feat:pull the slack message service out to slack pkg
Signed-off-by: manish-singh-bisht <mthefool218@gmail.com>
This commit is contained in:
manish-singh-bisht
committed by
Émile Ré
Émile Ré
parent
7cb6edcbb5
commit
8eeab0a6d0
@@ -18,6 +18,8 @@ import (
|
||||
"time"
|
||||
|
||||
"github.com/aws/aws-sdk-go-v2/service/s3"
|
||||
"go.gearno.de/kit/log"
|
||||
"go.gearno.de/kit/pg"
|
||||
"go.probo.inc/probo/pkg/auth"
|
||||
"go.probo.inc/probo/pkg/coredata"
|
||||
"go.probo.inc/probo/pkg/crypto/cipher"
|
||||
@@ -26,8 +28,6 @@ import (
|
||||
"go.probo.inc/probo/pkg/html2pdf"
|
||||
"go.probo.inc/probo/pkg/probo"
|
||||
"go.probo.inc/probo/pkg/slack"
|
||||
"go.gearno.de/kit/log"
|
||||
"go.gearno.de/kit/pg"
|
||||
)
|
||||
|
||||
type (
|
||||
@@ -38,19 +38,19 @@ type (
|
||||
}
|
||||
|
||||
Service struct {
|
||||
pg *pg.Client
|
||||
s3 *s3.Client
|
||||
bucket string
|
||||
proboSvc *probo.Service
|
||||
encryptionKey cipher.EncryptionKey
|
||||
tokenSecret string
|
||||
slackSigningSecret string
|
||||
baseURL string
|
||||
auth *auth.Service
|
||||
html2pdfConverter *html2pdf.Converter
|
||||
fileManager *filemanager.Service
|
||||
logger *log.Logger
|
||||
trustConfig TrustConfig
|
||||
pg *pg.Client
|
||||
s3 *s3.Client
|
||||
bucket string
|
||||
proboSvc *probo.Service
|
||||
encryptionKey cipher.EncryptionKey
|
||||
tokenSecret string
|
||||
baseURL string
|
||||
auth *auth.Service
|
||||
html2pdfConverter *html2pdf.Converter
|
||||
fileManager *filemanager.Service
|
||||
logger *log.Logger
|
||||
trustConfig TrustConfig
|
||||
slack *slack.Service
|
||||
}
|
||||
|
||||
TenantService struct {
|
||||
@@ -77,7 +77,7 @@ type (
|
||||
TrustCenterFiles *TrustCenterFileService
|
||||
Reports *ReportService
|
||||
Organizations *OrganizationService
|
||||
SlackMessages *SlackMessageService
|
||||
slack *slack.TenantService
|
||||
}
|
||||
)
|
||||
|
||||
@@ -88,26 +88,26 @@ func NewService(
|
||||
baseURL string,
|
||||
encryptionKey cipher.EncryptionKey,
|
||||
tokenSecret string,
|
||||
slackSigningSecret string,
|
||||
auth *auth.Service,
|
||||
html2pdfConverter *html2pdf.Converter,
|
||||
fileManagerService *filemanager.Service,
|
||||
logger *log.Logger,
|
||||
trustConfig TrustConfig,
|
||||
slack *slack.Service,
|
||||
) *Service {
|
||||
return &Service{
|
||||
pg: pgClient,
|
||||
s3: s3Client,
|
||||
bucket: bucket,
|
||||
encryptionKey: encryptionKey,
|
||||
tokenSecret: tokenSecret,
|
||||
slackSigningSecret: slackSigningSecret,
|
||||
baseURL: baseURL,
|
||||
auth: auth,
|
||||
html2pdfConverter: html2pdfConverter,
|
||||
fileManager: fileManagerService,
|
||||
logger: logger,
|
||||
trustConfig: trustConfig,
|
||||
pg: pgClient,
|
||||
s3: s3Client,
|
||||
bucket: bucket,
|
||||
encryptionKey: encryptionKey,
|
||||
tokenSecret: tokenSecret,
|
||||
baseURL: baseURL,
|
||||
auth: auth,
|
||||
html2pdfConverter: html2pdfConverter,
|
||||
fileManager: fileManagerService,
|
||||
logger: logger,
|
||||
trustConfig: trustConfig,
|
||||
slack: slack,
|
||||
}
|
||||
}
|
||||
|
||||
@@ -126,10 +126,9 @@ func (s *Service) WithTenant(tenantID gid.TenantID) *TenantService {
|
||||
fileManager: s.fileManager,
|
||||
logger: s.logger,
|
||||
trustConfig: s.trustConfig,
|
||||
slack: s.slack.WithTenant(tenantID),
|
||||
}
|
||||
|
||||
slackClient := slack.NewClient(s.logger)
|
||||
|
||||
tenantService.TrustCenters = &TrustCenterService{svc: tenantService}
|
||||
tenantService.Documents = &DocumentService{svc: tenantService, html2pdfConverter: s.html2pdfConverter}
|
||||
tenantService.Audits = &AuditService{svc: tenantService}
|
||||
@@ -140,7 +139,6 @@ func (s *Service) WithTenant(tenantID gid.TenantID) *TenantService {
|
||||
tenantService.TrustCenterFiles = &TrustCenterFileService{svc: tenantService}
|
||||
tenantService.Reports = &ReportService{svc: tenantService}
|
||||
tenantService.Organizations = &OrganizationService{svc: tenantService}
|
||||
tenantService.SlackMessages = &SlackMessageService{svc: tenantService, slackClient: slackClient}
|
||||
|
||||
return tenantService
|
||||
}
|
||||
@@ -148,7 +146,3 @@ func (s *Service) WithTenant(tenantID gid.TenantID) *TenantService {
|
||||
func (s *Service) GetTokenSecret() string {
|
||||
return s.tokenSecret
|
||||
}
|
||||
|
||||
func (s *Service) GetSlackSigningSecret() string {
|
||||
return s.slackSigningSecret
|
||||
}
|
||||
|
||||
@@ -1,462 +0,0 @@
|
||||
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
|
||||
//
|
||||
// Permission to use, copy, modify, and/or distribute this software for any
|
||||
// purpose with or without fee is hereby granted, provided that the above
|
||||
// copyright notice and this permission notice appear in all copies.
|
||||
//
|
||||
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
||||
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
||||
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
||||
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
||||
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
||||
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
||||
// PERFORMANCE OF THIS SOFTWARE.
|
||||
|
||||
package trust
|
||||
|
||||
import (
|
||||
"bytes"
|
||||
"context"
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"fmt"
|
||||
"time"
|
||||
|
||||
"go.gearno.de/kit/pg"
|
||||
"go.probo.inc/probo/pkg/baseurl"
|
||||
"go.probo.inc/probo/pkg/coredata"
|
||||
"go.probo.inc/probo/pkg/gid"
|
||||
"go.probo.inc/probo/pkg/slack"
|
||||
)
|
||||
|
||||
const (
|
||||
slackMessageDeduplicationWindow = 7 * 24 * time.Hour
|
||||
)
|
||||
|
||||
type (
|
||||
SlackMessageService struct {
|
||||
svc *TenantService
|
||||
slackClient *slack.Client
|
||||
}
|
||||
|
||||
SlackMessageDocument struct {
|
||||
ID string
|
||||
Title string
|
||||
Status string
|
||||
}
|
||||
|
||||
SlackMessageReport struct {
|
||||
ID string
|
||||
Title string
|
||||
AuditID string
|
||||
Status string
|
||||
}
|
||||
|
||||
SlackMessageFile struct {
|
||||
ID string
|
||||
Name string
|
||||
Category string
|
||||
Status string
|
||||
}
|
||||
|
||||
SlackMessageMetadata struct {
|
||||
Documents []SlackMessageDocument
|
||||
Reports []SlackMessageReport
|
||||
Files []SlackMessageFile
|
||||
}
|
||||
)
|
||||
|
||||
func (m SlackMessageMetadata) toMap() map[string]any {
|
||||
return map[string]any{
|
||||
"documents": m.Documents,
|
||||
"reports": m.Reports,
|
||||
"files": m.Files,
|
||||
}
|
||||
}
|
||||
|
||||
func (s *Service) GetInitialSlackMessageByChannelAndTS(
|
||||
ctx context.Context,
|
||||
channelID string,
|
||||
messageTS string,
|
||||
) (*coredata.SlackMessage, error) {
|
||||
var slackMessage coredata.SlackMessage
|
||||
|
||||
err := s.pg.WithConn(ctx, func(conn pg.Conn) error {
|
||||
if err := slackMessage.LoadInitialByChannelAndTS(ctx, conn, coredata.NewNoScope(), channelID, messageTS); err != nil {
|
||||
return fmt.Errorf("cannot load slack message: %w", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
})
|
||||
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return &slackMessage, nil
|
||||
}
|
||||
|
||||
func (s *SlackMessageService) GetSlackMessageDocumentIDs(
|
||||
ctx context.Context,
|
||||
slackMessageID gid.GID,
|
||||
) (documentIDs []gid.GID, reportIDs []gid.GID, fileIDs []gid.GID, err error) {
|
||||
var slackMessage coredata.SlackMessage
|
||||
|
||||
err = s.svc.pg.WithConn(ctx, func(conn pg.Conn) error {
|
||||
if err := slackMessage.LoadById(ctx, conn, s.svc.scope, slackMessageID); err != nil {
|
||||
return fmt.Errorf("cannot load slack message: %w", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
})
|
||||
|
||||
if err != nil {
|
||||
return nil, nil, nil, err
|
||||
}
|
||||
|
||||
documentIDs = extractIDsFromMetadata(slackMessage.Metadata, "documents")
|
||||
reportIDs = extractIDsFromMetadata(slackMessage.Metadata, "reports")
|
||||
fileIDs = extractIDsFromMetadata(slackMessage.Metadata, "files")
|
||||
|
||||
return documentIDs, reportIDs, fileIDs, nil
|
||||
}
|
||||
|
||||
func (s *SlackMessageService) UpdateSlackAccessMessage(
|
||||
ctx context.Context,
|
||||
slackMessageID gid.GID,
|
||||
responseURL string,
|
||||
requesterEmail string,
|
||||
) error {
|
||||
return s.svc.pg.WithTx(ctx, func(tx pg.Conn) error {
|
||||
var slackMessage coredata.SlackMessage
|
||||
if err := slackMessage.LoadById(ctx, tx, s.svc.scope, slackMessageID); err != nil {
|
||||
return fmt.Errorf("cannot load slack message: %w", err)
|
||||
}
|
||||
|
||||
var trustCenter coredata.TrustCenter
|
||||
if err := trustCenter.LoadByOrganizationID(ctx, tx, s.svc.scope, slackMessage.OrganizationID); err != nil {
|
||||
return fmt.Errorf("cannot load trust center: %w", err)
|
||||
}
|
||||
|
||||
var trustCenterAccess coredata.TrustCenterAccess
|
||||
if err := trustCenterAccess.LoadByTrustCenterIDAndEmail(ctx, tx, s.svc.scope, trustCenter.ID, requesterEmail); err != nil {
|
||||
return fmt.Errorf("cannot load trust center access: %w", err)
|
||||
}
|
||||
|
||||
documents, reports, files, err := s.loadDocumentsReportsAndFilesFromAccesses(ctx, tx, trustCenterAccess.ID)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
newSlackMessageID := gid.New(s.svc.scope.GetTenantID(), coredata.SlackMessageEntityType)
|
||||
|
||||
updatedBody, err := s.buildAccessRequestMessage(
|
||||
newSlackMessageID,
|
||||
trustCenterAccess.Name,
|
||||
requesterEmail,
|
||||
trustCenter.OrganizationID,
|
||||
documents,
|
||||
reports,
|
||||
files,
|
||||
)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
metadata := SlackMessageMetadata{
|
||||
Documents: documents,
|
||||
Reports: reports,
|
||||
Files: files,
|
||||
}
|
||||
|
||||
now := time.Now()
|
||||
newSlackMessage := &coredata.SlackMessage{
|
||||
ID: newSlackMessageID,
|
||||
OrganizationID: slackMessage.OrganizationID,
|
||||
Type: slackMessage.Type,
|
||||
Body: updatedBody,
|
||||
MessageTS: slackMessage.MessageTS,
|
||||
ChannelID: slackMessage.ChannelID,
|
||||
RequesterEmail: slackMessage.RequesterEmail,
|
||||
Metadata: metadata.toMap(),
|
||||
InitialSlackMessageID: slackMessage.InitialSlackMessageID,
|
||||
CreatedAt: now,
|
||||
UpdatedAt: now,
|
||||
SentAt: &now,
|
||||
}
|
||||
|
||||
if err := newSlackMessage.Insert(ctx, tx, s.svc.scope); err != nil {
|
||||
return fmt.Errorf("cannot insert slack message: %w", err)
|
||||
}
|
||||
|
||||
if err := s.slackClient.UpdateInteractiveMessage(ctx, responseURL, updatedBody); err != nil {
|
||||
return fmt.Errorf("cannot update Slack message: %w", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
})
|
||||
}
|
||||
|
||||
func (s *SlackMessageService) QueueSlackNotification(
|
||||
ctx context.Context,
|
||||
requesterEmail string,
|
||||
trustCenterID gid.GID,
|
||||
) error {
|
||||
return s.svc.pg.WithTx(ctx, func(tx pg.Conn) error {
|
||||
var trustCenterAccess coredata.TrustCenterAccess
|
||||
if err := trustCenterAccess.LoadByTrustCenterIDAndEmail(ctx, tx, s.svc.scope, trustCenterID, requesterEmail); err != nil {
|
||||
return fmt.Errorf("cannot load trust center access: %w", err)
|
||||
}
|
||||
|
||||
var trustCenter coredata.TrustCenter
|
||||
if err := trustCenter.LoadByID(ctx, tx, s.svc.scope, trustCenterID); err != nil {
|
||||
return fmt.Errorf("cannot load trust center: %w", err)
|
||||
}
|
||||
|
||||
var connectors coredata.Connectors
|
||||
if err := connectors.LoadAllByOrganizationIDWithoutDecryptedConnection(
|
||||
ctx,
|
||||
tx,
|
||||
s.svc.scope,
|
||||
trustCenter.OrganizationID,
|
||||
); err != nil {
|
||||
return fmt.Errorf("cannot load connectors: %w", err)
|
||||
}
|
||||
|
||||
hasSlackConnector := false
|
||||
for _, connector := range connectors {
|
||||
if connector.Provider == coredata.ConnectorProviderSlack {
|
||||
hasSlackConnector = true
|
||||
break
|
||||
}
|
||||
}
|
||||
|
||||
if !hasSlackConnector {
|
||||
return fmt.Errorf("no slack connector found for organization")
|
||||
}
|
||||
|
||||
documents, reports, files, err := s.loadDocumentsReportsAndFilesFromAccesses(ctx, tx, trustCenterAccess.ID)
|
||||
if err != nil {
|
||||
return fmt.Errorf("cannot load documents, reports and files: %w", err)
|
||||
}
|
||||
|
||||
slackMessageID := gid.New(s.svc.scope.GetTenantID(), coredata.SlackMessageEntityType)
|
||||
|
||||
body, err := s.buildAccessRequestMessage(
|
||||
slackMessageID,
|
||||
trustCenterAccess.Name,
|
||||
requesterEmail,
|
||||
trustCenter.OrganizationID,
|
||||
documents,
|
||||
reports,
|
||||
files,
|
||||
)
|
||||
if err != nil {
|
||||
return fmt.Errorf("cannot build access request message: %w", err)
|
||||
}
|
||||
|
||||
metadata := SlackMessageMetadata{
|
||||
Documents: documents,
|
||||
Reports: reports,
|
||||
Files: files,
|
||||
}
|
||||
|
||||
now := time.Now()
|
||||
slackMessage := &coredata.SlackMessage{
|
||||
ID: slackMessageID,
|
||||
OrganizationID: trustCenter.OrganizationID,
|
||||
Type: coredata.SlackMessageTypeTrustCenterAccessRequest,
|
||||
Body: body,
|
||||
RequesterEmail: &requesterEmail,
|
||||
Metadata: metadata.toMap(),
|
||||
CreatedAt: now,
|
||||
UpdatedAt: now,
|
||||
}
|
||||
|
||||
sevenDaysAgo := now.Add(-slackMessageDeduplicationWindow)
|
||||
|
||||
var existingMessage coredata.SlackMessage
|
||||
err = existingMessage.LoadLatestByRequesterEmailAndType(
|
||||
ctx,
|
||||
tx,
|
||||
s.svc.scope,
|
||||
trustCenter.OrganizationID,
|
||||
requesterEmail,
|
||||
coredata.SlackMessageTypeTrustCenterAccessRequest,
|
||||
sevenDaysAgo,
|
||||
)
|
||||
if err == nil {
|
||||
slackMessage.MessageTS = existingMessage.MessageTS
|
||||
slackMessage.ChannelID = existingMessage.ChannelID
|
||||
slackMessage.InitialSlackMessageID = existingMessage.InitialSlackMessageID
|
||||
|
||||
if err := slackMessage.Insert(ctx, tx, s.svc.scope); err != nil {
|
||||
return fmt.Errorf("cannot insert slack message: %w", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
var notFoundErr coredata.ErrSlackMessageNotFound
|
||||
if !errors.Is(err, notFoundErr) {
|
||||
return fmt.Errorf("cannot load existing slack message: %w", err)
|
||||
}
|
||||
|
||||
slackMessage.InitialSlackMessageID = slackMessageID
|
||||
if err := slackMessage.Insert(ctx, tx, s.svc.scope); err != nil {
|
||||
return fmt.Errorf("cannot insert slack message: %w", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
})
|
||||
}
|
||||
|
||||
func (s *SlackMessageService) loadDocumentsReportsAndFilesFromAccesses(
|
||||
ctx context.Context,
|
||||
conn pg.Conn,
|
||||
trustCenterAccessID gid.GID,
|
||||
) (
|
||||
documents []SlackMessageDocument,
|
||||
reports []SlackMessageReport,
|
||||
files []SlackMessageFile,
|
||||
err error,
|
||||
) {
|
||||
documents = []SlackMessageDocument{}
|
||||
reports = []SlackMessageReport{}
|
||||
files = []SlackMessageFile{}
|
||||
|
||||
var accesses coredata.TrustCenterDocumentAccesses
|
||||
if err := accesses.LoadAllByTrustCenterAccessID(ctx, conn, s.svc.scope, trustCenterAccessID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load trust center document accesses: %w", err)
|
||||
}
|
||||
|
||||
for _, access := range accesses {
|
||||
if access.DocumentID != nil {
|
||||
doc := &coredata.Document{}
|
||||
if err := doc.LoadByID(ctx, conn, s.svc.scope, *access.DocumentID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load document: %w", err)
|
||||
}
|
||||
documents = append(documents, SlackMessageDocument{
|
||||
ID: access.DocumentID.String(),
|
||||
Title: doc.Title,
|
||||
Status: access.Status.String(),
|
||||
})
|
||||
}
|
||||
|
||||
if access.ReportID != nil {
|
||||
rep := &coredata.Report{}
|
||||
if err := rep.LoadByID(ctx, conn, s.svc.scope, *access.ReportID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load report: %w", err)
|
||||
}
|
||||
|
||||
audit := &coredata.Audit{}
|
||||
if err := audit.LoadByReportID(ctx, conn, s.svc.scope, *access.ReportID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load audit: %w", err)
|
||||
}
|
||||
|
||||
framework := &coredata.Framework{}
|
||||
if err := framework.LoadByID(ctx, conn, s.svc.scope, audit.FrameworkID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load framework: %w", err)
|
||||
}
|
||||
|
||||
label := framework.Name
|
||||
if audit.Name != nil && *audit.Name != "" {
|
||||
label = label + " - " + *audit.Name
|
||||
}
|
||||
reports = append(reports, SlackMessageReport{
|
||||
ID: access.ReportID.String(),
|
||||
Title: label,
|
||||
AuditID: audit.ID.String(),
|
||||
Status: access.Status.String(),
|
||||
})
|
||||
}
|
||||
|
||||
if access.TrustCenterFileID != nil {
|
||||
file := &coredata.TrustCenterFile{}
|
||||
if err := file.LoadByID(ctx, conn, s.svc.scope, *access.TrustCenterFileID); err != nil {
|
||||
return nil, nil, nil, fmt.Errorf("cannot load trust center file: %w", err)
|
||||
}
|
||||
files = append(files, SlackMessageFile{
|
||||
ID: access.TrustCenterFileID.String(),
|
||||
Name: file.Name,
|
||||
Category: file.Category,
|
||||
Status: access.Status.String(),
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
return documents, reports, files, nil
|
||||
}
|
||||
|
||||
func (s *SlackMessageService) buildAccessRequestMessage(
|
||||
slackMessageID gid.GID,
|
||||
requesterName string,
|
||||
requesterEmail string,
|
||||
organizationID gid.GID,
|
||||
documents []SlackMessageDocument,
|
||||
reports []SlackMessageReport,
|
||||
files []SlackMessageFile,
|
||||
) (map[string]any, error) {
|
||||
base, err := baseurl.Parse(s.svc.baseURL)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("cannot parse base URL: %w", err)
|
||||
}
|
||||
|
||||
templateData := struct {
|
||||
RequesterName string
|
||||
RequesterEmail string
|
||||
OrganizationID string
|
||||
Domain string
|
||||
SlackMessageID string
|
||||
Documents []SlackMessageDocument
|
||||
Reports []SlackMessageReport
|
||||
Files []SlackMessageFile
|
||||
}{
|
||||
RequesterName: requesterName,
|
||||
RequesterEmail: requesterEmail,
|
||||
OrganizationID: organizationID.String(),
|
||||
Domain: base.Host(),
|
||||
SlackMessageID: slackMessageID.String(),
|
||||
Documents: documents,
|
||||
Reports: reports,
|
||||
Files: files,
|
||||
}
|
||||
|
||||
var buf bytes.Buffer
|
||||
if err := accessRequestTemplate.Execute(&buf, templateData); err != nil {
|
||||
return nil, fmt.Errorf("cannot execute template: %w", err)
|
||||
}
|
||||
|
||||
var body map[string]any
|
||||
if err := json.NewDecoder(&buf).Decode(&body); err != nil {
|
||||
return nil, fmt.Errorf("cannot parse template JSON: %w", err)
|
||||
}
|
||||
|
||||
return body, nil
|
||||
}
|
||||
|
||||
func extractIDsFromMetadata(metadata map[string]any, fieldName string) []gid.GID {
|
||||
ids := []gid.GID{}
|
||||
|
||||
items, ok := metadata[fieldName].([]any)
|
||||
if !ok || items == nil {
|
||||
return ids
|
||||
}
|
||||
|
||||
for _, itemAny := range items {
|
||||
item, ok := itemAny.(map[string]any)
|
||||
if !ok {
|
||||
continue
|
||||
}
|
||||
idStr, ok := item["ID"].(string)
|
||||
if !ok {
|
||||
continue
|
||||
}
|
||||
id, err := gid.ParseGID(idStr)
|
||||
if err != nil {
|
||||
continue
|
||||
}
|
||||
ids = append(ids, id)
|
||||
}
|
||||
|
||||
return ids
|
||||
}
|
||||
@@ -1,24 +0,0 @@
|
||||
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
|
||||
//
|
||||
// Permission to use, copy, modify, and/or distribute this software for any
|
||||
// purpose with or without fee is hereby granted, provided that the above
|
||||
// copyright notice and this permission notice appear in all copies.
|
||||
//
|
||||
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
||||
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
||||
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
||||
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
||||
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
||||
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
||||
// PERFORMANCE OF THIS SOFTWARE.
|
||||
|
||||
package trust
|
||||
|
||||
import (
|
||||
"embed"
|
||||
)
|
||||
|
||||
var (
|
||||
//go:embed templates/*.tmpl
|
||||
Templates embed.FS
|
||||
)
|
||||
@@ -1,270 +0,0 @@
|
||||
{
|
||||
"text": "New Trust Center Access Request",
|
||||
"blocks": [
|
||||
{
|
||||
"type": "header",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "🔒 New Trust Center Access Request"
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "context",
|
||||
"elements": [
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
"text": "👤 Requested by *{{jsonEscape .RequesterName}}* <{{jsonEscape .RequesterEmail}}>"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"type": "actions",
|
||||
"elements": [
|
||||
{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant All"
|
||||
},
|
||||
"action_id": "accept_all",
|
||||
"value": "{{.SlackMessageID}}",
|
||||
"style": "primary"
|
||||
},
|
||||
{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Reject/Revoke All"
|
||||
},
|
||||
"action_id": "reject_all",
|
||||
"value": "{{.SlackMessageID}}",
|
||||
"style": "danger"
|
||||
},
|
||||
{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "View Requests"
|
||||
},
|
||||
"url": "https://{{.Domain}}/organizations/{{.OrganizationID}}/trust-center/access"
|
||||
}
|
||||
]
|
||||
}{{if .Documents}},
|
||||
{
|
||||
"type": "divider"
|
||||
},
|
||||
{
|
||||
"type": "section",
|
||||
"text": {
|
||||
"type": "mrkdwn",
|
||||
"text": "*📄 Requested Documents*"
|
||||
}
|
||||
}{{range .Documents}},
|
||||
{
|
||||
"type": "section",
|
||||
"fields": [
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/documents/{{.ID}}|{{jsonEscape .Title}}>"
|
||||
},
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
{{if eq .Status "GRANTED"}}
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/trust-center/access|✓ Granted>"
|
||||
{{else if eq .Status "REJECTED"}}
|
||||
"text": "✗ Rejected"
|
||||
{{else if eq .Status "REVOKED"}}
|
||||
"text": "✗ Revoked"
|
||||
{{else}}
|
||||
"text": "Requested"
|
||||
{{end}}
|
||||
}
|
||||
],
|
||||
"accessory": {{if eq .Status "GRANTED"}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Revoke"
|
||||
},
|
||||
"action_id": "reject_document",
|
||||
"value": "{{.ID}}",
|
||||
"style": "danger"
|
||||
}{{else if eq .Status "REQUESTED"}}{
|
||||
"type": "overflow",
|
||||
"options": [
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"value": "accept/{{.ID}}"
|
||||
},
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Reject"
|
||||
},
|
||||
"value": "reject/{{.ID}}"
|
||||
}
|
||||
],
|
||||
"action_id": "handle_document"
|
||||
}{{else}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"action_id": "accept_document",
|
||||
"value": "{{.ID}}",
|
||||
"style": "primary"
|
||||
}{{end}}
|
||||
}{{end}}{{end}}{{if .Reports}},
|
||||
{
|
||||
"type": "divider"
|
||||
},
|
||||
{
|
||||
"type": "section",
|
||||
"text": {
|
||||
"type": "mrkdwn",
|
||||
"text": "*📊 Requested Audit Reports*"
|
||||
}
|
||||
}{{range .Reports}},
|
||||
{
|
||||
"type": "section",
|
||||
"fields": [
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/audits/{{.AuditID}}|{{jsonEscape .Title}}>"
|
||||
},
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
{{if eq .Status "GRANTED"}}
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/trust-center/access|✓ Granted>"
|
||||
{{else if eq .Status "REJECTED"}}
|
||||
"text": "✗ Rejected"
|
||||
{{else if eq .Status "REVOKED"}}
|
||||
"text": "✗ Revoked"
|
||||
{{else}}
|
||||
"text": "Requested"
|
||||
{{end}}
|
||||
}
|
||||
],
|
||||
"accessory": {{if eq .Status "GRANTED"}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Revoke"
|
||||
},
|
||||
"action_id": "reject_report",
|
||||
"value": "{{.ID}}",
|
||||
"style": "danger"
|
||||
}{{else if eq .Status "REQUESTED"}}{
|
||||
"type": "overflow",
|
||||
"options": [
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"value": "accept/{{.ID}}"
|
||||
},
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Reject"
|
||||
},
|
||||
"value": "reject/{{.ID}}"
|
||||
}
|
||||
],
|
||||
"action_id": "handle_report"
|
||||
}{{else}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"action_id": "accept_report",
|
||||
"value": "{{.ID}}",
|
||||
"style": "primary"
|
||||
}{{end}}
|
||||
}{{end}}{{end}}{{if .Files}},
|
||||
{
|
||||
"type": "divider"
|
||||
},
|
||||
{
|
||||
"type": "section",
|
||||
"text": {
|
||||
"type": "mrkdwn",
|
||||
"text": "*📎 Requested Files*"
|
||||
}
|
||||
}{{range .Files}},
|
||||
{
|
||||
"type": "section",
|
||||
"fields": [
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/trust-center/files|{{jsonEscape .Name}}>{{if .Category}} ({{jsonEscape .Category}}){{end}}"
|
||||
},
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
{{if eq .Status "GRANTED"}}
|
||||
"text": "<https://{{$.Domain}}/organizations/{{$.OrganizationID}}/trust-center/access|✓ Granted>"
|
||||
{{else if eq .Status "REJECTED"}}
|
||||
"text": "✗ Rejected"
|
||||
{{else if eq .Status "REVOKED"}}
|
||||
"text": "✗ Revoked"
|
||||
{{else}}
|
||||
"text": "Requested"
|
||||
{{end}}
|
||||
}
|
||||
],
|
||||
"accessory": {{if eq .Status "GRANTED"}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Revoke"
|
||||
},
|
||||
"action_id": "reject_file",
|
||||
"value": "{{.ID}}",
|
||||
"style": "danger"
|
||||
}{{else if eq .Status "REQUESTED"}}{
|
||||
"type": "overflow",
|
||||
"options": [
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"value": "accept/{{.ID}}"
|
||||
},
|
||||
{
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Reject"
|
||||
},
|
||||
"value": "reject/{{.ID}}"
|
||||
}
|
||||
],
|
||||
"action_id": "handle_file"
|
||||
}{{else}}{
|
||||
"type": "button",
|
||||
"text": {
|
||||
"type": "plain_text",
|
||||
"text": "Grant"
|
||||
},
|
||||
"action_id": "accept_file",
|
||||
"value": "{{.ID}}",
|
||||
"style": "primary"
|
||||
}{{end}}
|
||||
}{{end}}{{end}},
|
||||
{
|
||||
"type": "context",
|
||||
"elements": [
|
||||
{
|
||||
"type": "mrkdwn",
|
||||
"text": "⚠️ _Updates from this message will only work for 14 days_"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -21,8 +21,6 @@ import (
|
||||
"fmt"
|
||||
"net/mail"
|
||||
"net/url"
|
||||
"strings"
|
||||
"text/template"
|
||||
"time"
|
||||
|
||||
"go.gearno.de/kit/log"
|
||||
@@ -35,30 +33,6 @@ import (
|
||||
"go.probo.inc/probo/pkg/statelesstoken"
|
||||
)
|
||||
|
||||
var (
|
||||
accessRequestTemplate = template.Must(
|
||||
template.New("access-request.json.tmpl").
|
||||
Funcs(template.FuncMap{
|
||||
"jsonEscape": func(s string) string {
|
||||
b, _ := json.Marshal(s)
|
||||
return string(b[1 : len(b)-1])
|
||||
},
|
||||
"buildAcceptAllValue": func(docIDs, repIDs []string) string {
|
||||
value := map[string][]string{
|
||||
"document_ids": docIDs,
|
||||
"report_ids": repIDs,
|
||||
}
|
||||
b, _ := json.Marshal(value)
|
||||
s := string(b)
|
||||
s = strings.ReplaceAll(s, `\`, `\\`)
|
||||
s = strings.ReplaceAll(s, `"`, `\"`)
|
||||
return s
|
||||
},
|
||||
}).
|
||||
ParseFS(Templates, "templates/access-request.json.tmpl"),
|
||||
)
|
||||
)
|
||||
|
||||
type (
|
||||
TrustCenterAccessService struct {
|
||||
svc *TenantService
|
||||
@@ -258,7 +232,8 @@ func (s TrustCenterAccessService) Request(
|
||||
return nil, err
|
||||
}
|
||||
|
||||
if err := s.svc.SlackMessages.QueueSlackNotification(ctx, access.Email, req.TrustCenterID); err != nil {
|
||||
slackMessageService := s.svc.slack.GetSlackMessageService()
|
||||
if err := slackMessageService.QueueSlackNotification(ctx, access.Email, req.TrustCenterID); err != nil {
|
||||
s.logger.ErrorCtx(ctx, "cannot queue slack notification", log.Error(err))
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user