|
1
|
|
|
# frozen_string_literal: true |
|
2
|
|
|
|
|
3
|
|
|
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/. |
|
4
|
|
|
# |
|
5
|
|
|
# Copyright (c) 2018 BigBlueButton Inc. and by respective authors (see below). |
|
6
|
|
|
# |
|
7
|
|
|
# This program is free software; you can redistribute it and/or modify it under the |
|
8
|
|
|
# terms of the GNU Lesser General Public License as published by the Free Software |
|
9
|
|
|
# Foundation; either version 3.0 of the License, or (at your option) any later |
|
10
|
|
|
# version. |
|
11
|
|
|
# |
|
12
|
|
|
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY |
|
13
|
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A |
|
14
|
|
|
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. |
|
15
|
|
|
# |
|
16
|
|
|
# You should have received a copy of the GNU Lesser General Public License along |
|
17
|
|
|
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>. |
|
18
|
|
|
|
|
19
|
|
|
require 'bbb_api' |
|
20
|
|
|
|
|
21
|
|
|
class User < ApplicationRecord |
|
22
|
|
|
rolify |
|
23
|
|
|
include ::APIConcern |
|
24
|
|
|
include ::BbbApi |
|
25
|
|
|
|
|
26
|
|
|
attr_accessor :reset_token |
|
27
|
|
|
after_create :assign_default_role |
|
28
|
|
|
after_create :initialize_main_room |
|
29
|
|
|
|
|
30
|
|
|
before_save { email.try(:downcase!) } |
|
31
|
|
|
|
|
32
|
|
|
before_destroy :destroy_rooms |
|
33
|
|
|
|
|
34
|
|
|
has_many :rooms |
|
35
|
|
|
belongs_to :main_room, class_name: 'Room', foreign_key: :room_id, required: false |
|
36
|
|
|
|
|
37
|
|
|
validates :name, length: { maximum: 256 }, presence: true |
|
38
|
|
|
validates :provider, presence: true |
|
39
|
|
|
validate :check_if_email_can_be_blank |
|
40
|
|
|
validates :email, length: { maximum: 256 }, allow_blank: true, |
|
41
|
|
|
uniqueness: { case_sensitive: false, scope: :provider }, |
|
42
|
|
|
format: { with: /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i } |
|
43
|
|
|
|
|
44
|
|
|
validates :password, length: { minimum: 6 }, confirmation: true, if: :greenlight_account?, on: :create |
|
45
|
|
|
|
|
46
|
|
|
# Bypass validation if omniauth |
|
47
|
|
|
validates :accepted_terms, acceptance: true, |
|
48
|
|
|
unless: -> { !greenlight_account? || !Rails.configuration.terms } |
|
49
|
|
|
|
|
50
|
|
|
# We don't want to require password validations on all accounts. |
|
51
|
|
|
has_secure_password(validations: false) |
|
52
|
|
|
|
|
53
|
|
|
class << self |
|
54
|
|
|
# Generates a user from omniauth. |
|
55
|
|
|
def from_omniauth(auth) |
|
56
|
|
|
# Provider is the customer name if in loadbalanced config mode |
|
57
|
|
|
provider = auth['provider'] == "bn_launcher" ? auth['info']['customer'] : auth['provider'] |
|
58
|
|
|
u = find_by(social_uid: auth['uid'], provider: provider) |
|
59
|
|
|
|
|
60
|
|
|
if ENV["MAINTENANCE_MODE"] == "readonly" |
|
61
|
|
|
raise ActiveRecord::ReadOnlyRecord if u.nil? |
|
62
|
|
|
|
|
63
|
|
|
return u |
|
64
|
|
|
end |
|
65
|
|
|
|
|
66
|
|
|
return User.create( |
|
67
|
|
|
name: auth_name(auth), |
|
68
|
|
|
username: auth_username(auth), |
|
69
|
|
|
email: auth_email(auth), |
|
70
|
|
|
social_uid: auth['uid'], |
|
71
|
|
|
provider: provider, |
|
72
|
|
|
image: auth_image(auth), |
|
73
|
|
|
email_verified: true |
|
74
|
|
|
) if u.nil? |
|
75
|
|
|
|
|
76
|
|
|
u.name = auth_name(auth) unless u.name |
|
77
|
|
|
u.username = auth_username(auth) unless u.username |
|
78
|
|
|
u.email = auth_email(auth) |
|
79
|
|
|
u.image = auth_image(auth) |
|
80
|
|
|
u.email_verified = true |
|
81
|
|
|
u.save! |
|
82
|
|
|
u |
|
83
|
|
|
end |
|
84
|
|
|
|
|
85
|
|
|
private |
|
86
|
|
|
|
|
87
|
|
|
# Provider attributes. |
|
88
|
|
|
def auth_name(auth) |
|
89
|
|
|
case auth['provider'] |
|
90
|
|
|
when :office365 |
|
91
|
|
|
auth['info']['display_name'] |
|
92
|
|
|
else |
|
93
|
|
|
auth['info']['name'] |
|
94
|
|
|
end |
|
95
|
|
|
end |
|
96
|
|
|
|
|
97
|
|
|
def auth_username(auth) |
|
98
|
|
|
case auth['provider'] |
|
99
|
|
|
when :google |
|
100
|
|
|
auth['info']['email'].split('@').first |
|
101
|
|
|
when :bn_launcher |
|
102
|
|
|
auth['info']['username'] |
|
103
|
|
|
else |
|
104
|
|
|
auth['info']['nickname'] |
|
105
|
|
|
end |
|
106
|
|
|
end |
|
107
|
|
|
|
|
108
|
|
|
def auth_email(auth) |
|
109
|
|
|
auth['info']['email'] |
|
110
|
|
|
end |
|
111
|
|
|
|
|
112
|
|
|
def auth_image(auth) |
|
113
|
|
|
case auth['provider'] |
|
114
|
|
|
when :twitter |
|
115
|
|
|
auth['info']['image'].gsub("http", "https").gsub("_normal", "") |
|
116
|
|
|
else |
|
117
|
|
|
auth['info']['image'] |
|
118
|
|
|
end |
|
119
|
|
|
end |
|
120
|
|
|
end |
|
121
|
|
|
|
|
122
|
|
|
def self.admins_search(string) |
|
123
|
|
|
active_database = Rails.configuration.database_configuration[Rails.env]["adapter"] |
|
124
|
|
|
# Postgres requires created_at to be cast to a string |
|
125
|
|
|
created_at_query = if active_database == "postgresql" |
|
126
|
|
|
"created_at::text" |
|
127
|
|
|
else |
|
128
|
|
|
"created_at" |
|
129
|
|
|
end |
|
130
|
|
|
|
|
131
|
|
|
search_query = "users.name LIKE :search OR email LIKE :search OR username LIKE :search" \ |
|
132
|
|
|
" OR users.#{created_at_query} LIKE :search OR provider LIKE :search" |
|
133
|
|
|
search_param = "%#{string}%" |
|
134
|
|
|
where(search_query, search: search_param) |
|
135
|
|
|
end |
|
136
|
|
|
|
|
137
|
|
|
def self.admins_order(column, direction) |
|
138
|
|
|
order("#{column} #{direction}") |
|
139
|
|
|
end |
|
140
|
|
|
|
|
141
|
|
|
def all_recordings(search_params = {}, ret_search_params = false) |
|
142
|
|
|
pag_num = Rails.configuration.pagination_number |
|
143
|
|
|
|
|
144
|
|
|
pag_loops = rooms.length / pag_num - 1 |
|
145
|
|
|
|
|
146
|
|
|
res = { recordings: [] } |
|
147
|
|
|
|
|
148
|
|
|
(0..pag_loops).each do |i| |
|
149
|
|
|
pag_rooms = rooms[pag_num * i, pag_num] |
|
150
|
|
|
|
|
151
|
|
|
# bbb.get_recordings returns an object |
|
152
|
|
|
# take only the array portion of the object that is returned |
|
153
|
|
|
full_res = bbb.get_recordings(meetingID: pag_rooms.pluck(:bbb_id)) |
|
154
|
|
|
res[:recordings].push(*full_res[:recordings]) |
|
155
|
|
|
end |
|
156
|
|
|
|
|
157
|
|
|
last_pag_room = rooms[pag_num * (pag_loops + 1), rooms.length % pag_num] |
|
158
|
|
|
|
|
159
|
|
|
full_res = bbb.get_recordings(meetingID: last_pag_room.pluck(:bbb_id)) |
|
160
|
|
|
res[:recordings].push(*full_res[:recordings]) |
|
161
|
|
|
|
|
162
|
|
|
format_recordings(res, search_params, ret_search_params) |
|
163
|
|
|
end |
|
164
|
|
|
|
|
165
|
|
|
# Activates an account and initialize a users main room |
|
166
|
|
|
def activate |
|
167
|
|
|
update_attribute(:email_verified, true) |
|
168
|
|
|
update_attribute(:activated_at, Time.zone.now) |
|
169
|
|
|
save |
|
170
|
|
|
end |
|
171
|
|
|
|
|
172
|
|
|
def activated? |
|
173
|
|
|
return true unless Rails.configuration.enable_email_verification |
|
174
|
|
|
email_verified |
|
175
|
|
|
end |
|
176
|
|
|
|
|
177
|
|
|
# Sets the password reset attributes. |
|
178
|
|
|
def create_reset_digest |
|
179
|
|
|
self.reset_token = User.new_token |
|
180
|
|
|
update_attribute(:reset_digest, User.digest(reset_token)) |
|
181
|
|
|
update_attribute(:reset_sent_at, Time.zone.now) |
|
182
|
|
|
end |
|
183
|
|
|
|
|
184
|
|
|
# Returns true if the given token matches the digest. |
|
185
|
|
|
def authenticated?(attribute, token) |
|
186
|
|
|
digest = send("#{attribute}_digest") |
|
187
|
|
|
return false if digest.nil? |
|
188
|
|
|
BCrypt::Password.new(digest).is_password?(token) |
|
189
|
|
|
end |
|
190
|
|
|
|
|
191
|
|
|
# Return true if password reset link expires |
|
192
|
|
|
def password_reset_expired? |
|
193
|
|
|
reset_sent_at < 2.hours.ago |
|
194
|
|
|
end |
|
195
|
|
|
|
|
196
|
|
|
# Retrives a list of all a users rooms that are not the main room, sorted by last session date. |
|
197
|
|
|
def secondary_rooms |
|
198
|
|
|
secondary = (rooms - [main_room]) |
|
199
|
|
|
no_session, session = secondary.partition { |r| r.last_session.nil? } |
|
200
|
|
|
sorted = session.sort_by(&:last_session) |
|
201
|
|
|
sorted + no_session |
|
202
|
|
|
end |
|
203
|
|
|
|
|
204
|
|
|
def name_chunk |
|
205
|
|
|
charset = ("a".."z").to_a - %w(b i l o s) + ("2".."9").to_a - %w(5 8) |
|
206
|
|
|
chunk = name.parameterize[0...3] |
|
207
|
|
|
if chunk.empty? |
|
208
|
|
|
chunk + (0...3).map { charset.to_a[rand(charset.size)] }.join |
|
209
|
|
|
elsif chunk.length == 1 |
|
210
|
|
|
chunk + (0...2).map { charset.to_a[rand(charset.size)] }.join |
|
211
|
|
|
elsif chunk.length == 2 |
|
212
|
|
|
chunk + (0...1).map { charset.to_a[rand(charset.size)] }.join |
|
213
|
|
|
else |
|
214
|
|
|
chunk |
|
215
|
|
|
end |
|
216
|
|
|
end |
|
217
|
|
|
|
|
218
|
|
|
def greenlight_account? |
|
219
|
|
|
return true unless provider # For testing cases when provider is set to null |
|
220
|
|
|
return true if provider == "greenlight" |
|
221
|
|
|
return false unless Rails.configuration.loadbalanced_configuration |
|
222
|
|
|
# Proceed with fetching the provider info |
|
223
|
|
|
provider_info = retrieve_provider_info(provider, 'api2', 'getUserGreenlightCredentials') |
|
224
|
|
|
provider_info['provider'] == 'greenlight' |
|
225
|
|
|
end |
|
226
|
|
|
|
|
227
|
|
|
def activation_token |
|
228
|
|
|
# Create the token. |
|
229
|
|
|
create_reset_activation_digest(User.new_token) |
|
230
|
|
|
end |
|
231
|
|
|
|
|
232
|
|
|
def admin_of?(user) |
|
233
|
|
|
if Rails.configuration.loadbalanced_configuration |
|
234
|
|
|
if has_role? :super_admin |
|
235
|
|
|
id != user.id |
|
236
|
|
|
else |
|
237
|
|
|
(has_role? :admin) && (id != user.id) && (provider == user.provider) && (!user.has_role? :super_admin) |
|
238
|
|
|
end |
|
239
|
|
|
else |
|
240
|
|
|
((has_role? :admin) || (has_role? :super_admin)) && (id != user.id) |
|
241
|
|
|
end |
|
242
|
|
|
end |
|
243
|
|
|
|
|
244
|
|
|
def self.digest(string) |
|
245
|
|
|
cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost |
|
246
|
|
|
BCrypt::Password.create(string, cost: cost) |
|
247
|
|
|
end |
|
248
|
|
|
|
|
249
|
|
|
# Returns a random token. |
|
250
|
|
|
def self.new_token |
|
251
|
|
|
SecureRandom.urlsafe_base64 |
|
252
|
|
|
end |
|
253
|
|
|
|
|
254
|
|
|
private |
|
255
|
|
|
|
|
256
|
|
|
def create_reset_activation_digest(token) |
|
257
|
|
|
# Create the digest and persist it. |
|
258
|
|
|
self.activation_digest = User.digest(token) |
|
259
|
|
|
save |
|
260
|
|
|
token |
|
261
|
|
|
end |
|
262
|
|
|
|
|
263
|
|
|
# Destory a users rooms when they are removed. |
|
264
|
|
|
def destroy_rooms |
|
265
|
|
|
rooms.destroy_all |
|
266
|
|
|
end |
|
267
|
|
|
|
|
268
|
|
|
# Initializes a room for the user and assign a BigBlueButton user id. |
|
269
|
|
|
def initialize_main_room |
|
270
|
|
|
self.uid = "gl-#{(0...12).map { rand(65..90).chr }.join.downcase}" |
|
271
|
|
|
self.main_room = Room.create!(owner: self, name: I18n.t("home_room")) |
|
272
|
|
|
save |
|
273
|
|
|
end |
|
274
|
|
|
|
|
275
|
|
|
# Initialize the user to use the default user role |
|
276
|
|
|
def assign_default_role |
|
277
|
|
|
add_role(:user) if roles.blank? |
|
278
|
|
|
end |
|
279
|
|
|
|
|
280
|
|
|
def check_if_email_can_be_blank |
|
281
|
|
|
if email.blank? |
|
282
|
|
|
if Rails.configuration.loadbalanced_configuration && greenlight_account? |
|
283
|
|
|
errors.add(:email, I18n.t("errors.messages.blank")) |
|
284
|
|
|
elsif provider == "greenlight" |
|
285
|
|
|
errors.add(:email, I18n.t("errors.messages.blank")) |
|
286
|
|
|
end |
|
287
|
|
|
end |
|
288
|
|
|
end |
|
289
|
|
|
end |
|
290
|
|
|
|