add optional shared link to templates

app/controllers/api/templates_controller.rb

@@ -100,6 +100,7 @@ module Api
       permitted_params = [
         :name,
         :external_id,
+        :shared_link,
         {
           submitters: [%i[name uuid is_requester invite_by_uuid optional_invite_by_uuid linked_to_uuid email]],
           fields: [[:uuid, :submitter_uuid, :name, :type,

app/controllers/start_form_controller.rb

@@ -11,14 +11,22 @@ class StartFormController < ApplicationController
   before_action :load_template
 
   def show
-    raise ActionController::RoutingError, I18n.t('not_found') if @template.preferences['require_phone_2fa'] == true
+    raise ActionController::RoutingError, I18n.t('not_found') if @template.preferences['require_phone_2fa']
 
-    @submitter = @template.submissions.new(account_id: @template.account_id)
-                          .submitters.new(account_id: @template.account_id,
-                                          uuid: (filter_undefined_submitters(@template).first ||
-                                                 @template.submitters.first)['uuid'])
+    if @template.shared_link?
+      @submitter = @template.submissions.new(account_id: @template.account_id)
+                            .submitters.new(account_id: @template.account_id,
+                                            uuid: (filter_undefined_submitters(@template).first ||
+                                                  @template.submitters.first)['uuid'])
 
-    @form_configs = Submitters::FormConfigs.call(@submitter) unless Docuseal.multitenant?
+      @form_configs = Submitters::FormConfigs.call(@submitter) unless Docuseal.multitenant?
+
+      render :show
+    elsif current_user && current_ability.can?(:read, @template)
+      render :private
+    else
+      raise ActionController::RoutingError, I18n.t('not_found')
+    end
   end
 
   def update

app/controllers/templates_share_link_controller.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class TemplatesShareLinkController < ApplicationController
+  load_and_authorize_resource :template
+
+  def show; end
+
+  def create
+    authorize!(:update, @template)
+
+    @template.update!(template_params)
+
+    head :ok
+  end
+
+  private
+
+  def template_params
+    params.require(:template).permit(:shared_link)
+  end
+end