken = request.headers.jwttoken || '';
+  const template = {
+    Id: request.params?.templateId,
+    URL: request.params?.URL || '',
+    Name: request.params?.Name,
+    Note: request.params?.Note,
+    Description: request.params?.Description,
+    Placeholders: request.params?.Placeholders,
+    Signers: request.params?.Signers,
+    SendMail: request.params?.SendMail || false,
+    SendinOrder: request.params?.SendinOrder || true,
+    AutomaticReminders: request.params?.AutomaticReminders,
+    RemindOnceInEvery: parseInt(request.params.RemindOnceInEvery) || 15,
+    NextReminderDate: request.params?.NextReminderDate,
+    IsEnableOTP: request.params?.IsEnableOTP === true ? true : false,
+    IsTourEnabled: request.params?.IsTourEnabled === true ? true : false,
+    IsPublic: request.params?.IsPublic,
+  };
+
+  try {
+    if (request.user) {
+      return await updateTemplate(template);
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        return await updateTemplate(template, true);
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token');
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid session token');
+    }
+  } catch (err) {
+    console.log('err in get signers', err);
+    throw err;
+  }
+}

apps/OpenSignServer/cloud/parsefunction/savecontact.js

@@ -0,0 +1,180 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+export default async function savecontact(request) {
+  const name = request.params.name;
+  const phone = request.params.phone;
+  const email = request.params.email;
+  const tenantId = request.params.tenantId;
+  const jwttoken = request.headers.jwttoken;
+
+  if (request.user) {
+    const currentUser = request?.user;
+    const currentUserPtr = { __type: 'Pointer', className: '_User', objectId: currentUser?.id };
+    const query = new Parse.Query('contracts_Contactbook');
+    query.equalTo('CreatedBy', currentUserPtr);
+    query.notEqualTo('IsDeleted', true);
+    query.equalTo('Email', email);
+    const res = await query.first();
+    if (!res) {
+      const contactQuery = new Parse.Object('contracts_Contactbook');
+      contactQuery.set('Name', name);
+      if (phone) {
+        contactQuery.set('Phone', phone);
+      }
+      contactQuery.set('Email', email);
+      contactQuery.set('UserRole', 'contracts_Guest');
+
+      if (tenantId) {
+        contactQuery.set('TenantId', {
+          __type: 'Pointer',
+          className: 'partners_Tenant',
+          objectId: tenantId,
+        });
+      }
+
+      try {
+        const _users = Parse.Object.extend('User');
+        const _user = new _users();
+        _user.set('name', name);
+        _user.set('username', email);
+        _user.set('email', email);
+        _user.set('password', email);
+        if (phone) {
+          _user.set('phone', phone);
+        }
+
+        const user = await _user.save();
+        if (user) {
+          contactQuery.set('CreatedBy', currentUserPtr);
+          contactQuery.set('UserId', user);
+          const acl = new Parse.ACL();
+          acl.setPublicReadAccess(true);
+          acl.setPublicWriteAccess(true);
+          acl.setReadAccess(currentUser.id, true);
+          acl.setWriteAccess(currentUser.id, true);
+          contactQuery.setACL(acl);
+
+          const res = await contactQuery.save();
+          const parseData = JSON.parse(JSON.stringify(res));
+          return parseData;
+        }
+      } catch (err) {
+        console.log('err ', err);
+        if (err.code === 202) {
+          const params = { email: email };
+          const userRes = await Parse.Cloud.run('getUserId', params);
+          contactQuery.set('CreatedBy', currentUserPtr);
+          contactQuery.set('UserId', {
+            __type: 'Pointer',
+            className: '_User',
+            objectId: userRes.id,
+          });
+          const acl = new Parse.ACL();
+          acl.setPublicReadAccess(true);
+          acl.setPublicWriteAccess(true);
+          acl.setReadAccess(currentUser.id, true);
+          acl.setWriteAccess(currentUser.id, true);
+          contactQuery.setACL(acl);
+          const res = await contactQuery.save();
+          const parseData = JSON.parse(JSON.stringify(res));
+          return parseData;
+        }
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.DUPLICATE_VALUE, 'Contact already exists.');
+    }
+  } else if (jwttoken) {
+    const jwtDecode = parseJwt(jwttoken);
+    const userCls = new Parse.Query(Parse.User);
+    userCls.equalTo('email', jwtDecode?.user_email);
+    const userRes = await userCls.first({ useMasterKey: true });
+    const userId = userRes?.id;
+    const tokenQuery = new Parse.Query('appToken');
+    tokenQuery.equalTo('userId', {
+      __type: 'Pointer',
+      className: '_User',
+      objectId: userId,
+    });
+    const appRes = await tokenQuery.first({ useMasterKey: true });
+    const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+    const currentUser = userRes;
+    const currentUserPtr = { __type: 'Pointer', className: '_User', objectId: userId };
+    if (decoded?.user_email) {
+      const query = new Parse.Query('contracts_Contactbook');
+      query.equalTo('CreatedBy', currentUserPtr);
+      query.notEqualTo('IsDeleted', true);
+      query.equalTo('Email', email);
+      const res = await query.first();
+      if (!res) {
+        const contactQuery = new Parse.Object('contracts_Contactbook');
+        contactQuery.set('Name', name);
+        if (phone) {
+          contactQuery.set('Phone', phone);
+        }
+        contactQuery.set('Email', email);
+        contactQuery.set('UserRole', 'contracts_Guest');
+
+        if (tenantId) {
+          contactQuery.set('TenantId', {
+            __type: 'Pointer',
+            className: 'partners_Tenant',
+            objectId: tenantId,
+          });
+        }
+        try {
+          const _users = Parse.Object.extend('User');
+          const _user = new _users();
+          _user.set('name', name);
+          _user.set('username', email);
+          _user.set('email', email);
+          _user.set('password', email);
+          if (phone) {
+            _user.set('phone', phone);
+          }
+
+          const user = await _user.save();
+          if (user) {
+            contactQuery.set('CreatedBy', currentUserPtr);
+            contactQuery.set('UserId', user);
+            const acl = new Parse.ACL();
+            acl.setPublicReadAccess(true);
+            acl.setPublicWriteAccess(true);
+            acl.setReadAccess(currentUser.id, true);
+            acl.setWriteAccess(currentUser.id, true);
+            contactQuery.setACL(acl);
+
+            const res = await contactQuery.save();
+            const parseData = JSON.parse(JSON.stringify(res));
+            return parseData;
+          }
+        } catch (err) {
+          console.log('err ', err);
+          if (err.code === 202) {
+            const params = { email: email };
+            const userRes = await Parse.Cloud.run('getUserId', params);
+            contactQuery.set('CreatedBy', currentUserPtr);
+            contactQuery.set('UserId', {
+              __type: 'Pointer',
+              className: '_User',
+              objectId: userRes.id,
+            });
+            const acl = new Parse.ACL();
+            acl.setPublicReadAccess(true);
+            acl.setPublicWriteAccess(true);
+            acl.setReadAccess(currentUser.id, true);
+            acl.setWriteAccess(currentUser.id, true);
+            contactQuery.setACL(acl);
+            const res = await contactQuery.save();
+            const parseData = JSON.parse(JSON.stringify(res));
+            return parseData;
+          }
+        }
+      } else {
+        throw new Parse.Error(Parse.Error.DUPLICATE_VALUE, 'Contact already exists.');
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token.');
+    }
+  }
+}

apps/OpenSignServer/cloud/parsefunction/sendMailv3.js

@@ -65,7 +65,7 @@ async function sendMailProvider(req, plan, monthchange) {
         const pdfName = req.params.pdfName && `${req.params.pdfName}.pdf`;
         const file = {
           filename: pdfName || 'exported.pdf',
-          content: smtpenable ? PdfBuffer : undefined, //fs.readFileSync('./exports/exported_file_1223.pdf'),
+          content: smtpenable ? PdfBuffer : undefined,
           data: smtpenable ? undefined : PdfBuffer,
         };
 

apps/OpenSignServer/cloud/parsefunction/updateToPublicTemplate.js

@@ -0,0 +1,63 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+async function updateTemplate(template, isJwt = false) {
+  try {
+    if (template?.Id) {
+      const updateTemplate = new Parse.Object('contracts_Template');
+      updateTemplate.id = template.Id;
+
+      const isPublic = template?.IsPublic !== undefined ? template?.IsPublic : false;
+      if (template?.IsPublic !== undefined) {
+        updateTemplate.set('IsPublic', isPublic);
+      }
+
+      let updateTemplateRes;
+      if (isJwt) {
+        updateTemplateRes = await updateTemplate.save(null, { useMasterKey: true });
+      } else {
+        updateTemplateRes = await updateTemplate.save();
+      }
+      return updateTemplateRes;
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_QUERY, 'Please provide Id.');
+    }
+  } catch (err) {
+    console.log('err in update template', err);
+    throw err;
+  }
+}
+export default async function updateToPublicTemplate(request) {
+  const jwttoken = request.headers.jwttoken || '';
+  const template = { Id: request.params.templateId, IsPublic: request.params?.IsPublic };
+
+  try {
+    if (request.user) {
+      return await updateTemplate(template);
+    } else if (jwttoken) {
+      const jwtDecode = parseJwt(jwttoken);
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        return await updateTemplate(template, true);
+      } else {
+        throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid token');
+      }
+    } else {
+      throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'Invalid session token');
+    }
+  } catch (err) {
+    console.log('err in get signers', err);
+    throw err;
+  }
+}

apps/OpenSignServer/cloud/parsefunction/updateTourStatus.js

@@ -0,0 +1,58 @@
+import { parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
+
+export default async function updateTourStatus(request) {
+  const tourstatus = request.params.TourStatus;
+  const extUserId = request.params.ExtUserId;
+  const jwttoken = request?.headers?.jwttoken || '';
+  if (request.user) {
+    try {
+      const updateUser = new Parse.Object('contracts_Users');
+      updateUser.id = extUserId;
+      updateUser.set('TourStatus', tourstatus);
+      const res = await updateUser.save();
+      return res;
+    } catch (err) {
+      console.log('Err ', err);
+      const code = err?.code || 400;
+      const msg = err?.message || 'Something went wrong.';
+      throw new Parse.Error(code, msg);
+    }
+  } else if (jwttoken) {
+    const jwtDecode = parseJwt(jwttoken);
+    if (jwtDecode?.user_email) {
+      const userCls = new Parse.Query(Parse.User);
+      userCls.equalTo('email', jwtDecode?.user_email);
+      const userRes = await userCls.first({ useMasterKey: true });
+      const userId = userRes?.id;
+      const tokenQuery = new Parse.Query('appToken');
+      tokenQuery.equalTo('userId', {
+        __type: 'Pointer',
+        className: '_User',
+        objectId: userId,
+      });
+      const appRes = await tokenQuery.first({ useMasterKey: true });
+      const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+      if (decoded?.user_email) {
+        try {
+          const updateUser = new Parse.Object('contracts_Users');
+          updateUser.id = extUserId;
+          updateUser.set('TourStatus', tourstatus);
+          const res = await updateUser.save(null, { useMasterKey: true });
+          return res;
+        } catch (err) {
+          console.log('Err ', err);
+          const code = err?.code || 400;
+          const msg = err?.message || 'Something went wrong.';
+          throw new Parse.Error(code, msg);
+        }
+      } else {
+        return { status: 'error', result: 'Invalid token!' };
+      }
+    } else {
+      return { status: 'error', result: 'Invalid token!' };
+    }
+  } else {
+    throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'User is not authenticated.');
+  }
+}