Added external watchers for esign sessions

Author: chris-adam

CHANGES.rst

@@ -25,6 +25,8 @@ Changelog
   [gbastien]
 - Avoided duplicated filenames and kept files ordering in session.
   [sgeulette]
+- Added external watchers for esign sessions.
+  [chris-adam]
 
 1.0a2 (2026-02-06)
 ------------------

src/imio/esign/browser/settings.py

@@ -1,6 +1,8 @@
 # -*- coding: utf-8 -*-
 
+from collective.behavior.talcondition.utils import _evaluateExpression
 from imio.esign import _
+from plone import api
 from plone.app.registry.browser.controlpanel import ControlPanelFormWrapper
 from plone.app.registry.browser.controlpanel import RegistryEditForm
 from plone.app.z3cform.wysiwyg import WysiwygFieldWidget
@@ -10,6 +12,8 @@
 from zope.interface import Interface
 from zope.interface import Invalid
 
+import re
+
 
 def validate_vat_number(va_nb):
     """Validate the VAT number format. It should start with BE followed by 10 digits,
@@ -39,6 +43,37 @@ def validate_vat_number(va_nb):
     return True
 
 
+def validate_external_watchers(tal_expression):
+    """Validate external watchers is a valid TAL expression with valid email addresses."""
+
+    if not tal_expression or not tal_expression.strip():
+        return True
+
+    try:
+        portal = api.portal.get()
+    except Exception:
+        return True
+
+    if portal is None:
+        return True
+
+    try:
+        result = _evaluateExpression(portal, expression=tal_expression, raise_on_error=True)
+    except Exception as e:
+        raise Invalid(_("Invalid TAL expression: %s") % str(e))
+
+    if not result:
+        return True
+
+    email_re = re.compile(r'^[^@\s]+@[^@\s]+\.[^@\s]+$')
+    for email in result.split(","):
+        email = email.strip()
+        if email and not email_re.match(email):
+            raise Invalid(_("Invalid email address: %s") % email)
+
+    return True
+
+
 class IImioEsignSettings(Interface):
 
     enabled = schema.Bool(
@@ -103,6 +138,14 @@ class IImioEsignSettings(Interface):
         required=True,
     )
 
+    external_watchers = schema.TextLine(
+        title=_("External watchers"),
+        description=_("TAL expression returning a list of comma-separated email addresses."),
+        constraint=validate_external_watchers,
+        required=False,
+        default=u"string:",
+    )
+
 
 class ImioEsignSettings(RegistryEditForm):
     schema = IImioEsignSettings

src/imio/esign/config.py

@@ -1,5 +1,6 @@
 # -*- coding: utf-8 -*-
 
+from collective.behavior.talcondition.utils import _evaluateExpression
 from plone import api
 
 
@@ -39,6 +40,14 @@ def get_registry_max_session_size(default=100):
     return api.portal.get_registry_record("imio.esign.max_session_size", default=default)
 
 
+def get_registry_external_watchers():
+    value = api.portal.get_registry_record("imio.esign.external_watchers", default="")
+    value = _evaluateExpression(api.portal.get(), value)
+    if not value:
+        return []
+    return [ew.strip() for ew in value.split(",") if ew.strip()]
+
+
 def set_registry_enabled(value):
     api.portal.set_registry_record("imio.esign.enabled", value)
 
@@ -75,6 +84,10 @@ def set_registry_max_session_size(value):
     api.portal.set_registry_record("imio.esign.max_session_size", value)
 
 
+def set_registry_external_watchers(value):
+    api.portal.set_registry_record("imio.esign.external_watchers", value)
+
+
 SIGNERS_EMAIL_CONTENT = u"""
 <meta charset="UTF-8"><tal:global>
 <p style="font-weight: bold;" tal:condition="nothing">!! Attention: ne pas modifier ceci directement mais passer

src/imio/esign/utils.py

@@ -4,6 +4,7 @@
 from imio.esign import _tr as _
 from imio.esign import API_ROOT_URL
 from imio.esign import logger
+from imio.esign.config import get_registry_external_watchers
 from imio.esign.config import get_registry_file_url
 from imio.esign.config import get_registry_max_session_size
 from imio.esign.config import get_registry_seal_code
@@ -151,6 +152,9 @@ def create_external_session(session_id, esign_root_url=None):
     vat_number = get_registry_vat_number(default="BE0000000097")
     data_payload["commonData"]["vatNumber"] = vat_number
 
+    watchers = list(session.get("watchers", []))
+    external_watchers = get_registry_external_watchers()
+    watchers.extend([ew for ew in external_watchers if ew not in watchers])
     signers = [fdic["email"] for fdic in session["signers"]]
     if signers:
         data_payload["signData"] = {
@@ -160,8 +164,8 @@ def create_external_session(session_id, esign_root_url=None):
         sign_code = get_registry_sign_code()
         if sign_code:
             data_payload["signData"]["signCode"] = sign_code
-        if session.get("watchers", ()):
-            data_payload["signData"]["watchers"] = list(session["watchers"])
+        if watchers:
+            data_payload["signData"]["watchers"] = watchers
 
     if session["seal"]:
         seal_email = get_registry_seal_email()
@@ -176,7 +180,7 @@ def create_external_session(session_id, esign_root_url=None):
             "users": [seal_email],
             # "placeholderName": "SCEAU",  # default
             "acroform": True,
-            "watchers": list(session.get("watchers", [])),
+            "watchers": watchers,
             "sealCode": seal_code,
         }