325 lines
8.3 KiB
Go
325 lines
8.3 KiB
Go
|
package api
|
||
|
|
|
||
|
|
import (
|
||
|
|
"encoding/json"
|
||
|
|
"net/http"
|
||
|
|
|
||
|
|
"github.com/gorilla/mux"
|
||
|
|
"github.com/mattermost/focalboard/server/model"
|
||
|
|
"github.com/mattermost/focalboard/server/services/audit"
|
||
|
|
|
||
|
|
"github.com/mattermost/mattermost-server/v6/shared/mlog"
|
||
|
|
)
|
||
|
|
|
||
|
|
func (a *API) registerSearchRoutes(r *mux.Router) {
|
||
|
|
r.HandleFunc("/teams/{teamID}/channels", a.sessionRequired(a.handleSearchMyChannels)).Methods("GET")
|
||
|
|
r.HandleFunc("/teams/{teamID}/boards/search", a.sessionRequired(a.handleSearchBoards)).Methods("GET")
|
||
|
|
r.HandleFunc("/teams/{teamID}/boards/search/linkable", a.sessionRequired(a.handleSearchLinkableBoards)).Methods("GET")
|
||
|
|
r.HandleFunc("/boards/search", a.sessionRequired(a.handleSearchAllBoards)).Methods("GET")
|
||
|
|
}
|
||
|
|
|
||
|
|
func (a *API) handleSearchMyChannels(w http.ResponseWriter, r *http.Request) {
|
||
|
|
// swagger:operation GET /teams/{teamID}/channels searchMyChannels
|
||
|
|
//
|
||
|
|
// Returns the user available channels
|
||
|
|
//
|
||
|
|
// ---
|
||
|
|
// produces:
|
||
|
|
// - application/json
|
||
|
|
// parameters:
|
||
|
|
// - name: teamID
|
||
|
|
// in: path
|
||
|
|
// description: Team ID
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// - name: search
|
||
|
|
// in: query
|
||
|
|
// description: string to filter channels list
|
||
|
|
// required: false
|
||
|
|
// type: string
|
||
|
|
// security:
|
||
|
|
// - BearerAuth: []
|
||
|
|
// responses:
|
||
|
|
// '200':
|
||
|
|
// description: success
|
||
|
|
// schema:
|
||
|
|
// type: array
|
||
|
|
// items:
|
||
|
|
// "$ref": "#/definitions/Channel"
|
||
|
|
// default:
|
||
|
|
// description: internal error
|
||
|
|
// schema:
|
||
|
|
// "$ref": "#/definitions/ErrorResponse"
|
||
|
|
|
||
|
|
if !a.MattermostAuth {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusNotImplemented, "not permitted in standalone mode", nil)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
query := r.URL.Query()
|
||
|
|
searchQuery := query.Get("search")
|
||
|
|
|
||
|
|
teamID := mux.Vars(r)["teamID"]
|
||
|
|
userID := getUserID(r)
|
||
|
|
|
||
|
|
if !a.permissions.HasPermissionToTeam(userID, teamID, model.PermissionViewTeam) {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusForbidden, "", PermissionError{"access denied to team"})
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
auditRec := a.makeAuditRecord(r, "searchMyChannels", audit.Fail)
|
||
|
|
defer a.audit.LogRecord(audit.LevelRead, auditRec)
|
||
|
|
auditRec.AddMeta("teamID", teamID)
|
||
|
|
|
||
|
|
channels, err := a.app.SearchUserChannels(teamID, userID, searchQuery)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
a.logger.Debug("GetUserChannels",
|
||
|
|
mlog.String("teamID", teamID),
|
||
|
|
mlog.Int("channelsCount", len(channels)),
|
||
|
|
)
|
||
|
|
|
||
|
|
data, err := json.Marshal(channels)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// response
|
||
|
|
jsonBytesResponse(w, http.StatusOK, data)
|
||
|
|
|
||
|
|
auditRec.AddMeta("channelsCount", len(channels))
|
||
|
|
auditRec.Success()
|
||
|
|
}
|
||
|
|
|
||
|
|
func (a *API) handleSearchBoards(w http.ResponseWriter, r *http.Request) {
|
||
|
|
// swagger:operation GET /teams/{teamID}/boards/search searchBoards
|
||
|
|
//
|
||
|
|
// Returns the boards that match with a search term in the team
|
||
|
|
//
|
||
|
|
// ---
|
||
|
|
// produces:
|
||
|
|
// - application/json
|
||
|
|
// parameters:
|
||
|
|
// - name: teamID
|
||
|
|
// in: path
|
||
|
|
// description: Team ID
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// - name: q
|
||
|
|
// in: query
|
||
|
|
// description: The search term. Must have at least one character
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// security:
|
||
|
|
// - BearerAuth: []
|
||
|
|
// responses:
|
||
|
|
// '200':
|
||
|
|
// description: success
|
||
|
|
// schema:
|
||
|
|
// type: array
|
||
|
|
// items:
|
||
|
|
// "$ref": "#/definitions/Board"
|
||
|
|
// default:
|
||
|
|
// description: internal error
|
||
|
|
// schema:
|
||
|
|
// "$ref": "#/definitions/ErrorResponse"
|
||
|
|
|
||
|
|
teamID := mux.Vars(r)["teamID"]
|
||
|
|
term := r.URL.Query().Get("q")
|
||
|
|
userID := getUserID(r)
|
||
|
|
|
||
|
|
if !a.permissions.HasPermissionToTeam(userID, teamID, model.PermissionViewTeam) {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusForbidden, "", PermissionError{"access denied to team"})
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
if len(term) == 0 {
|
||
|
|
jsonStringResponse(w, http.StatusOK, "[]")
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
auditRec := a.makeAuditRecord(r, "searchBoards", audit.Fail)
|
||
|
|
defer a.audit.LogRecord(audit.LevelRead, auditRec)
|
||
|
|
auditRec.AddMeta("teamID", teamID)
|
||
|
|
|
||
|
|
// retrieve boards list
|
||
|
|
boards, err := a.app.SearchBoardsForUserInTeam(teamID, term, userID)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
a.logger.Debug("SearchBoards",
|
||
|
|
mlog.String("teamID", teamID),
|
||
|
|
mlog.Int("boardsCount", len(boards)),
|
||
|
|
)
|
||
|
|
|
||
|
|
data, err := json.Marshal(boards)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// response
|
||
|
|
jsonBytesResponse(w, http.StatusOK, data)
|
||
|
|
|
||
|
|
auditRec.AddMeta("boardsCount", len(boards))
|
||
|
|
auditRec.Success()
|
||
|
|
}
|
||
|
|
|
||
|
|
func (a *API) handleSearchLinkableBoards(w http.ResponseWriter, r *http.Request) {
|
||
|
|
// swagger:operation GET /teams/{teamID}/boards/search/linkable searchLinkableBoards
|
||
|
|
//
|
||
|
|
// Returns the boards that match with a search term in the team and the
|
||
|
|
// user has permission to manage members
|
||
|
|
//
|
||
|
|
// ---
|
||
|
|
// produces:
|
||
|
|
// - application/json
|
||
|
|
// parameters:
|
||
|
|
// - name: teamID
|
||
|
|
// in: path
|
||
|
|
// description: Team ID
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// - name: q
|
||
|
|
// in: query
|
||
|
|
// description: The search term. Must have at least one character
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// security:
|
||
|
|
// - BearerAuth: []
|
||
|
|
// responses:
|
||
|
|
// '200':
|
||
|
|
// description: success
|
||
|
|
// schema:
|
||
|
|
// type: array
|
||
|
|
// items:
|
||
|
|
// "$ref": "#/definitions/Board"
|
||
|
|
// default:
|
||
|
|
// description: internal error
|
||
|
|
// schema:
|
||
|
|
// "$ref": "#/definitions/ErrorResponse"
|
||
|
|
|
||
|
|
if !a.MattermostAuth {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusNotImplemented, "not permitted in standalone mode", nil)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
teamID := mux.Vars(r)["teamID"]
|
||
|
|
term := r.URL.Query().Get("q")
|
||
|
|
userID := getUserID(r)
|
||
|
|
|
||
|
|
if !a.permissions.HasPermissionToTeam(userID, teamID, model.PermissionViewTeam) {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusForbidden, "", PermissionError{"access denied to team"})
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
if len(term) == 0 {
|
||
|
|
jsonStringResponse(w, http.StatusOK, "[]")
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
auditRec := a.makeAuditRecord(r, "searchLinkableBoards", audit.Fail)
|
||
|
|
defer a.audit.LogRecord(audit.LevelRead, auditRec)
|
||
|
|
auditRec.AddMeta("teamID", teamID)
|
||
|
|
|
||
|
|
// retrieve boards list
|
||
|
|
boards, err := a.app.SearchBoardsForUserInTeam(teamID, term, userID)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
linkableBoards := []*model.Board{}
|
||
|
|
for _, board := range boards {
|
||
|
|
if a.permissions.HasPermissionToBoard(userID, board.ID, model.PermissionManageBoardRoles) {
|
||
|
|
linkableBoards = append(linkableBoards, board)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
a.logger.Debug("SearchLinkableBoards",
|
||
|
|
mlog.String("teamID", teamID),
|
||
|
|
mlog.Int("boardsCount", len(linkableBoards)),
|
||
|
|
)
|
||
|
|
|
||
|
|
data, err := json.Marshal(linkableBoards)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// response
|
||
|
|
jsonBytesResponse(w, http.StatusOK, data)
|
||
|
|
|
||
|
|
auditRec.AddMeta("boardsCount", len(linkableBoards))
|
||
|
|
auditRec.Success()
|
||
|
|
}
|
||
|
|
|
||
|
|
func (a *API) handleSearchAllBoards(w http.ResponseWriter, r *http.Request) {
|
||
|
|
// swagger:operation GET /boards/search searchBoards
|
||
|
|
//
|
||
|
|
// Returns the boards that match with a search term
|
||
|
|
//
|
||
|
|
// ---
|
||
|
|
// produces:
|
||
|
|
// - application/json
|
||
|
|
// parameters:
|
||
|
|
// - name: q
|
||
|
|
// in: query
|
||
|
|
// description: The search term. Must have at least one character
|
||
|
|
// required: true
|
||
|
|
// type: string
|
||
|
|
// security:
|
||
|
|
// - BearerAuth: []
|
||
|
|
// responses:
|
||
|
|
// '200':
|
||
|
|
// description: success
|
||
|
|
// schema:
|
||
|
|
// type: array
|
||
|
|
// items:
|
||
|
|
// "$ref": "#/definitions/Board"
|
||
|
|
// default:
|
||
|
|
// description: internal error
|
||
|
|
// schema:
|
||
|
|
// "$ref": "#/definitions/ErrorResponse"
|
||
|
|
|
||
|
|
term := r.URL.Query().Get("q")
|
||
|
|
userID := getUserID(r)
|
||
|
|
|
||
|
|
if len(term) == 0 {
|
||
|
|
jsonStringResponse(w, http.StatusOK, "[]")
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
auditRec := a.makeAuditRecord(r, "searchAllBoards", audit.Fail)
|
||
|
|
defer a.audit.LogRecord(audit.LevelRead, auditRec)
|
||
|
|
|
||
|
|
// retrieve boards list
|
||
|
|
boards, err := a.app.SearchBoardsForUser(term, userID)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
a.logger.Debug("SearchAllBoards",
|
||
|
|
mlog.Int("boardsCount", len(boards)),
|
||
|
|
)
|
||
|
|
|
||
|
|
data, err := json.Marshal(boards)
|
||
|
|
if err != nil {
|
||
|
|
a.errorResponse(w, r.URL.Path, http.StatusInternalServerError, "", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// response
|
||
|
|
jsonBytesResponse(w, http.StatusOK, data)
|
||
|
|
|
||
|
|
auditRec.AddMeta("boardsCount", len(boards))
|
||
|
|
auditRec.Success()
|
||
|
|
}
|