Skip to content

docs(turbosign): later kiosk signer URLs aren't issued early (not 'can't be created') - #219

Merged
amitsharma-turbodocx merged 1 commit into
developfrom
fix/214-kiosk-url-wording
Oct 21, 2026
Merged

amitsharma-turbodocx merged 1 commit into
developfrom
fix/214-kiosk-url-wording

Conversation

@yacinekahlerras-turbodocx

@yacinekahlerras-turbodocx yacinekahlerras-turbodocx commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Closes #214

Why

The "Mint just in time, never ahead" warning said a later signer's URL "can't be created until it is genuinely their turn". It already exists. Every recipient's access token is generated with the document, and for passcode or no-verification signers the signing URL is that same reusable token link. What TurboSign enforces is that it won't issue the URL out of turn (409 RecipientNotInTurn), and it refuses an out-of-turn signature.

What

One sentence in build/sequential-signers.md: "TurboSign enforces the order: it won't issue a later signer's URL until it is their turn, and it refuses an out-of-turn signature even with a valid link." The same fix for the SDK sample's kiosk card is linked below.

Verified

Against a local TurboDocx API and signing page, with a 2-signer sequential document:

  • Signer 2's access token is already in the database right after creation.
  • Asking for signer 2's URL early returns 409 RecipientNotInTurn.
  • Opening signer 2's real link early shows "It is not your turn to sign this document yet…", and the page offers no way to sign.
  • After signer 1 signs, the issued URL carries the same token that was stored at creation.
  • On the built site, the warning renders with the new text and "can't be created" is gone. No overflow at 390px.
  • docusaurus build passes. The broken-anchor list is the same 8 pre-existing /docs/SDKs/*#error-handling entries.

Related: SDK sample copy fix TurboDocx/SDK#103.

🤖 Generated with Claude Code

…n't be created' (#214)

Every recipient's access token exists from document creation; for passcode and
no-verification signers the signing URL is that reusable token link. TurboSign
refuses to issue it out of turn (409 RecipientNotInTurn) and refuses an
out-of-turn signature even with a valid link.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This branch was successfully deployed

1 active deployment
preview — a8322f7e Deployed Oct 21, 2026 by github-actions[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Kiosk docs say later signer URLs "can't be created"; the API just won't issue them yet

3 participants