🔖(minor) release 2.3.0

Added:
- 💄(frontend) add error pages
- 🔒️ Manage unsafe attachments
- ✨(frontend) Custom block quote with export
- ✨(frontend) add open source section homepage

Changed:
- 🛂(frontend) Restore version visibility
- 📝(doc) minor README.md formatting and wording enhancements
- ♻️Stop setting a default title on doc creation
- ♻️(frontend) misc ui improvements

Fixed:
- 🐛(backend) allow any type of extensions for media download
- ♻️(frontend) improve table pdf rendering

.github/workflows/crowdin_download.yml

@@ -7,10 +7,11 @@ on:
       - 'release/**'
 
 jobs:
-  install-front:
-    uses: ./.github/workflows/front-dependencies-installation.yml
+  install-dependencies:
+    uses: ./.github/workflows/dependencies.yml
     with:
       node_version: '20.x'
+      with-front-dependencies-installation: true
 
   synchronize-with-crowdin:
     runs-on: ubuntu-latest

.github/workflows/crowdin_upload.yml

@@ -7,13 +7,15 @@ on:
       - main
 
 jobs:
-  install-front:
-    uses: ./.github/workflows/front-dependencies-installation.yml
+  install-dependencies:
+    uses: ./.github/workflows/dependencies.yml
     with:
       node_version: '20.x'
+      with-front-dependencies-installation: true
+      with-build_mails: true
 
   synchronize-with-crowdin:
-    needs: install-front
+    needs: install-dependencies
     runs-on: ubuntu-latest
 
     steps:
@@ -29,6 +31,13 @@ jobs:
       - name: Install development dependencies
         run: pip install --user .
         working-directory: src/backend
+      - name: Restore the mail templates
+        uses: actions/cache@v4
+        id: mail-templates
+        with:
+          path: "src/backend/core/templates/mail"
+          key: mail-templates-${{ hashFiles('src/mail/mjml') }}
+          fail-on-cache-miss: true
       - name: Install gettext
         run: |
           sudo apt-get update

.github/workflows/dependencies.yml

@@ -0,0 +1,85 @@
+name: Dependency reusable workflow
+
+on:
+  workflow_call:
+    inputs:
+      node_version:
+        required: false
+        default: '20.x'
+        type: string
+      with-front-dependencies-installation:
+        type: boolean
+        default: false
+      with-build_mails:
+        type: boolean
+        default: false
+
+jobs:
+  front-dependencies-installation:
+    if: ${{ inputs.with-front-dependencies-installation == true }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Restore the frontend cache
+        uses: actions/cache@v4
+        id: front-node_modules
+        with:
+          path: "src/frontend/**/node_modules"
+          key: front-node_modules-${{ hashFiles('src/frontend/**/yarn.lock') }}
+      - name: Setup Node.js
+        if: steps.front-node_modules.outputs.cache-hit != 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.node_version }}
+      - name: Install dependencies
+        if: steps.front-node_modules.outputs.cache-hit != 'true'
+        run: cd src/frontend/ && yarn install --frozen-lockfile
+      - name: Cache install frontend
+        if: steps.front-node_modules.outputs.cache-hit != 'true'
+        uses: actions/cache@v4
+        with:
+          path: "src/frontend/**/node_modules"
+          key: front-node_modules-${{ hashFiles('src/frontend/**/yarn.lock') }}
+
+  build-mails:
+    if: ${{ inputs.with-build_mails == true }}
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: src/mail
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Restore the mail templates
+        uses: actions/cache@v4
+        id: mail-templates
+        with:
+          path: "src/backend/core/templates/mail"
+          key: mail-templates-${{ hashFiles('src/mail/mjml') }}
+
+      - name: Setup Node.js
+        if: steps.mail-templates.outputs.cache-hit != 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.node_version }}
+
+      - name: Install yarn
+        if: steps.mail-templates.outputs.cache-hit != 'true'
+        run: npm install -g yarn
+
+      - name: Install node dependencies
+        if: steps.mail-templates.outputs.cache-hit != 'true'
+        run: yarn install --frozen-lockfile
+
+      - name: Build mails
+        if: steps.mail-templates.outputs.cache-hit != 'true'
+        run: yarn build
+
+      - name: Cache mail templates
+        if: steps.mail-templates.outputs.cache-hit != 'true'
+        uses: actions/cache@v4
+        with:
+          path: "src/backend/core/templates/mail"
+          key: mail-templates-${{ hashFiles('src/mail/mjml') }}

.github/workflows/docker-hub.yml

@@ -6,7 +6,6 @@ on:
   push:
     branches:
       - 'main'
-      - 'feature/blocknote-ai'
     tags:
       - 'v*'
   pull_request:

.github/workflows/front-dependencies-installation.yml

@@ -1,36 +0,0 @@
-name: Install frontend installation reusable workflow
-
-on:
-  workflow_call:
-    inputs:
-      node_version:
-        required: false
-        default: '20.x'
-        type: string
-
-jobs:
-  front-dependencies-installation:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Restore the frontend cache
-        uses: actions/cache@v4
-        id: front-node_modules
-        with:
-          path: "src/frontend/**/node_modules"
-          key: front-node_modules-${{ hashFiles('src/frontend/**/yarn.lock') }}
-      - name: Setup Node.js
-        if: steps.front-node_modules.outputs.cache-hit != 'true'
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ inputs.node_version }}
-      - name: Install dependencies
-        if: steps.front-node_modules.outputs.cache-hit != 'true'
-        run: cd src/frontend/ && yarn install --frozen-lockfile
-      - name: Cache install frontend
-        if: steps.front-node_modules.outputs.cache-hit != 'true'
-        uses: actions/cache@v4
-        with:
-          path: "src/frontend/**/node_modules"
-          key: front-node_modules-${{ hashFiles('src/frontend/**/yarn.lock') }}

.github/workflows/impress-frontend.yml

@@ -10,13 +10,14 @@ on:
 
 jobs:
 
-  install-front:
-    uses: ./.github/workflows/front-dependencies-installation.yml
+  install-dependencies:
+    uses: ./.github/workflows/dependencies.yml
     with:
       node_version: '20.x'
+      with-front-dependencies-installation: true
 
   test-front:
-    needs: install-front
+    needs: install-dependencies
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -39,7 +40,7 @@ jobs:
 
   lint-front:
     runs-on: ubuntu-latest
-    needs: install-front
+    needs: install-dependencies
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -60,7 +61,7 @@ jobs:
 
   test-e2e-chromium:
     runs-on: ubuntu-latest
-    needs: install-front
+    needs: install-dependencies
     timeout-minutes: 20
     steps:
       - name: Checkout repository
@@ -87,28 +88,6 @@ jobs:
       - name: Start Docker services
         run: make bootstrap FLUSH_ARGS='--no-input' cache=
 
-      # Tool to wait for a service to be ready
-      - name: Install Dockerize
-        run: |
-          curl -sSL https://github.com/jwilder/dockerize/releases/download/v0.8.0/dockerize-linux-amd64-v0.8.0.tar.gz | sudo tar -C /usr/local/bin -xzv
-
-      - name: Wait for services to be ready
-        run: |
-          printf "Minio check...\n"
-          dockerize -wait tcp://localhost:9000 -timeout 20s
-          printf "Keyclock check...\n"
-          dockerize -wait tcp://localhost:8080 -timeout 20s
-          printf "Server collaboration check...\n"
-          dockerize -wait tcp://localhost:4444 -timeout 20s
-          printf "Ngnix check...\n"
-          dockerize -wait tcp://localhost:8083 -timeout 20s
-          printf "DRF check...\n"
-          dockerize -wait tcp://localhost:8071 -timeout 20s
-          printf "Postgres Keyclock check...\n"
-          dockerize -wait tcp://localhost:5433 -timeout 20s
-          printf "Postgres back check...\n"
-          dockerize -wait tcp://localhost:15432 -timeout 20s
-
       - name: Run e2e tests
         run: cd src/frontend/ && yarn e2e:test --project='chromium'
 

.github/workflows/impress.yml

@@ -9,6 +9,11 @@ on:
       - "*"
 
 jobs:
+  install-dependencies:
+    uses: ./.github/workflows/dependencies.yml
+    with:
+      with-build_mails: true
+
   lint-git:
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request' # Makes sense only for pull requests
@@ -56,46 +61,6 @@ jobs:
             exit 1
           fi
 
-  build-mails:
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: src/mail
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Install Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "18"
-
-      - name: Restore the mail templates
-        uses: actions/cache@v4
-        id: mail-templates
-        with:
-          path: "src/backend/core/templates/mail"
-          key: mail-templates-${{ hashFiles('src/mail/mjml') }}
-
-      - name: Install yarn
-        if: steps.mail-templates.outputs.cache-hit != 'true'
-        run: npm install -g yarn
-
-      - name: Install node dependencies
-        if: steps.mail-templates.outputs.cache-hit != 'true'
-        run: yarn install --frozen-lockfile
-
-      - name: Build mails
-        if: steps.mail-templates.outputs.cache-hit != 'true'
-        run: yarn build
-
-      - name: Cache mail templates
-        if: steps.mail-templates.outputs.cache-hit != 'true'
-        uses: actions/cache@v4
-        with:
-          path: "src/backend/core/templates/mail"
-          key: mail-templates-${{ hashFiles('src/mail/mjml') }}
-
   lint-back:
     runs-on: ubuntu-latest
     defaults:
@@ -121,7 +86,7 @@ jobs:
 
   test-back:
     runs-on: ubuntu-latest
-    needs: build-mails
+    needs: install-dependencies
 
     defaults:
       run:
@@ -169,6 +134,7 @@ jobs:
         with:
           path: "src/backend/core/templates/mail"
           key: mail-templates-${{ hashFiles('src/mail/mjml') }}
+          fail-on-cache-miss: true
 
       - name: Start MinIO
         run: |

CHANGELOG.md

@@ -6,11 +6,48 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-
 ## [Unreleased]
 
+## [2.3.0] - 2025-03-03
+
 ## Added
+
+- 💄(frontend) add error pages #643
+- 🔒️ Manage unsafe attachments #663
+- ✨(frontend) Custom block quote with export #646
+- ✨(frontend) add open source section homepage #666
+
+## Changed
+
+- 🛂(frontend) Restore version visibility #629
+- 📝(doc) minor README.md formatting and wording enhancements
+- ♻️Stop setting a default title on doc creation #634
+- ♻️(frontend) misc ui improvements #644
+
+## Fixed
+
+- 🐛(backend) allow any type of extensions for media download #671
+- ♻️(frontend) improve table pdf rendering
+
+
+## [2.2.0] - 2025-02-10
+
+## Added
+
 - 📝(doc) Add security.md and codeofconduct.md #604
+- ✨(frontend) add home page #608
+- ✨(frontend) cursor display on activity #609
+- ✨(frontend) Add export page break #623
+
+## Changed
+
+- 🔧(backend) make AI feature reach configurable #628
+
+## Fixed
+
+- 🌐(CI) Fix email partially translated #616
+- 🐛(frontend) fix cursor breakline #609
+- 🐛(frontend) fix style pdf export #609
 
 ## [2.1.0] - 2025-01-29
 
@@ -27,7 +64,7 @@ and this project adheres to
 ## Changed
 
 - 💄(frontend) add abilities on doc row #581
-- 💄(frontend) improve DocsGridItem responsive padding  #582
+- 💄(frontend) improve DocsGridItem responsive padding #582
 - 🔧(backend) Bump maximum page size to 200 #516
 - 📝(doc) Improve Read me #558
 
@@ -39,7 +76,6 @@ and this project adheres to
 
 - 🔥(backend) remove "content" field from list serializer # 516
 
-
 ## [2.0.1] - 2025-01-17
 
 ## Fixed
@@ -94,12 +130,11 @@ and this project adheres to
 
 - ⚡️(e2e) reduce flakiness on e2e tests #511
 
-
 ## Fixed
+
 - 🐛(frontend) update doc editor height #481
 - 💄(frontend) add doc search #485
 
-
 ## [1.9.0] - 2024-12-11
 
 ## Added
@@ -121,21 +156,18 @@ and this project adheres to
 - 🐛(frontend) Fix hidden menu on Firefox #468
 - 🐛(backend) fix sanitize problem IA #490
 
-
 ## [1.8.2] - 2024-11-28
 
 ## Changed
 
 - ♻️(SW) change strategy html caching #460
 
-
 ## [1.8.1] - 2024-11-27
 
 ## Fixed
 
 - 🐛(frontend) link not clickable and flickering firefox #457
 
-
 ## [1.8.0] - 2024-11-25
 
 ## Added
@@ -164,7 +196,6 @@ and this project adheres to
 - 🐛(frontend) users have view access when revoked #387
 - 🐛(frontend) fix placeholder editable when double clicks #454
 
-
 ## [1.7.0] - 2024-10-24
 
 ## Added
@@ -192,7 +223,6 @@ and this project adheres to
 
 - 🔥(helm) remove infra related codes #366
 
-
 ## [1.6.0] - 2024-10-17
 
 ## Added
@@ -215,7 +245,6 @@ and this project adheres to
 - 🐛(backend) fix nginx docker container #340
 - 🐛(frontend) fix copy paste firefox #353
 
-
 ## [1.5.1] - 2024-10-10
 
 ## Fixed
@@ -250,7 +279,6 @@ and this project adheres to
 - 🔧(backend) fix configuration to avoid different ssl warning #297
 - 🐛(frontend) fix editor break line not working #302
 
-
 ## [1.4.0] - 2024-09-17
 
 ## Added
@@ -271,7 +299,6 @@ and this project adheres to
 - 🐛(backend) Fix forcing ID when creating a document via API endpoint #234
 - 🐛 Rebuild frontend dev container from makefile #248
 
-
 ## [1.3.0] - 2024-09-05
 
 ## Added
@@ -296,7 +323,6 @@ and this project adheres to
 
 - 🔥(frontend) remove saving modal #213
 
-
 ## [1.2.1] - 2024-08-23
 
 ## Changed
@@ -304,7 +330,6 @@ and this project adheres to
 - ♻️ Change ordering docs datagrid #195
 - 🔥(helm) use scaleway email #194
 
-
 ## [1.2.0] - 2024-08-22
 
 ## Added
@@ -328,14 +353,14 @@ and this project adheres to
 - ⚡️(CI) only e2e chrome mandatory #177
 
 ## Removed
-- 🔥(helm) remove htaccess #181
 
+- 🔥(helm) remove htaccess #181
 
 ## [1.1.0] - 2024-07-15
 
 ## Added
 
-- 🤡(demo) generate dummy documents on dev users #120 
+- 🤡(demo) generate dummy documents on dev users #120
 - ✨(frontend) create side modal component #134
 - ✨(frontend) Doc grid actions (update / delete) #136
 - ✨(frontend) Doc editor header information #137
@@ -346,12 +371,11 @@ and this project adheres to
 - ♻️(frontend) create a doc from a modal #132
 - ♻️(frontend) manage members from the share modal #140
 
-
 ## [1.0.0] - 2024-07-02
 
 ## Added
 
-- 🛂(frontend) Manage the document's right (#75) 
+- 🛂(frontend) Manage the document's right (#75)
 - ✨(frontend) Update document (#68)
 - ✨(frontend) Remove document (#68)
 - 🐳(docker) dockerize dev frontend (#63)
@@ -385,7 +409,6 @@ and this project adheres to
 - 💚(CI) Remove trigger workflow on push tags on CI (#68)
 - 🔥(frontend) Remove coming soon page (#121)
 
-
 ## [0.1.0] - 2024-05-24
 
 ## Added
@@ -393,8 +416,9 @@ and this project adheres to
 - ✨(frontend) Coming Soon page (#67)
 - 🚀 Impress, project to manage your documents easily and collaboratively.
 
-
-[unreleased]: https://github.com/numerique-gouv/impress/compare/v2.1.0...main
+[unreleased]: https://github.com/numerique-gouv/impress/compare/v2.3.0...main
+[v2.3.0]: https://github.com/numerique-gouv/impress/releases/v2.3.0
+[v2.2.0]: https://github.com/numerique-gouv/impress/releases/v2.2.0
 [v2.1.0]: https://github.com/numerique-gouv/impress/releases/v2.1.0
 [v2.0.1]: https://github.com/numerique-gouv/impress/releases/v2.0.1
 [v2.0.0]: https://github.com/numerique-gouv/impress/releases/v2.0.0

Makefile

@@ -44,7 +44,6 @@ COMPOSE_EXEC_APP    = $(COMPOSE_EXEC) app-dev
 COMPOSE_RUN         = $(COMPOSE) run --rm
 COMPOSE_RUN_APP     = $(COMPOSE_RUN) app-dev
 COMPOSE_RUN_CROWDIN = $(COMPOSE_RUN) crowdin crowdin
-WAIT_DB             = @$(COMPOSE_RUN) dockerize -wait tcp://$(DB_HOST):$(DB_PORT) -timeout 60s
 
 # -- Backend
 MANAGE              = $(COMPOSE_RUN_APP) python manage.py
@@ -81,12 +80,12 @@ bootstrap: \
 	data/static \
 	create-env-files \
 	build \
-	run-with-frontend \
 	migrate \
 	demo \
 	back-i18n-compile \
 	mails-install \
-	mails-build
+	mails-build \
+	run
 .PHONY: bootstrap
 
 # -- Docker/compose
@@ -109,7 +108,7 @@ build-yjs-provider: ## build the y-provider container
 
 build-frontend: cache ?=
 build-frontend: ## build the frontend container
-	@$(COMPOSE) build frontend-dev $(cache)
+	@$(COMPOSE) build frontend $(cache)
 .PHONY: build-frontend
 
 down: ## stop and remove containers, networks, images, and volumes
@@ -120,18 +119,17 @@ logs: ## display app-dev logs (follow mode)
 	@$(COMPOSE) logs -f app-dev
 .PHONY: logs
 
-run: ## start the wsgi (production) and development server
+run-backend: ## Start only the backend application and all needed services
 	@$(COMPOSE) up --force-recreate -d celery-dev
 	@$(COMPOSE) up --force-recreate -d y-provider
 	@$(COMPOSE) up --force-recreate -d nginx
-	@echo "Wait for postgresql to be up..."
-	@$(WAIT_DB)
-.PHONY: run
+.PHONY: run-backend
 
-run-with-frontend: ## Start all the containers needed (backend to frontend)
-	@$(MAKE) run
-	@$(COMPOSE) up --force-recreate -d frontend-dev
-.PHONY: run-with-frontend
+run: ## start the wsgi (production) and development server
+run: 
+	@$(MAKE) run-backend
+	@$(COMPOSE) up --force-recreate -d frontend
+.PHONY: run
 
 status: ## an alias for "docker compose ps"
 	@$(COMPOSE) ps
@@ -188,14 +186,12 @@ test-back-parallel: ## run all back-end tests in parallel
 makemigrations:  ## run django makemigrations for the impress project.
 	@echo "$(BOLD)Running makemigrations$(RESET)"
 	@$(COMPOSE) up -d postgresql
-	@$(WAIT_DB)
 	@$(MANAGE) makemigrations
 .PHONY: makemigrations
 
 migrate:  ## run django migrations for the impress project.
 	@echo "$(BOLD)Running migrations$(RESET)"
 	@$(COMPOSE) up -d postgresql
-	@$(WAIT_DB)
 	@$(MANAGE) migrate
 .PHONY: migrate
 
@@ -310,16 +306,16 @@ help:
 .PHONY: help
 
 # Front
-frontend-install: ## install the frontend locally
+frontend-development-install: ## install the frontend locally
 	cd $(PATH_FRONT_IMPRESS) && yarn
-.PHONY: frontend-install
+.PHONY: frontend-development-install
 
 frontend-lint: ## run the frontend linter
 	cd $(PATH_FRONT) && yarn lint
 .PHONY: frontend-lint
 
 run-frontend-development: ## Run the frontend in development mode
-	@$(COMPOSE) stop frontend-dev
+	@$(COMPOSE) stop frontend
 	cd $(PATH_FRONT_IMPRESS) && yarn dev
 .PHONY: run-frontend-development
 

README.md

@@ -23,6 +23,7 @@ Welcome to Docs! The open source document editor where your notes can become kno
 <img src="/docs/assets/docs_live_collaboration_light.gif" width="100%" align="center"/>
 
 ## Why use Docs ❓
+
 Docs is a collaborative text editor designed to address common challenges in knowledge building and sharing.
 
 ### Write
@@ -33,23 +34,31 @@ Docs is a collaborative text editor designed to address common challenges in kno
 *   ✨ Save time thanks to our AI actions (generate, sum up, correct, translate)
 
 ### Collaborate
-*   🤝 Collaborate in realtime with your team mates
-*   🔒 Granular access control to keep your information secure and shared with the right people
+*   🤝 Collaborate with your team in real time
+*   🔒 Granular access control to ensure your information is secure and only shared with the right people
 *   📑 Professional document exports in multiple formats (.odt, .doc, .pdf) with customizable templates
-*   📚 Built-in wiki functionality to transform your team's collaborative work into organized knowledge `ETA 02/2025`
+*   📚 Built-in wiki functionality to turn your team's collaborative work into organized knowledge `ETA 02/2025`
 
 ### Self-host
 *   🚀 Easy to install, scalable and secure alternative to Notion, Outline or Confluence
 
 ## Getting started 🔧
+
 ### Test it
+
 Test Docs on your browser by logging in on this [environment](https://impress-preprod.beta.numerique.gouv.fr/docs/0aa856e9-da41-4d59-b73d-a61cb2c1245f/)
+
 ```
 email: test.docs@yopmail.com
 password: I'd<3ToTestDocs
 ```
+
 ### Run it locally
+
+> ⚠️ Running Docs locally using the methods described below is for testing purposes only.  It is based on building Docs using Minio as the S3 storage solution: if you want to use Minio for production deployment of Docs, you will need to comply with Minio's AGPL-3.0 licence.
+
 **Prerequisite**
+
 Make sure you have a recent version of Docker and [Docker Compose](https://docs.docker.com/compose/install) installed on your laptop:
 
 ```shellscript
@@ -57,23 +66,22 @@ $ docker -v
 
 Docker version 20.10.2, build 2291f61
 
-$ docker compose -v
+$ docker compose version
 
-docker compose version 1.27.4, build 40524192
+Docker Compose version v2.32.4
 ```
 
 > ⚠️ You may need to run the following commands with sudo but this can be avoided by adding your user to the `docker` group.
 
 **Project bootstrap**
+
 The easiest way to start working on the project is to use GNU Make:
 
 ```shellscript
 $ make bootstrap FLUSH_ARGS='--no-input'
 ```
 
-This command builds the `app` container, installs dependencies, performs database migrations and compile translations. It's a good idea to use this
-
-command each time you are pulling code from the project repository to avoid dependency-related or migration-related issues.
+This command builds the `app` container, installs dependencies, performs database migrations and compile translations. It's a good idea to use this command each time you are pulling code from the project repository to avoid dependency-related or migration-related issues.
 
 Your Docker services should now be up and running 🎉
 
@@ -89,7 +97,7 @@ password: impress
 📝 Note that if you need to run them afterwards, you can use the eponym Make rule:
 
 ```shellscript
-$ make run-with-frontend
+$ make run
 ```
 
 ⚠️ For the frontend developer, it is often better to run the frontend in development mode locally.
@@ -97,7 +105,7 @@ $ make run-with-frontend
 To do so, install the frontend dependencies with the following command:
 
 ```shellscript
-$ make frontend-install
+$ make frontend-development-install
 ```
 
 And run the frontend locally in development mode with the following command:
@@ -109,7 +117,7 @@ $ make run-frontend-development
 To start all the services, except the frontend container, you can use the following command:
 
 ```shellscript
-$ make run
+$ make run-backend
 ```
 
 **Adding content**
@@ -126,6 +134,7 @@ $ make help
 ```
 
 **Django admin**
+
 You can access the Django admin site at
 
 <http://localhost:8071/admin>.
@@ -137,17 +146,21 @@ $ make superuser
 ```
 
 ## Feedback 🙋‍♂️🙋‍♀️
+
 We'd love to hear your thoughts and hear about your experiments, so come and say hi on [Matrix](https://matrix.to/#/#docs-official:matrix.org).
 
 ## Roadmap
+
 Want to know where the project is headed? [🗺️ Checkout our roadmap](https://github.com/orgs/numerique-gouv/projects/13/views/11)
 
 ## Licence 📝
+
 This work is released under the MIT License (see [LICENSE](https://github.com/suitenumerique/docs/blob/main/LICENSE)).
 
 While Docs is a public driven initiative our licence choice is an invitation for private sector actors to use, sell and contribute to the project. 
 
 ## Contributing 🙌
+
 This project is intended to be community-driven, so please, do not hesitate to [get in touch](https://matrix.to/#/#docs-official:matrix.org) if you have any question related to our implementation or design decisions.
 
 You can help us with translations on [Crowdin](https://crowdin.com/project/lasuite-docs).
@@ -169,10 +182,13 @@ docs
 ```
 
 ## Credits ❤️
+
 ### Stack
-Docs is built on top of [Django Rest Framework](https://www.django-rest-framework.org/), [Next.js](https://nextjs.org/), [MinIO](https://min.io/), [BlockNote.js](https://www.blocknotejs.org/), [HocusPocus](https://tiptap.dev/docs/hocuspocus/introduction) and [Yjs](https://yjs.dev/)
+
+Docs is built on top of [Django Rest Framework](https://www.django-rest-framework.org/), [Next.js](https://nextjs.org/), [BlockNote.js](https://www.blocknotejs.org/), [HocusPocus](https://tiptap.dev/docs/hocuspocus/introduction) and [Yjs](https://yjs.dev/).
 
 ### Gov ❤️ open source
+
 Docs is the result of a joint effort led by the French 🇫🇷🥖 ([DINUM](https://www.numerique.gouv.fr/dinum/)) and German 🇩🇪🥨 governments ([ZenDiS](https://zendis.de/)). 
 
 We are proud sponsors of [BlockNotejs](https://www.blocknotejs.org/) and [Yjs](https://yjs.dev/).

UPGRADE.md

@@ -15,3 +15,8 @@ the following command inside your docker container:
 (Note : in your development environment, you can `make migrate`.)
 
 ## [Unreleased]
+
+- AI features are now limited to users who are authenticated. Before this release, even anonymous
+  users who gained editor access on a document with link reach used to get AI feature.
+  IF you want anonymous users to keep access on AI features, you must now define the
+  `AI_ALLOW_REACH_FROM` setting to "public".

bin/_config.sh

@@ -7,7 +7,6 @@ UNSET_USER=0
 
 TERRAFORM_DIRECTORY="./env.d/terraform"
 COMPOSE_FILE="${REPO_DIR}/docker-compose.yml"
-COMPOSE_PROJECT="docs"
 
 
 # _set_user: set (or unset) default user id used to run docker commands
@@ -40,9 +39,8 @@ function _set_user() {
 # ARGS   : docker compose command arguments
 function _docker_compose() {
 
-    echo "🐳(compose) project: '${COMPOSE_PROJECT}' file: '${COMPOSE_FILE}'"
+    echo "🐳(compose) file: '${COMPOSE_FILE}'"
     docker compose \
-        -p "${COMPOSE_PROJECT}" \
         -f "${COMPOSE_FILE}" \
         --project-directory "${REPO_DIR}" \
         "$@"

docker-compose.yml

@@ -1,6 +1,13 @@
+name: docs
+
 services:
   postgresql:
     image: postgres:16
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready"]
+      interval: 1s
+      timeout: 2s
+      retries: 300
     env_file:
       - env.d/development/postgresql
     ports:
@@ -23,6 +30,11 @@ services:
     ports:
       - '9000:9000'
       - '9001:9001'
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 1s
+      timeout: 20s
+      retries: 300
     entrypoint: ""
     command: minio server --console-address :9001 /data
     volumes:
@@ -31,7 +43,9 @@ services:
   createbuckets:
     image: minio/mc
     depends_on:
-      - minio
+      minio:
+        condition: service_healthy
+        restart: true
     entrypoint: >
       sh -c "
       /usr/bin/mc alias set impress http://minio:9000 impress password && \
@@ -59,10 +73,15 @@ services:
       - ./src/backend:/app
       - ./data/static:/data/static
     depends_on:
-        - postgresql
-        - mailcatcher
-        - redis
-        - createbuckets
+        postgresql:
+            condition: service_healthy
+            restart: true
+        mailcatcher:
+          condition: service_started
+        redis:
+          condition: service_started
+        createbuckets:
+          condition: service_started
   
   celery-dev:
     user: ${DOCKER_USER:-1000}
@@ -93,9 +112,13 @@ services:
       - env.d/development/common
       - env.d/development/postgresql
     depends_on:
-      - postgresql
-      - redis
-      - minio
+      postgresql:
+        condition: service_healthy
+        restart: true
+      redis:
+        condition: service_started
+      minio:
+        condition: service_started
 
   celery:
     user: ${DOCKER_USER:-1000}
@@ -116,11 +139,15 @@ services:
     volumes:
       - ./docker/files/etc/nginx/conf.d:/etc/nginx/conf.d:ro
     depends_on:
-      - keycloak
-      - app-dev
-      - y-provider
+      app-dev:
+        condition: service_started
+      y-provider:
+        condition: service_started
+      keycloak:
+        condition: service_healthy
+        restart: true
 
-  frontend-dev:
+  frontend:
     user: "${DOCKER_USER:-1000}"
     build: 
       context: .
@@ -135,9 +162,6 @@ services:
     ports:
       - "3000:3000"
 
-  dockerize:
-    image: jwilder/dockerize
-
   crowdin:
     image: crowdin/cli:3.16.0
     volumes:
@@ -169,6 +193,11 @@ services:
 
   kc_postgresql:
     image: postgres:14.3
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready"]
+      interval: 1s
+      timeout: 2s
+      retries: 300
     ports:
       - "5433:5432"
     env_file:
@@ -187,6 +216,13 @@ services:
       - --hostname-admin-url=http://localhost:8083/
       - --hostname-strict=false
       - --hostname-strict-https=false
+      - --health-enabled=true
+      - --metrics-enabled=true
+    healthcheck:
+      test: ["CMD", "curl", "--head", "-fsS", "http://localhost:8080/health/ready"]
+      interval: 1s
+      timeout: 2s
+      retries: 300
     environment:
       KEYCLOAK_ADMIN: admin
       KEYCLOAK_ADMIN_PASSWORD: admin
@@ -200,4 +236,6 @@ services:
     ports:
       - "8080:8080"
     depends_on:
-      - kc_postgresql
+      kc_postgresql:
+        condition: service_healthy
+        restart: true

docker/files/etc/nginx/conf.d/default.conf

@@ -68,6 +68,8 @@ server {
         # Get resource from Minio
         proxy_pass http://minio:9000/impress-media-storage/;
         proxy_set_header Host minio:9000;
+
+        add_header Content-Security-Policy "default-src 'none'" always;
     }
 
     location /media-auth {
@@ -88,5 +90,11 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+        # Increase proxy buffer size to allow keycloak to send large
+        # header responses when a user is created.
+        proxy_buffer_size 128k;
+        proxy_buffers 4 256k;
+        proxy_busy_buffers_size 256k;
     }
 }

src/backend/core/api/serializers.py

@@ -418,6 +418,7 @@ class FileUploadSerializer(serializers.Serializer):
 
         self.context["expected_extension"] = extension
         self.context["content_type"] = magic_mime_type
+        self.context["file_name"] = file.name
 
         return file
 
@@ -426,6 +427,7 @@ class FileUploadSerializer(serializers.Serializer):
         attrs["expected_extension"] = self.context["expected_extension"]
         attrs["is_unsafe"] = self.context["is_unsafe"]
         attrs["content_type"] = self.context["content_type"]
+        attrs["file_name"] = self.context["file_name"]
         return attrs
 
 

src/backend/core/api/viewsets.py

@@ -38,10 +38,10 @@ ATTACHMENTS_FOLDER = "attachments"
 UUID_REGEX = (
     r"[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"
 )
-FILE_EXT_REGEX = r"\.[a-zA-Z]{3,4}"
+FILE_EXT_REGEX = r"\.[a-zA-Z0-9]{1,10}"
 MEDIA_STORAGE_URL_PATTERN = re.compile(
     f"{settings.MEDIA_URL:s}(?P<pk>{UUID_REGEX:s})/"
-    f"(?P<key>{ATTACHMENTS_FOLDER:s}/{UUID_REGEX:s}{FILE_EXT_REGEX:s})$"
+    f"(?P<key>{ATTACHMENTS_FOLDER:s}/{UUID_REGEX:s}(?:-unsafe)?{FILE_EXT_REGEX:s})$"
 )
 COLLABORATION_WS_URL_PATTERN = re.compile(rf"(?:^|&)room=(?P<pk>{UUID_REGEX})(?:&|$)")
 
@@ -915,15 +915,31 @@ class DocumentViewSet(
         # Generate a generic yet unique filename to store the image in object storage
         file_id = uuid.uuid4()
         extension = serializer.validated_data["expected_extension"]
-        key = f"{document.key_base}/{ATTACHMENTS_FOLDER:s}/{file_id!s}.{extension:s}"
 
         # Prepare metadata for storage
         extra_args = {
             "Metadata": {"owner": str(request.user.id)},
             "ContentType": serializer.validated_data["content_type"],
         }
+        file_unsafe = ""
         if serializer.validated_data["is_unsafe"]:
             extra_args["Metadata"]["is_unsafe"] = "true"
+            file_unsafe = "-unsafe"
+
+        key = f"{document.key_base}/{ATTACHMENTS_FOLDER:s}/{file_id!s}{file_unsafe}.{extension:s}"
+
+        file_name = serializer.validated_data["file_name"]
+        if (
+            not serializer.validated_data["content_type"].startswith("image/")
+            or serializer.validated_data["is_unsafe"]
+        ):
+            extra_args.update(
+                {"ContentDisposition": f'attachment; filename="{file_name:s}"'}
+            )
+        else:
+            extra_args.update(
+                {"ContentDisposition": f'inline; filename="{file_name:s}"'}
+            )
 
         file = serializer.validated_data["file"]
         default_storage.connection.meta.client.upload_fileobj(

src/backend/core/migrations/0001_initial.py

@@ -1,166 +1,552 @@
 # Generated by Django 5.0.3 on 2024-05-28 20:29
 
+import uuid
+
 import django.contrib.auth.models
 import django.core.validators
 import django.db.models.deletion
-import timezone_field.fields
-import uuid
 from django.conf import settings
 from django.db import migrations, models
 
+import timezone_field.fields
+
 
 class Migration(migrations.Migration):
-
     initial = True
 
     dependencies = [
-        ('auth', '0012_alter_user_first_name_max_length'),
+        ("auth", "0012_alter_user_first_name_max_length"),
     ]
 
     operations = [
         migrations.CreateModel(
-            name='Document',
+            name="Document",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('title', models.CharField(max_length=255, verbose_name='title')),
-                ('is_public', models.BooleanField(default=False, help_text='Whether this document is public for anyone to use.', verbose_name='public')),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                ("title", models.CharField(max_length=255, verbose_name="title")),
+                (
+                    "is_public",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Whether this document is public for anyone to use.",
+                        verbose_name="public",
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Document',
-                'verbose_name_plural': 'Documents',
-                'db_table': 'impress_document',
-                'ordering': ('title',),
+                "verbose_name": "Document",
+                "verbose_name_plural": "Documents",
+                "db_table": "impress_document",
+                "ordering": ("title",),
             },
         ),
         migrations.CreateModel(
-            name='Template',
+            name="Template",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('title', models.CharField(max_length=255, verbose_name='title')),
-                ('description', models.TextField(blank=True, verbose_name='description')),
-                ('code', models.TextField(blank=True, verbose_name='code')),
-                ('css', models.TextField(blank=True, verbose_name='css')),
-                ('is_public', models.BooleanField(default=False, help_text='Whether this template is public for anyone to use.', verbose_name='public')),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                ("title", models.CharField(max_length=255, verbose_name="title")),
+                (
+                    "description",
+                    models.TextField(blank=True, verbose_name="description"),
+                ),
+                ("code", models.TextField(blank=True, verbose_name="code")),
+                ("css", models.TextField(blank=True, verbose_name="css")),
+                (
+                    "is_public",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Whether this template is public for anyone to use.",
+                        verbose_name="public",
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Template',
-                'verbose_name_plural': 'Templates',
-                'db_table': 'impress_template',
-                'ordering': ('title',),
+                "verbose_name": "Template",
+                "verbose_name_plural": "Templates",
+                "db_table": "impress_template",
+                "ordering": ("title",),
             },
         ),
         migrations.CreateModel(
-            name='User',
+            name="User",
             fields=[
-                ('password', models.CharField(max_length=128, verbose_name='password')),
-                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
-                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('sub', models.CharField(blank=True, help_text='Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ characters only.', max_length=255, null=True, unique=True, validators=[django.core.validators.RegexValidator(message='Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/_ characters.', regex='^[\\w.@+-]+\\Z')], verbose_name='sub')),
-                ('email', models.EmailField(blank=True, max_length=254, null=True, verbose_name='identity email address')),
-                ('admin_email', models.EmailField(blank=True, max_length=254, null=True, unique=True, verbose_name='admin email address')),
-                ('language', models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language')),
-                ('timezone', timezone_field.fields.TimeZoneField(choices_display='WITH_GMT_OFFSET', default='UTC', help_text='The timezone in which the user wants to see times.', use_pytz=False)),
-                ('is_device', models.BooleanField(default=False, help_text='Whether the user is a device or a real user.', verbose_name='device')),
-                ('is_staff', models.BooleanField(default=False, help_text='Whether the user can log into this admin site.', verbose_name='staff status')),
-                ('is_active', models.BooleanField(default=True, help_text='Whether this user should be treated as active. Unselect this instead of deleting accounts.', verbose_name='active')),
-                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
-                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
+                ("password", models.CharField(max_length=128, verbose_name="password")),
+                (
+                    "last_login",
+                    models.DateTimeField(
+                        blank=True, null=True, verbose_name="last login"
+                    ),
+                ),
+                (
+                    "is_superuser",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Designates that this user has all permissions without explicitly assigning them.",
+                        verbose_name="superuser status",
+                    ),
+                ),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                (
+                    "sub",
+                    models.CharField(
+                        blank=True,
+                        help_text="Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ characters only.",
+                        max_length=255,
+                        null=True,
+                        unique=True,
+                        validators=[
+                            django.core.validators.RegexValidator(
+                                message="Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/_ characters.",
+                                regex="^[\\w.@+-]+\\Z",
+                            )
+                        ],
+                        verbose_name="sub",
+                    ),
+                ),
+                (
+                    "email",
+                    models.EmailField(
+                        blank=True,
+                        max_length=254,
+                        null=True,
+                        verbose_name="identity email address",
+                    ),
+                ),
+                (
+                    "admin_email",
+                    models.EmailField(
+                        blank=True,
+                        max_length=254,
+                        null=True,
+                        unique=True,
+                        verbose_name="admin email address",
+                    ),
+                ),
+                (
+                    "language",
+                    models.CharField(
+                        choices="(('en-us', 'English'), ('fr-fr', 'French'))",
+                        default="en-us",
+                        help_text="The language in which the user wants to see the interface.",
+                        max_length=10,
+                        verbose_name="language",
+                    ),
+                ),
+                (
+                    "timezone",
+                    timezone_field.fields.TimeZoneField(
+                        choices_display="WITH_GMT_OFFSET",
+                        default="UTC",
+                        help_text="The timezone in which the user wants to see times.",
+                        use_pytz=False,
+                    ),
+                ),
+                (
+                    "is_device",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Whether the user is a device or a real user.",
+                        verbose_name="device",
+                    ),
+                ),
+                (
+                    "is_staff",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Whether the user can log into this admin site.",
+                        verbose_name="staff status",
+                    ),
+                ),
+                (
+                    "is_active",
+                    models.BooleanField(
+                        default=True,
+                        help_text="Whether this user should be treated as active. Unselect this instead of deleting accounts.",
+                        verbose_name="active",
+                    ),
+                ),
+                (
+                    "groups",
+                    models.ManyToManyField(
+                        blank=True,
+                        help_text="The groups this user belongs to. A user will get all permissions granted to each of their groups.",
+                        related_name="user_set",
+                        related_query_name="user",
+                        to="auth.group",
+                        verbose_name="groups",
+                    ),
+                ),
+                (
+                    "user_permissions",
+                    models.ManyToManyField(
+                        blank=True,
+                        help_text="Specific permissions for this user.",
+                        related_name="user_set",
+                        related_query_name="user",
+                        to="auth.permission",
+                        verbose_name="user permissions",
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'user',
-                'verbose_name_plural': 'users',
-                'db_table': 'impress_user',
+                "verbose_name": "user",
+                "verbose_name_plural": "users",
+                "db_table": "impress_user",
             },
             managers=[
-                ('objects', django.contrib.auth.models.UserManager()),
+                ("objects", django.contrib.auth.models.UserManager()),
             ],
         ),
         migrations.CreateModel(
-            name='DocumentAccess',
+            name="DocumentAccess",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('team', models.CharField(blank=True, max_length=100)),
-                ('role', models.CharField(choices=[('reader', 'Reader'), ('editor', 'Editor'), ('administrator', 'Administrator'), ('owner', 'Owner')], default='reader', max_length=20)),
-                ('document', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='accesses', to='core.document')),
-                ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                ("team", models.CharField(blank=True, max_length=100)),
+                (
+                    "role",
+                    models.CharField(
+                        choices=[
+                            ("reader", "Reader"),
+                            ("editor", "Editor"),
+                            ("administrator", "Administrator"),
+                            ("owner", "Owner"),
+                        ],
+                        default="reader",
+                        max_length=20,
+                    ),
+                ),
+                (
+                    "document",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="accesses",
+                        to="core.document",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Document/user relation',
-                'verbose_name_plural': 'Document/user relations',
-                'db_table': 'impress_document_access',
-                'ordering': ('-created_at',),
+                "verbose_name": "Document/user relation",
+                "verbose_name_plural": "Document/user relations",
+                "db_table": "impress_document_access",
+                "ordering": ("-created_at",),
             },
         ),
         migrations.CreateModel(
-            name='Invitation',
+            name="Invitation",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('email', models.EmailField(max_length=254, verbose_name='email address')),
-                ('role', models.CharField(choices=[('reader', 'Reader'), ('editor', 'Editor'), ('administrator', 'Administrator'), ('owner', 'Owner')], default='reader', max_length=20)),
-                ('document', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='invitations', to='core.document')),
-                ('issuer', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='invitations', to=settings.AUTH_USER_MODEL)),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                (
+                    "email",
+                    models.EmailField(max_length=254, verbose_name="email address"),
+                ),
+                (
+                    "role",
+                    models.CharField(
+                        choices=[
+                            ("reader", "Reader"),
+                            ("editor", "Editor"),
+                            ("administrator", "Administrator"),
+                            ("owner", "Owner"),
+                        ],
+                        default="reader",
+                        max_length=20,
+                    ),
+                ),
+                (
+                    "document",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="invitations",
+                        to="core.document",
+                    ),
+                ),
+                (
+                    "issuer",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="invitations",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Document invitation',
-                'verbose_name_plural': 'Document invitations',
-                'db_table': 'impress_invitation',
+                "verbose_name": "Document invitation",
+                "verbose_name_plural": "Document invitations",
+                "db_table": "impress_invitation",
             },
         ),
         migrations.CreateModel(
-            name='TemplateAccess',
+            name="TemplateAccess",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('team', models.CharField(blank=True, max_length=100)),
-                ('role', models.CharField(choices=[('reader', 'Reader'), ('editor', 'Editor'), ('administrator', 'Administrator'), ('owner', 'Owner')], default='reader', max_length=20)),
-                ('template', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='accesses', to='core.template')),
-                ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                ("team", models.CharField(blank=True, max_length=100)),
+                (
+                    "role",
+                    models.CharField(
+                        choices=[
+                            ("reader", "Reader"),
+                            ("editor", "Editor"),
+                            ("administrator", "Administrator"),
+                            ("owner", "Owner"),
+                        ],
+                        default="reader",
+                        max_length=20,
+                    ),
+                ),
+                (
+                    "template",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="accesses",
+                        to="core.template",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Template/user relation',
-                'verbose_name_plural': 'Template/user relations',
-                'db_table': 'impress_template_access',
-                'ordering': ('-created_at',),
+                "verbose_name": "Template/user relation",
+                "verbose_name_plural": "Template/user relations",
+                "db_table": "impress_template_access",
+                "ordering": ("-created_at",),
             },
         ),
         migrations.AddConstraint(
-            model_name='documentaccess',
-            constraint=models.UniqueConstraint(condition=models.Q(('user__isnull', False)), fields=('user', 'document'), name='unique_document_user', violation_error_message='This user is already in this document.'),
+            model_name="documentaccess",
+            constraint=models.UniqueConstraint(
+                condition=models.Q(("user__isnull", False)),
+                fields=("user", "document"),
+                name="unique_document_user",
+                violation_error_message="This user is already in this document.",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='documentaccess',
-            constraint=models.UniqueConstraint(condition=models.Q(('team__gt', '')), fields=('team', 'document'), name='unique_document_team', violation_error_message='This team is already in this document.'),
+            model_name="documentaccess",
+            constraint=models.UniqueConstraint(
+                condition=models.Q(("team__gt", "")),
+                fields=("team", "document"),
+                name="unique_document_team",
+                violation_error_message="This team is already in this document.",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='documentaccess',
-            constraint=models.CheckConstraint(check=models.Q(models.Q(('team', ''), ('user__isnull', False)), models.Q(('team__gt', ''), ('user__isnull', True)), _connector='OR'), name='check_document_access_either_user_or_team', violation_error_message='Either user or team must be set, not both.'),
+            model_name="documentaccess",
+            constraint=models.CheckConstraint(
+                check=models.Q(
+                    models.Q(("team", ""), ("user__isnull", False)),
+                    models.Q(("team__gt", ""), ("user__isnull", True)),
+                    _connector="OR",
+                ),
+                name="check_document_access_either_user_or_team",
+                violation_error_message="Either user or team must be set, not both.",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='invitation',
-            constraint=models.UniqueConstraint(fields=('email', 'document'), name='email_and_document_unique_together'),
+            model_name="invitation",
+            constraint=models.UniqueConstraint(
+                fields=("email", "document"), name="email_and_document_unique_together"
+            ),
         ),
         migrations.AddConstraint(
-            model_name='templateaccess',
-            constraint=models.UniqueConstraint(condition=models.Q(('user__isnull', False)), fields=('user', 'template'), name='unique_template_user', violation_error_message='This user is already in this template.'),
+            model_name="templateaccess",
+            constraint=models.UniqueConstraint(
+                condition=models.Q(("user__isnull", False)),
+                fields=("user", "template"),
+                name="unique_template_user",
+                violation_error_message="This user is already in this template.",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='templateaccess',
-            constraint=models.UniqueConstraint(condition=models.Q(('team__gt', '')), fields=('team', 'template'), name='unique_template_team', violation_error_message='This team is already in this template.'),
+            model_name="templateaccess",
+            constraint=models.UniqueConstraint(
+                condition=models.Q(("team__gt", "")),
+                fields=("team", "template"),
+                name="unique_template_team",
+                violation_error_message="This team is already in this template.",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='templateaccess',
-            constraint=models.CheckConstraint(check=models.Q(models.Q(('team', ''), ('user__isnull', False)), models.Q(('team__gt', ''), ('user__isnull', True)), _connector='OR'), name='check_template_access_either_user_or_team', violation_error_message='Either user or team must be set, not both.'),
+            model_name="templateaccess",
+            constraint=models.CheckConstraint(
+                check=models.Q(
+                    models.Q(("team", ""), ("user__isnull", False)),
+                    models.Q(("team__gt", ""), ("user__isnull", True)),
+                    _connector="OR",
+                ),
+                name="check_template_access_either_user_or_team",
+                violation_error_message="Either user or team must be set, not both.",
+            ),
         ),
     ]

src/backend/core/migrations/0002_create_pg_trgm_extension.py

@@ -1,9 +1,9 @@
 from django.db import migrations
 
-class Migration(migrations.Migration):
 
+class Migration(migrations.Migration):
     dependencies = [
-        ('core', '0001_initial'),
+        ("core", "0001_initial"),
     ]
 
     operations = [

src/backend/core/migrations/0003_document_link_reach_document_link_role_and_more.py

@@ -1,52 +1,114 @@
 # Generated by Django 5.1 on 2024-09-08 16:55
 
-import django.db.models.deletion
 import uuid
+
+import django.db.models.deletion
 from django.conf import settings
 from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0002_create_pg_trgm_extension'),
+        ("core", "0002_create_pg_trgm_extension"),
     ]
 
     operations = [
         migrations.AddField(
-            model_name='document',
-            name='link_reach',
-            field=models.CharField(choices=[('restricted', 'Restricted'), ('authenticated', 'Authenticated'), ('public', 'Public')], default='authenticated', max_length=20),
+            model_name="document",
+            name="link_reach",
+            field=models.CharField(
+                choices=[
+                    ("restricted", "Restricted"),
+                    ("authenticated", "Authenticated"),
+                    ("public", "Public"),
+                ],
+                default="authenticated",
+                max_length=20,
+            ),
         ),
         migrations.AddField(
-            model_name='document',
-            name='link_role',
-            field=models.CharField(choices=[('reader', 'Reader'), ('editor', 'Editor')], default='reader', max_length=20),
+            model_name="document",
+            name="link_role",
+            field=models.CharField(
+                choices=[("reader", "Reader"), ("editor", "Editor")],
+                default="reader",
+                max_length=20,
+            ),
         ),
         migrations.AlterField(
-            model_name='document',
-            name='is_public',
+            model_name="document",
+            name="is_public",
             field=models.BooleanField(null=True),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
         migrations.CreateModel(
-            name='LinkTrace',
+            name="LinkTrace",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('document', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='link_traces', to='core.document')),
-                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='link_traces', to=settings.AUTH_USER_MODEL)),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                (
+                    "document",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="link_traces",
+                        to="core.document",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="link_traces",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Document/user link trace',
-                'verbose_name_plural': 'Document/user link traces',
-                'db_table': 'impress_link_trace',
-                'constraints': [models.UniqueConstraint(fields=('user', 'document'), name='unique_link_trace_document_user', violation_error_message='A link trace already exists for this document/user.')],
+                "verbose_name": "Document/user link trace",
+                "verbose_name_plural": "Document/user link traces",
+                "db_table": "impress_link_trace",
+                "constraints": [
+                    models.UniqueConstraint(
+                        fields=("user", "document"),
+                        name="unique_link_trace_document_user",
+                        violation_error_message="A link trace already exists for this document/user.",
+                    )
+                ],
             },
         ),
     ]

src/backend/core/migrations/0004_migrate_is_public_to_link_reach.py

@@ -1,13 +1,14 @@
 # Generated by Django 5.1 on 2024-09-08 17:04
 from django.db import migrations
 
+
 def migrate_is_public_to_link_reach(apps, schema_editor):
     """
     Forward migration: Migrate 'is_public' to 'link_reach'.
     If is_public == True, set link_reach to 'public'
     """
-    Document = apps.get_model('core', 'Document')
-    Document.objects.filter(is_public=True).update(link_reach='public')
+    Document = apps.get_model("core", "Document")
+    Document.objects.filter(is_public=True).update(link_reach="public")
 
 
 def reverse_migrate_link_reach_to_is_public(apps, schema_editor):
@@ -16,20 +17,20 @@ def reverse_migrate_link_reach_to_is_public(apps, schema_editor):
     - If link_reach == 'public', set is_public to True
     - Else set is_public to False
     """
-    Document = apps.get_model('core', 'Document')
-    Document.objects.filter(link_reach='public').update(is_public=True)
-    Document.objects.filter(link_reach__in=['restricted', "authenticated"]).update(is_public=False)
+    Document = apps.get_model("core", "Document")
+    Document.objects.filter(link_reach="public").update(is_public=True)
+    Document.objects.filter(link_reach__in=["restricted", "authenticated"]).update(
+        is_public=False
+    )
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0003_document_link_reach_document_link_role_and_more'),
+        ("core", "0003_document_link_reach_document_link_role_and_more"),
     ]
 
     operations = [
         migrations.RunPython(
-            migrate_is_public_to_link_reach, 
-            reverse_migrate_link_reach_to_is_public
+            migrate_is_public_to_link_reach, reverse_migrate_link_reach_to_is_public
         ),
     ]

src/backend/core/migrations/0005_remove_document_is_public_alter_document_link_reach_and_more.py

@@ -4,15 +4,16 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0004_migrate_is_public_to_link_reach'),
+        ("core", "0004_migrate_is_public_to_link_reach"),
     ]
 
     operations = [
         migrations.AlterField(
-            model_name='document',
-            name='title',
-            field=models.CharField(blank=True, max_length=255, null=True, verbose_name='title'),
+            model_name="document",
+            name="title",
+            field=models.CharField(
+                blank=True, max_length=255, null=True, verbose_name="title"
+            ),
         ),
     ]

src/backend/core/migrations/0006_add_user_full_name_and_short_name.py

@@ -4,25 +4,34 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0005_remove_document_is_public_alter_document_link_reach_and_more'),
+        ("core", "0005_remove_document_is_public_alter_document_link_reach_and_more"),
     ]
 
     operations = [
         migrations.AddField(
-            model_name='user',
-            name='full_name',
-            field=models.CharField(blank=True, max_length=100, null=True, verbose_name='full name'),
+            model_name="user",
+            name="full_name",
+            field=models.CharField(
+                blank=True, max_length=100, null=True, verbose_name="full name"
+            ),
         ),
         migrations.AddField(
-            model_name='user',
-            name='short_name',
-            field=models.CharField(blank=True, max_length=20, null=True, verbose_name='short name'),
+            model_name="user",
+            name="short_name",
+            field=models.CharField(
+                blank=True, max_length=20, null=True, verbose_name="short name"
+            ),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
     ]

src/backend/core/migrations/0007_fix_users_duplicate.py

@@ -117,10 +117,10 @@ BEGIN
 END $$;
 """
 
-class Migration(migrations.Migration):
 
+class Migration(migrations.Migration):
     dependencies = [
-        ('core', '0006_add_user_full_name_and_short_name'),
+        ("core", "0006_add_user_full_name_and_short_name"),
     ]
 
     operations = [

src/backend/core/migrations/0008_alter_document_link_reach.py

@@ -4,15 +4,22 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0007_fix_users_duplicate'),
+        ("core", "0007_fix_users_duplicate"),
     ]
 
     operations = [
         migrations.AlterField(
-            model_name='document',
-            name='link_reach',
-            field=models.CharField(choices=[('restricted', 'Restricted'), ('authenticated', 'Authenticated'), ('public', 'Public')], default='restricted', max_length=20),
+            model_name="document",
+            name="link_reach",
+            field=models.CharField(
+                choices=[
+                    ("restricted", "Restricted"),
+                    ("authenticated", "Authenticated"),
+                    ("public", "Public"),
+                ],
+                default="restricted",
+                max_length=20,
+            ),
         ),
     ]

src/backend/core/migrations/0009_add_document_favorite.py

@@ -1,37 +1,87 @@
 # Generated by Django 5.1.2 on 2024-11-08 07:59
 
-import django.db.models.deletion
 import uuid
+
+import django.db.models.deletion
 from django.conf import settings
 from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0008_alter_document_link_reach'),
+        ("core", "0008_alter_document_link_reach"),
     ]
 
     operations = [
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
         migrations.CreateModel(
-            name='DocumentFavorite',
+            name="DocumentFavorite",
             fields=[
-                ('id', models.UUIDField(default=uuid.uuid4, editable=False, help_text='primary key for the record as UUID', primary_key=True, serialize=False, verbose_name='id')),
-                ('created_at', models.DateTimeField(auto_now_add=True, help_text='date and time at which a record was created', verbose_name='created on')),
-                ('updated_at', models.DateTimeField(auto_now=True, help_text='date and time at which a record was last updated', verbose_name='updated on')),
-                ('document', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='favorited_by_users', to='core.document')),
-                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='favorite_documents', to=settings.AUTH_USER_MODEL)),
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                (
+                    "document",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="favorited_by_users",
+                        to="core.document",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="favorite_documents",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
             ],
             options={
-                'verbose_name': 'Document favorite',
-                'verbose_name_plural': 'Document favorites',
-                'db_table': 'impress_document_favorite',
-                'constraints': [models.UniqueConstraint(fields=('user', 'document'), name='unique_document_favorite_user', violation_error_message='This document is already targeted by a favorite relation instance for the same user.')],
+                "verbose_name": "Document favorite",
+                "verbose_name_plural": "Document favorites",
+                "db_table": "impress_document_favorite",
+                "constraints": [
+                    models.UniqueConstraint(
+                        fields=("user", "document"),
+                        name="unique_document_favorite_user",
+                        violation_error_message="This document is already targeted by a favorite relation instance for the same user.",
+                    )
+                ],
             },
         ),
     ]

src/backend/core/migrations/0010_add_field_creator_to_document.py

@@ -7,25 +7,48 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0009_add_document_favorite'),
+        ("core", "0009_add_document_favorite"),
     ]
 
     operations = [
         migrations.AddField(
-            model_name='document',
-            name='creator',
-            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.RESTRICT, related_name='documents_created', to=settings.AUTH_USER_MODEL),
+            model_name="document",
+            name="creator",
+            field=models.ForeignKey(
+                null=True,
+                on_delete=django.db.models.deletion.RESTRICT,
+                related_name="documents_created",
+                to=settings.AUTH_USER_MODEL,
+            ),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='sub',
-            field=models.CharField(blank=True, help_text='Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_/: characters only.', max_length=255, null=True, unique=True, validators=[django.core.validators.RegexValidator(message='Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/_/: characters.', regex='^[\\w.@+-:]+\\Z')], verbose_name='sub'),
+            model_name="user",
+            name="sub",
+            field=models.CharField(
+                blank=True,
+                help_text="Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_/: characters only.",
+                max_length=255,
+                null=True,
+                unique=True,
+                validators=[
+                    django.core.validators.RegexValidator(
+                        message="Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/_/: characters.",
+                        regex="^[\\w.@+-:]+\\Z",
+                    )
+                ],
+                verbose_name="sub",
+            ),
         ),
     ]

src/backend/core/migrations/0011_populate_creator_field_and_make_it_required.py

@@ -3,7 +3,7 @@
 import django.db.models.deletion
 from django.conf import settings
 from django.db import migrations
-from django.db.models import F, ForeignKey, Subquery, OuterRef, Q
+from django.db.models import F, ForeignKey, OuterRef, Q, Subquery
 
 
 def set_creator_from_document_access(apps, schema_editor):
@@ -25,28 +25,37 @@ def set_creator_from_document_access(apps, schema_editor):
     DocumentAccess = apps.get_model("core", "DocumentAccess")
 
     # Update `creator` using the "owner" role
-    owner_subquery = DocumentAccess.objects.filter(
-        document=OuterRef('pk'),
-        user__isnull=False,
-        role='owner',
-    ).order_by('created_at').values('user_id')[:1]
+    owner_subquery = (
+        DocumentAccess.objects.filter(
+            document=OuterRef("pk"),
+            user__isnull=False,
+            role="owner",
+        )
+        .order_by("created_at")
+        .values("user_id")[:1]
+    )
 
-    Document.objects.filter(
-        creator__isnull=True
-    ).update(creator=Subquery(owner_subquery))
+    Document.objects.filter(creator__isnull=True).update(
+        creator=Subquery(owner_subquery)
+    )
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0010_add_field_creator_to_document'),
+        ("core", "0010_add_field_creator_to_document"),
     ]
 
     operations = [
-        migrations.RunPython(set_creator_from_document_access, reverse_code=migrations.RunPython.noop),
+        migrations.RunPython(
+            set_creator_from_document_access, reverse_code=migrations.RunPython.noop
+        ),
         migrations.AlterField(
-            model_name='document',
-            name='creator',
-            field=ForeignKey(on_delete=django.db.models.deletion.RESTRICT, related_name='documents_created', to=settings.AUTH_USER_MODEL),
+            model_name="document",
+            name="creator",
+            field=ForeignKey(
+                on_delete=django.db.models.deletion.RESTRICT,
+                related_name="documents_created",
+                to=settings.AUTH_USER_MODEL,
+            ),
         ),
     ]

src/backend/core/migrations/0012_make_document_creator_and_invitation_issuer_optional.py

@@ -6,25 +6,42 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0011_populate_creator_field_and_make_it_required'),
+        ("core", "0011_populate_creator_field_and_make_it_required"),
     ]
 
     operations = [
         migrations.AlterField(
-            model_name='document',
-            name='creator',
-            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.RESTRICT, related_name='documents_created', to=settings.AUTH_USER_MODEL),
+            model_name="document",
+            name="creator",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.RESTRICT,
+                related_name="documents_created",
+                to=settings.AUTH_USER_MODEL,
+            ),
         ),
         migrations.AlterField(
-            model_name='invitation',
-            name='issuer',
-            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='invitations', to=settings.AUTH_USER_MODEL),
+            model_name="invitation",
+            name="issuer",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="invitations",
+                to=settings.AUTH_USER_MODEL,
+            ),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
     ]

src/backend/core/migrations/0013_activate_fuzzystrmatch_extension.py

@@ -2,10 +2,10 @@
 
 from django.db import migrations
 
-class Migration(migrations.Migration):
 
+class Migration(migrations.Migration):
     dependencies = [
-        ('core', '0012_make_document_creator_and_invitation_issuer_optional'),
+        ("core", "0012_make_document_creator_and_invitation_issuer_optional"),
     ]
 
     operations = [

src/backend/core/migrations/0014_add_tree_structure_to_documents.py

@@ -4,28 +4,29 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0013_activate_fuzzystrmatch_extension'),
+        ("core", "0013_activate_fuzzystrmatch_extension"),
     ]
 
     operations = [
         migrations.AddField(
-            model_name='document',
-            name='depth',
+            model_name="document",
+            name="depth",
             field=models.PositiveIntegerField(default=0),
             preserve_default=False,
         ),
         migrations.AddField(
-            model_name='document',
-            name='numchild',
+            model_name="document",
+            name="numchild",
             field=models.PositiveIntegerField(default=0),
         ),
         migrations.AddField(
-            model_name='document',
-            name='path',
+            model_name="document",
+            name="path",
             # Allow null values pending the next datamigration to populate the field
-            field=models.CharField(db_collation='C', max_length=252, null=True, unique=True),
+            field=models.CharField(
+                db_collation="C", max_length=252, null=True, unique=True
+            ),
             preserve_default=False,
         ),
     ]

src/backend/core/migrations/0015_set_path_on_existing_documents.py

@@ -7,9 +7,10 @@ from treebeard.numconv import NumConv
 ALPHABET = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
 STEPLEN = 7
 
+
 def set_path_on_existing_documents(apps, schema_editor):
     """
-    Updates the `path` and `depth` fields for all existing Document records 
+    Updates the `path` and `depth` fields for all existing Document records
     to ensure valid materialized paths.
 
     This function assigns a unique `path` to each Document as a root node
@@ -26,27 +27,25 @@ def set_path_on_existing_documents(apps, schema_editor):
     updates = []
     for i, pk in enumerate(documents):
         key = numconv.int2str(i)
-        path = "{0}{1}".format(
-            ALPHABET[0] * (STEPLEN - len(key)),
-            key
-        )
+        path = "{0}{1}".format(ALPHABET[0] * (STEPLEN - len(key)), key)
         updates.append(Document(pk=pk, path=path, depth=1))
 
     # Bulk update using the prepared updates list
-    Document.objects.bulk_update(updates, ['depth', 'path'])
+    Document.objects.bulk_update(updates, ["depth", "path"])
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0014_add_tree_structure_to_documents'),
+        ("core", "0014_add_tree_structure_to_documents"),
     ]
 
     operations = [
-        migrations.RunPython(set_path_on_existing_documents, reverse_code=migrations.RunPython.noop),
+        migrations.RunPython(
+            set_path_on_existing_documents, reverse_code=migrations.RunPython.noop
+        ),
         migrations.AlterField(
-            model_name='document',
-            name='path',
-            field=models.CharField(db_collation='C', max_length=252, unique=True),
+            model_name="document",
+            name="path",
+            field=models.CharField(db_collation="C", max_length=252, unique=True),
         ),
     ]

src/backend/core/migrations/0016_add_document_excerpt.py

@@ -4,20 +4,27 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0015_set_path_on_existing_documents'),
+        ("core", "0015_set_path_on_existing_documents"),
     ]
 
     operations = [
         migrations.AddField(
-            model_name='document',
-            name='excerpt',
-            field=models.TextField(blank=True, max_length=300, null=True, verbose_name='excerpt'),
+            model_name="document",
+            name="excerpt",
+            field=models.TextField(
+                blank=True, max_length=300, null=True, verbose_name="excerpt"
+            ),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
     ]

src/backend/core/migrations/0017_add_fields_for_soft_delete.py

@@ -4,33 +4,49 @@ from django.db import migrations, models
 
 
 class Migration(migrations.Migration):
-
     dependencies = [
-        ('core', '0016_add_document_excerpt'),
+        ("core", "0016_add_document_excerpt"),
     ]
 
     operations = [
         migrations.AlterModelOptions(
-            name='document',
-            options={'ordering': ('path',), 'verbose_name': 'Document', 'verbose_name_plural': 'Documents'},
+            name="document",
+            options={
+                "ordering": ("path",),
+                "verbose_name": "Document",
+                "verbose_name_plural": "Documents",
+            },
         ),
         migrations.AddField(
-            model_name='document',
-            name='ancestors_deleted_at',
+            model_name="document",
+            name="ancestors_deleted_at",
             field=models.DateTimeField(blank=True, null=True),
         ),
         migrations.AddField(
-            model_name='document',
-            name='deleted_at',
+            model_name="document",
+            name="deleted_at",
             field=models.DateTimeField(blank=True, null=True),
         ),
         migrations.AlterField(
-            model_name='user',
-            name='language',
-            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                choices="(('en-us', 'English'), ('fr-fr', 'French'), ('de-de', 'German'))",
+                default="en-us",
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                verbose_name="language",
+            ),
         ),
         migrations.AddConstraint(
-            model_name='document',
-            constraint=models.CheckConstraint(condition=models.Q(('deleted_at__isnull', True), ('deleted_at', models.F('ancestors_deleted_at')), _connector='OR'), name='check_deleted_at_matches_ancestors_deleted_at_when_set'),
+            model_name="document",
+            constraint=models.CheckConstraint(
+                condition=models.Q(
+                    ("deleted_at__isnull", True),
+                    ("deleted_at", models.F("ancestors_deleted_at")),
+                    _connector="OR",
+                ),
+                name="check_deleted_at_matches_ancestors_deleted_at_when_set",
+            ),
         ),
     ]

src/backend/core/migrations/0018_update_blank_title.py

@@ -0,0 +1,24 @@
+from django.db import migrations
+
+
+def update_titles_to_null(apps, schema_editor):
+    """
+    If the titles are "Untitled document" or "Unbenanntes Dokument" or "Document sans titre"
+    we set them to Null
+    """
+    Document = apps.get_model("core", "Document")
+    Document.objects.filter(
+        title__in=["Untitled document", "Unbenanntes Dokument", "Document sans titre"]
+    ).update(title=None)
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("core", "0017_add_fields_for_soft_delete"),
+    ]
+
+    operations = [
+        migrations.RunPython(
+            update_titles_to_null, reverse_code=migrations.RunPython.noop
+        ),
+    ]

src/backend/core/models.py

@@ -629,6 +629,9 @@ class Document(MP_Node, BaseModel):
         # which date to allow them anyway)
         # Anonymous users should also not see document accesses
         has_access_role = bool(roles) and not is_deleted
+        can_update_from_access = (
+            is_owner_or_admin or RoleChoices.EDITOR in roles
+        ) and not is_deleted
 
         # Add roles provided by the document link, taking into account its ancestors
 
@@ -647,11 +650,23 @@ class Document(MP_Node, BaseModel):
             is_owner_or_admin or RoleChoices.EDITOR in roles
         ) and not is_deleted
 
+        ai_allow_reach_from = settings.AI_ALLOW_REACH_FROM
+        ai_access = any(
+            [
+                ai_allow_reach_from == LinkReachChoices.PUBLIC and can_update,
+                ai_allow_reach_from == LinkReachChoices.AUTHENTICATED
+                and user.is_authenticated
+                and can_update,
+                ai_allow_reach_from == LinkReachChoices.RESTRICTED
+                and can_update_from_access,
+            ]
+        )
+
         return {
             "accesses_manage": is_owner_or_admin,
             "accesses_view": has_access_role,
-            "ai_transform": can_update,
-            "ai_translate": can_update,
+            "ai_transform": ai_access,
+            "ai_translate": ai_access,
             "attachment_upload": can_update,
             "children_list": can_get,
             "children_create": can_update and user.is_authenticated,
@@ -682,6 +697,7 @@ class Document(MP_Node, BaseModel):
                 "document": self,
                 "domain": domain,
                 "link": f"{domain}/docs/{self.id}/",
+                "document_title": self.title or str(_("Untitled Document")),
                 "logo_img": settings.EMAIL_LOGO_IMG,
             }
         )
@@ -723,8 +739,12 @@ class Document(MP_Node, BaseModel):
                     '{name} invited you with the role "{role}" on the following document:'
                 ).format(name=sender_name_email, role=role.lower()),
             }
-            subject = _("{name} shared a document with you: {title}").format(
-                name=sender_name, title=self.title
+            subject = (
+                context["title"]
+                if not self.title
+                else _("{name} shared a document with you: {title}").format(
+                    name=sender_name, title=self.title
+                )
             )
 
         self.send_email(subject, [email], context, language)
@@ -779,9 +799,11 @@ class Document(MP_Node, BaseModel):
         ancestors_deleted_at = (
             self.get_ancestors()
             .filter(deleted_at__isnull=False)
+            .order_by("deleted_at")
             .values_list("deleted_at", flat=True)
+            .first()
         )
-        self.ancestors_deleted_at = min(ancestors_deleted_at, default=None)
+        self.ancestors_deleted_at = ancestors_deleted_at
         self.save()
 
         # Update descendants excluding those who were deleted prior to the deletion of the

src/backend/core/tests/documents/test_api_document_invitations.py

@@ -458,6 +458,10 @@ def test_api_document_invitations_create_email_from_content_language():
 
     email_content = " ".join(email.body.split())
     assert f"{user.full_name} a partagé un document avec vous!" in email_content
+    assert (
+        "Docs, votre nouvel outil incontournable pour organiser, partager et collaborer "
+        "sur vos documents en équipe." in email_content
+    )
 
 
 def test_api_document_invitations_create_email_from_content_language_not_supported():

src/backend/core/tests/documents/test_api_documents_ai_transform.py

@@ -2,6 +2,7 @@
 Test AI transform API endpoint for users in impress's core app.
 """
 
+import random
 from unittest.mock import MagicMock, patch
 
 from django.core.cache import cache
@@ -31,6 +32,9 @@ def ai_settings():
         yield
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 @pytest.mark.parametrize(
     "reach, role",
     [
@@ -57,6 +61,7 @@ def test_api_documents_ai_transform_anonymous_forbidden(reach, role):
     }
 
 
+@override_settings(AI_ALLOW_REACH_FROM="public")
 @pytest.mark.usefixtures("ai_settings")
 @patch("openai.resources.chat.completions.Completions.create")
 def test_api_documents_ai_transform_anonymous_success(mock_create):
@@ -93,6 +98,27 @@ def test_api_documents_ai_transform_anonymous_success(mock_create):
     )
 
 
+@override_settings(AI_ALLOW_REACH_FROM=random.choice(["authenticated", "restricted"]))
+@pytest.mark.usefixtures("ai_settings")
+@patch("openai.resources.chat.completions.Completions.create")
+def test_api_documents_ai_transform_anonymous_limited_by_setting(mock_create):
+    """
+    Anonymous users should be able to request AI transform to a document
+    if the link reach and role permit it.
+    """
+    document = factories.DocumentFactory(link_reach="public", link_role="editor")
+
+    answer = '{"answer": "Salut"}'
+    mock_create.return_value = MagicMock(
+        choices=[MagicMock(message=MagicMock(content=answer))]
+    )
+
+    url = f"/api/v1.0/documents/{document.id!s}/ai-transform/"
+    response = APIClient().post(url, {"text": "Hello", "action": "summarize"})
+
+    assert response.status_code == 401
+
+
 @pytest.mark.parametrize(
     "reach, role",
     [

src/backend/core/tests/documents/test_api_documents_ai_translate.py

@@ -2,6 +2,7 @@
 Test AI translate API endpoint for users in impress's core app.
 """
 
+import random
 from unittest.mock import MagicMock, patch
 
 from django.core.cache import cache
@@ -51,6 +52,9 @@ def test_api_documents_ai_translate_viewset_options_metadata():
     }
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 @pytest.mark.parametrize(
     "reach, role",
     [
@@ -77,6 +81,7 @@ def test_api_documents_ai_translate_anonymous_forbidden(reach, role):
     }
 
 
+@override_settings(AI_ALLOW_REACH_FROM="public")
 @pytest.mark.usefixtures("ai_settings")
 @patch("openai.resources.chat.completions.Completions.create")
 def test_api_documents_ai_translate_anonymous_success(mock_create):
@@ -113,6 +118,27 @@ def test_api_documents_ai_translate_anonymous_success(mock_create):
     )
 
 
+@override_settings(AI_ALLOW_REACH_FROM=random.choice(["authenticated", "restricted"]))
+@pytest.mark.usefixtures("ai_settings")
+@patch("openai.resources.chat.completions.Completions.create")
+def test_api_documents_ai_translate_anonymous_limited_by_setting(mock_create):
+    """
+    Anonymous users should be able to request AI translate to a document
+    if the link reach and role permit it.
+    """
+    document = factories.DocumentFactory(link_reach="public", link_role="editor")
+
+    answer = '{"answer": "Salut"}'
+    mock_create.return_value = MagicMock(
+        choices=[MagicMock(message=MagicMock(content=answer))]
+    )
+
+    url = f"/api/v1.0/documents/{document.id!s}/ai-translate/"
+    response = APIClient().post(url, {"text": "Hello", "language": "es"})
+
+    assert response.status_code == 401
+
+
 @pytest.mark.parametrize(
     "reach, role",
     [

src/backend/core/tests/documents/test_api_documents_attachment_upload.py

@@ -79,6 +79,7 @@ def test_api_documents_attachment_upload_anonymous_success():
 
     assert file_head["Metadata"] == {"owner": "None"}
     assert file_head["ContentType"] == "image/png"
+    assert file_head["ContentDisposition"] == 'inline; filename="test.png"'
 
 
 @pytest.mark.parametrize(
@@ -217,6 +218,7 @@ def test_api_documents_attachment_upload_success(via, role, mock_user_teams):
     )
     assert file_head["Metadata"] == {"owner": str(user.id)}
     assert file_head["ContentType"] == "image/png"
+    assert file_head["ContentDisposition"] == 'inline; filename="test.png"'
 
 
 def test_api_documents_attachment_upload_invalid(client):
@@ -291,7 +293,9 @@ def test_api_documents_attachment_upload_fix_extension(
     match = pattern.search(file_path)
     file_id = match.group(1)
 
+    assert "-unsafe" in file_id
     # Validate that file_id is a valid UUID
+    file_id = file_id.replace("-unsafe", "")
     uuid.UUID(file_id)
 
     # Now, check the metadata of the uploaded file
@@ -301,6 +305,7 @@ def test_api_documents_attachment_upload_fix_extension(
     )
     assert file_head["Metadata"] == {"owner": str(user.id), "is_unsafe": "true"}
     assert file_head["ContentType"] == content_type
+    assert file_head["ContentDisposition"] == f'attachment; filename="{name:s}"'
 
 
 def test_api_documents_attachment_upload_empty_file():
@@ -340,7 +345,9 @@ def test_api_documents_attachment_upload_unsafe():
     match = pattern.search(file_path)
     file_id = match.group(1)
 
+    assert "-unsafe" in file_id
     # Validate that file_id is a valid UUID
+    file_id = file_id.replace("-unsafe", "")
     uuid.UUID(file_id)
 
     # Now, check the metadata of the uploaded file
@@ -350,3 +357,4 @@ def test_api_documents_attachment_upload_unsafe():
     )
     assert file_head["Metadata"] == {"owner": str(user.id), "is_unsafe": "true"}
     assert file_head["ContentType"] == "application/octet-stream"
+    assert file_head["ContentDisposition"] == 'attachment; filename="script.exe"'

src/backend/core/tests/documents/test_api_documents_media_auth.py

@@ -64,6 +64,30 @@ def test_api_documents_media_auth_anonymous_public():
     assert response.content.decode("utf-8") == "my prose"
 
 
+def test_api_documents_media_auth_extensions():
+    """Files with extensions of any format should work."""
+    document = factories.DocumentFactory(link_reach="public")
+
+    extensions = [
+        "c",
+        "go",
+        "gif",
+        "mp4",
+        "woff2",
+        "appimage",
+    ]
+    for ext in extensions:
+        filename = f"{uuid.uuid4()!s}.{ext:s}"
+        key = f"{document.pk!s}/attachments/{filename:s}"
+
+        original_url = f"http://localhost/media/{key:s}"
+        response = APIClient().get(
+            "/api/v1.0/documents/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+        )
+
+        assert response.status_code == 200
+
+
 @pytest.mark.parametrize("reach", ["authenticated", "restricted"])
 def test_api_documents_media_auth_anonymous_authenticated_or_restricted(reach):
     """

src/backend/core/tests/documents/test_api_documents_retrieve.py

@@ -28,8 +28,8 @@ def test_api_documents_retrieve_anonymous_public_standalone():
         "abilities": {
             "accesses_manage": False,
             "accesses_view": False,
-            "ai_transform": document.link_role == "editor",
-            "ai_translate": document.link_role == "editor",
+            "ai_transform": False,
+            "ai_translate": False,
             "attachment_upload": document.link_role == "editor",
             "children_create": False,
             "children_list": True,
@@ -84,8 +84,8 @@ def test_api_documents_retrieve_anonymous_public_parent():
         "abilities": {
             "accesses_manage": False,
             "accesses_view": False,
-            "ai_transform": grand_parent.link_role == "editor",
-            "ai_translate": grand_parent.link_role == "editor",
+            "ai_transform": False,
+            "ai_translate": False,
             "attachment_upload": grand_parent.link_role == "editor",
             "children_create": False,
             "children_list": True,

src/backend/core/tests/migrations/test_0018_update_blank_title.py

@@ -0,0 +1,35 @@
+import pytest
+
+from core import factories
+
+
+@pytest.mark.django_db
+def test_update_blank_title_migration(migrator):
+    """
+    Test that the migration fixes the titles of documents that are
+    "Untitled document", "Unbenanntes Dokument" or "Document sans titre"
+    """
+    migrator.apply_initial_migration(("core", "0017_add_fields_for_soft_delete"))
+
+    english_doc = factories.DocumentFactory(title="Untitled document")
+    german_doc = factories.DocumentFactory(title="Unbenanntes Dokument")
+    french_doc = factories.DocumentFactory(title="Document sans titre")
+    other_doc = factories.DocumentFactory(title="My document")
+
+    assert english_doc.title == "Untitled document"
+    assert german_doc.title == "Unbenanntes Dokument"
+    assert french_doc.title == "Document sans titre"
+    assert other_doc.title == "My document"
+
+    # Apply the migration
+    migrator.apply_tested_migration(("core", "0018_update_blank_title"))
+
+    english_doc.refresh_from_db()
+    german_doc.refresh_from_db()
+    french_doc.refresh_from_db()
+    other_doc.refresh_from_db()
+
+    assert english_doc.title == None
+    assert german_doc.title == None
+    assert french_doc.title == None
+    assert other_doc.title == "My document"

src/backend/core/tests/test_models_documents.py

@@ -12,6 +12,7 @@ from django.core import mail
 from django.core.cache import cache
 from django.core.exceptions import ValidationError
 from django.core.files.storage import default_storage
+from django.test.utils import override_settings
 from django.utils import timezone
 
 import pytest
@@ -124,6 +125,9 @@ def test_models_documents_soft_delete(depth):
 # get_abilities
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 @pytest.mark.parametrize(
     "is_authenticated,reach,role",
     [
@@ -175,6 +179,9 @@ def test_models_documents_get_abilities_forbidden(
     assert document.get_abilities(user) == expected_abilities
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 @pytest.mark.parametrize(
     "is_authenticated,reach",
     [
@@ -243,8 +250,8 @@ def test_models_documents_get_abilities_editor(
     expected_abilities = {
         "accesses_manage": False,
         "accesses_view": False,
-        "ai_transform": True,
-        "ai_translate": True,
+        "ai_transform": is_authenticated,
+        "ai_translate": is_authenticated,
         "attachment_upload": True,
         "children_create": is_authenticated,
         "children_list": True,
@@ -271,6 +278,9 @@ def test_models_documents_get_abilities_editor(
     assert all(value is False for value in document.get_abilities(user).values())
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 def test_models_documents_get_abilities_owner(django_assert_num_queries):
     """Check abilities returned for the owner of a document."""
     user = factories.UserFactory()
@@ -300,12 +310,16 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
     }
     with django_assert_num_queries(1):
         assert document.get_abilities(user) == expected_abilities
+
     document.soft_delete()
     document.refresh_from_db()
     expected_abilities["move"] = False
     assert document.get_abilities(user) == expected_abilities
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 def test_models_documents_get_abilities_administrator(django_assert_num_queries):
     """Check abilities returned for the administrator of a document."""
     user = factories.UserFactory()
@@ -335,11 +349,15 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
     }
     with django_assert_num_queries(1):
         assert document.get_abilities(user) == expected_abilities
+
     document.soft_delete()
     document.refresh_from_db()
     assert all(value is False for value in document.get_abilities(user).values())
 
 
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
 def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
     """Check abilities returned for the editor of a document."""
     user = factories.UserFactory()
@@ -369,23 +387,31 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
     }
     with django_assert_num_queries(1):
         assert document.get_abilities(user) == expected_abilities
+
     document.soft_delete()
     document.refresh_from_db()
     assert all(value is False for value in document.get_abilities(user).values())
 
 
-def test_models_documents_get_abilities_reader_user(django_assert_num_queries):
+@pytest.mark.parametrize("ai_access_setting", ["public", "authenticated", "restricted"])
+def test_models_documents_get_abilities_reader_user(
+    ai_access_setting, django_assert_num_queries
+):
     """Check abilities returned for the reader of a document."""
     user = factories.UserFactory()
     document = factories.DocumentFactory(users=[(user, "reader")])
+
     access_from_link = (
         document.link_reach != "restricted" and document.link_role == "editor"
     )
+
     expected_abilities = {
         "accesses_manage": False,
         "accesses_view": True,
-        "ai_transform": access_from_link,
-        "ai_translate": access_from_link,
+        # If you get your editor rights from the link role and not your access role
+        # You should not access AI if it's restricted to users with specific access
+        "ai_transform": access_from_link and ai_access_setting != "restricted",
+        "ai_translate": access_from_link and ai_access_setting != "restricted",
         "attachment_upload": access_from_link,
         "children_create": access_from_link,
         "children_list": True,
@@ -404,11 +430,14 @@ def test_models_documents_get_abilities_reader_user(django_assert_num_queries):
         "versions_list": True,
         "versions_retrieve": True,
     }
-    with django_assert_num_queries(1):
-        assert document.get_abilities(user) == expected_abilities
-    document.soft_delete()
-    document.refresh_from_db()
-    assert all(value is False for value in document.get_abilities(user).values())
+
+    with override_settings(AI_ALLOW_REACH_FROM=ai_access_setting):
+        with django_assert_num_queries(1):
+            assert document.get_abilities(user) == expected_abilities
+
+        document.soft_delete()
+        document.refresh_from_db()
+        assert all(value is False for value in document.get_abilities(user).values())
 
 
 def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
@@ -446,6 +475,44 @@ def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
     }
 
 
+@override_settings(AI_ALLOW_REACH_FROM="public")
+@pytest.mark.parametrize(
+    "is_authenticated,reach",
+    [
+        (True, "public"),
+        (False, "public"),
+        (True, "authenticated"),
+    ],
+)
+def test_models_document_get_abilities_ai_access_authenticated(is_authenticated, reach):
+    """Validate AI abilities when AI is available to any anonymous user with editor rights."""
+    user = factories.UserFactory() if is_authenticated else AnonymousUser()
+    document = factories.DocumentFactory(link_reach=reach, link_role="editor")
+
+    abilities = document.get_abilities(user)
+    assert abilities["ai_transform"] is True
+    assert abilities["ai_translate"] is True
+
+
+@override_settings(AI_ALLOW_REACH_FROM="authenticated")
+@pytest.mark.parametrize(
+    "is_authenticated,reach",
+    [
+        (True, "public"),
+        (False, "public"),
+        (True, "authenticated"),
+    ],
+)
+def test_models_document_get_abilities_ai_access_public(is_authenticated, reach):
+    """Validate AI abilities when AI is available only to authenticated users with editor rights."""
+    user = factories.UserFactory() if is_authenticated else AnonymousUser()
+    document = factories.DocumentFactory(link_reach=reach, link_role="editor")
+
+    abilities = document.get_abilities(user)
+    assert abilities["ai_transform"] == is_authenticated
+    assert abilities["ai_translate"] == is_authenticated
+
+
 def test_models_documents_get_versions_slice_pagination(settings):
     """
     The "get_versions_slice" method should allow navigating all versions of
@@ -569,6 +636,37 @@ def test_models_documents__email_invitation__success():
     assert f"docs/{document.id}/" in email_content
 
 
+def test_models_documents__email_invitation__success_empty_title():
+    """
+    The email invitation is sent successfully.
+    """
+    document = factories.DocumentFactory(title=None)
+
+    # pylint: disable-next=no-member
+    assert len(mail.outbox) == 0
+
+    sender = factories.UserFactory(full_name="Test Sender", email="sender@example.com")
+    document.send_invitation_email(
+        "guest@example.com", models.RoleChoices.EDITOR, sender, "en"
+    )
+
+    # pylint: disable-next=no-member
+    assert len(mail.outbox) == 1
+
+    # pylint: disable-next=no-member
+    email = mail.outbox[0]
+
+    assert email.to == ["guest@example.com"]
+    email_content = " ".join(email.body.split())
+
+    assert "Test sender shared a document with you!" in email.subject
+    assert (
+        "Test Sender (sender@example.com) invited you with the role "editor" "
+        "on the following document: Untitled Document" in email_content
+    )
+    assert f"docs/{document.id}/" in email_content
+
+
 def test_models_documents__email_invitation__success_fr():
     """
     The email invitation is sent successfully in french.

src/backend/impress/settings.py

@@ -210,7 +210,6 @@ class Base(Configuration):
         "application/x-ms-regedit",
         "application/x-msdownload",
         "application/xml",
-        "image/svg+xml",
     ]
 
     # Document versions
@@ -516,7 +515,12 @@ class Base(Configuration):
     AI_API_KEY = values.Value(None, environ_name="AI_API_KEY", environ_prefix=None)
     AI_BASE_URL = values.Value(None, environ_name="AI_BASE_URL", environ_prefix=None)
     AI_MODEL = values.Value(None, environ_name="AI_MODEL", environ_prefix=None)
-
+    AI_ALLOW_REACH_FROM = values.Value(
+        choices=("public", "authenticated", "restricted"),
+        default="authenticated",
+        environ_name="AI_ALLOW_REACH_FROM",
+        environ_prefix=None,
+    )
     AI_DOCUMENT_RATE_THROTTLE_RATES = {
         "minute": 5,
         "hour": 100,

src/backend/locale/de_DE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-01-29 13:43+0000\n"
-"PO-Revision-Date: 2025-01-30 10:24\n"
+"POT-Creation-Date: 2025-03-03 12:20+0000\n"
+"PO-Revision-Date: 2025-03-03 12:22\n"
 "Last-Translator: \n"
 "Language-Team: German\n"
 "Language: de_DE\n"
@@ -54,15 +54,15 @@ msgstr "Ein neues Dokument wurde in Ihrem Namen erstellt!"
 msgid "You have been granted ownership of a new document:"
 msgstr "Sie sind Besitzer eines neuen Dokuments:"
 
-#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
+#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
 msgid "Body"
 msgstr "Inhalt"
 
-#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
+#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
 msgid "Body type"
 msgstr "Typ"
 
-#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
+#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr "Benutzer"
 msgid "users"
 msgstr "Benutzer"
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
-#: core/models.py:925
+#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
+#: core/models.py:942
 msgid "title"
 msgstr "Titel"
 
@@ -251,143 +251,164 @@ msgstr "Dokumente"
 msgid "Untitled Document"
 msgstr "Unbenanntes Dokument"
 
-#: build/lib/core/models.py:719 core/models.py:719
+#: build/lib/core/models.py:734 core/models.py:734
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt!"
 
-#: build/lib/core/models.py:723 core/models.py:723
+#: build/lib/core/models.py:738 core/models.py:738
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} hat Sie mit der Rolle \"{role}\" zu folgendem Dokument eingeladen:"
 
-#: build/lib/core/models.py:726 core/models.py:726
+#: build/lib/core/models.py:741 core/models.py:741
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt: {title}"
 
-#: build/lib/core/models.py:762 core/models.py:762
+#: build/lib/core/models.py:777 core/models.py:777
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:769 core/models.py:769
+#: build/lib/core/models.py:784 core/models.py:784
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:820 core/models.py:820
+#: build/lib/core/models.py:837 core/models.py:837
 msgid "Document/user link trace"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:821 core/models.py:821
+#: build/lib/core/models.py:838 core/models.py:838
 msgid "Document/user link traces"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:827 core/models.py:827
+#: build/lib/core/models.py:844 core/models.py:844
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:850 core/models.py:850
+#: build/lib/core/models.py:867 core/models.py:867
 msgid "Document favorite"
 msgstr "Dokumentenfavorit"
 
-#: build/lib/core/models.py:851 core/models.py:851
+#: build/lib/core/models.py:868 core/models.py:868
 msgid "Document favorites"
 msgstr "Dokumentfavoriten"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:874 core/models.py:874
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dieses Dokument ist bereits durch den gleichen Benutzer favorisiert worden."
 
-#: build/lib/core/models.py:879 core/models.py:879
+#: build/lib/core/models.py:896 core/models.py:896
 msgid "Document/user relation"
 msgstr "Dokument/Benutzerbeziehung"
 
-#: build/lib/core/models.py:880 core/models.py:880
+#: build/lib/core/models.py:897 core/models.py:897
 msgid "Document/user relations"
 msgstr "Dokument/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:886 core/models.py:886
+#: build/lib/core/models.py:903 core/models.py:903
 msgid "This user is already in this document."
 msgstr "Dieser Benutzer befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:892 core/models.py:892
+#: build/lib/core/models.py:909 core/models.py:909
 msgid "This team is already in this document."
 msgstr "Dieses Team befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:898 build/lib/core/models.py:1012
-#: core/models.py:898 core/models.py:1012
+#: build/lib/core/models.py:915 build/lib/core/models.py:1029
+#: core/models.py:915 core/models.py:1029
 msgid "Either user or team must be set, not both."
 msgstr "Benutzer oder Team müssen gesetzt werden, nicht beides."
 
-#: build/lib/core/models.py:926 core/models.py:926
+#: build/lib/core/models.py:943 core/models.py:943
 msgid "description"
 msgstr "Beschreibung"
 
-#: build/lib/core/models.py:927 core/models.py:927
+#: build/lib/core/models.py:944 core/models.py:944
 msgid "code"
 msgstr "Code"
 
-#: build/lib/core/models.py:928 core/models.py:928
+#: build/lib/core/models.py:945 core/models.py:945
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:930 core/models.py:930
+#: build/lib/core/models.py:947 core/models.py:947
 msgid "public"
 msgstr "öffentlich"
 
-#: build/lib/core/models.py:932 core/models.py:932
+#: build/lib/core/models.py:949 core/models.py:949
 msgid "Whether this template is public for anyone to use."
 msgstr "Ob diese Vorlage für jedermann öffentlich ist."
 
-#: build/lib/core/models.py:938 core/models.py:938
+#: build/lib/core/models.py:955 core/models.py:955
 msgid "Template"
 msgstr "Vorlage"
 
-#: build/lib/core/models.py:939 core/models.py:939
+#: build/lib/core/models.py:956 core/models.py:956
 msgid "Templates"
 msgstr "Vorlagen"
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:1010 core/models.py:1010
 msgid "Template/user relation"
 msgstr "Vorlage/Benutzer-Beziehung"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:1011 core/models.py:1011
 msgid "Template/user relations"
 msgstr "Vorlage/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1017 core/models.py:1017
 msgid "This user is already in this template."
 msgstr "Dieser Benutzer ist bereits in dieser Vorlage."
 
-#: build/lib/core/models.py:1006 core/models.py:1006
+#: build/lib/core/models.py:1023 core/models.py:1023
 msgid "This team is already in this template."
 msgstr "Dieses Team ist bereits in diesem Template."
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1046 core/models.py:1046
 msgid "email address"
 msgstr "E-Mail-Adresse"
 
-#: build/lib/core/models.py:1048 core/models.py:1048
+#: build/lib/core/models.py:1065 core/models.py:1065
 msgid "Document invitation"
 msgstr "Einladung zum Dokument"
 
-#: build/lib/core/models.py:1049 core/models.py:1049
+#: build/lib/core/models.py:1066 core/models.py:1066
 msgid "Document invitations"
 msgstr "Dokumenteinladungen"
 
-#: build/lib/core/models.py:1069 core/models.py:1069
+#: build/lib/core/models.py:1086 core/models.py:1086
 msgid "This email is already associated to a registered user."
 msgstr "Diese E-Mail ist bereits einem registrierten Benutzer zugeordnet."
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:235 impress/settings.py:235
 msgid "English"
 msgstr "Englisch"
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "French"
 msgstr "Französisch"
 
-#: build/lib/impress/settings.py:238 impress/settings.py:238
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "German"
 msgstr "Deutsch"
 
+#: core/templates/mail/html/invitation.html:162
+#: core/templates/mail/text/invitation.txt:3
+msgid "Logo email"
+msgstr "Logo-E-Mail"
+
+#: core/templates/mail/html/invitation.html:209
+#: core/templates/mail/text/invitation.txt:10
+msgid "Open"
+msgstr "Öffnen"
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
+msgstr " Docs, Ihr neues unentbehrliches Werkzeug für die Organisation, den Austausch und die Zusammenarbeit in Ihren Dokumenten als Team. "
+
+#: core/templates/mail/html/invitation.html:233
+#: core/templates/mail/text/invitation.txt:16
+#, python-format
+msgid " Brought to you by %(brandname)s "
+msgstr " Erstellt von %(brandname)s "
+

src/backend/locale/en_US/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-01-29 13:43+0000\n"
-"PO-Revision-Date: 2025-01-30 10:24\n"
+"POT-Creation-Date: 2025-03-03 12:20+0000\n"
+"PO-Revision-Date: 2025-03-03 12:22\n"
 "Last-Translator: \n"
 "Language-Team: English\n"
 "Language: en_US\n"
@@ -54,15 +54,15 @@ msgstr ""
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
+#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
+#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
+#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
-#: core/models.py:925
+#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
+#: core/models.py:942
 msgid "title"
 msgstr ""
 
@@ -251,143 +251,164 @@ msgstr ""
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:719 core/models.py:719
+#: build/lib/core/models.py:734 core/models.py:734
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:723 core/models.py:723
+#: build/lib/core/models.py:738 core/models.py:738
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:726 core/models.py:726
+#: build/lib/core/models.py:741 core/models.py:741
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:762 core/models.py:762
+#: build/lib/core/models.py:777 core/models.py:777
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:769 core/models.py:769
+#: build/lib/core/models.py:784 core/models.py:784
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:820 core/models.py:820
+#: build/lib/core/models.py:837 core/models.py:837
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:821 core/models.py:821
+#: build/lib/core/models.py:838 core/models.py:838
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:827 core/models.py:827
+#: build/lib/core/models.py:844 core/models.py:844
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:850 core/models.py:850
+#: build/lib/core/models.py:867 core/models.py:867
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:851 core/models.py:851
+#: build/lib/core/models.py:868 core/models.py:868
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:874 core/models.py:874
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:879 core/models.py:879
+#: build/lib/core/models.py:896 core/models.py:896
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:880 core/models.py:880
+#: build/lib/core/models.py:897 core/models.py:897
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:886 core/models.py:886
+#: build/lib/core/models.py:903 core/models.py:903
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:892 core/models.py:892
+#: build/lib/core/models.py:909 core/models.py:909
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:898 build/lib/core/models.py:1012
-#: core/models.py:898 core/models.py:1012
+#: build/lib/core/models.py:915 build/lib/core/models.py:1029
+#: core/models.py:915 core/models.py:1029
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:926 core/models.py:926
+#: build/lib/core/models.py:943 core/models.py:943
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:927 core/models.py:927
+#: build/lib/core/models.py:944 core/models.py:944
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:928 core/models.py:928
+#: build/lib/core/models.py:945 core/models.py:945
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:930 core/models.py:930
+#: build/lib/core/models.py:947 core/models.py:947
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:932 core/models.py:932
+#: build/lib/core/models.py:949 core/models.py:949
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:938 core/models.py:938
+#: build/lib/core/models.py:955 core/models.py:955
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:939 core/models.py:939
+#: build/lib/core/models.py:956 core/models.py:956
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:1010 core/models.py:1010
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:1011 core/models.py:1011
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1017 core/models.py:1017
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1006 core/models.py:1006
+#: build/lib/core/models.py:1023 core/models.py:1023
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1046 core/models.py:1046
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1048 core/models.py:1048
+#: build/lib/core/models.py:1065 core/models.py:1065
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1049 core/models.py:1049
+#: build/lib/core/models.py:1066 core/models.py:1066
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1069 core/models.py:1069
+#: build/lib/core/models.py:1086 core/models.py:1086
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:235 impress/settings.py:235
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:238 impress/settings.py:238
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "German"
 msgstr ""
 
+#: core/templates/mail/html/invitation.html:162
+#: core/templates/mail/text/invitation.txt:3
+msgid "Logo email"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:209
+#: core/templates/mail/text/invitation.txt:10
+msgid "Open"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:233
+#: core/templates/mail/text/invitation.txt:16
+#, python-format
+msgid " Brought to you by %(brandname)s "
+msgstr ""
+

src/backend/locale/fr_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-01-29 13:43+0000\n"
-"PO-Revision-Date: 2025-01-30 10:24\n"
+"POT-Creation-Date: 2025-03-03 12:20+0000\n"
+"PO-Revision-Date: 2025-03-04 08:20\n"
 "Last-Translator: \n"
 "Language-Team: French\n"
 "Language: fr_FR\n"
@@ -54,15 +54,15 @@ msgstr "Un nouveau document a été créé pour vous !"
 msgid "You have been granted ownership of a new document:"
 msgstr "Vous avez été déclaré propriétaire d'un nouveau document :"
 
-#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
+#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
+#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
+#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
-#: core/models.py:925
+#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
+#: core/models.py:942
 msgid "title"
 msgstr ""
 
@@ -249,145 +249,166 @@ msgstr ""
 
 #: build/lib/core/models.py:418 core/models.py:418
 msgid "Untitled Document"
-msgstr ""
+msgstr "Document sans titre"
 
-#: build/lib/core/models.py:719 core/models.py:719
+#: build/lib/core/models.py:734 core/models.py:734
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} a partagé un document avec vous!"
 
-#: build/lib/core/models.py:723 core/models.py:723
+#: build/lib/core/models.py:738 core/models.py:738
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vous a invité avec le rôle \"{role}\" sur le document suivant:"
 
-#: build/lib/core/models.py:726 core/models.py:726
+#: build/lib/core/models.py:741 core/models.py:741
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} a partagé un document avec vous: {title}"
 
-#: build/lib/core/models.py:762 core/models.py:762
+#: build/lib/core/models.py:777 core/models.py:777
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:769 core/models.py:769
+#: build/lib/core/models.py:784 core/models.py:784
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:820 core/models.py:820
+#: build/lib/core/models.py:837 core/models.py:837
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:821 core/models.py:821
+#: build/lib/core/models.py:838 core/models.py:838
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:827 core/models.py:827
+#: build/lib/core/models.py:844 core/models.py:844
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:850 core/models.py:850
+#: build/lib/core/models.py:867 core/models.py:867
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:851 core/models.py:851
+#: build/lib/core/models.py:868 core/models.py:868
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:874 core/models.py:874
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:879 core/models.py:879
+#: build/lib/core/models.py:896 core/models.py:896
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:880 core/models.py:880
+#: build/lib/core/models.py:897 core/models.py:897
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:886 core/models.py:886
+#: build/lib/core/models.py:903 core/models.py:903
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:892 core/models.py:892
+#: build/lib/core/models.py:909 core/models.py:909
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:898 build/lib/core/models.py:1012
-#: core/models.py:898 core/models.py:1012
+#: build/lib/core/models.py:915 build/lib/core/models.py:1029
+#: core/models.py:915 core/models.py:1029
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:926 core/models.py:926
+#: build/lib/core/models.py:943 core/models.py:943
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:927 core/models.py:927
+#: build/lib/core/models.py:944 core/models.py:944
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:928 core/models.py:928
+#: build/lib/core/models.py:945 core/models.py:945
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:930 core/models.py:930
+#: build/lib/core/models.py:947 core/models.py:947
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:932 core/models.py:932
+#: build/lib/core/models.py:949 core/models.py:949
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:938 core/models.py:938
+#: build/lib/core/models.py:955 core/models.py:955
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:939 core/models.py:939
+#: build/lib/core/models.py:956 core/models.py:956
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:1010 core/models.py:1010
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:1011 core/models.py:1011
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1017 core/models.py:1017
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1006 core/models.py:1006
+#: build/lib/core/models.py:1023 core/models.py:1023
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1046 core/models.py:1046
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1048 core/models.py:1048
+#: build/lib/core/models.py:1065 core/models.py:1065
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1049 core/models.py:1049
+#: build/lib/core/models.py:1066 core/models.py:1066
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1069 core/models.py:1069
+#: build/lib/core/models.py:1086 core/models.py:1086
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:235 impress/settings.py:235
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:238 impress/settings.py:238
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "German"
 msgstr ""
 
+#: core/templates/mail/html/invitation.html:162
+#: core/templates/mail/text/invitation.txt:3
+msgid "Logo email"
+msgstr "Logo de l'e-mail"
+
+#: core/templates/mail/html/invitation.html:209
+#: core/templates/mail/text/invitation.txt:10
+msgid "Open"
+msgstr "Ouvrir"
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
+msgstr " Docs, votre nouvel outil incontournable pour organiser, partager et collaborer sur vos documents en équipe. "
+
+#: core/templates/mail/html/invitation.html:233
+#: core/templates/mail/text/invitation.txt:16
+#, python-format
+msgid " Brought to you by %(brandname)s "
+msgstr " Proposé par %(brandname)s "
+

src/backend/locale/nl_NL/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-01-29 13:43+0000\n"
-"PO-Revision-Date: 2025-01-30 10:24\n"
+"POT-Creation-Date: 2025-03-03 12:20+0000\n"
+"PO-Revision-Date: 2025-03-03 12:22\n"
 "Last-Translator: \n"
 "Language-Team: Dutch\n"
 "Language: nl_NL\n"
@@ -54,15 +54,15 @@ msgstr ""
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
+#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
+#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
+#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
-#: core/models.py:925
+#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
+#: core/models.py:942
 msgid "title"
 msgstr ""
 
@@ -251,143 +251,164 @@ msgstr ""
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:719 core/models.py:719
+#: build/lib/core/models.py:734 core/models.py:734
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:723 core/models.py:723
+#: build/lib/core/models.py:738 core/models.py:738
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:726 core/models.py:726
+#: build/lib/core/models.py:741 core/models.py:741
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:762 core/models.py:762
+#: build/lib/core/models.py:777 core/models.py:777
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:769 core/models.py:769
+#: build/lib/core/models.py:784 core/models.py:784
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:820 core/models.py:820
+#: build/lib/core/models.py:837 core/models.py:837
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:821 core/models.py:821
+#: build/lib/core/models.py:838 core/models.py:838
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:827 core/models.py:827
+#: build/lib/core/models.py:844 core/models.py:844
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:850 core/models.py:850
+#: build/lib/core/models.py:867 core/models.py:867
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:851 core/models.py:851
+#: build/lib/core/models.py:868 core/models.py:868
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:874 core/models.py:874
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:879 core/models.py:879
+#: build/lib/core/models.py:896 core/models.py:896
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:880 core/models.py:880
+#: build/lib/core/models.py:897 core/models.py:897
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:886 core/models.py:886
+#: build/lib/core/models.py:903 core/models.py:903
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:892 core/models.py:892
+#: build/lib/core/models.py:909 core/models.py:909
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:898 build/lib/core/models.py:1012
-#: core/models.py:898 core/models.py:1012
+#: build/lib/core/models.py:915 build/lib/core/models.py:1029
+#: core/models.py:915 core/models.py:1029
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:926 core/models.py:926
+#: build/lib/core/models.py:943 core/models.py:943
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:927 core/models.py:927
+#: build/lib/core/models.py:944 core/models.py:944
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:928 core/models.py:928
+#: build/lib/core/models.py:945 core/models.py:945
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:930 core/models.py:930
+#: build/lib/core/models.py:947 core/models.py:947
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:932 core/models.py:932
+#: build/lib/core/models.py:949 core/models.py:949
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:938 core/models.py:938
+#: build/lib/core/models.py:955 core/models.py:955
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:939 core/models.py:939
+#: build/lib/core/models.py:956 core/models.py:956
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:1010 core/models.py:1010
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:1011 core/models.py:1011
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1017 core/models.py:1017
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1006 core/models.py:1006
+#: build/lib/core/models.py:1023 core/models.py:1023
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1046 core/models.py:1046
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1048 core/models.py:1048
+#: build/lib/core/models.py:1065 core/models.py:1065
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1049 core/models.py:1049
+#: build/lib/core/models.py:1066 core/models.py:1066
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1069 core/models.py:1069
+#: build/lib/core/models.py:1086 core/models.py:1086
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:235 impress/settings.py:235
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:238 impress/settings.py:238
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "German"
 msgstr ""
 
+#: core/templates/mail/html/invitation.html:162
+#: core/templates/mail/text/invitation.txt:3
+msgid "Logo email"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:209
+#: core/templates/mail/text/invitation.txt:10
+msgid "Open"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:233
+#: core/templates/mail/text/invitation.txt:16
+#, python-format
+msgid " Brought to you by %(brandname)s "
+msgstr ""
+

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "impress"
-version = "2.1.0"
+version = "2.3.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -68,6 +68,7 @@ dependencies = [
 [project.optional-dependencies]
 dev = [
     "django-extensions==3.2.3",
+    "django-test-migrations==1.4.0",
     "drf-spectacular-sidecar==2024.12.1",
     "freezegun==1.5.1",
     "ipdb==0.13.13",
@@ -99,7 +100,6 @@ exclude = [
     "build",
     "venv",
     "__pycache__",
-    "*/migrations/*",
 ]
 line-length = 88
 

src/frontend/apps/e2e/__tests__/app-impress/404.spec.ts

@@ -17,13 +17,13 @@ test.describe('404', () => {
         'It seems that the page you are looking for does not exist or cannot be displayed correctly.',
       ),
     ).toBeVisible();
-    await expect(page.getByText('Back to home page')).toBeVisible();
+    await expect(page.getByText('Home')).toBeVisible();
   });
 
   test('checks go back to home page redirects to home page', async ({
     page,
   }) => {
-    await page.getByText('Back to home page').click();
+    await page.getByText('Home').click();
     await expect(page).toHaveURL('/');
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/assets/test.html

@@ -0,0 +1,22 @@
+<html>
+  <head>
+    <title>Test unsafe file</title>
+  </head>
+  <body>
+    <h1>Hello svg</h1>
+    <img src="test.jpg" alt="test" />
+    <svg
+      xmlns="http://www.w3.org/2000/svg"
+      width="100"
+      height="100"
+      viewBox="0 0 100 100"
+    >
+      <circle cx="50" cy="30" r="20" fill="#3498db" />
+      <polygon
+        points="50,10 55,20 65,20 58,30 60,40 50,35 40,40 42,30 35,20 45,20"
+        fill="#f1c40f"
+      />
+      <text x="50" y="70" text-anchor="middle" fill="white">Hello svg</text>
+    </svg>
+  </body>
+</html>

src/frontend/apps/e2e/__tests__/app-impress/auth.setup.ts

@@ -1,27 +1,46 @@
-import { test as setup } from '@playwright/test';
+import { FullConfig, FullProject, chromium, expect } from '@playwright/test';
 
 import { keyCloakSignIn } from './common';
 
-setup('authenticate-chromium', async ({ page }) => {
-  await page.goto('/');
-  await keyCloakSignIn(page, 'chromium');
-  await page
-    .context()
-    .storageState({ path: `playwright/.auth/user-chromium.json` });
-});
+const saveStorageState = async (
+  browserConfig: FullProject<unknown, unknown>,
+) => {
+  const browserName = browserConfig?.name || 'chromium';
 
-setup('authenticate-webkit', async ({ page }) => {
-  await page.goto('/');
-  await keyCloakSignIn(page, 'webkit');
-  await page
-    .context()
-    .storageState({ path: `playwright/.auth/user-webkit.json` });
-});
+  const { storageState, ...useConfig } = browserConfig?.use;
+  const browser = await chromium.launch();
+  const context = await browser.newContext(useConfig);
+  const page = await context.newPage();
 
-setup('authenticate-firefox', async ({ page }) => {
-  await page.goto('/');
-  await keyCloakSignIn(page, 'firefox');
-  await page
-    .context()
-    .storageState({ path: `playwright/.auth/user-firefox.json` });
-});
+  await page.goto('/', { waitUntil: 'networkidle' });
+  await page.content();
+  await expect(page.getByText('Docs').first()).toBeVisible();
+
+  await keyCloakSignIn(page, browserName);
+
+  await expect(
+    page.locator('header').first().getByRole('button', {
+      name: 'Logout',
+    }),
+  ).toBeVisible();
+
+  await page.context().storageState({
+    path: storageState as string,
+  });
+
+  await browser.close();
+};
+
+async function globalSetup(config: FullConfig) {
+  /* eslint-disable @typescript-eslint/no-non-null-assertion */
+  const chromeConfig = config.projects.find((p) => p.name === 'chromium')!;
+  const firefoxConfig = config.projects.find((p) => p.name === 'firefox')!;
+  const webkitConfig = config.projects.find((p) => p.name === 'webkit')!;
+  /* eslint-enable @typescript-eslint/no-non-null-assertion */
+
+  await saveStorageState(chromeConfig);
+  await saveStorageState(webkitConfig);
+  await saveStorageState(firefoxConfig);
+}
+
+export default globalSetup;

src/frontend/apps/e2e/__tests__/app-impress/common.ts

@@ -1,6 +1,17 @@
 import { Page, expect } from '@playwright/test';
 
-export const keyCloakSignIn = async (page: Page, browserName: string) => {
+export const keyCloakSignIn = async (
+  page: Page,
+  browserName: string,
+  fromHome: boolean = true,
+) => {
+  if (fromHome) {
+    await page
+      .getByRole('button', { name: 'Proconnect Login' })
+      .first()
+      .click();
+  }
+
   const login = `user-e2e-${browserName}`;
   const password = `password-e2e-${browserName}`;
 
@@ -86,7 +97,7 @@ export const addNewMember = async (
 
   // Choose a role
   await page.getByLabel('doc-role-dropdown').click();
-  await page.getByRole('button', { name: role }).click();
+  await page.getByRole('menuitem', { name: role }).click();
   await page.getByRole('button', { name: 'Invite' }).click();
 
   return users[index].email;
@@ -258,3 +269,8 @@ export const mockedAccesses = async (page: Page, json?: object) => {
     }
   });
 };
+
+export const expectLoginPage = async (page: Page) =>
+  await expect(
+    page.getByRole('heading', { name: 'Collaborative writing' }),
+  ).toBeVisible();

src/frontend/apps/e2e/__tests__/app-impress/config.spec.ts

@@ -63,27 +63,6 @@ test.describe('Config', () => {
     expect((await consoleMessage).text()).toContain(invalidMsg);
   });
 
-  test('it checks that theme is configured from config endpoint', async ({
-    page,
-  }) => {
-    const responsePromise = page.waitForResponse(
-      (response) =>
-        response.url().includes('/config/') && response.status() === 200,
-    );
-
-    await page.goto('/');
-
-    const response = await responsePromise;
-    expect(response.ok()).toBeTruthy();
-
-    const jsonResponse = await response.json();
-    expect(jsonResponse.FRONTEND_THEME).toStrictEqual('dsfr');
-
-    const footer = page.locator('footer').first();
-    // alt 'Gouvernement Logo' comes from the theme
-    await expect(footer.getByAltText('Gouvernement Logo')).toBeVisible();
-  });
-
   test('it checks that media server is configured from config endpoint', async ({
     page,
     browserName,
@@ -161,3 +140,28 @@ test.describe('Config', () => {
     ).toBeVisible();
   });
 });
+
+test.describe('Config: Not loggued', () => {
+  test.use({ storageState: { cookies: [], origins: [] } });
+
+  test('it checks that theme is configured from config endpoint', async ({
+    page,
+  }) => {
+    const responsePromise = page.waitForResponse(
+      (response) =>
+        response.url().includes('/config/') && response.status() === 200,
+    );
+
+    await page.goto('/');
+
+    const response = await responsePromise;
+    expect(response.ok()).toBeTruthy();
+
+    const jsonResponse = await response.json();
+    expect(jsonResponse.FRONTEND_THEME).toStrictEqual('dsfr');
+
+    const footer = page.locator('footer').first();
+    // alt 'Gouvernement Logo' comes from the theme
+    await expect(footer.getByAltText('Gouvernement Logo')).toBeVisible();
+  });
+});

src/frontend/apps/e2e/__tests__/app-impress/doc-create.spec.ts

@@ -24,8 +24,6 @@ test.describe('Doc Create', () => {
     const header = page.locator('header').first();
     await header.locator('h2').getByText('Docs').click();
 
-    await expect(page.getByTestId('grid-loader')).toBeVisible();
-
     const docsGrid = page.getByTestId('docs-grid');
     await expect(docsGrid).toBeVisible();
     await expect(page.getByTestId('grid-loader')).toBeHidden();

src/frontend/apps/e2e/__tests__/app-impress/doc-editor.spec.ts

@@ -1,6 +1,7 @@
 import path from 'path';
 
 import { expect, test } from '@playwright/test';
+import cs from 'convert-stream';
 
 import {
   createDoc,
@@ -35,10 +36,10 @@ test.describe('Doc Editor', () => {
 
     // Change language to French
     await header.click();
-    await header.getByRole('combobox').getByText('English').click();
-    await header.getByRole('option', { name: 'Français' }).click();
+    await header.getByRole('button', { name: /Language/ }).click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
     await expect(
-      header.getByRole('combobox').getByText('Français'),
+      header.getByRole('button').getByText('Français'),
     ).toBeVisible();
 
     // Trigger slash menu to show french menu
@@ -128,7 +129,7 @@ test.describe('Doc Editor', () => {
 
     await selectVisibility.click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Connected',
       })
       .click();
@@ -368,4 +369,118 @@ test.describe('Doc Editor', () => {
 
     await expect(editor.getByText('Bonjour le monde')).toBeVisible();
   });
+
+  [
+    { ai_transform: false, ai_translate: false },
+    { ai_transform: true, ai_translate: false },
+    { ai_transform: false, ai_translate: true },
+  ].forEach(({ ai_transform, ai_translate }) => {
+    test(`it checks AI buttons when can transform is at "${ai_transform}" and can translate is at "${ai_translate}"`, async ({
+      page,
+    }) => {
+      await mockedDocument(page, {
+        accesses: [
+          {
+            id: 'b0df4343-c8bd-4c20-9ff6-fbf94fc94egg',
+            role: 'owner',
+            user: {
+              email: 'super@owner.com',
+              full_name: 'Super Owner',
+            },
+          },
+        ],
+        abilities: {
+          destroy: true, // Means owner
+          link_configuration: true,
+          ai_transform,
+          ai_translate,
+          accesses_manage: true,
+          accesses_view: true,
+          update: true,
+          partial_update: true,
+          retrieve: true,
+        },
+        link_reach: 'public',
+        link_role: 'editor',
+        created_at: '2021-09-01T09:00:00Z',
+      });
+
+      await goToGridDoc(page);
+
+      await verifyDocName(page, 'Mocked document');
+
+      await page.locator('.bn-block-outer').last().fill('Hello World');
+
+      const editor = page.locator('.ProseMirror');
+      await editor.getByText('Hello').dblclick();
+
+      /* eslint-disable playwright/no-conditional-expect */
+      /* eslint-disable playwright/no-conditional-in-test */
+      if (!ai_transform && !ai_translate) {
+        await expect(page.getByRole('button', { name: 'AI' })).toBeHidden();
+        return;
+      }
+
+      await page.getByRole('button', { name: 'AI' }).click();
+
+      if (ai_transform) {
+        await expect(
+          page.getByRole('menuitem', { name: 'Use as prompt' }),
+        ).toBeVisible();
+      } else {
+        await expect(
+          page.getByRole('menuitem', { name: 'Use as prompt' }),
+        ).toBeHidden();
+      }
+
+      if (ai_translate) {
+        await expect(
+          page.getByRole('menuitem', { name: 'Language' }),
+        ).toBeVisible();
+      } else {
+        await expect(
+          page.getByRole('menuitem', { name: 'Language' }),
+        ).toBeHidden();
+      }
+      /* eslint-enable playwright/no-conditional-expect */
+      /* eslint-enable playwright/no-conditional-in-test */
+    });
+  });
+
+  test('it downloads unsafe files', async ({ page, browserName }) => {
+    const [randomDoc] = await createDoc(page, 'doc-editor', browserName, 1);
+
+    const fileChooserPromise = page.waitForEvent('filechooser');
+    const downloadPromise = page.waitForEvent('download', (download) => {
+      return download.suggestedFilename().includes(`html`);
+    });
+
+    await verifyDocName(page, randomDoc);
+
+    await page.locator('.ProseMirror.bn-editor').click();
+    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+
+    await page.keyboard.press('Enter');
+    await page.locator('.bn-block-outer').last().fill('/');
+    await page.getByText('Embedded file').click();
+    await page.getByText('Upload file').click();
+
+    const fileChooser = await fileChooserPromise;
+    await fileChooser.setFiles(path.join(__dirname, 'assets/test.html'));
+
+    await page.locator('.bn-block-content[data-name="test.html"]').click();
+    await page.getByRole('button', { name: 'Download file' }).click();
+
+    await expect(
+      page.getByText('This file is flagged as unsafe.'),
+    ).toBeVisible();
+
+    await page.getByRole('button', { name: 'Download' }).click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toContain(`-unsafe.html`);
+
+    const svgBuffer = await cs.toBuffer(await download.createReadStream());
+    expect(svgBuffer.toString()).toContain('Hello svg');
+  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-export.spec.ts

@@ -41,8 +41,16 @@ test.describe('Doc Export', () => {
     await expect(page.getByRole('button', { name: 'Download' })).toBeVisible();
   });
 
-  test('it exports the doc to pdf', async ({ page, browserName }) => {
-    const [randomDoc] = await createDoc(page, 'doc-editor', browserName, 1);
+  test('it exports the doc with pdf line break', async ({
+    page,
+    browserName,
+  }) => {
+    const [randomDoc] = await createDoc(
+      page,
+      'doc-editor-line-break',
+      browserName,
+      1,
+    );
 
     const downloadPromise = page.waitForEvent('download', (download) => {
       return download.suggestedFilename().includes(`${randomDoc}.pdf`);
@@ -50,8 +58,20 @@ test.describe('Doc Export', () => {
 
     await verifyDocName(page, randomDoc);
 
-    await page.locator('.ProseMirror.bn-editor').click();
-    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+    const editor = page.locator('.ProseMirror.bn-editor');
+
+    await editor.click();
+    await editor.locator('.bn-block-outer').last().fill('Hello');
+
+    await page.keyboard.press('Enter');
+    await editor.locator('.bn-block-outer').last().fill('/');
+    await page.getByText('Page Break').click();
+
+    await expect(editor.locator('.bn-page-break')).toBeVisible();
+
+    await page.keyboard.press('Enter');
+
+    await editor.locator('.bn-block-outer').last().fill('World');
 
     await page
       .getByRole('button', {
@@ -69,9 +89,10 @@ test.describe('Doc Export', () => {
     expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
 
     const pdfBuffer = await cs.toBuffer(await download.createReadStream());
-    const pdfText = (await pdf(pdfBuffer)).text;
+    const pdfData = await pdf(pdfBuffer);
 
-    expect(pdfText).toContain('Hello World'); // This is the doc text
+    expect(pdfData.numpages).toBe(2);
+    expect(pdfData.text).toContain('\n\nHello\n\nWorld'); // This is the doc text
   });
 
   test('it exports the doc to docx', async ({ page, browserName }) => {
@@ -176,4 +197,49 @@ test.describe('Doc Export', () => {
 
     expect(pdfText).toContain('Hello World');
   });
+
+  test('it exports the doc with quotes', async ({ page, browserName }) => {
+    const [randomDoc] = await createDoc(page, 'export-quotes', browserName, 1);
+
+    const downloadPromise = page.waitForEvent('download', (download) => {
+      return download.suggestedFilename().includes(`${randomDoc}.pdf`);
+    });
+
+    const editor = page.locator('.ProseMirror');
+    // Trigger slash menu to show menu
+    await editor.click();
+    await editor.fill('/');
+    await page.getByText('Add a quote block').click();
+
+    await expect(
+      editor.locator('.bn-block-content[data-content-type="quote"]'),
+    ).toBeVisible();
+
+    await editor.fill('Hello World');
+
+    await expect(editor.getByText('Hello World')).toHaveCSS(
+      'font-style',
+      'italic',
+    );
+
+    await page
+      .getByRole('button', {
+        name: 'download',
+      })
+      .click();
+
+    await page
+      .getByRole('button', {
+        name: 'Download',
+      })
+      .click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
+
+    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
+    const pdfData = await pdf(pdfBuffer);
+
+    expect(pdfData.text).toContain('Hello World'); // This is the pdf text
+  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-grid.spec.ts

@@ -7,17 +7,9 @@ type SmallDoc = {
   title: string;
 };
 
-test.beforeEach(async ({ page }) => {
-  await page.goto('/');
-});
-
 test.describe('Documents Grid mobile', () => {
   test.use({ viewport: { width: 500, height: 1200 } });
 
-  test.beforeEach(async ({ page }) => {
-    await page.goto('/');
-  });
-
   test('it checks the grid when mobile', async ({ page }) => {
     await page.route('**/documents/**', async (route) => {
       const request = route.request();
@@ -94,6 +86,10 @@ test.describe('Documents Grid mobile', () => {
 });
 
 test.describe('Document grid item options', () => {
+  test.beforeEach(async ({ page }) => {
+    await page.goto('/');
+  });
+
   test('it pins a document', async ({ page, browserName }) => {
     const [docTitle] = await createDoc(page, `Favorite doc`, browserName);
 
@@ -212,8 +208,9 @@ test.describe('Document grid item options', () => {
 
 test.describe('Documents filters', () => {
   test('it checks the prebuild left panel filters', async ({ page }) => {
+    await page.goto('/');
+
     // All Docs
-    await expect(page.getByTestId('grid-loader')).toBeVisible();
     const response = await page.waitForResponse(
       (response) =>
         response.url().endsWith('documents/?page=1') &&
@@ -254,7 +251,6 @@ test.describe('Documents filters', () => {
     url = new URL(page.url());
     target = url.searchParams.get('target');
     expect(target).toBe('my_docs');
-    await expect(page.getByTestId('grid-loader')).toBeVisible();
     const responseMyDocs = await page.waitForResponse(
       (response) =>
         response.url().endsWith('documents/?page=1&is_creator_me=true') &&
@@ -270,7 +266,6 @@ test.describe('Documents filters', () => {
     url = new URL(page.url());
     target = url.searchParams.get('target');
     expect(target).toBe('shared_with_me');
-    await expect(page.getByTestId('grid-loader')).toBeVisible();
     const responseSharedWithMe = await page.waitForResponse(
       (response) =>
         response.url().includes('documents/?page=1&is_creator_me=false') &&
@@ -285,14 +280,10 @@ test.describe('Documents filters', () => {
 });
 
 test.describe('Documents Grid', () => {
-  test.beforeEach(async ({ page }) => {
-    await page.goto('/');
-  });
-
   test('checks all the elements are visible', async ({ page }) => {
-    let docs: SmallDoc[] = [];
-    await expect(page.getByTestId('grid-loader')).toBeVisible();
+    await page.goto('/');
 
+    let docs: SmallDoc[] = [];
     const response = await page.waitForResponse(
       (response) =>
         response.url().endsWith('documents/?page=1') &&
@@ -319,11 +310,12 @@ test.describe('Documents Grid', () => {
 
   test('checks the infinite scroll', async ({ page }) => {
     let docs: SmallDoc[] = [];
-    const responsePromisePage1 = page.waitForResponse(
-      (response) =>
+    const responsePromisePage1 = page.waitForResponse((response) => {
+      return (
         response.url().endsWith(`/documents/?page=1`) &&
-        response.status() === 200,
-    );
+        response.status() === 200
+      );
+    });
 
     const responsePromisePage2 = page.waitForResponse(
       (response) =>
@@ -331,6 +323,8 @@ test.describe('Documents Grid', () => {
         response.status() === 200,
     );
 
+    await page.goto('/');
+
     const responsePage1 = await responsePromisePage1;
     expect(responsePage1.ok()).toBeTruthy();
     let result = await responsePage1.json();

src/frontend/apps/e2e/__tests__/app-impress/doc-header.spec.ts

@@ -89,7 +89,7 @@ test.describe('Doc Header', () => {
 
     await page.getByLabel('Open the document options').click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Delete document',
       })
       .click();
@@ -99,9 +99,7 @@ test.describe('Doc Header', () => {
     ).toBeVisible();
 
     await expect(
-      page.getByText(
-        `Are you sure you want to delete the document "${randomDoc}"?`,
-      ),
+      page.getByText(`Are you sure you want to delete this document ?`),
     ).toBeVisible();
 
     await page
@@ -153,7 +151,7 @@ test.describe('Doc Header', () => {
     await page.getByLabel('Open the document options').click();
 
     await expect(
-      page.getByRole('button', { name: 'Delete document' }),
+      page.getByRole('menuitem', { name: 'Delete document' }),
     ).toBeDisabled();
 
     // Click somewhere else to close the options
@@ -177,7 +175,7 @@ test.describe('Doc Header', () => {
     await invitationCard.getByRole('button', { name: 'more_horiz' }).click();
 
     await expect(
-      page.getByRole('button', {
+      page.getByRole('menuitem', {
         name: 'delete',
       }),
     ).toBeEnabled();
@@ -195,7 +193,7 @@ test.describe('Doc Header', () => {
     await memberCard.getByRole('button', { name: 'more_horiz' }).click();
 
     await expect(
-      page.getByRole('button', {
+      page.getByRole('menuitem', {
         name: 'delete',
       }),
     ).toBeEnabled();
@@ -233,7 +231,7 @@ test.describe('Doc Header', () => {
     await page.getByLabel('Open the document options').click();
 
     await expect(
-      page.getByRole('button', { name: 'Delete document' }),
+      page.getByRole('menuitem', { name: 'Delete document' }),
     ).toBeDisabled();
 
     // Click somewhere else to close the options
@@ -295,7 +293,7 @@ test.describe('Doc Header', () => {
     await page.getByLabel('Open the document options').click();
 
     await expect(
-      page.getByRole('button', { name: 'Delete document' }),
+      page.getByRole('menuitem', { name: 'Delete document' }),
     ).toBeDisabled();
 
     // Click somewhere else to close the options
@@ -352,7 +350,7 @@ test.describe('Doc Header', () => {
 
     // Copy content to clipboard
     await page.getByLabel('Open the document options').click();
-    await page.getByRole('button', { name: 'Copy as Markdown' }).click();
+    await page.getByRole('menuitem', { name: 'Copy as Markdown' }).click();
     await expect(page.getByText('Copied to clipboard')).toBeVisible();
 
     // Test that clipboard is in Markdown format
@@ -387,7 +385,7 @@ test.describe('Doc Header', () => {
 
     // Copy content to clipboard
     await page.getByLabel('Open the document options').click();
-    await page.getByRole('button', { name: 'Copy as HTML' }).click();
+    await page.getByRole('menuitem', { name: 'Copy as HTML' }).click();
     await expect(page.getByText('Copied to clipboard')).toBeVisible();
 
     // Test that clipboard is in HTML format
@@ -395,9 +393,7 @@ test.describe('Doc Header', () => {
       navigator.clipboard.readText(),
     );
     const clipboardContent = await handle.jsonValue();
-    expect(clipboardContent.trim()).toBe(
-      `<h1 data-level=\"1\">Hello World</h1><p></p>`,
-    );
+    expect(clipboardContent.trim()).toBe(`<h1>Hello World</h1><p></p>`);
   });
 
   test('it checks the copy link button', async ({ page }) => {
@@ -462,7 +458,7 @@ test.describe('Documents Header mobile', () => {
 
     await expect(page.getByRole('button', { name: 'Copy link' })).toBeHidden();
     await page.getByLabel('Open the document options').click();
-    await page.getByRole('button', { name: 'Share' }).click();
+    await page.getByRole('menuitem', { name: 'Share' }).click();
     await page.getByRole('button', { name: 'Copy link' }).click();
     await expect(page.getByText('Link Copied !')).toBeVisible();
     // Test that clipboard is in HTML format
@@ -496,7 +492,7 @@ test.describe('Documents Header mobile', () => {
     await goToGridDoc(page);
 
     await page.getByLabel('Open the document options').click();
-    await page.getByRole('button', { name: 'Share' }).click();
+    await page.getByRole('menuitem', { name: 'Share' }).click();
 
     await expect(page.getByLabel('Share modal')).toBeVisible();
     await page.getByRole('button', { name: 'close' }).click();

src/frontend/apps/e2e/__tests__/app-impress/doc-member-create.spec.ts

@@ -65,15 +65,15 @@ test.describe('Document create member', () => {
 
     // Check roles are displayed
     await list.getByLabel('doc-role-dropdown').click();
-    await expect(page.getByRole('button', { name: 'Reader' })).toBeVisible();
-    await expect(page.getByRole('button', { name: 'Editor' })).toBeVisible();
-    await expect(page.getByRole('button', { name: 'Owner' })).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Reader' })).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Editor' })).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Owner' })).toBeVisible();
     await expect(
-      page.getByRole('button', { name: 'Administrator' }),
+      page.getByRole('menuitem', { name: 'Administrator' }),
     ).toBeVisible();
 
     // Validate
-    await page.getByRole('button', { name: 'Administrator' }).click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await page.getByRole('button', { name: 'Invite' }).click();
 
     // Check invitation added
@@ -121,7 +121,7 @@ test.describe('Document create member', () => {
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Owner' }).click();
+    await page.getByRole('menuitem', { name: 'Owner' }).click();
 
     const responsePromiseCreateInvitation = page.waitForResponse(
       (response) =>
@@ -139,7 +139,7 @@ test.describe('Document create member', () => {
 
     // Choose a role
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Owner' }).click();
+    await page.getByRole('menuitem', { name: 'Owner' }).click();
 
     const responsePromiseCreateInvitationFail = page.waitForResponse(
       (response) =>
@@ -162,8 +162,8 @@ test.describe('Document create member', () => {
     await createDoc(page, 'user-invitation', browserName, 1);
 
     const header = page.locator('header').first();
-    await header.getByRole('combobox').getByText('EN').click();
-    await header.getByRole('option', { name: 'translate Français' }).click();
+    await header.getByRole('button', { name: /Language/ }).click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
 
     await page.getByRole('button', { name: 'Partager' }).click();
 
@@ -178,7 +178,7 @@ test.describe('Document create member', () => {
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Administrateur' }).click();
+    await page.getByRole('menuitem', { name: 'Administrateur' }).click();
 
     const responsePromiseCreateInvitation = page.waitForResponse(
       (response) =>
@@ -212,7 +212,7 @@ test.describe('Document create member', () => {
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Administrator' }).click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
 
     const responsePromiseCreateInvitation = page.waitForResponse(
       (response) =>
@@ -232,14 +232,14 @@ test.describe('Document create member', () => {
     await expect(userInvitation).toBeVisible();
 
     await userInvitation.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Reader' }).click();
+    await page.getByRole('menuitem', { name: 'Reader' }).click();
 
     const moreActions = userInvitation.getByRole('button', {
       name: 'more_horiz',
     });
     await moreActions.click();
 
-    await page.getByRole('button', { name: 'Delete' }).click();
+    await page.getByRole('menuitem', { name: 'Delete' }).click();
 
     await expect(userInvitation).toBeHidden();
   });

src/frontend/apps/e2e/__tests__/app-impress/doc-member-list.spec.ts

@@ -161,12 +161,12 @@ test.describe('Document list members', () => {
     await list.click();
 
     await currentUserRole.click();
-    await page.getByRole('button', { name: 'Administrator' }).click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await list.click();
     await expect(currentUserRole).toBeVisible();
 
     await currentUserRole.click();
-    await page.getByRole('button', { name: 'Reader' }).click();
+    await page.getByRole('menuitem', { name: 'Reader' }).click();
     await list.click();
     await expect(currentUserRole).toBeHidden();
   });
@@ -215,13 +215,13 @@ test.describe('Document list members', () => {
     await expect(mySelfMoreActions).toBeVisible();
 
     await userReaderMoreActions.click();
-    await page.getByRole('button', { name: 'Delete' }).click();
+    await page.getByRole('menuitem', { name: 'Delete' }).click();
     await expect(userReader).toBeHidden();
 
     await mySelfMoreActions.click();
-    await page.getByRole('button', { name: 'Delete' }).click();
+    await page.getByRole('menuitem', { name: 'Delete' }).click();
     await expect(
-      page.getByText('You do not have permission to perform this action.'),
+      page.getByText('You do not have permission to view this document.'),
     ).toBeVisible();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-routing.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { keyCloakSignIn, mockedDocument } from './common';
+import { expectLoginPage, keyCloakSignIn, mockedDocument } from './common';
 
 test.describe('Doc Routing', () => {
   test.beforeEach(async ({ page }) => {
@@ -63,16 +63,13 @@ test.describe('Doc Routing: Not loggued', () => {
     await page.goto('/docs/mocked-document-id/');
     await expect(page.locator('h2').getByText('Mocked document')).toBeVisible();
     await page.getByRole('button', { name: 'Login' }).click();
-    await keyCloakSignIn(page, browserName);
+    await keyCloakSignIn(page, browserName, false);
     await expect(page.locator('h2').getByText('Mocked document')).toBeVisible();
   });
 
+  // eslint-disable-next-line playwright/expect-expect
   test('The homepage redirects to login.', async ({ page }) => {
     await page.goto('/');
-    await expect(
-      page.getByRole('button', {
-        name: 'Sign In',
-      }),
-    ).toBeVisible();
+    await expectLoginPage(page);
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-version.spec.ts

@@ -19,7 +19,7 @@ test.describe('Doc Version', () => {
 
     await page.getByLabel('Open the document options').click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Version history',
       })
       .click();
@@ -59,7 +59,7 @@ test.describe('Doc Version', () => {
 
     await page.getByLabel('Open the document options').click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Version history',
       })
       .click();
@@ -91,7 +91,7 @@ test.describe('Doc Version', () => {
 
     await page.getByLabel('Open the document options').click();
     await expect(
-      page.getByRole('button', { name: 'Version history' }),
+      page.getByRole('menuitem', { name: 'Version history' }),
     ).toBeDisabled();
   });
 
@@ -120,7 +120,7 @@ test.describe('Doc Version', () => {
 
     await page.getByLabel('Open the document options').click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Version history',
       })
       .click();

src/frontend/apps/e2e/__tests__/app-impress/doc-visibility.spec.ts

@@ -1,6 +1,11 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, keyCloakSignIn, verifyDocName } from './common';
+import {
+  createDoc,
+  expectLoginPage,
+  keyCloakSignIn,
+  verifyDocName,
+} from './common';
 
 const browsersName = ['chromium', 'webkit', 'firefox'];
 
@@ -45,7 +50,7 @@ test.describe('Doc Visibility', () => {
 
     await selectVisibility.click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Connected',
       })
       .click();
@@ -55,7 +60,7 @@ test.describe('Doc Visibility', () => {
     await selectVisibility.click();
 
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Public',
       })
       .click();
@@ -91,11 +96,13 @@ test.describe('Doc Visibility: Restricted', () => {
       })
       .click();
 
-    await expect(page.getByRole('button', { name: 'Sign in' })).toBeVisible();
+    await expectLoginPage(page);
 
     await page.goto(urlDoc);
 
-    await expect(page.getByRole('textbox', { name: 'password' })).toBeVisible();
+    await expect(
+      page.getByText('Log in to access the document.'),
+    ).toBeVisible();
   });
 
   test('A doc is not accessible when authentified but not member.', async ({
@@ -121,10 +128,14 @@ test.describe('Doc Visibility: Restricted', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
+    await expect(
+      page.getByRole('link', { name: 'Docs Logo Docs BETA' }),
+    ).toBeVisible();
+
     await page.goto(urlDoc);
 
     await expect(
-      page.getByText('You do not have permission to perform this action.'),
+      page.getByText('You do not have permission to view this document.'),
     ).toBeVisible();
   });
 
@@ -151,7 +162,7 @@ test.describe('Doc Visibility: Restricted', () => {
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByRole('button', { name: 'Administrator' }).click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
 
     await page.getByRole('button', { name: 'Invite' }).click();
 
@@ -169,10 +180,11 @@ test.describe('Doc Visibility: Restricted', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
-    await page.goto(urlDoc);
+    await expect(
+      page.getByRole('link', { name: 'Docs Logo Docs BETA' }),
+    ).toBeVisible();
 
-    // eslint-disable-next-line playwright/no-wait-for-timeout
-    await page.waitForTimeout(1000);
+    await page.goto(urlDoc);
 
     await verifyDocName(page, docTitle);
     await expect(page.getByLabel('Share button')).toBeVisible();
@@ -203,7 +215,7 @@ test.describe('Doc Visibility: Public', () => {
     await selectVisibility.click();
 
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Public',
       })
       .click();
@@ -215,7 +227,7 @@ test.describe('Doc Visibility: Public', () => {
     await expect(page.getByLabel('Visibility mode')).toBeVisible();
     await page.getByLabel('Visibility mode').click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Reading',
       })
       .click();
@@ -247,7 +259,7 @@ test.describe('Doc Visibility: Public', () => {
       })
       .click();
 
-    await expect(page.getByRole('button', { name: 'Sign in' })).toBeVisible();
+    await expectLoginPage(page);
 
     await page.goto(urlDoc);
 
@@ -277,7 +289,7 @@ test.describe('Doc Visibility: Public', () => {
     await selectVisibility.click();
 
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Public',
       })
       .click();
@@ -313,7 +325,7 @@ test.describe('Doc Visibility: Public', () => {
       })
       .click();
 
-    await expect(page.getByRole('button', { name: 'Sign in' })).toBeVisible();
+    await expectLoginPage(page);
 
     await page.goto(urlDoc);
 
@@ -345,7 +357,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     const selectVisibility = page.getByLabel('Visibility', { exact: true });
     await selectVisibility.click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Connected',
       })
       .click();
@@ -364,12 +376,15 @@ test.describe('Doc Visibility: Authenticated', () => {
       })
       .click();
 
-    await expect(page.getByRole('button', { name: 'Sign in' })).toBeVisible();
+    await expectLoginPage(page);
 
     await page.goto(urlDoc);
 
     await expect(page.locator('h2').getByText(docTitle)).toBeHidden();
-    await expect(page.getByRole('textbox', { name: 'password' })).toBeVisible();
+
+    await expect(
+      page.getByText('Log in to access the document.'),
+    ).toBeVisible();
   });
 
   test('It checks a authenticated doc in read only mode', async ({
@@ -392,7 +407,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     const selectVisibility = page.getByLabel('Visibility', { exact: true });
     await selectVisibility.click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Connected',
       })
       .click();
@@ -401,6 +416,14 @@ test.describe('Doc Visibility: Authenticated', () => {
       page.getByText('The document visibility has been updated.'),
     ).toBeVisible();
 
+    await expect(
+      page
+        .getByLabel('It is the card information about the document.')
+        .getByText('Document accessible to any connected person', {
+          exact: true,
+        }),
+    ).toBeVisible();
+
     await page.getByRole('button', { name: 'close' }).click();
 
     const urlDoc = page.url();
@@ -414,6 +437,10 @@ test.describe('Doc Visibility: Authenticated', () => {
     const otherBrowser = browsersName.find((b) => b !== browserName);
     await keyCloakSignIn(page, otherBrowser!);
 
+    await expect(
+      page.getByRole('link', { name: 'Docs Logo Docs BETA' }),
+    ).toBeVisible();
+
     await page.goto(urlDoc);
 
     await expect(page.locator('h2').getByText(docTitle)).toBeVisible();
@@ -442,7 +469,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     const selectVisibility = page.getByLabel('Visibility', { exact: true });
     await selectVisibility.click();
     await page
-      .getByRole('button', {
+      .getByRole('menuitem', {
         name: 'Connected',
       })
       .click();
@@ -470,6 +497,10 @@ test.describe('Doc Visibility: Authenticated', () => {
     const otherBrowser = browsersName.find((b) => b !== browserName);
     await keyCloakSignIn(page, otherBrowser!);
 
+    await expect(
+      page.getByRole('link', { name: 'Docs Logo Docs BETA' }),
+    ).toBeVisible();
+
     await page.goto(urlDoc);
 
     await verifyDocName(page, docTitle);

src/frontend/apps/e2e/__tests__/app-impress/footer.spec.ts

@@ -1,13 +1,10 @@
 import { expect, test } from '@playwright/test';
 
-import { goToGridDoc } from './common';
-
-test.beforeEach(async ({ page }) => {
-  await page.goto('/');
-});
-
 test.describe('Footer', () => {
+  test.use({ storageState: { cookies: [], origins: [] } });
+
   test('checks all the elements are visible', async ({ page }) => {
+    await page.goto('/');
     const footer = page.locator('footer').first();
 
     await expect(footer.getByAltText('Gouvernement Logo')).toBeVisible();
@@ -47,12 +44,6 @@ test.describe('Footer', () => {
     ).toBeVisible();
   });
 
-  test('checks footer is not visible on doc editor', async ({ page }) => {
-    await expect(page.locator('footer')).toBeVisible();
-    await goToGridDoc(page);
-    await expect(page.locator('footer')).toBeHidden();
-  });
-
   const legalPages = [
     { name: 'Legal Notice', url: '/legal-notice/' },
     { name: 'Personal data and cookies', url: '/personal-data-cookies/' },
@@ -60,6 +51,8 @@ test.describe('Footer', () => {
   ];
   for (const { name, url } of legalPages) {
     test(`checks ${name} page`, async ({ page }) => {
+      await page.goto('/');
+
       const footer = page.locator('footer').first();
       await footer.getByRole('link', { name }).click();
 

src/frontend/apps/e2e/__tests__/app-impress/header.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { keyCloakSignIn } from './common';
+import { expectLoginPage, keyCloakSignIn } from './common';
 
 test.describe('Header', () => {
   test.beforeEach(async ({ page }) => {
@@ -10,7 +10,7 @@ test.describe('Header', () => {
   test('checks all the elements are visible', async ({ page }) => {
     const header = page.locator('header').first();
 
-    await expect(header.getByAltText('Docs Logo')).toBeVisible();
+    await expect(header.getByLabel('Docs Logo')).toBeVisible();
     await expect(header.locator('h2').getByText('Docs')).toHaveCSS(
       'color',
       'rgb(0, 0, 145)',
@@ -88,6 +88,7 @@ test.describe('Header mobile', () => {
 test.describe('Header: Log out', () => {
   test.use({ storageState: { cookies: [], origins: [] } });
 
+  // eslint-disable-next-line playwright/expect-expect
   test('checks logout button', async ({ page, browserName }) => {
     await page.goto('/');
     await keyCloakSignIn(page, browserName);
@@ -98,6 +99,6 @@ test.describe('Header: Log out', () => {
       })
       .click();
 
-    await expect(page.getByRole('button', { name: 'Sign in' })).toBeVisible();
+    await expectLoginPage(page);
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/home.spec.ts

@@ -0,0 +1,53 @@
+import { expect, test } from '@playwright/test';
+
+test.beforeEach(async ({ page }) => {
+  await page.goto('/docs/');
+});
+
+test.describe('Home page', () => {
+  test.use({ storageState: { cookies: [], origins: [] } });
+  test('checks all the elements are visible', async ({ page }) => {
+    // Check header content
+    const header = page.locator('header').first();
+    const footer = page.locator('footer').first();
+    await expect(header).toBeVisible();
+    await expect(
+      header.getByRole('button', { name: /Language/ }),
+    ).toBeVisible();
+    await expect(
+      header.getByRole('button', { name: 'Les services de La Suite numé' }),
+    ).toBeVisible();
+    await expect(
+      header.getByRole('img', { name: 'Gouvernement Logo' }),
+    ).toBeVisible();
+    await expect(header.getByRole('img', { name: 'Docs logo' })).toBeVisible();
+    await expect(header.getByRole('heading', { name: 'Docs' })).toBeVisible();
+    await expect(header.getByText('BETA')).toBeVisible();
+
+    // Check the titles
+    const h2 = page.locator('h2');
+    await expect(h2.getByText('Govs ❤️ Open Source.')).toBeVisible();
+    await expect(
+      h2.getByText('Collaborative writing, Simplified.'),
+    ).toBeVisible();
+    await expect(
+      h2.getByText('An uncompromising writing experience.'),
+    ).toBeVisible();
+    await expect(
+      h2.getByText('Simple and secure collaboration.'),
+    ).toBeVisible();
+    await expect(h2.getByText('Flexible export.')).toBeVisible();
+    await expect(
+      h2.getByText('A new way to organize knowledge.'),
+    ).toBeVisible();
+
+    await expect(
+      page.getByText('Docs is already available, log in to use it now.'),
+    ).toBeVisible();
+    await expect(
+      page.getByRole('button', { name: 'Proconnect Login' }),
+    ).toHaveCount(2);
+
+    await expect(footer).toBeVisible();
+  });
+});

src/frontend/apps/e2e/__tests__/app-impress/language.spec.ts

@@ -9,19 +9,20 @@ test.describe('Language', () => {
     await expect(page.getByLabel('Logout')).toBeVisible();
 
     const header = page.locator('header').first();
-    await header.getByRole('combobox').getByText('English').click();
-    await header.getByRole('option', { name: 'Français' }).click();
+    await header
+      .getByRole('button', { name: /Language/ })
+      .getByText('English')
+      .click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
     await expect(
-      header.getByRole('combobox').getByText('Français'),
+      header.getByRole('button').getByText('Français'),
     ).toBeVisible();
 
     await expect(page.getByLabel('Se déconnecter')).toBeVisible();
 
-    await header.getByRole('combobox').getByText('Français').click();
-    await header.getByRole('option', { name: 'Deutsch' }).click();
-    await expect(
-      header.getByRole('combobox').getByText('Deutsch'),
-    ).toBeVisible();
+    await header.getByRole('button').getByText('Français').click();
+    await page.getByRole('menuitem', { name: 'Deutsch' }).click();
+    await expect(header.getByRole('button').getByText('Deutsch')).toBeVisible();
 
     await expect(page.getByLabel('Abmelden')).toBeVisible();
   });
@@ -53,8 +54,11 @@ test.describe('Language', () => {
 
     // Switch language to French
     const header = page.locator('header').first();
-    await header.getByRole('combobox').getByText('English').click();
-    await header.getByRole('option', { name: 'Français' }).click();
+    await header
+      .getByRole('button', { name: /Language/ })
+      .getByText('English')
+      .click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
 
     // Check for French 404 response
     await check404Response('Pas trouvé.');

src/frontend/apps/e2e/__tests__/app-impress/left-panel.spec.ts

@@ -29,7 +29,7 @@ test.describe('Left panel mobile', () => {
     const header = page.locator('header').first();
     const homeButton = page.getByRole('button', { name: 'house' });
     const newDocButton = page.getByRole('button', { name: 'New doc' });
-    const languageButton = page.getByRole('combobox', { name: 'Language' });
+    const languageButton = page.getByRole('button', { name: /Language/ });
     const logoutButton = page.getByRole('button', { name: 'Logout' });
 
     await expect(homeButton).not.toBeInViewport();

src/frontend/apps/e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-e2e",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "private": true,
   "scripts": {
     "lint": "eslint . --ext .ts",
@@ -12,7 +12,7 @@
     "test:ui::chromium": "yarn test:ui --project=chromium"
   },
   "devDependencies": {
-    "@playwright/test": "1.50.0",
+    "@playwright/test": "1.50.1",
     "@types/node": "*",
     "@types/pdf-parse": "1.1.4",
     "eslint-config-impress": "*",

src/frontend/apps/e2e/playwright.config.ts

@@ -38,10 +38,9 @@ export default defineConfig({
     timeout: 120 * 1000,
     reuseExistingServer: true,
   },
-
+  globalSetup: require.resolve('./__tests__/app-impress/auth.setup'),
   /* Configure projects for major browsers */
   projects: [
-    { name: 'setup', testMatch: /.*\.setup\.ts/ },
     {
       name: 'chromium',
       use: {
@@ -53,7 +52,6 @@ export default defineConfig({
           permissions: ['clipboard-read', 'clipboard-write'],
         },
       },
-      dependencies: ['setup'],
     },
     {
       name: 'webkit',
@@ -63,7 +61,6 @@ export default defineConfig({
         timezoneId: 'Europe/Paris',
         storageState: 'playwright/.auth/user-webkit.json',
       },
-      dependencies: ['setup'],
     },
     {
       name: 'firefox',
@@ -79,7 +76,6 @@ export default defineConfig({
           },
         },
       },
-      dependencies: ['setup'],
     },
   ],
 });

src/frontend/apps/impress/cunningham.ts

@@ -5,6 +5,7 @@ const config = {
         colors: {
           'card-border': '#ededed',
           'primary-bg': '#FAFAFA',
+          'primary-action': '#1212FF',
           'primary-050': '#F5F5FE',
           'primary-100': '#EDF5FA',
           'primary-150': '#E5EEFA',
@@ -59,6 +60,11 @@ const config = {
             h4: '1.375rem',
             h5: '1.25rem',
             h6: '1.125rem',
+            'xl-alt': '5rem',
+            'lg-alt': '4.5rem',
+            'md-alt': '4rem',
+            'sm-alt': '3.5rem',
+            'xs-alt': '3rem',
           },
           weights: {
             thin: 100,
@@ -224,7 +230,7 @@ const config = {
               'color-hover': 'var(--c--theme--colors--primary-700)',
             },
             border: {
-              color: 'var(--c--theme--colors--primary-200)',
+              color: 'var(--c--theme--colors--greyscale-300)',
             },
           },
           tertiary: {
@@ -247,6 +253,9 @@ const config = {
         'la-gauffre': {
           activated: false,
         },
+        'home-proconnect': {
+          activated: false,
+        },
       },
     },
     dsfr: {
@@ -348,6 +357,15 @@ const config = {
       components: {
         alert: {
           'border-radius': '0',
+          error: {
+            'background-color': 'var(--c--theme--colors--danger-100)',
+            'border-left-color': 'var(--c--theme--colors--danger-400)',
+            close: {
+              color: 'white',
+              'background-color': 'var(--c--theme--colors--danger-400)',
+              'background-color-hover': 'var(--c--theme--colors--danger-600)',
+            },
+          },
         },
         modal: {
           'width-small': '342px',
@@ -372,6 +390,7 @@ const config = {
               'color-active': 'var(--c--theme--colors--primary-100)',
             },
             'color-hover': 'var(--c--theme--colors--primary-text)',
+            color: 'var(--c--theme--colors--primary-800)',
           },
           secondary: {
             background: {
@@ -379,8 +398,8 @@ const config = {
               'color-active': '#EDEDED',
             },
             border: {
-              color: 'var(--c--theme--colors--primary-600)',
-              'color-hover': 'var(--c--theme--colors--primary-600)',
+              color: 'var(--c--theme--colors--greyscale-300)',
+              'color-hover': 'var(--c--theme--colors--greyscale-300)',
             },
             color: 'var(--c--theme--colors--primary-text)',
           },
@@ -462,6 +481,9 @@ const config = {
         'la-gauffre': {
           activated: true,
         },
+        'home-proconnect': {
+          activated: true,
+        },
       },
     },
   },

src/frontend/apps/impress/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-impress",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -15,39 +15,35 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "ai": "^4.1.18",
-    "zod": "^3.24.1",
-    "@ai-sdk/openai": "^1.1.9",
-    "@blocknote/core": "*",
-    "@blocknote/mantine": "*",
-    "@blocknote/react": "*",
-    "@blocknote/xl-ai": "*",
-    "vitest": "^2.0.3",
-    "@blocknote/xl-docx-exporter": "0.21.0",
-    "@blocknote/xl-pdf-exporter": "0.21.0",
+    "@ag-media/react-pdf-table": "2.0.1",
+    "@blocknote/core": "0.23.2",
+    "@blocknote/mantine": "0.23.2",
+    "@blocknote/react": "0.23.2",
+    "@blocknote/xl-docx-exporter": "0.23.2",
+    "@blocknote/xl-pdf-exporter": "0.23.2",
     "@gouvfr-lasuite/integration": "1.0.2",
-    "@hocuspocus/provider": "2.15.1",
+    "@hocuspocus/provider": "2.15.2",
     "@openfun/cunningham-react": "2.9.4",
     "@react-pdf/renderer": "4.1.6",
-    "@sentry/nextjs": "8.52.0",
-    "@tanstack/react-query": "5.65.1",
+    "@sentry/nextjs": "8.54.0",
+    "@tanstack/react-query": "5.66.0",
     "cmdk": "1.0.4",
     "crisp-sdk-web": "1.0.25",
     "docx": "9.1.1",
     "i18next": "24.2.2",
     "i18next-browser-languagedetector": "8.0.2",
-    "idb": "8.0.1",
+    "idb": "8.0.2",
     "lodash": "4.17.21",
     "luxon": "3.5.0",
     "next": "15.1.6",
-    "posthog-js": "1.211.3",
+    "posthog-js": "1.215.6",
     "react": "*",
     "react-aria-components": "1.6.0",
     "react-dom": "*",
     "react-i18next": "15.4.0",
     "react-intersection-observer": "9.15.1",
     "react-select": "5.10.0",
-    "styled-components": "6.1.14",
+    "styled-components": "6.1.15",
     "use-debounce": "10.0.4",
     "y-protocols": "1.0.6",
     "yjs": "13.6.23",
@@ -55,7 +51,7 @@
   },
   "devDependencies": {
     "@svgr/webpack": "8.1.0",
-    "@tanstack/react-query-devtools": "5.65.1",
+    "@tanstack/react-query-devtools": "5.66.0",
     "@testing-library/dom": "10.4.0",
     "@testing-library/jest-dom": "6.6.3",
     "@testing-library/react": "16.2.0",

src/frontend/apps/impress/src/assets/icons/icon-docs.svg

@@ -0,0 +1,12 @@
+<svg viewBox="0 0 32 33" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path
+    d="M21.6305 29.5812C22.7983 29.2538 23.9166 28.6562 24.6505 27.6003C25.3749 26.5663 25.5789 25.2547 25.5789 23.9925V5.50099C25.5789 5.17358 25.5611 4.84557 25.5216 4.52148C26.1016 4.74961 26.5486 5.12658 26.8626 5.65239C27.2331 6.25024 27.4184 7.03757 27.4184 8.01435V26.7964C27.4184 28.1184 27.0942 29.1078 26.4458 29.7646C25.7974 30.4214 24.8207 30.7498 23.5155 30.7498H16.4209C16.5889 30.7204 16.7574 30.6901 16.9262 30.659C18.4067 30.3944 19.9713 30.0354 21.6185 29.5846L21.6305 29.5812Z"
+    fill="#C9191E"
+  />
+  <path
+    fill-rule="evenodd"
+    clip-rule="evenodd"
+    d="M4.58203 26.405V7.5977C4.58203 6.45251 4.88938 5.58519 5.50408 4.99575C6.1272 4.40631 6.95242 4.08212 7.97972 4.02318C9.49542 3.93055 10.9311 3.80425 12.2868 3.64425C13.6425 3.47584 14.9393 3.28217 16.1771 3.06324C17.4234 2.8443 18.6359 2.60011 19.8148 2.33065C21.0274 2.04435 21.9578 2.1875 22.6062 2.7601C23.2546 3.33269 23.5788 4.24632 23.5788 5.50099V23.9925C23.5788 25.0956 23.3893 25.9166 23.0104 26.4555C22.6315 27.0029 21.9915 27.4028 21.0905 27.6554C19.4906 28.0933 17.9833 28.4386 16.5687 28.6912C15.154 28.9522 13.7731 29.1501 12.4258 29.2848C11.0785 29.4196 9.69751 29.5248 8.28286 29.6006C7.11241 29.668 6.20299 29.4238 5.5546 28.868C4.90622 28.3207 4.58203 27.4997 4.58203 26.405ZM9.20865 11.0124C11.0635 10.8944 12.7632 10.7131 14.3075 10.4683C14.6822 10.4072 15.0564 10.3436 15.4291 10.2776C15.8192 10.2085 16.1013 9.86859 16.1013 9.47337C16.1013 8.96154 15.638 8.57609 15.135 8.66189C14.846 8.71118 14.5555 8.75909 14.2635 8.80562C12.7346 9.04923 11.0452 9.22998 9.19523 9.3477C8.91819 9.36558 8.69776 9.45188 8.55608 9.62391C8.42209 9.78661 8.35645 9.98229 8.35645 10.2053C8.35645 10.4321 8.43296 10.6295 8.58568 10.7918L8.58783 10.7939C8.75336 10.9595 8.96369 11.0311 9.20865 11.0124ZM9.20801 15.206C11.0631 15.088 12.763 14.9066 14.3075 14.6619C15.8588 14.4089 17.3936 14.1138 18.9112 13.7766C19.2191 13.7081 19.4498 13.6003 19.5652 13.433C19.6786 13.2721 19.7347 13.0876 19.7347 12.8832C19.7347 12.6526 19.6469 12.454 19.476 12.2926C19.2921 12.1189 19.0348 12.0784 18.7304 12.1411L18.7285 12.1415C17.2823 12.4694 15.794 12.7553 14.2635 12.9992C12.7346 13.2428 11.0452 13.4235 9.19523 13.5413C8.91819 13.5591 8.69776 13.6454 8.55608 13.8175C8.42276 13.9794 8.35645 14.1705 8.35645 14.3863C8.35645 14.6203 8.43209 14.8223 8.58558 14.9854L8.59 14.9896C8.75499 15.1449 8.96316 15.2155 9.20551 15.2062L9.20801 15.206ZM9.20847 19.3994C11.0634 19.2729 12.7631 19.0874 14.3075 18.8427C15.8589 18.5982 17.3934 18.3073 18.9112 17.97C19.2199 17.9014 19.4508 17.7891 19.566 17.6127C19.6783 17.4529 19.7347 17.2733 19.7347 17.0766C19.7347 16.8461 19.6469 16.6474 19.476 16.4861C19.2921 16.3123 19.0348 16.2718 18.7304 16.3345L18.729 16.3348C17.2827 16.6543 15.7942 16.9361 14.2635 17.18C12.7345 17.4236 11.045 17.6086 9.19495 17.7347C8.91804 17.7526 8.69771 17.8389 8.55608 18.0109C8.42276 18.1728 8.35645 18.3639 8.35645 18.5797C8.35645 18.8137 8.43209 19.0158 8.58558 19.1789L8.59 19.183C8.75499 19.3383 8.96316 19.4089 9.20551 19.3996L9.20847 19.3994ZM14.3075 23.007C12.7632 23.2518 11.0635 23.4331 9.20867 23.5512C8.9637 23.5698 8.75337 23.4982 8.58783 23.3326L8.58572 23.3305C8.433 23.1682 8.35645 22.9708 8.35645 22.7441C8.35645 22.521 8.42209 22.3253 8.55608 22.1626C8.69776 21.9906 8.91827 21.9043 9.19531 21.8864C11.0453 21.7687 12.7346 21.588 14.2635 21.3443C14.5555 21.2978 14.846 21.2499 15.135 21.2006C15.638 21.1148 16.1013 21.5003 16.1013 22.0121C16.1013 22.4073 15.8192 22.7472 15.4291 22.8163C15.0564 22.8823 14.6822 22.9459 14.3075 23.007Z"
+    fill="#000091"
+  />
+</svg>

src/frontend/apps/impress/src/components/DropButton.tsx

@@ -8,17 +8,20 @@ import {
 import { Button, Popover } from 'react-aria-components';
 import styled from 'styled-components';
 
+import { BoxProps } from './Box';
+
 const StyledPopover = styled(Popover)`
   background-color: white;
   border-radius: 4px;
   box-shadow: 1px 1px 5px rgba(0, 0, 0, 0.1);
-
   border: 1px solid #dddddd;
-
   transition: opacity 0.2s ease-in-out;
 `;
 
-const StyledButton = styled(Button)`
+interface StyledButtonProps {
+  $css?: BoxProps['$css'];
+}
+const StyledButton = styled(Button)<StyledButtonProps>`
   cursor: pointer;
   border: none;
   background: none;
@@ -29,10 +32,12 @@ const StyledButton = styled(Button)`
   font-size: 0.938rem;
   padding: 0;
   text-wrap: nowrap;
+  ${({ $css }) => $css};
 `;
 
 export interface DropButtonProps {
   button: ReactNode;
+  buttonCss?: BoxProps['$css'];
   isOpen?: boolean;
   onOpenChange?: (isOpen: boolean) => void;
   label?: string;
@@ -40,6 +45,7 @@ export interface DropButtonProps {
 
 export const DropButton = ({
   button,
+  buttonCss,
   isOpen = false,
   onOpenChange,
   children,
@@ -64,6 +70,7 @@ export const DropButton = ({
         ref={triggerRef}
         onPress={() => onOpenChangeHandler(true)}
         aria-label={label}
+        $css={buttonCss}
       >
         {button}
       </StyledButton>

src/frontend/apps/impress/src/components/DropdownMenu.tsx

@@ -1,4 +1,4 @@
-import { PropsWithChildren, useState } from 'react';
+import { PropsWithChildren, useRef, useState } from 'react';
 import { css } from 'styled-components';
 
 import { Box, BoxButton, BoxProps, DropButton, Icon, Text } from '@/components';
@@ -20,6 +20,7 @@ export type DropdownMenuProps = {
   showArrow?: boolean;
   label?: string;
   arrowCss?: BoxProps['$css'];
+  buttonCss?: BoxProps['$css'];
   disabled?: boolean;
   topMessage?: string;
 };
@@ -30,6 +31,7 @@ export const DropdownMenu = ({
   disabled = false,
   showArrow = false,
   arrowCss,
+  buttonCss,
   label,
   topMessage,
 }: PropsWithChildren<DropdownMenuProps>) => {
@@ -37,6 +39,7 @@ export const DropdownMenu = ({
   const spacings = theme.spacingsTokens();
   const colors = theme.colorsTokens();
   const [isOpen, setIsOpen] = useState(false);
+  const blockButtonRef = useRef<HTMLDivElement>(null);
 
   const onOpenChange = (isOpen: boolean) => {
     setIsOpen(isOpen);
@@ -51,10 +54,17 @@ export const DropdownMenu = ({
       isOpen={isOpen}
       onOpenChange={onOpenChange}
       label={label}
+      buttonCss={buttonCss}
       button={
         showArrow ? (
-          <Box $direction="row" $align="center">
-            <div>{children}</div>
+          <Box
+            ref={blockButtonRef}
+            $direction="row"
+            $align="center"
+            $position="relative"
+            aria-controls="menu"
+          >
+            <Box>{children}</Box>
             <Icon
               $variation="600"
               $css={
@@ -67,11 +77,17 @@ export const DropdownMenu = ({
             />
           </Box>
         ) : (
-          children
+          <Box ref={blockButtonRef} aria-controls="menu">
+            {children}
+          </Box>
         )
       }
     >
-      <Box $maxWidth="320px">
+      <Box
+        $maxWidth="320px"
+        $minWidth={`${blockButtonRef.current?.clientWidth}px`}
+        role="menu"
+      >
         {topMessage && (
           <Text
             $variation="700"
@@ -90,6 +106,7 @@ export const DropdownMenu = ({
           const isDisabled = option.disabled !== undefined && option.disabled;
           return (
             <BoxButton
+              role="menuitem"
               aria-label={option.label}
               data-testid={option.testId}
               $direction="row"

src/frontend/apps/impress/src/components/Text.tsx

@@ -25,7 +25,9 @@ export interface TextProps extends BoxProps {
   $size?: TextSizes | (string & {});
   $theme?:
     | 'primary'
+    | 'primary-text'
     | 'secondary'
+    | 'secondary-text'
     | 'info'
     | 'success'
     | 'warning'

src/frontend/apps/impress/src/components/TextErrors.tsx

@@ -35,6 +35,7 @@ export const TextErrors = ({
             <Text
               key={`causes-${i}`}
               $theme="danger"
+              $variation="600"
               $textAlign="center"
               {...textProps}
             >
@@ -43,7 +44,12 @@ export const TextErrors = ({
           ))}
 
         {!causes && (
-          <Text $theme="danger" $textAlign="center" {...textProps}>
+          <Text
+            $theme="danger"
+            $variation="600"
+            $textAlign="center"
+            {...textProps}
+          >
             {defaultMessage || t('Something bad happens, please retry.')}
           </Text>
         )}

src/frontend/apps/impress/src/core/AppProvider.tsx

@@ -3,10 +3,10 @@ import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 import { useEffect } from 'react';
 
 import { useCunninghamTheme } from '@/cunningham';
+import { Auth } from '@/features/auth';
 import '@/i18n/initI18n';
 import { useResponsiveStore } from '@/stores/';
 
-import { Auth } from './auth/';
 import { ConfigProvider } from './config/';
 
 /**

src/frontend/apps/impress/src/core/auth/Auth.tsx

@@ -1,66 +0,0 @@
-import { Loader } from '@openfun/cunningham-react';
-import { useRouter } from 'next/router';
-import { PropsWithChildren, useEffect, useState } from 'react';
-
-import { Box } from '@/components';
-
-import { useAuthStore } from './useAuthStore';
-
-/**
- * TODO: Remove this restriction when we will have a homepage design for non-authenticated users.
- *
- * We define the paths that are not allowed without authentication.
- * Actually, only the home page and the docs page are not allowed without authentication.
- * When we will have a homepage design for non-authenticated users, we will remove this restriction to have
- * the full website accessible without authentication.
- */
-const regexpUrlsAuth = [/\/docs\/$/g, /^\/$/g];
-
-export const Auth = ({ children }: PropsWithChildren) => {
-  const { initAuth, initiated, authenticated, login, getAuthUrl } =
-    useAuthStore();
-  const { asPath, replace } = useRouter();
-
-  const [pathAllowed, setPathAllowed] = useState<boolean>(
-    !regexpUrlsAuth.some((regexp) => !!asPath.match(regexp)),
-  );
-
-  useEffect(() => {
-    initAuth();
-  }, [initAuth]);
-
-  useEffect(() => {
-    setPathAllowed(!regexpUrlsAuth.some((regexp) => !!asPath.match(regexp)));
-  }, [asPath]);
-
-  // We force to login except on allowed paths
-  useEffect(() => {
-    if (!initiated || authenticated || pathAllowed) {
-      return;
-    }
-
-    login();
-  }, [authenticated, pathAllowed, login, initiated]);
-
-  // Redirect to the path before login
-  useEffect(() => {
-    if (!authenticated) {
-      return;
-    }
-
-    const authUrl = getAuthUrl();
-    if (authUrl) {
-      void replace(authUrl);
-    }
-  }, [authenticated, getAuthUrl, replace]);
-
-  if ((!initiated && pathAllowed) || (!authenticated && !pathAllowed)) {
-    return (
-      <Box $height="100vh" $width="100vw" $align="center" $justify="center">
-        <Loader />
-      </Box>
-    );
-  }
-
-  return children;
-};

src/frontend/apps/impress/src/core/auth/ButtonLogin.tsx

@@ -1,23 +0,0 @@
-import { Button } from '@openfun/cunningham-react';
-import { useTranslation } from 'react-i18next';
-
-import { useAuthStore } from '@/core/auth';
-
-export const ButtonLogin = () => {
-  const { t } = useTranslation();
-  const { logout, authenticated, login } = useAuthStore();
-
-  if (!authenticated) {
-    return (
-      <Button onClick={login} color="primary-text" aria-label={t('Login')}>
-        {t('Login')}
-      </Button>
-    );
-  }
-
-  return (
-    <Button onClick={logout} color="primary-text" aria-label={t('Logout')}>
-      {t('Logout')}
-    </Button>
-  );
-};

src/frontend/apps/impress/src/core/auth/api/index.ts

@@ -1,2 +0,0 @@
-export * from './getMe';
-export * from './types';

src/frontend/apps/impress/src/core/auth/conf.ts

@@ -1 +0,0 @@
-export const PATH_AUTH_LOCAL_STORAGE = 'docs-path-auth';

src/frontend/apps/impress/src/core/auth/index.ts

@@ -1,4 +0,0 @@
-export * from './api/types';
-export * from './Auth';
-export * from './ButtonLogin';
-export * from './useAuthStore';

src/frontend/apps/impress/src/core/auth/useAuthStore.tsx

@@ -1,64 +0,0 @@
-import { create } from 'zustand';
-
-import { baseApiUrl } from '@/api';
-import { terminateCrispSession } from '@/services';
-
-import { User, getMe } from './api';
-import { PATH_AUTH_LOCAL_STORAGE } from './conf';
-
-interface AuthStore {
-  initiated: boolean;
-  authenticated: boolean;
-  initAuth: () => void;
-  logout: () => void;
-  login: () => void;
-  setAuthUrl: (url: string) => void;
-  getAuthUrl: () => string | undefined;
-  userData?: User;
-}
-
-const initialState = {
-  initiated: false,
-  authenticated: false,
-  userData: undefined,
-};
-
-export const useAuthStore = create<AuthStore>((set, get) => ({
-  initiated: initialState.initiated,
-  authenticated: initialState.authenticated,
-  userData: initialState.userData,
-  initAuth: () => {
-    getMe()
-      .then((data: User) => {
-        set({ authenticated: true, userData: data });
-      })
-      .catch(() => {})
-      .finally(() => {
-        set({ initiated: true });
-      });
-  },
-  login: () => {
-    get().setAuthUrl(window.location.pathname);
-
-    window.location.replace(`${baseApiUrl()}authenticate/`);
-  },
-  logout: () => {
-    terminateCrispSession();
-    window.location.replace(`${baseApiUrl()}logout/`);
-  },
-  // If we try to access a specific page and we are not authenticated
-  // we store the path in the local storage to redirect to it after login
-  setAuthUrl() {
-    if (window.location.pathname !== '/') {
-      localStorage.setItem(PATH_AUTH_LOCAL_STORAGE, window.location.pathname);
-    }
-  },
-  // If a path is stored in the local storage, we return it then remove it
-  getAuthUrl() {
-    const path_auth = localStorage.getItem(PATH_AUTH_LOCAL_STORAGE);
-    if (path_auth) {
-      localStorage.removeItem(PATH_AUTH_LOCAL_STORAGE);
-      return path_auth;
-    }
-  },
-}));

src/frontend/apps/impress/src/core/config/ConfigProvider.tsx

@@ -3,7 +3,7 @@ import { PropsWithChildren, useEffect } from 'react';
 
 import { Box } from '@/components';
 import { useCunninghamTheme } from '@/cunningham';
-import { PostHogProvider, configureCrispSession } from '@/services';
+import { CrispProvider, PostHogProvider } from '@/services';
 import { useSentryStore } from '@/stores/useSentryStore';
 
 import { useConfig } from './api/useConfig';
@@ -29,14 +29,6 @@ export const ConfigProvider = ({ children }: PropsWithChildren) => {
     setTheme(conf.FRONTEND_THEME);
   }, [conf?.FRONTEND_THEME, setTheme]);
 
-  useEffect(() => {
-    if (!conf?.CRISP_WEBSITE_ID) {
-      return;
-    }
-
-    configureCrispSession(conf.CRISP_WEBSITE_ID);
-  }, [conf?.CRISP_WEBSITE_ID]);
-
   if (!conf) {
     return (
       <Box $height="100vh" $width="100vw" $align="center" $justify="center">
@@ -45,5 +37,11 @@ export const ConfigProvider = ({ children }: PropsWithChildren) => {
     );
   }
 
-  return <PostHogProvider conf={conf.POSTHOG_KEY}>{children}</PostHogProvider>;
+  return (
+    <PostHogProvider conf={conf.POSTHOG_KEY}>
+      <CrispProvider websiteId={conf?.CRISP_WEBSITE_ID}>
+        {children}
+      </CrispProvider>
+    </PostHogProvider>
+  );
 };

src/frontend/apps/impress/src/core/index.ts

@@ -1,3 +1,2 @@
 export * from './AppProvider';
-export * from './auth';
 export * from './config';

src/frontend/apps/impress/src/cunningham/cunningham-style.css

@@ -310,7 +310,7 @@ input:-webkit-autofill:focus {
 }
 
 /**
- * Others
+ * Checkbox
 */
 .c__checkbox:focus-within {
   border-color: transparent;
@@ -365,7 +365,8 @@ input:-webkit-autofill:focus {
 }
 
 .c__button--medium {
-  padding: 0.9rem var(--c--theme--spacings--s);
+  height: auto;
+  min-height: var(--c--components--button--medium-height);
 }
 
 .c__button--small {
@@ -406,6 +407,10 @@ input:-webkit-autofill:focus {
   );
 }
 
+.c__button--primary-text {
+  color: var(--c--components--button--primary-text--color);
+}
+
 .c__button--primary-text:hover,
 .c__button--primary-text:focus-visible {
   background-color: var(
@@ -547,6 +552,8 @@ input:-webkit-autofill:focus {
 
 .c__modal__close .c__button {
   padding: 0 !important;
+  top: -0.65rem;
+  right: -0.65rem;
 }
 
 .c__modal--full .c__modal__content {
@@ -605,3 +612,22 @@ input:-webkit-autofill:focus {
 .c__tooltip {
   padding: 4px 6px;
 }
+
+/**
+ * Alert
+*/
+.c__alert--error {
+  background-color: var(--c--components--alert--error--background-color);
+  border-left-color: var(--c--components--alert--error--border-left-color);
+}
+
+.c__alert--error .c__button--tertiary {
+  background-color: var(--c--components--alert--error--close--background-color);
+  color: var(--c--components--alert--error--close--color);
+}
+
+.c__alert.c__alert--error .c__button--tertiary:hover {
+  background-color: var(
+    --c--components--alert--error--close--background-color-hover
+  );
+}

src/frontend/apps/impress/src/cunningham/cunningham-tokens.css

@@ -71,6 +71,7 @@
   --c--theme--colors--danger-text: var(--c--theme--colors--greyscale-000);
   --c--theme--colors--card-border: #ededed;
   --c--theme--colors--primary-bg: #fafafa;
+  --c--theme--colors--primary-action: #1212ff;
   --c--theme--colors--primary-050: #f5f5fe;
   --c--theme--colors--primary-150: #e5eefa;
   --c--theme--colors--primary-950: #1b1b35;
@@ -122,6 +123,11 @@
   --c--theme--font--sizes--ml: 0.938rem;
   --c--theme--font--sizes--xl: 1.25rem;
   --c--theme--font--sizes--t: 0.6875rem;
+  --c--theme--font--sizes--xl-alt: 5rem;
+  --c--theme--font--sizes--lg-alt: 4.5rem;
+  --c--theme--font--sizes--md-alt: 4rem;
+  --c--theme--font--sizes--sm-alt: 3.5rem;
+  --c--theme--font--sizes--xs-alt: 3rem;
   --c--theme--font--weights--thin: 100;
   --c--theme--font--weights--light: 300;
   --c--theme--font--weights--regular: 400;
@@ -316,7 +322,7 @@
     --c--theme--colors--primary-700
   );
   --c--components--button--secondary--border--color: var(
-    --c--theme--colors--primary-200
+    --c--theme--colors--greyscale-300
   );
   --c--components--button--tertiary--color: var(
     --c--theme--colors--primary-text
@@ -339,6 +345,7 @@
   --c--components--button--disabled--color: white;
   --c--components--button--disabled--background--color: #b3cef0;
   --c--components--la-gauffre--activated: false;
+  --c--components--home-proconnect--activated: false;
 }
 
 .cunningham-theme--dark {
@@ -477,6 +484,19 @@
   --c--theme--logo--widthFooter: 220px;
   --c--theme--logo--alt: gouvernement logo;
   --c--components--alert--border-radius: 0;
+  --c--components--alert--error--background-color: var(
+    --c--theme--colors--danger-100
+  );
+  --c--components--alert--error--border-left-color: var(
+    --c--theme--colors--danger-400
+  );
+  --c--components--alert--error--close--color: white;
+  --c--components--alert--error--close--background-color: var(
+    --c--theme--colors--danger-400
+  );
+  --c--components--alert--error--close--background-color-hover: var(
+    --c--theme--colors--danger-600
+  );
   --c--components--modal--width-small: 342px;
   --c--components--button--medium-height: 40px;
   --c--components--button--medium-text-height: 40px;
@@ -498,13 +518,16 @@
   --c--components--button--primary-text--color-hover: var(
     --c--theme--colors--primary-text
   );
+  --c--components--button--primary-text--color: var(
+    --c--theme--colors--primary-800
+  );
   --c--components--button--secondary--background--color-hover: #f6f6f6;
   --c--components--button--secondary--background--color-active: #ededed;
   --c--components--button--secondary--border--color: var(
-    --c--theme--colors--primary-600
+    --c--theme--colors--greyscale-300
   );
   --c--components--button--secondary--border--color-hover: var(
-    --c--theme--colors--primary-600
+    --c--theme--colors--greyscale-300
   );
   --c--components--button--secondary--color: var(
     --c--theme--colors--primary-text
@@ -584,6 +607,7 @@
   );
   --c--components--forms-textarea--border-radius: 0;
   --c--components--la-gauffre--activated: true;
+  --c--components--home-proconnect--activated: true;
 }
 
 .clr-secondary-text {
@@ -874,6 +898,10 @@
   color: var(--c--theme--colors--primary-bg);
 }
 
+.clr-primary-action {
+  color: var(--c--theme--colors--primary-action);
+}
+
 .clr-primary-050 {
   color: var(--c--theme--colors--primary-050);
 }
@@ -1302,6 +1330,10 @@
   background-color: var(--c--theme--colors--primary-bg);
 }
 
+.bg-primary-action {
+  background-color: var(--c--theme--colors--primary-action);
+}
+
 .bg-primary-050 {
   background-color: var(--c--theme--colors--primary-050);
 }
@@ -1550,6 +1582,31 @@
   letter-spacing: var(--c--theme--font--letterspacings--t);
 }
 
+.fs-xl-alt {
+  font-size: var(--c--theme--font--sizes--xl-alt);
+  letter-spacing: var(--c--theme--font--letterspacings--xl-alt);
+}
+
+.fs-lg-alt {
+  font-size: var(--c--theme--font--sizes--lg-alt);
+  letter-spacing: var(--c--theme--font--letterspacings--lg-alt);
+}
+
+.fs-md-alt {
+  font-size: var(--c--theme--font--sizes--md-alt);
+  letter-spacing: var(--c--theme--font--letterspacings--md-alt);
+}
+
+.fs-sm-alt {
+  font-size: var(--c--theme--font--sizes--sm-alt);
+  letter-spacing: var(--c--theme--font--letterspacings--sm-alt);
+}
+
+.fs-xs-alt {
+  font-size: var(--c--theme--font--sizes--xs-alt);
+  letter-spacing: var(--c--theme--font--letterspacings--xs-alt);
+}
+
 .f-base {
   font-family: var(--c--theme--font--families--base);
 }

src/frontend/apps/impress/src/cunningham/cunningham-tokens.ts

@@ -75,6 +75,7 @@ export const tokens = {
           'danger-text': '#fff',
           'card-border': '#ededed',
           'primary-bg': '#FAFAFA',
+          'primary-action': '#1212FF',
           'primary-050': '#F5F5FE',
           'primary-150': '#E5EEFA',
           'primary-950': '#1B1B35',
@@ -129,6 +130,11 @@ export const tokens = {
             ml: '0.938rem',
             xl: '1.25rem',
             t: '0.6875rem',
+            'xl-alt': '5rem',
+            'lg-alt': '4.5rem',
+            'md-alt': '4rem',
+            'sm-alt': '3.5rem',
+            'xs-alt': '3rem',
           },
           weights: {
             thin: 100,
@@ -315,7 +321,7 @@ export const tokens = {
               color: 'white',
               'color-hover': 'var(--c--theme--colors--primary-700)',
             },
-            border: { color: 'var(--c--theme--colors--primary-200)' },
+            border: { color: 'var(--c--theme--colors--greyscale-300)' },
           },
           tertiary: {
             color: 'var(--c--theme--colors--primary-text)',
@@ -330,6 +336,7 @@ export const tokens = {
           disabled: { color: 'white', background: { color: '#b3cef0' } },
         },
         'la-gauffre': { activated: false },
+        'home-proconnect': { activated: false },
       },
     },
     dark: {
@@ -476,7 +483,18 @@ export const tokens = {
         },
       },
       components: {
-        alert: { 'border-radius': '0' },
+        alert: {
+          'border-radius': '0',
+          error: {
+            'background-color': 'var(--c--theme--colors--danger-100)',
+            'border-left-color': 'var(--c--theme--colors--danger-400)',
+            close: {
+              color: 'white',
+              'background-color': 'var(--c--theme--colors--danger-400)',
+              'background-color-hover': 'var(--c--theme--colors--danger-600)',
+            },
+          },
+        },
         modal: { 'width-small': '342px' },
         button: {
           'medium-height': '40px',
@@ -498,12 +516,13 @@ export const tokens = {
               'color-active': 'var(--c--theme--colors--primary-100)',
             },
             'color-hover': 'var(--c--theme--colors--primary-text)',
+            color: 'var(--c--theme--colors--primary-800)',
           },
           secondary: {
             background: { 'color-hover': '#F6F6F6', 'color-active': '#EDEDED' },
             border: {
-              color: 'var(--c--theme--colors--primary-600)',
-              'color-hover': 'var(--c--theme--colors--primary-600)',
+              color: 'var(--c--theme--colors--greyscale-300)',
+              'color-hover': 'var(--c--theme--colors--greyscale-300)',
             },
             color: 'var(--c--theme--colors--primary-text)',
           },
@@ -575,6 +594,7 @@ export const tokens = {
         },
         'forms-textarea': { 'border-radius': '0' },
         'la-gauffre': { activated: true },
+        'home-proconnect': { activated: true },
       },
     },
   },

src/frontend/apps/impress/src/features/auth/__tests__/utils.test.tsx

@@ -1,7 +1,7 @@
 import { Crisp } from 'crisp-sdk-web';
 import fetchMock from 'fetch-mock';
 
-import { useAuthStore } from '../useAuthStore';
+import { gotoLogout } from '../utils';
 
 jest.mock('crisp-sdk-web', () => ({
   ...jest.requireActual('crisp-sdk-web'),
@@ -17,7 +17,7 @@ jest.mock('crisp-sdk-web', () => ({
   },
 }));
 
-describe('useAuthStore', () => {
+describe('utils', () => {
   afterEach(() => {
     jest.clearAllMocks();
     fetchMock.restore();
@@ -33,7 +33,7 @@ describe('useAuthStore', () => {
       writable: true,
     });
 
-    useAuthStore.getState().logout();
+    gotoLogout();
 
     expect(Crisp.session.reset).toHaveBeenCalled();
   });

src/frontend/apps/impress/src/features/auth/api/index.ts

@@ -0,0 +1,2 @@
+export * from './useAuthQuery';
+export * from './types';