Configuración del Espacio de Trabajo

GET /workspace/{workspace_id}/settings

curl -X GET "https://api.firma.dev/functions/v1/signing-request-api/workspace/123e4567-e89b-12d3-a456-426614174000/settings" \
 -H "Authorization: Bearer YOUR_API_KEY"

{
  "workspace_id": "123e4567-e89b-12d3-a456-426614174000",
  "signing_request_email_header": "You've been invited to sign a document",
  "signing_request_email_body": "Please review and sign the document at your earliest convenience. If you have any questions, contact our team.",
  "team_email": "support@yourcompany.com",
  "timezone": "America/New_York"
}

X-RateLimit-Limit: 200
X-RateLimit-Remaining: 199
X-RateLimit-Reset: 2026-08-07T12:35:00.000Z

PUT /workspace/{workspace_id}/settings

{
  "signing_request_email_header": "You've been invited to sign a document",
  "signing_request_email_body": "Please review and sign the document at your earliest convenience.",
  "team_email": "support@yourcompany.com",
  "timezone": "America/New_York"
}

curl -X PUT "https://api.firma.dev/functions/v1/signing-request-api/workspace/123e4567-e89b-12d3-a456-426614174000/settings" \
 -H "Authorization: Bearer YOUR_API_KEY" \
 -H "Content-Type: application/json" \
 -d '{
    "signing_request_email_header": "Action Required: Sign Your Agreement",
    "signing_request_email_body": "Hello! We need your signature on an important document. Please click the link below to review and sign. Contact us at support@acmecorp.com if you have questions.",
    "team_email": "support@acmecorp.com",
    "timezone": "America/Los_Angeles"
  }'

{
  "workspace_id": "123e4567-e89b-12d3-a456-426614174000",
  "signing_request_email_header": "Action Required: Sign Your Agreement",
  "signing_request_email_body": "Hello! We need your signature on an important document. Please click the link below to review and sign. Contact us at support@acmecorp.com if you have questions.",
  "team_email": "support@acmecorp.com",
  "timezone": "America/Los_Angeles"
}

X-RateLimit-Limit: 120
X-RateLimit-Remaining: 119
X-RateLimit-Reset: 2026-08-07T12:35:00.000Z

import express from 'express'
import fetch from 'node-fetch'

const app = express()
const FIRMA_API_BASE = process.env.FIRMA_API_BASE || 'https://api.firma.dev/functions/v1/signing-request-api'
const API_KEY = process.env.FIRMA_API_KEY

app.get('/api/workspace/:workspaceId/settings', async (req, res) => {
  const { workspaceId } = req.params
  
  try {
    const response = await fetch(
      `${FIRMA_API_BASE}/workspace/${workspaceId}/settings`,
      {
        headers: {
          'Authorization': `Bearer ${API_KEY}`
        }
      }
    )
    
    if (!response.ok) {
      const error = await response.text()
      return res.status(response.status).json({ error })
    }
    
    const settings = await response.json()
    res.json(settings)
  } catch (error) {
    console.error('Error al obtener la configuración del espacio de trabajo:', error)
    res.status(500).json({ error: 'Error al recuperar la configuración' })
  }
})

app.listen(3000)

app.put('/api/workspace/:workspaceId/settings', express.json(), async (req, res) => {
  const { workspaceId } = req.params
  const { signing_request_email_header, signing_request_email_body, team_email, timezone } = req.body
  
  // Validar entrada
  if (team_email && !isValidEmail(team_email)) {
    return res.status(400).json({ error: 'Formato de correo inválido' })
  }
  
  try {
    const response = await fetch(
      `${FIRMA_API_BASE}/workspace/${workspaceId}/settings`,
      {
        method: 'PUT',
        headers: {
          'Authorization': `Bearer ${API_KEY}`,
          'Content-Type': 'application/json'
        },
        body: JSON.stringify({
          signing_request_email_header,
          signing_request_email_body,
          team_email,
          timezone
        })
      }
    )
    
    if (!response.ok) {
      const error = await response.text()
      return res.status(response.status).json({ error })
    }
    
    const settings = await response.json()
    res.json(settings)
  } catch (error) {
    console.error('Error al actualizar la configuración del espacio de trabajo:', error)
    res.status(500).json({ error: 'Error al actualizar la configuración' })
  }
})

function isValidEmail(email) {
  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)
}

from flask import Flask, jsonify
import os
import requests

app = Flask(__name__)

FIRMA_API_BASE = os.getenv('FIRMA_API_BASE', 'https://api.firma.dev/functions/v1/signing-request-api')
API_KEY = os.getenv('FIRMA_API_KEY')

@app.route('/api/workspace/<workspace_id>/settings', methods=['GET'])
def get_workspace_settings(workspace_id):
    try:
        response = requests.get(
            f'{FIRMA_API_BASE}/workspace/{workspace_id}/settings',
            headers={
                'Authorization': f'Bearer {API_KEY}'
            }
        )
        response.raise_for_status()
        return jsonify(response.json())
    except requests.exceptions.RequestException as e:
        return jsonify({'error': 'Error al recuperar la configuración'}), 500

if __name__ == '__main__':
    app.run(port=3000)

from flask import request
import re

@app.route('/api/workspace/<workspace_id>/settings', methods=['PUT'])
def update_workspace_settings(workspace_id):
    data = request.json
    
    # Validar correo si se proporcionó
    if 'team_email' in data:
        if not re.match(r'^[^\s@]+@[^\s@]+\.[^\s@]+$', data['team_email']):
            return jsonify({'error': 'Formato de correo inválido'}), 400
    
    try:
        response = requests.put(
            f'{FIRMA_API_BASE}/workspace/{workspace_id}/settings',
            headers={
                'Authorization': f'Bearer {API_KEY}',
                'Content-Type': 'application/json'
            },
            json={
                'signing_request_email_header': data.get('signing_request_email_header'),
                'signing_request_email_body': data.get('signing_request_email_body'),
                'team_email': data.get('team_email'),
                'timezone': data.get('timezone')
            }
        )
        response.raise_for_status()
        return jsonify(response.json())
    except requests.exceptions.RequestException as e:
        return jsonify({'error': 'Error al actualizar la configuración'}), 500

import { useState, useEffect } from 'react'

function WorkspaceSettings({ workspaceId }) {
  const [settings, setSettings] = useState(null)
  const [loading, setLoading] = useState(true)
  const [saving, setSaving] = useState(false)
  const [error, setError] = useState(null)
  
  // Cargar configuración actual
  useEffect(() => {
    async function loadSettings() {
      try {
        const response = await fetch(`/api/workspace/${workspaceId}/settings`)
        if (!response.ok) throw new Error('Error al cargar la configuración')
        const data = await response.json()
        setSettings(data)
      } catch (err) {
        setError(err.message)
      } finally {
        setLoading(false)
      }
    }
    loadSettings()
  }, [workspaceId])
  
  // Actualizar configuración
  async function handleSave(updatedSettings) {
    setSaving(true)
    setError(null)
    
    try {
      const response = await fetch(`/api/workspace/${workspaceId}/settings`, {
        method: 'PUT',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(updatedSettings)
      })
      
      if (!response.ok) throw new Error('Error al guardar la configuración')
      
      const data = await response.json()
      setSettings(data)
    } catch (err) {
      setError(err.message)
    } finally {
      setSaving(false)
    }
  }
  
  if (loading) return <div>Cargando configuración...</div>
  if (error) return <div>Error: {error}</div>
  
  return (
    <div>
      <h2>Configuración del Espacio de Trabajo</h2>
      
      <form onSubmit={(e) => {
        e.preventDefault()
        const formData = new FormData(e.target)
        handleSave({
          email_header: formData.get('email_header'),
          email_body: formData.get('email_body'),
          team_email: formData.get('team_email'),
          timezone: formData.get('timezone')
        })
      }}>
        <div>
          <label>Encabezado del correo</label>
          <input
            name="signing_request_email_header"
            defaultValue={settings.email_header}
            maxLength={500}
          />
        </div>
        
        <div>
          <label>Cuerpo del correo</label>
          <textarea
            name="signing_request_email_body"
            defaultValue={settings.email_body}
            maxLength={50000}
            rows={5}
          />
        </div>
        
        <div>
          <label>Correo del equipo</label>
          <input
            name="team_email"
            type="email"
            defaultValue={settings.team_email}
          />
        </div>
        
        <div>
          <label>Zona horaria</label>
          <select name="timezone" defaultValue={settings.timezone}>
            <option value="America/New_York">Hora del Este</option>
            <option value="America/Chicago">Hora Central</option>
            <option value="America/Denver">Hora de Montaña</option>
            <option value="America/Los_Angeles">Hora del Pacífico</option>
            <option value="Europe/London">Londres</option>
            <option value="Europe/Paris">París</option>
            <option value="Asia/Tokyo">Tokio</option>
            {/* Agrega más zonas horarias según sea necesario */}
          </select>
        </div>
        
        <button type="submit" disabled={saving}>
          {saving ? 'Guardando...' : 'Guardar configuración'}
        </button>
      </form>
    </div>
  )
}

Encabezado: "Acción requerida: Revisa y firma tu contrato"
Cuerpo: "Gracias por elegir nuestros servicios. Por favor revisa y firma el contrato adjunto a tu conveniencia. Si tienes preguntas o inquietudes, contáctanos en contratos@empresa.com o llama al (555) 123-4567."

Encabezado: "Tus documentos de propiedad están listos para firmar"
Cuerpo: "Tus documentos están listos para firma electrónica. Por favor revísalos cuidadosamente antes de firmar. Contacta a tu agente en agente@inmobiliaria.com si necesitas aclaración sobre algún término."

Encabezado: "¡Bienvenido a [Empresa]! Completa tus documentos de incorporación"
Cuerpo: "¡Bienvenido al equipo! Como parte de tu incorporación, por favor revisa y firma los documentos adjuntos. Si tienes preguntas, escríbenos a rrhh@empresa.com. ¡Estamos emocionados de tenerte a bordo!"

Encabezado: "Documento listo para tu firma"
Cuerpo: "Un documento requiere tu firma. Por favor revisa el contenido y firma electrónicamente. Contáctanos en soporte@empresa.com si tienes preguntas."

X-RateLimit-Limit: 200          # Máximo de solicitudes por minuto
X-RateLimit-Remaining: 195       # Restantes en la ventana actual
X-RateLimit-Reset: 2026-08-07T12:35:00.000Z    # Marca de tiempo de reinicio

429 Too Many Requests

{
  "error": "Invalid email format",
  "code": "VALIDATION_ERROR"
}

{
  "error": "Invalid API key",
  "code": "INVALID_API_KEY"
}

{
  "error": "Access denied",
  "code": "ACCESS_DENIED"
}

{
  "error": "Workspace not found",
  "code": "NOT_FOUND"
}

{
  "error": "Rate limit exceeded",
  "code": "RATE_LIMIT_EXCEEDED",
  "details": {
    "limit": 120,
    "window": "1m",
    "current_count": 121,
    "retry_after_seconds": 45
  }
}

const settingsCache = new Map()
const CACHE_TTL = 5 * 60 * 1000 // 5 minutos

async function getWorkspaceSettings(workspaceId) {
  const cached = settingsCache.get(workspaceId)
  if (cached && Date.now() - cached.timestamp < CACHE_TTL) {
    return cached.settings
  }
  
  const settings = await fetchWorkspaceSettings(workspaceId)
  settingsCache.set(workspaceId, {
    settings,
    timestamp: Date.now()
  })
  
  return settings
}

async function updateSettings(userId, workspaceId, updates) {
  // Verificar que el usuario tiene acceso de administrador al espacio de trabajo
  const hasAccess = await checkWorkspaceAccess(userId, workspaceId, 'admin')
  if (!hasAccess) {
    throw new Error('Prohibido: Permisos insuficientes')
  }
  
  // Actualizar configuración
  return await updateWorkspaceSettings(workspaceId, updates)
}

async function updateWithAudit(workspaceId, userId, updates) {
  const oldSettings = await getWorkspaceSettings(workspaceId)
  const newSettings = await updateWorkspaceSettings(workspaceId, updates)
  
  // Registrar el cambio
  await auditLog.create({
    workspace_id: workspaceId,
    user_id: userId,
    action: 'workspace_settings_updated',
    changes: {
      old: oldSettings,
      new: newSettings
    },
    timestamp: new Date()
  })
  
  return newSettings
}

async function createWorkspace(name, ownerId) {
  const workspace = await db.workspaces.create({ name, owner_id: ownerId })
  
  // Establecer configuración predeterminada
  await updateWorkspaceSettings(workspace.id, {
    email_header: "Has sido invitado a firmar un documento",
    email_body: "Por favor revisa y firma el documento a tu conveniencia.",
    team_email: "soporte@tuempresa.com",
    timezone: "America/New_York"
  })
  
  return workspace
}