Public programmatic e-sign API gateway (API_SIGNATURE scope)

Shipped

June 10, 2026 at 4:13 AM UTC

Author

Kamo

Commit

7e64af1

Add /api/public/esign/** to PublicApiController: validates the org API key, requires the API_SIGNATURE scope, rate-limits, and forwards to ESigService's internal envelope API (/api/esig/internal/**) with X-Internal-Auth + X-Org-Id. Mirrors the subscription-catalog gateway precedent.