scim/pkg/supplier/rocketchat.go

package supplier

import (
	"context"
	"crypto/sha256"
	"encoding/hex"
	"errors"
	"fmt"
	"io/ioutil"
	"strings"

	"github.com/go-resty/resty/v2"
	"github.com/tidwall/gjson"
)

const setting_AppFrameworkDevelopementMode = "Apps_Framework_Development_Mode"
const setting_AppFrameworkEnabled = "Apps_Framework_enabled"
const rocketchat_app_id = "53fd430f-3924-4c6c-8774-b23fabfeb0e5"

type rocketchat struct {
	*resty.Client
	spConfig
	ctx                context.Context
	sideLoading        bool
	previousAppDevMode bool
}

func (rc *rocketchat) StartSession(ctx context.Context) error {
	rc.ctx = ctx
	if err := rc.login(); err != nil {
		return err
	}
	err := rc.setSetting(setting_AppFrameworkEnabled, true)
	if err != nil {
		return err
	}
	if rc.sideLoading {
		appDevMode, err := rc.getSetting(setting_AppFrameworkDevelopementMode)
		if err != nil {
			return err
		}
		rc.previousAppDevMode = appDevMode.Bool()
		if !rc.previousAppDevMode {
			rc.setSetting(setting_AppFrameworkDevelopementMode, true)
		}
	}
	return nil
}

func (rc *rocketchat) CloseSession() error {
	if rc.sideLoading && !rc.previousAppDevMode {
		if err := rc.setSetting(setting_AppFrameworkDevelopementMode, rc.previousAppDevMode); err != nil {
			return err
		}
	}
	return nil
}

func (rc *rocketchat) InstallOrUpdate() error {
	installedVersion, err := rc.getInstalledVersion()
	if err != nil {
		return err
	}
	version, err := rc.getVersion()
	if err != nil {
		return err
	}
	if rc.sideLoading && installedVersion != version {
		uri := "/api/apps"
		if installedVersion != "" {
			uri = uri + "/update"
		}
		if err := rc.download(version); err != nil {
			return err
		}
		resp, err := rc.R().SetFile("app", "scim.zip").Post(uri)
		if err != nil {
			return err
		}
		if resp.IsError() {
			return fmt.Errorf("fail to upload app - %s", resp.Body())
		}
	}
	return nil
}

func (rc *rocketchat) Enable() error {
	enabled, err := rc.isEnabled()
	if err != nil {
		return err
	}
	if !enabled {
		body := map[string]string{
			"status": "manually_enabled",
		}
		resp, err := rc.R().SetBody(body).Post(fmt.Sprintf("/api/apps/%s/status", rocketchat_app_id))
		if err != nil {
			return err
		}
		if resp.IsError() {
			return fmt.Errorf("fail to enable app - %s", resp.Body())
		}
	}
	return nil
}

func (rc *rocketchat) GenerateCredentials() (string, string, error) {
	username, err := rc.userId()
	if err != nil {
		return "", "", err
	}
	exists, err := rc.accessTokenExists()
	if err != nil {
		return "", "", err
	}
	var token string
	if exists {
		token, err = rc.regenerateAccessToken()
	} else {
		token, err = rc.generateAccessToken()
	}
	if err != nil {
		return "", "", err
	}
	return username, token, nil
}

func (rc *rocketchat) ScimEndpoint() string {
	return fmt.Sprintf("%s/api/apps/public/53fd430f-3924-4c6c-8774-b23fabfeb0e5/", rc.Host)
}

func (rc *rocketchat) Name() string {
	if rc.spConfig.Name == "" {
		return "rocketchat"
	}
	return rc.spConfig.Name
}

func (rc *rocketchat) login() error {
	body := map[string]string{
		"user":     rc.Username,
		"password": rc.Password,
	}
	resp, err := rc.R().SetBody(body).Post("/api/v1/login")
	if err != nil {
		return err
	}
	if resp.IsError() {
		return errors.New(string(resp.Body()))
	}
	data := gjson.GetMany(string(resp.Body()), "data.userId", "data.authToken")
	hashedPass := sha256.Sum256([]byte(rc.Password))
	rc.Client = rc.Client.
		SetHeader("X-User-Id", data[0].String()).
		SetHeader("X-Auth-Token", data[1].String()).
		SetHeader("X-2fa-code", hex.EncodeToString(hashedPass[:])).
		SetHeader("X-2fa-method", "password")

	return nil
}

func (rc *rocketchat) getSetting(key string) (gjson.Result, error) {
	resp, err := rc.R().Get(fmt.Sprintf("/api/v1/settings/%s", key))
	if err != nil {
		return gjson.Result{}, err
	}
	if resp.IsError() {
		return gjson.Result{}, fmt.Errorf("fail to get setting %s - %s", key, resp.Body())
	}
	return gjson.Get(string(resp.Body()), "value"), nil
}

func (rc *rocketchat) setSetting(key string, value interface{}) error {
	body := map[string]interface{}{}
	body["value"] = value
	resp, err := rc.R().
		SetContext(rc.ctx).
		SetBody(body).
		Post(fmt.Sprintf("/api/v1/settings/%s", key))
	if err != nil {
		return err
	}
	if resp.IsError() {
		return fmt.Errorf("fail to set setting %s - %s", key, resp.Body())
	}
	return nil
}

func (rc *rocketchat) getVersion() (string, error) {
	if rc.Version != "" {
		return rc.Version, nil
	}
	resp, err := resty.New().R().SetContext(rc.ctx).Get("https://lab.libreho.st/api/v4/projects/207/releases")
	if err != nil {
		return "", err
	}
	if resp.IsError() {
		return "", fmt.Errorf("fail to get releases - %s", resp.Body())
	}
	rc.Version = gjson.Get(string(resp.Body()), "0.tag_name").String()
	return rc.Version, nil
}

func (rc *rocketchat) download(version string) error {
	resp, err := resty.New().R().SetContext(rc.ctx).Get(fmt.Sprintf("https://lab.libreho.st/api/v4/projects/207/packages/generic/scim/%s/scim.zip", version))
	if err != nil {
		return err
	}
	if resp.IsError() {
		return fmt.Errorf("fail to download package - %s", resp.Body())
	}
	rc.Version = gjson.Get(string(resp.Body()), "0.tag_name").String()
	return ioutil.WriteFile("scim.zip", resp.Body(), 0644)
}

func (rc *rocketchat) getAppInfo() (string, error) {
	resp, err := rc.R().Get(fmt.Sprintf("/api/apps/%s", rocketchat_app_id))
	if err != nil {
		return "", err
	}
	return string(resp.Body()), nil
}

func (rc *rocketchat) getInstalledVersion() (string, error) {
	raw, err := rc.getAppInfo()
	if err != nil {
		return "", err
	}
	return gjson.Get(raw, "app.version").String(), nil
}

func (rc *rocketchat) isEnabled() (bool, error) {
	raw, err := rc.getAppInfo()
	if err != nil {
		return false, err
	}
	status := gjson.Get(raw, "app.status").String()
	return strings.Contains(status, "enabled"), nil
}

func (rc *rocketchat) accessTokenExists() (bool, error) {
	resp, err := rc.R().Get("/api/v1/users.getPersonalAccessTokens")
	if err != nil {
		return false, err
	}
	if resp.IsError() {
		return false, fmt.Errorf("failed to get access tokens - %s", resp.Body())
	}
	return gjson.Get(string(resp.Body()), `tokens.#(name=="scim")`).Exists(), nil
}

func (rc *rocketchat) regenerateAccessToken() (string, error) {
	body := map[string]string{"tokenName": "scim"}
	resp, err := rc.R().SetBody(body).Post("/api/v1/users.removePersonalAccessToken")
	if err != nil {
		return "", err
	}
	if resp.IsError() {
		return "", fmt.Errorf("failed to remove access token - %s", resp.Body())
	}
	return rc.generateAccessToken()
}

func (rc *rocketchat) generateAccessToken() (string, error) {
	body := map[string]interface{}{
		"tokenName":       "scim",
		"bypassTwoFactor": true,
	}
	resp, err := rc.R().SetBody(body).Post("/api/v1/users.generatePersonalAccessToken")
	if err != nil {
		return "", err
	}
	if resp.IsError() {
		return "", fmt.Errorf("failed to generate access token - %s", resp.Body())
	}
	return gjson.Get(string(resp.Body()), "token").String(), nil
}

func (rc *rocketchat) R() *resty.Request {
	return rc.Client.R().SetContext(rc.ctx)
}

func (rc *rocketchat) userId() (string, error) {
	resp, err := rc.R().Get("/api/v1/me")
	if err != nil {
		return "", err
	}
	if resp.IsError() {
		return "", fmt.Errorf("failed to get user - %s", resp.Body())
	}
	return gjson.Get(string(resp.Body()), "_id").String(), nil
}