Move trust GraphQL API under complianceportal v1

Relocate the public trust center GraphQL surface, OAuth handlers,
and SPA serving into the compliance portal API package and remove
the legacy trust v1 server tree.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/server/api/complianceportal/v1/nda_resolvers.go

@@ -0,0 +1,156 @@
+package complianceportal_v1
+
+// This file will be automatically regenerated based on the schema, any resolver
+// implementations
+// will be copied through when generating and any unknown code will be moved to the end.
+// Code generated by github.com/99designs/gqlgen version v0.17.93
+
+import (
+	"context"
+	"net"
+	"time"
+
+	"go.gearno.de/kit/log"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/esign"
+	"go.probo.inc/probo/pkg/server/api/authn"
+	"go.probo.inc/probo/pkg/server/api/complianceportal"
+	"go.probo.inc/probo/pkg/server/api/complianceportal/v1/schema"
+	"go.probo.inc/probo/pkg/server/api/complianceportal/v1/types"
+	"go.probo.inc/probo/pkg/server/gqlutils"
+)
+
+// AcceptElectronicSignature is the resolver for the acceptElectronicSignature field.
+func (r *mutationResolver) AcceptElectronicSignature(ctx context.Context, input types.AcceptElectronicSignatureInput) (*types.AcceptElectronicSignaturePayload, error) {
+	var (
+		identity    = authn.IdentityFromContext(ctx)
+		httpReq     = gqlutils.HTTPRequestFromContext(ctx)
+		trustCenter = complianceportal.CompliancePageFromContext(ctx)
+	)
+
+	signerIP, _, _ := net.SplitHostPort(httpReq.RemoteAddr)
+	if signerIP == "" {
+		signerIP = httpReq.RemoteAddr
+	}
+
+	scope := coredata.NewScopeFromObjectID(trustCenter.ID)
+
+	signature, err := r.esign.AcceptSignature(
+		ctx,
+		scope,
+		&esign.AcceptSignatureRequest{
+			SignatureID:    input.SignatureID,
+			SignerFullName: identity.FullName,
+			SignerEmail:    identity.EmailAddress,
+			SignerIPAddr:   signerIP,
+			SignerUA:       httpReq.UserAgent(),
+		},
+	)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot accept electronic signature", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.AcceptElectronicSignaturePayload{
+		Signature: types.NewElectronicSignature(signature),
+	}, nil
+}
+
+// RecordSigningEvent is the resolver for the recordSigningEvent field.
+func (r *mutationResolver) RecordSigningEvent(ctx context.Context, input types.RecordSigningEventInput) (*types.RecordSigningEventPayload, error) {
+	var (
+		identity    = authn.IdentityFromContext(ctx)
+		httpReq     = gqlutils.HTTPRequestFromContext(ctx)
+		trustCenter = complianceportal.CompliancePageFromContext(ctx)
+	)
+
+	actorIP, _, _ := net.SplitHostPort(httpReq.RemoteAddr)
+	if actorIP == "" {
+		actorIP = httpReq.RemoteAddr
+	}
+
+	scope := coredata.NewScopeFromObjectID(trustCenter.ID)
+
+	if err := r.esign.RecordEvent(
+		ctx,
+		scope,
+		&esign.RecordEventRequest{
+			SignatureID: input.SignatureID,
+			EventType:   input.EventType,
+			EventSource: coredata.ElectronicSignatureEventSourceClient,
+			ActorEmail:  identity.EmailAddress,
+			ActorIPAddr: actorIP,
+			ActorUA:     httpReq.UserAgent(),
+		},
+	); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot record signing event", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RecordSigningEventPayload{Success: true}, nil
+}
+
+// FileURL is the resolver for the fileUrl field.
+func (r *nonDisclosureAgreementResolver) FileURL(ctx context.Context, obj *types.NonDisclosureAgreement) (string, error) {
+	trustCenter := complianceportal.CompliancePageFromContext(ctx)
+
+	if identity := authn.IdentityFromContext(ctx); identity != nil && r.esign != nil {
+		scope := coredata.NewScopeFromObjectID(trustCenter.ID)
+		trustService := r.trust
+
+		access, err := trustService.GetPortalAccess(ctx, scope, trustCenter.ID, identity.ID)
+		if err == nil && access.ElectronicSignatureID != nil {
+			fileURL, err := r.esign.GenerateSignatureFileURL(ctx, *access.ElectronicSignatureID, 15*time.Minute)
+			if err == nil {
+				return fileURL, nil
+			}
+
+			r.logger.ErrorCtx(ctx, "cannot generate signature file URL, falling back to original NDA", log.Error(err))
+		}
+	}
+
+	scope := coredata.NewScopeFromObjectID(trustCenter.ID)
+	trustService := r.trust
+
+	fileURL, err := trustService.GeneratePortalNDAFileURL(ctx, scope, trustCenter.ID, 15*time.Minute)
+	if err != nil {
+		return "", gqlutils.Internal(ctx)
+	}
+
+	return fileURL, nil
+}
+
+// ViewerSignature is the resolver for the viewerSignature field.
+func (r *nonDisclosureAgreementResolver) ViewerSignature(ctx context.Context, obj *types.NonDisclosureAgreement) (*types.ElectronicSignature, error) {
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil
+	}
+
+	trustCenter := complianceportal.CompliancePageFromContext(ctx)
+	scope := coredata.NewScopeFromObjectID(trustCenter.ID)
+	trustService := r.trust
+
+	access, err := trustService.GetPortalAccess(ctx, scope, trustCenter.ID, identity.ID)
+	if err != nil {
+		return nil, nil
+	}
+
+	if access.ElectronicSignatureID == nil {
+		return nil, nil
+	}
+
+	sig, err := r.esign.GetSignatureByID(ctx, scope, *access.ElectronicSignatureID)
+	if err != nil {
+		return nil, nil
+	}
+
+	return types.NewElectronicSignature(sig), nil
+}
+
+// NonDisclosureAgreement returns schema.NonDisclosureAgreementResolver implementation.
+func (r *Resolver) NonDisclosureAgreement() schema.NonDisclosureAgreementResolver {
+	return &nonDisclosureAgreementResolver{r}
+}
+
+type nonDisclosureAgreementResolver struct{ *Resolver }