@@ -43,197 +43,197 @@ |
||
43 | 43 | */ |
44 | 44 | class CloudFederationProviderManager implements ICloudFederationProviderManager { |
45 | 45 | |
46 | - /** @var array list of available cloud federation providers */ |
|
47 | - private $cloudFederationProvider; |
|
48 | - |
|
49 | - /** @var IAppManager */ |
|
50 | - private $appManager; |
|
51 | - |
|
52 | - /** @var IClientService */ |
|
53 | - private $httpClientService; |
|
54 | - |
|
55 | - /** @var ICloudIdManager */ |
|
56 | - private $cloudIdManager; |
|
57 | - |
|
58 | - /** @var ILogger */ |
|
59 | - private $logger; |
|
60 | - |
|
61 | - /** @var array cache OCM end-points */ |
|
62 | - private $ocmEndPoints = []; |
|
63 | - |
|
64 | - private $supportedAPIVersion = '1.0-proposal1'; |
|
65 | - |
|
66 | - /** |
|
67 | - * CloudFederationProviderManager constructor. |
|
68 | - * |
|
69 | - * @param IAppManager $appManager |
|
70 | - * @param IClientService $httpClientService |
|
71 | - * @param ICloudIdManager $cloudIdManager |
|
72 | - * @param ILogger $logger |
|
73 | - */ |
|
74 | - public function __construct(IAppManager $appManager, |
|
75 | - IClientService $httpClientService, |
|
76 | - ICloudIdManager $cloudIdManager, |
|
77 | - ILogger $logger) { |
|
78 | - $this->cloudFederationProvider = []; |
|
79 | - $this->appManager = $appManager; |
|
80 | - $this->httpClientService = $httpClientService; |
|
81 | - $this->cloudIdManager = $cloudIdManager; |
|
82 | - $this->logger = $logger; |
|
83 | - } |
|
84 | - |
|
85 | - |
|
86 | - /** |
|
87 | - * Registers an callback function which must return an cloud federation provider |
|
88 | - * |
|
89 | - * @param string $resourceType which resource type does the provider handles |
|
90 | - * @param string $displayName user facing name of the federated share provider |
|
91 | - * @param callable $callback |
|
92 | - */ |
|
93 | - public function addCloudFederationProvider($resourceType, $displayName, callable $callback) { |
|
94 | - $this->cloudFederationProvider[$resourceType] = [ |
|
95 | - 'resourceType' => $resourceType, |
|
96 | - 'displayName' => $displayName, |
|
97 | - 'callback' => $callback, |
|
98 | - ]; |
|
99 | - } |
|
100 | - |
|
101 | - /** |
|
102 | - * remove cloud federation provider |
|
103 | - * |
|
104 | - * @param string $providerId |
|
105 | - */ |
|
106 | - public function removeCloudFederationProvider($providerId) { |
|
107 | - unset($this->cloudFederationProvider[$providerId]); |
|
108 | - } |
|
109 | - |
|
110 | - /** |
|
111 | - * get a list of all cloudFederationProviders |
|
112 | - * |
|
113 | - * @return array [resourceType => ['resourceType' => $resourceType, 'displayName' => $displayName, 'callback' => callback]] |
|
114 | - */ |
|
115 | - public function getAllCloudFederationProviders() { |
|
116 | - return $this->cloudFederationProvider; |
|
117 | - } |
|
118 | - |
|
119 | - /** |
|
120 | - * get a specific cloud federation provider |
|
121 | - * |
|
122 | - * @param string $resourceType |
|
123 | - * @return ICloudFederationProvider |
|
124 | - * @throws ProviderDoesNotExistsException |
|
125 | - */ |
|
126 | - public function getCloudFederationProvider($resourceType) { |
|
127 | - if (isset($this->cloudFederationProvider[$resourceType])) { |
|
128 | - return call_user_func($this->cloudFederationProvider[$resourceType]['callback']); |
|
129 | - } else { |
|
130 | - throw new ProviderDoesNotExistsException($resourceType); |
|
131 | - } |
|
132 | - } |
|
133 | - |
|
134 | - public function sendShare(ICloudFederationShare $share) { |
|
135 | - $cloudID = $this->cloudIdManager->resolveCloudId($share->getShareWith()); |
|
136 | - $ocmEndPoint = $this->getOCMEndPoint($cloudID->getRemote()); |
|
137 | - if (empty($ocmEndPoint)) { |
|
138 | - return false; |
|
139 | - } |
|
140 | - |
|
141 | - $client = $this->httpClientService->newClient(); |
|
142 | - try { |
|
143 | - $response = $client->post($ocmEndPoint . '/shares', [ |
|
144 | - 'body' => json_encode($share->getShare()), |
|
145 | - 'headers' => ['content-type' => 'application/json'], |
|
146 | - 'timeout' => 10, |
|
147 | - 'connect_timeout' => 10, |
|
148 | - ]); |
|
149 | - |
|
150 | - if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
151 | - $result = json_decode($response->getBody(), true); |
|
152 | - return (is_array($result)) ? $result : []; |
|
153 | - } |
|
154 | - } catch (\Exception $e) { |
|
155 | - // if flat re-sharing is not supported by the remote server |
|
156 | - // we re-throw the exception and fall back to the old behaviour. |
|
157 | - // (flat re-shares has been introduced in Nextcloud 9.1) |
|
158 | - if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
159 | - $this->logger->debug($e->getMessage()); |
|
160 | - throw $e; |
|
161 | - } |
|
162 | - } |
|
163 | - |
|
164 | - return false; |
|
165 | - } |
|
166 | - |
|
167 | - /** |
|
168 | - * @param string $url |
|
169 | - * @param ICloudFederationNotification $notification |
|
170 | - * @return array|false |
|
171 | - */ |
|
172 | - public function sendNotification($url, ICloudFederationNotification $notification) { |
|
173 | - $ocmEndPoint = $this->getOCMEndPoint($url); |
|
174 | - |
|
175 | - if (empty($ocmEndPoint)) { |
|
176 | - return false; |
|
177 | - } |
|
178 | - |
|
179 | - $client = $this->httpClientService->newClient(); |
|
180 | - try { |
|
181 | - $response = $client->post($ocmEndPoint . '/notifications', [ |
|
182 | - 'body' => json_encode($notification->getMessage()), |
|
183 | - 'headers' => ['content-type' => 'application/json'], |
|
184 | - 'timeout' => 10, |
|
185 | - 'connect_timeout' => 10, |
|
186 | - ]); |
|
187 | - if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
188 | - $result = json_decode($response->getBody(), true); |
|
189 | - return (is_array($result)) ? $result : []; |
|
190 | - } |
|
191 | - } catch (\Exception $e) { |
|
192 | - // log the error and return false |
|
193 | - $this->logger->error('error while sending notification for federated share: ' . $e->getMessage()); |
|
194 | - } |
|
195 | - |
|
196 | - return false; |
|
197 | - } |
|
198 | - |
|
199 | - /** |
|
200 | - * check if the new cloud federation API is ready to be used |
|
201 | - * |
|
202 | - * @return bool |
|
203 | - */ |
|
204 | - public function isReady() { |
|
205 | - return $this->appManager->isEnabledForUser('cloud_federation_api'); |
|
206 | - } |
|
207 | - /** |
|
208 | - * check if server supports the new OCM api and ask for the correct end-point |
|
209 | - * |
|
210 | - * @param string $url full base URL of the cloud server |
|
211 | - * @return string |
|
212 | - */ |
|
213 | - protected function getOCMEndPoint($url) { |
|
214 | - if (isset($this->ocmEndPoints[$url])) { |
|
215 | - return $this->ocmEndPoints[$url]; |
|
216 | - } |
|
217 | - |
|
218 | - $client = $this->httpClientService->newClient(); |
|
219 | - try { |
|
220 | - $response = $client->get($url . '/ocm-provider/', ['timeout' => 10, 'connect_timeout' => 10]); |
|
221 | - } catch (\Exception $e) { |
|
222 | - $this->ocmEndPoints[$url] = ''; |
|
223 | - return ''; |
|
224 | - } |
|
225 | - |
|
226 | - $result = $response->getBody(); |
|
227 | - $result = json_decode($result, true); |
|
228 | - |
|
229 | - $supportedVersion = isset($result['apiVersion']) && $result['apiVersion'] === $this->supportedAPIVersion; |
|
230 | - |
|
231 | - if (isset($result['endPoint']) && $supportedVersion) { |
|
232 | - $this->ocmEndPoints[$url] = $result['endPoint']; |
|
233 | - return $result['endPoint']; |
|
234 | - } |
|
235 | - |
|
236 | - $this->ocmEndPoints[$url] = ''; |
|
237 | - return ''; |
|
238 | - } |
|
46 | + /** @var array list of available cloud federation providers */ |
|
47 | + private $cloudFederationProvider; |
|
48 | + |
|
49 | + /** @var IAppManager */ |
|
50 | + private $appManager; |
|
51 | + |
|
52 | + /** @var IClientService */ |
|
53 | + private $httpClientService; |
|
54 | + |
|
55 | + /** @var ICloudIdManager */ |
|
56 | + private $cloudIdManager; |
|
57 | + |
|
58 | + /** @var ILogger */ |
|
59 | + private $logger; |
|
60 | + |
|
61 | + /** @var array cache OCM end-points */ |
|
62 | + private $ocmEndPoints = []; |
|
63 | + |
|
64 | + private $supportedAPIVersion = '1.0-proposal1'; |
|
65 | + |
|
66 | + /** |
|
67 | + * CloudFederationProviderManager constructor. |
|
68 | + * |
|
69 | + * @param IAppManager $appManager |
|
70 | + * @param IClientService $httpClientService |
|
71 | + * @param ICloudIdManager $cloudIdManager |
|
72 | + * @param ILogger $logger |
|
73 | + */ |
|
74 | + public function __construct(IAppManager $appManager, |
|
75 | + IClientService $httpClientService, |
|
76 | + ICloudIdManager $cloudIdManager, |
|
77 | + ILogger $logger) { |
|
78 | + $this->cloudFederationProvider = []; |
|
79 | + $this->appManager = $appManager; |
|
80 | + $this->httpClientService = $httpClientService; |
|
81 | + $this->cloudIdManager = $cloudIdManager; |
|
82 | + $this->logger = $logger; |
|
83 | + } |
|
84 | + |
|
85 | + |
|
86 | + /** |
|
87 | + * Registers an callback function which must return an cloud federation provider |
|
88 | + * |
|
89 | + * @param string $resourceType which resource type does the provider handles |
|
90 | + * @param string $displayName user facing name of the federated share provider |
|
91 | + * @param callable $callback |
|
92 | + */ |
|
93 | + public function addCloudFederationProvider($resourceType, $displayName, callable $callback) { |
|
94 | + $this->cloudFederationProvider[$resourceType] = [ |
|
95 | + 'resourceType' => $resourceType, |
|
96 | + 'displayName' => $displayName, |
|
97 | + 'callback' => $callback, |
|
98 | + ]; |
|
99 | + } |
|
100 | + |
|
101 | + /** |
|
102 | + * remove cloud federation provider |
|
103 | + * |
|
104 | + * @param string $providerId |
|
105 | + */ |
|
106 | + public function removeCloudFederationProvider($providerId) { |
|
107 | + unset($this->cloudFederationProvider[$providerId]); |
|
108 | + } |
|
109 | + |
|
110 | + /** |
|
111 | + * get a list of all cloudFederationProviders |
|
112 | + * |
|
113 | + * @return array [resourceType => ['resourceType' => $resourceType, 'displayName' => $displayName, 'callback' => callback]] |
|
114 | + */ |
|
115 | + public function getAllCloudFederationProviders() { |
|
116 | + return $this->cloudFederationProvider; |
|
117 | + } |
|
118 | + |
|
119 | + /** |
|
120 | + * get a specific cloud federation provider |
|
121 | + * |
|
122 | + * @param string $resourceType |
|
123 | + * @return ICloudFederationProvider |
|
124 | + * @throws ProviderDoesNotExistsException |
|
125 | + */ |
|
126 | + public function getCloudFederationProvider($resourceType) { |
|
127 | + if (isset($this->cloudFederationProvider[$resourceType])) { |
|
128 | + return call_user_func($this->cloudFederationProvider[$resourceType]['callback']); |
|
129 | + } else { |
|
130 | + throw new ProviderDoesNotExistsException($resourceType); |
|
131 | + } |
|
132 | + } |
|
133 | + |
|
134 | + public function sendShare(ICloudFederationShare $share) { |
|
135 | + $cloudID = $this->cloudIdManager->resolveCloudId($share->getShareWith()); |
|
136 | + $ocmEndPoint = $this->getOCMEndPoint($cloudID->getRemote()); |
|
137 | + if (empty($ocmEndPoint)) { |
|
138 | + return false; |
|
139 | + } |
|
140 | + |
|
141 | + $client = $this->httpClientService->newClient(); |
|
142 | + try { |
|
143 | + $response = $client->post($ocmEndPoint . '/shares', [ |
|
144 | + 'body' => json_encode($share->getShare()), |
|
145 | + 'headers' => ['content-type' => 'application/json'], |
|
146 | + 'timeout' => 10, |
|
147 | + 'connect_timeout' => 10, |
|
148 | + ]); |
|
149 | + |
|
150 | + if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
151 | + $result = json_decode($response->getBody(), true); |
|
152 | + return (is_array($result)) ? $result : []; |
|
153 | + } |
|
154 | + } catch (\Exception $e) { |
|
155 | + // if flat re-sharing is not supported by the remote server |
|
156 | + // we re-throw the exception and fall back to the old behaviour. |
|
157 | + // (flat re-shares has been introduced in Nextcloud 9.1) |
|
158 | + if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
159 | + $this->logger->debug($e->getMessage()); |
|
160 | + throw $e; |
|
161 | + } |
|
162 | + } |
|
163 | + |
|
164 | + return false; |
|
165 | + } |
|
166 | + |
|
167 | + /** |
|
168 | + * @param string $url |
|
169 | + * @param ICloudFederationNotification $notification |
|
170 | + * @return array|false |
|
171 | + */ |
|
172 | + public function sendNotification($url, ICloudFederationNotification $notification) { |
|
173 | + $ocmEndPoint = $this->getOCMEndPoint($url); |
|
174 | + |
|
175 | + if (empty($ocmEndPoint)) { |
|
176 | + return false; |
|
177 | + } |
|
178 | + |
|
179 | + $client = $this->httpClientService->newClient(); |
|
180 | + try { |
|
181 | + $response = $client->post($ocmEndPoint . '/notifications', [ |
|
182 | + 'body' => json_encode($notification->getMessage()), |
|
183 | + 'headers' => ['content-type' => 'application/json'], |
|
184 | + 'timeout' => 10, |
|
185 | + 'connect_timeout' => 10, |
|
186 | + ]); |
|
187 | + if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
188 | + $result = json_decode($response->getBody(), true); |
|
189 | + return (is_array($result)) ? $result : []; |
|
190 | + } |
|
191 | + } catch (\Exception $e) { |
|
192 | + // log the error and return false |
|
193 | + $this->logger->error('error while sending notification for federated share: ' . $e->getMessage()); |
|
194 | + } |
|
195 | + |
|
196 | + return false; |
|
197 | + } |
|
198 | + |
|
199 | + /** |
|
200 | + * check if the new cloud federation API is ready to be used |
|
201 | + * |
|
202 | + * @return bool |
|
203 | + */ |
|
204 | + public function isReady() { |
|
205 | + return $this->appManager->isEnabledForUser('cloud_federation_api'); |
|
206 | + } |
|
207 | + /** |
|
208 | + * check if server supports the new OCM api and ask for the correct end-point |
|
209 | + * |
|
210 | + * @param string $url full base URL of the cloud server |
|
211 | + * @return string |
|
212 | + */ |
|
213 | + protected function getOCMEndPoint($url) { |
|
214 | + if (isset($this->ocmEndPoints[$url])) { |
|
215 | + return $this->ocmEndPoints[$url]; |
|
216 | + } |
|
217 | + |
|
218 | + $client = $this->httpClientService->newClient(); |
|
219 | + try { |
|
220 | + $response = $client->get($url . '/ocm-provider/', ['timeout' => 10, 'connect_timeout' => 10]); |
|
221 | + } catch (\Exception $e) { |
|
222 | + $this->ocmEndPoints[$url] = ''; |
|
223 | + return ''; |
|
224 | + } |
|
225 | + |
|
226 | + $result = $response->getBody(); |
|
227 | + $result = json_decode($result, true); |
|
228 | + |
|
229 | + $supportedVersion = isset($result['apiVersion']) && $result['apiVersion'] === $this->supportedAPIVersion; |
|
230 | + |
|
231 | + if (isset($result['endPoint']) && $supportedVersion) { |
|
232 | + $this->ocmEndPoints[$url] = $result['endPoint']; |
|
233 | + return $result['endPoint']; |
|
234 | + } |
|
235 | + |
|
236 | + $this->ocmEndPoints[$url] = ''; |
|
237 | + return ''; |
|
238 | + } |
|
239 | 239 | } |
@@ -33,74 +33,74 @@ |
||
33 | 33 | */ |
34 | 34 | interface ICloudFederationProviderManager { |
35 | 35 | |
36 | - /** |
|
37 | - * Registers an callback function which must return an cloud federation provider |
|
38 | - * |
|
39 | - * @param string $resourceType which resource type does the provider handles |
|
40 | - * @param string $displayName user facing name of the federated share provider |
|
41 | - * @param callable $callback |
|
42 | - * @throws Exceptions\ProviderAlreadyExistsException |
|
43 | - * |
|
44 | - * @since 14.0.0 |
|
45 | - */ |
|
46 | - public function addCloudFederationProvider($resourceType, $displayName, callable $callback); |
|
36 | + /** |
|
37 | + * Registers an callback function which must return an cloud federation provider |
|
38 | + * |
|
39 | + * @param string $resourceType which resource type does the provider handles |
|
40 | + * @param string $displayName user facing name of the federated share provider |
|
41 | + * @param callable $callback |
|
42 | + * @throws Exceptions\ProviderAlreadyExistsException |
|
43 | + * |
|
44 | + * @since 14.0.0 |
|
45 | + */ |
|
46 | + public function addCloudFederationProvider($resourceType, $displayName, callable $callback); |
|
47 | 47 | |
48 | - /** |
|
49 | - * remove cloud federation provider |
|
50 | - * |
|
51 | - * @param string $resourceType |
|
52 | - * |
|
53 | - * @since 14.0.0 |
|
54 | - */ |
|
55 | - public function removeCloudFederationProvider($resourceType); |
|
48 | + /** |
|
49 | + * remove cloud federation provider |
|
50 | + * |
|
51 | + * @param string $resourceType |
|
52 | + * |
|
53 | + * @since 14.0.0 |
|
54 | + */ |
|
55 | + public function removeCloudFederationProvider($resourceType); |
|
56 | 56 | |
57 | - /** |
|
58 | - * get a list of all cloudFederationProviders |
|
59 | - * |
|
60 | - * @return array [resourceType => ['resourceType' => $resourceType, 'displayName' => $displayName, 'callback' => callback]] |
|
61 | - * |
|
62 | - * @since 14.0.0 |
|
63 | - */ |
|
64 | - public function getAllCloudFederationProviders(); |
|
57 | + /** |
|
58 | + * get a list of all cloudFederationProviders |
|
59 | + * |
|
60 | + * @return array [resourceType => ['resourceType' => $resourceType, 'displayName' => $displayName, 'callback' => callback]] |
|
61 | + * |
|
62 | + * @since 14.0.0 |
|
63 | + */ |
|
64 | + public function getAllCloudFederationProviders(); |
|
65 | 65 | |
66 | - /** |
|
67 | - * get a specific cloud federation provider |
|
68 | - * |
|
69 | - * @param string $resourceType |
|
70 | - * @return ICloudFederationProvider |
|
71 | - * @throws Exceptions\ProviderDoesNotExistsException |
|
72 | - * |
|
73 | - * @since 14.0.0 |
|
74 | - */ |
|
75 | - public function getCloudFederationProvider($resourceType); |
|
66 | + /** |
|
67 | + * get a specific cloud federation provider |
|
68 | + * |
|
69 | + * @param string $resourceType |
|
70 | + * @return ICloudFederationProvider |
|
71 | + * @throws Exceptions\ProviderDoesNotExistsException |
|
72 | + * |
|
73 | + * @since 14.0.0 |
|
74 | + */ |
|
75 | + public function getCloudFederationProvider($resourceType); |
|
76 | 76 | |
77 | - /** |
|
78 | - * send federated share |
|
79 | - * |
|
80 | - * @param ICloudFederationShare $share |
|
81 | - * @return mixed |
|
82 | - * |
|
83 | - * @since 14.0.0 |
|
84 | - */ |
|
85 | - public function sendShare(ICloudFederationShare $share); |
|
77 | + /** |
|
78 | + * send federated share |
|
79 | + * |
|
80 | + * @param ICloudFederationShare $share |
|
81 | + * @return mixed |
|
82 | + * |
|
83 | + * @since 14.0.0 |
|
84 | + */ |
|
85 | + public function sendShare(ICloudFederationShare $share); |
|
86 | 86 | |
87 | - /** |
|
88 | - * send notification about existing share |
|
89 | - * |
|
90 | - * @param string $url |
|
91 | - * @param ICloudFederationNotification $notification |
|
92 | - * @return array|false |
|
93 | - * |
|
94 | - * @since 14.0.0 |
|
95 | - */ |
|
96 | - public function sendNotification($url, ICloudFederationNotification $notification); |
|
87 | + /** |
|
88 | + * send notification about existing share |
|
89 | + * |
|
90 | + * @param string $url |
|
91 | + * @param ICloudFederationNotification $notification |
|
92 | + * @return array|false |
|
93 | + * |
|
94 | + * @since 14.0.0 |
|
95 | + */ |
|
96 | + public function sendNotification($url, ICloudFederationNotification $notification); |
|
97 | 97 | |
98 | - /** |
|
99 | - * check if the new cloud federation API is ready to be used |
|
100 | - * |
|
101 | - * @return bool |
|
102 | - * |
|
103 | - * @since 14.0.0 |
|
104 | - */ |
|
105 | - public function isReady(); |
|
98 | + /** |
|
99 | + * check if the new cloud federation API is ready to be used |
|
100 | + * |
|
101 | + * @return bool |
|
102 | + * |
|
103 | + * @since 14.0.0 |
|
104 | + */ |
|
105 | + public function isReady(); |
|
106 | 106 | } |
@@ -38,433 +38,433 @@ |
||
38 | 38 | use OCP\ILogger; |
39 | 39 | |
40 | 40 | class Notifications { |
41 | - public const RESPONSE_FORMAT = 'json'; // default response format for ocs calls |
|
42 | - |
|
43 | - /** @var AddressHandler */ |
|
44 | - private $addressHandler; |
|
45 | - |
|
46 | - /** @var IClientService */ |
|
47 | - private $httpClientService; |
|
48 | - |
|
49 | - /** @var IDiscoveryService */ |
|
50 | - private $discoveryService; |
|
51 | - |
|
52 | - /** @var IJobList */ |
|
53 | - private $jobList; |
|
54 | - |
|
55 | - /** @var ICloudFederationProviderManager */ |
|
56 | - private $federationProviderManager; |
|
57 | - |
|
58 | - /** @var ICloudFederationFactory */ |
|
59 | - private $cloudFederationFactory; |
|
60 | - |
|
61 | - /** @var IEventDispatcher */ |
|
62 | - private $eventDispatcher; |
|
63 | - |
|
64 | - /** @var ILogger */ |
|
65 | - private $logger; |
|
66 | - |
|
67 | - public function __construct( |
|
68 | - AddressHandler $addressHandler, |
|
69 | - IClientService $httpClientService, |
|
70 | - IDiscoveryService $discoveryService, |
|
71 | - ILogger $logger, |
|
72 | - IJobList $jobList, |
|
73 | - ICloudFederationProviderManager $federationProviderManager, |
|
74 | - ICloudFederationFactory $cloudFederationFactory, |
|
75 | - IEventDispatcher $eventDispatcher |
|
76 | - ) { |
|
77 | - $this->addressHandler = $addressHandler; |
|
78 | - $this->httpClientService = $httpClientService; |
|
79 | - $this->discoveryService = $discoveryService; |
|
80 | - $this->jobList = $jobList; |
|
81 | - $this->logger = $logger; |
|
82 | - $this->federationProviderManager = $federationProviderManager; |
|
83 | - $this->cloudFederationFactory = $cloudFederationFactory; |
|
84 | - $this->eventDispatcher = $eventDispatcher; |
|
85 | - } |
|
86 | - |
|
87 | - /** |
|
88 | - * send server-to-server share to remote server |
|
89 | - * |
|
90 | - * @param string $token |
|
91 | - * @param string $shareWith |
|
92 | - * @param string $name |
|
93 | - * @param string $remoteId |
|
94 | - * @param string $owner |
|
95 | - * @param string $ownerFederatedId |
|
96 | - * @param string $sharedBy |
|
97 | - * @param string $sharedByFederatedId |
|
98 | - * @param int $shareType (can be a remote user or group share) |
|
99 | - * @return bool |
|
100 | - * @throws \OC\HintException |
|
101 | - * @throws \OC\ServerNotAvailableException |
|
102 | - */ |
|
103 | - public function sendRemoteShare($token, $shareWith, $name, $remoteId, $owner, $ownerFederatedId, $sharedBy, $sharedByFederatedId, $shareType) { |
|
104 | - [$user, $remote] = $this->addressHandler->splitUserRemote($shareWith); |
|
105 | - |
|
106 | - if ($user && $remote) { |
|
107 | - $local = $this->addressHandler->generateRemoteURL(); |
|
108 | - |
|
109 | - $fields = [ |
|
110 | - 'shareWith' => $user, |
|
111 | - 'token' => $token, |
|
112 | - 'name' => $name, |
|
113 | - 'remoteId' => $remoteId, |
|
114 | - 'owner' => $owner, |
|
115 | - 'ownerFederatedId' => $ownerFederatedId, |
|
116 | - 'sharedBy' => $sharedBy, |
|
117 | - 'sharedByFederatedId' => $sharedByFederatedId, |
|
118 | - 'remote' => $local, |
|
119 | - 'shareType' => $shareType |
|
120 | - ]; |
|
121 | - |
|
122 | - $result = $this->tryHttpPostToShareEndpoint($remote, '', $fields); |
|
123 | - $status = json_decode($result['result'], true); |
|
124 | - |
|
125 | - $ocsStatus = isset($status['ocs']); |
|
126 | - $ocsSuccess = $ocsStatus && ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
127 | - |
|
128 | - if ($result['success'] && (!$ocsStatus || $ocsSuccess)) { |
|
129 | - $event = new FederatedShareAddedEvent($remote); |
|
130 | - $this->eventDispatcher->dispatchTyped($event); |
|
131 | - return true; |
|
132 | - } else { |
|
133 | - $this->logger->info( |
|
134 | - "failed sharing $name with $shareWith", |
|
135 | - ['app' => 'federatedfilesharing'] |
|
136 | - ); |
|
137 | - } |
|
138 | - } else { |
|
139 | - $this->logger->info( |
|
140 | - "could not share $name, invalid contact $shareWith", |
|
141 | - ['app' => 'federatedfilesharing'] |
|
142 | - ); |
|
143 | - } |
|
144 | - |
|
145 | - return false; |
|
146 | - } |
|
147 | - |
|
148 | - /** |
|
149 | - * ask owner to re-share the file with the given user |
|
150 | - * |
|
151 | - * @param string $token |
|
152 | - * @param string $id remote Id |
|
153 | - * @param string $shareId internal share Id |
|
154 | - * @param string $remote remote address of the owner |
|
155 | - * @param string $shareWith |
|
156 | - * @param int $permission |
|
157 | - * @param string $filename |
|
158 | - * @return array|false |
|
159 | - * @throws \OC\HintException |
|
160 | - * @throws \OC\ServerNotAvailableException |
|
161 | - */ |
|
162 | - public function requestReShare($token, $id, $shareId, $remote, $shareWith, $permission, $filename) { |
|
163 | - $fields = [ |
|
164 | - 'shareWith' => $shareWith, |
|
165 | - 'token' => $token, |
|
166 | - 'permission' => $permission, |
|
167 | - 'remoteId' => $shareId, |
|
168 | - ]; |
|
169 | - |
|
170 | - $ocmFields = $fields; |
|
171 | - $ocmFields['remoteId'] = (string)$id; |
|
172 | - $ocmFields['localId'] = $shareId; |
|
173 | - $ocmFields['name'] = $filename; |
|
174 | - |
|
175 | - $ocmResult = $this->tryOCMEndPoint($remote, $ocmFields, 'reshare'); |
|
176 | - if (is_array($ocmResult) && isset($ocmResult['token']) && isset($ocmResult['providerId'])) { |
|
177 | - return [$ocmResult['token'], $ocmResult['providerId']]; |
|
178 | - } |
|
179 | - |
|
180 | - $result = $this->tryLegacyEndPoint(rtrim($remote, '/'), '/' . $id . '/reshare', $fields); |
|
181 | - $status = json_decode($result['result'], true); |
|
182 | - |
|
183 | - $httpRequestSuccessful = $result['success']; |
|
184 | - $ocsCallSuccessful = $status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200; |
|
185 | - $validToken = isset($status['ocs']['data']['token']) && is_string($status['ocs']['data']['token']); |
|
186 | - $validRemoteId = isset($status['ocs']['data']['remoteId']); |
|
187 | - |
|
188 | - if ($httpRequestSuccessful && $ocsCallSuccessful && $validToken && $validRemoteId) { |
|
189 | - return [ |
|
190 | - $status['ocs']['data']['token'], |
|
191 | - $status['ocs']['data']['remoteId'] |
|
192 | - ]; |
|
193 | - } elseif (!$validToken) { |
|
194 | - $this->logger->info( |
|
195 | - "invalid or missing token requesting re-share for $filename to $remote", |
|
196 | - ['app' => 'federatedfilesharing'] |
|
197 | - ); |
|
198 | - } elseif (!$validRemoteId) { |
|
199 | - $this->logger->info( |
|
200 | - "missing remote id requesting re-share for $filename to $remote", |
|
201 | - ['app' => 'federatedfilesharing'] |
|
202 | - ); |
|
203 | - } else { |
|
204 | - $this->logger->info( |
|
205 | - "failed requesting re-share for $filename to $remote", |
|
206 | - ['app' => 'federatedfilesharing'] |
|
207 | - ); |
|
208 | - } |
|
209 | - |
|
210 | - return false; |
|
211 | - } |
|
212 | - |
|
213 | - /** |
|
214 | - * send server-to-server unshare to remote server |
|
215 | - * |
|
216 | - * @param string $remote url |
|
217 | - * @param string $id share id |
|
218 | - * @param string $token |
|
219 | - * @return bool |
|
220 | - */ |
|
221 | - public function sendRemoteUnShare($remote, $id, $token) { |
|
222 | - $this->sendUpdateToRemote($remote, $id, $token, 'unshare'); |
|
223 | - } |
|
224 | - |
|
225 | - /** |
|
226 | - * send server-to-server unshare to remote server |
|
227 | - * |
|
228 | - * @param string $remote url |
|
229 | - * @param string $id share id |
|
230 | - * @param string $token |
|
231 | - * @return bool |
|
232 | - */ |
|
233 | - public function sendRevokeShare($remote, $id, $token) { |
|
234 | - $this->sendUpdateToRemote($remote, $id, $token, 'reshare_undo'); |
|
235 | - } |
|
236 | - |
|
237 | - /** |
|
238 | - * send notification to remote server if the permissions was changed |
|
239 | - * |
|
240 | - * @param string $remote |
|
241 | - * @param string $remoteId |
|
242 | - * @param string $token |
|
243 | - * @param int $permissions |
|
244 | - * @return bool |
|
245 | - */ |
|
246 | - public function sendPermissionChange($remote, $remoteId, $token, $permissions) { |
|
247 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'permissions', ['permissions' => $permissions]); |
|
248 | - } |
|
249 | - |
|
250 | - /** |
|
251 | - * forward accept reShare to remote server |
|
252 | - * |
|
253 | - * @param string $remote |
|
254 | - * @param string $remoteId |
|
255 | - * @param string $token |
|
256 | - */ |
|
257 | - public function sendAcceptShare($remote, $remoteId, $token) { |
|
258 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'accept'); |
|
259 | - } |
|
260 | - |
|
261 | - /** |
|
262 | - * forward decline reShare to remote server |
|
263 | - * |
|
264 | - * @param string $remote |
|
265 | - * @param string $remoteId |
|
266 | - * @param string $token |
|
267 | - */ |
|
268 | - public function sendDeclineShare($remote, $remoteId, $token) { |
|
269 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'decline'); |
|
270 | - } |
|
271 | - |
|
272 | - /** |
|
273 | - * inform remote server whether server-to-server share was accepted/declined |
|
274 | - * |
|
275 | - * @param string $remote |
|
276 | - * @param string $token |
|
277 | - * @param string $remoteId Share id on the remote host |
|
278 | - * @param string $action possible actions: accept, decline, unshare, revoke, permissions |
|
279 | - * @param array $data |
|
280 | - * @param int $try |
|
281 | - * @return boolean |
|
282 | - */ |
|
283 | - public function sendUpdateToRemote($remote, $remoteId, $token, $action, $data = [], $try = 0) { |
|
284 | - $fields = [ |
|
285 | - 'token' => $token, |
|
286 | - 'remoteId' => $remoteId |
|
287 | - ]; |
|
288 | - foreach ($data as $key => $value) { |
|
289 | - $fields[$key] = $value; |
|
290 | - } |
|
291 | - |
|
292 | - $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $remoteId . '/' . $action, $fields, $action); |
|
293 | - $status = json_decode($result['result'], true); |
|
294 | - |
|
295 | - if ($result['success'] && |
|
296 | - ($status['ocs']['meta']['statuscode'] === 100 || |
|
297 | - $status['ocs']['meta']['statuscode'] === 200 |
|
298 | - ) |
|
299 | - ) { |
|
300 | - return true; |
|
301 | - } elseif ($try === 0) { |
|
302 | - // only add new job on first try |
|
303 | - $this->jobList->add('OCA\FederatedFileSharing\BackgroundJob\RetryJob', |
|
304 | - [ |
|
305 | - 'remote' => $remote, |
|
306 | - 'remoteId' => $remoteId, |
|
307 | - 'token' => $token, |
|
308 | - 'action' => $action, |
|
309 | - 'data' => json_encode($data), |
|
310 | - 'try' => $try, |
|
311 | - 'lastRun' => $this->getTimestamp() |
|
312 | - ] |
|
313 | - ); |
|
314 | - } |
|
315 | - |
|
316 | - return false; |
|
317 | - } |
|
318 | - |
|
319 | - |
|
320 | - /** |
|
321 | - * return current timestamp |
|
322 | - * |
|
323 | - * @return int |
|
324 | - */ |
|
325 | - protected function getTimestamp() { |
|
326 | - return time(); |
|
327 | - } |
|
328 | - |
|
329 | - /** |
|
330 | - * try http post with the given protocol, if no protocol is given we pick |
|
331 | - * the secure one (https) |
|
332 | - * |
|
333 | - * @param string $remoteDomain |
|
334 | - * @param string $urlSuffix |
|
335 | - * @param array $fields post parameters |
|
336 | - * @param string $action define the action (possible values: share, reshare, accept, decline, unshare, revoke, permissions) |
|
337 | - * @return array |
|
338 | - * @throws \Exception |
|
339 | - */ |
|
340 | - protected function tryHttpPostToShareEndpoint($remoteDomain, $urlSuffix, array $fields, $action = "share") { |
|
341 | - if ($this->addressHandler->urlContainProtocol($remoteDomain) === false) { |
|
342 | - $remoteDomain = 'https://' . $remoteDomain; |
|
343 | - } |
|
344 | - |
|
345 | - $result = [ |
|
346 | - 'success' => false, |
|
347 | - 'result' => '', |
|
348 | - ]; |
|
349 | - |
|
350 | - // if possible we use the new OCM API |
|
351 | - $ocmResult = $this->tryOCMEndPoint($remoteDomain, $fields, $action); |
|
352 | - if (is_array($ocmResult)) { |
|
353 | - $result['success'] = true; |
|
354 | - $result['result'] = json_encode([ |
|
355 | - 'ocs' => ['meta' => ['statuscode' => 200]]]); |
|
356 | - return $result; |
|
357 | - } |
|
358 | - |
|
359 | - return $this->tryLegacyEndPoint($remoteDomain, $urlSuffix, $fields); |
|
360 | - } |
|
361 | - |
|
362 | - /** |
|
363 | - * try old federated sharing API if the OCM api doesn't work |
|
364 | - * |
|
365 | - * @param $remoteDomain |
|
366 | - * @param $urlSuffix |
|
367 | - * @param array $fields |
|
368 | - * @return mixed |
|
369 | - * @throws \Exception |
|
370 | - */ |
|
371 | - protected function tryLegacyEndPoint($remoteDomain, $urlSuffix, array $fields) { |
|
372 | - $result = [ |
|
373 | - 'success' => false, |
|
374 | - 'result' => '', |
|
375 | - ]; |
|
376 | - |
|
377 | - // Fall back to old API |
|
378 | - $client = $this->httpClientService->newClient(); |
|
379 | - $federationEndpoints = $this->discoveryService->discover($remoteDomain, 'FEDERATED_SHARING'); |
|
380 | - $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
381 | - try { |
|
382 | - $response = $client->post($remoteDomain . $endpoint . $urlSuffix . '?format=' . self::RESPONSE_FORMAT, [ |
|
383 | - 'body' => $fields, |
|
384 | - 'timeout' => 10, |
|
385 | - 'connect_timeout' => 10, |
|
386 | - ]); |
|
387 | - $result['result'] = $response->getBody(); |
|
388 | - $result['success'] = true; |
|
389 | - } catch (\Exception $e) { |
|
390 | - // if flat re-sharing is not supported by the remote server |
|
391 | - // we re-throw the exception and fall back to the old behaviour. |
|
392 | - // (flat re-shares has been introduced in Nextcloud 9.1) |
|
393 | - if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
394 | - throw $e; |
|
395 | - } |
|
396 | - } |
|
397 | - |
|
398 | - return $result; |
|
399 | - } |
|
400 | - |
|
401 | - /** |
|
402 | - * send action regarding federated sharing to the remote server using the OCM API |
|
403 | - * |
|
404 | - * @param $remoteDomain |
|
405 | - * @param $fields |
|
406 | - * @param $action |
|
407 | - * |
|
408 | - * @return array|false |
|
409 | - */ |
|
410 | - protected function tryOCMEndPoint($remoteDomain, $fields, $action) { |
|
411 | - switch ($action) { |
|
412 | - case 'share': |
|
413 | - $share = $this->cloudFederationFactory->getCloudFederationShare( |
|
414 | - $fields['shareWith'] . '@' . $remoteDomain, |
|
415 | - $fields['name'], |
|
416 | - '', |
|
417 | - $fields['remoteId'], |
|
418 | - $fields['ownerFederatedId'], |
|
419 | - $fields['owner'], |
|
420 | - $fields['sharedByFederatedId'], |
|
421 | - $fields['sharedBy'], |
|
422 | - $fields['token'], |
|
423 | - $fields['shareType'], |
|
424 | - 'file' |
|
425 | - ); |
|
426 | - return $this->federationProviderManager->sendShare($share); |
|
427 | - case 'reshare': |
|
428 | - // ask owner to reshare a file |
|
429 | - $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
430 | - $notification->setMessage('REQUEST_RESHARE', |
|
431 | - 'file', |
|
432 | - $fields['remoteId'], |
|
433 | - [ |
|
434 | - 'sharedSecret' => $fields['token'], |
|
435 | - 'shareWith' => $fields['shareWith'], |
|
436 | - 'senderId' => $fields['localId'], |
|
437 | - 'shareType' => $fields['shareType'], |
|
438 | - 'message' => 'Ask owner to reshare the file' |
|
439 | - ] |
|
440 | - ); |
|
441 | - return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
442 | - case 'unshare': |
|
443 | - //owner unshares the file from the recipient again |
|
444 | - $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
445 | - $notification->setMessage('SHARE_UNSHARED', |
|
446 | - 'file', |
|
447 | - $fields['remoteId'], |
|
448 | - [ |
|
449 | - 'sharedSecret' => $fields['token'], |
|
450 | - 'messgage' => 'file is no longer shared with you' |
|
451 | - ] |
|
452 | - ); |
|
453 | - return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
454 | - case 'reshare_undo': |
|
455 | - // if a reshare was unshared we send the information to the initiator/owner |
|
456 | - $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
457 | - $notification->setMessage('RESHARE_UNDO', |
|
458 | - 'file', |
|
459 | - $fields['remoteId'], |
|
460 | - [ |
|
461 | - 'sharedSecret' => $fields['token'], |
|
462 | - 'message' => 'reshare was revoked' |
|
463 | - ] |
|
464 | - ); |
|
465 | - return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
466 | - } |
|
467 | - |
|
468 | - return false; |
|
469 | - } |
|
41 | + public const RESPONSE_FORMAT = 'json'; // default response format for ocs calls |
|
42 | + |
|
43 | + /** @var AddressHandler */ |
|
44 | + private $addressHandler; |
|
45 | + |
|
46 | + /** @var IClientService */ |
|
47 | + private $httpClientService; |
|
48 | + |
|
49 | + /** @var IDiscoveryService */ |
|
50 | + private $discoveryService; |
|
51 | + |
|
52 | + /** @var IJobList */ |
|
53 | + private $jobList; |
|
54 | + |
|
55 | + /** @var ICloudFederationProviderManager */ |
|
56 | + private $federationProviderManager; |
|
57 | + |
|
58 | + /** @var ICloudFederationFactory */ |
|
59 | + private $cloudFederationFactory; |
|
60 | + |
|
61 | + /** @var IEventDispatcher */ |
|
62 | + private $eventDispatcher; |
|
63 | + |
|
64 | + /** @var ILogger */ |
|
65 | + private $logger; |
|
66 | + |
|
67 | + public function __construct( |
|
68 | + AddressHandler $addressHandler, |
|
69 | + IClientService $httpClientService, |
|
70 | + IDiscoveryService $discoveryService, |
|
71 | + ILogger $logger, |
|
72 | + IJobList $jobList, |
|
73 | + ICloudFederationProviderManager $federationProviderManager, |
|
74 | + ICloudFederationFactory $cloudFederationFactory, |
|
75 | + IEventDispatcher $eventDispatcher |
|
76 | + ) { |
|
77 | + $this->addressHandler = $addressHandler; |
|
78 | + $this->httpClientService = $httpClientService; |
|
79 | + $this->discoveryService = $discoveryService; |
|
80 | + $this->jobList = $jobList; |
|
81 | + $this->logger = $logger; |
|
82 | + $this->federationProviderManager = $federationProviderManager; |
|
83 | + $this->cloudFederationFactory = $cloudFederationFactory; |
|
84 | + $this->eventDispatcher = $eventDispatcher; |
|
85 | + } |
|
86 | + |
|
87 | + /** |
|
88 | + * send server-to-server share to remote server |
|
89 | + * |
|
90 | + * @param string $token |
|
91 | + * @param string $shareWith |
|
92 | + * @param string $name |
|
93 | + * @param string $remoteId |
|
94 | + * @param string $owner |
|
95 | + * @param string $ownerFederatedId |
|
96 | + * @param string $sharedBy |
|
97 | + * @param string $sharedByFederatedId |
|
98 | + * @param int $shareType (can be a remote user or group share) |
|
99 | + * @return bool |
|
100 | + * @throws \OC\HintException |
|
101 | + * @throws \OC\ServerNotAvailableException |
|
102 | + */ |
|
103 | + public function sendRemoteShare($token, $shareWith, $name, $remoteId, $owner, $ownerFederatedId, $sharedBy, $sharedByFederatedId, $shareType) { |
|
104 | + [$user, $remote] = $this->addressHandler->splitUserRemote($shareWith); |
|
105 | + |
|
106 | + if ($user && $remote) { |
|
107 | + $local = $this->addressHandler->generateRemoteURL(); |
|
108 | + |
|
109 | + $fields = [ |
|
110 | + 'shareWith' => $user, |
|
111 | + 'token' => $token, |
|
112 | + 'name' => $name, |
|
113 | + 'remoteId' => $remoteId, |
|
114 | + 'owner' => $owner, |
|
115 | + 'ownerFederatedId' => $ownerFederatedId, |
|
116 | + 'sharedBy' => $sharedBy, |
|
117 | + 'sharedByFederatedId' => $sharedByFederatedId, |
|
118 | + 'remote' => $local, |
|
119 | + 'shareType' => $shareType |
|
120 | + ]; |
|
121 | + |
|
122 | + $result = $this->tryHttpPostToShareEndpoint($remote, '', $fields); |
|
123 | + $status = json_decode($result['result'], true); |
|
124 | + |
|
125 | + $ocsStatus = isset($status['ocs']); |
|
126 | + $ocsSuccess = $ocsStatus && ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
127 | + |
|
128 | + if ($result['success'] && (!$ocsStatus || $ocsSuccess)) { |
|
129 | + $event = new FederatedShareAddedEvent($remote); |
|
130 | + $this->eventDispatcher->dispatchTyped($event); |
|
131 | + return true; |
|
132 | + } else { |
|
133 | + $this->logger->info( |
|
134 | + "failed sharing $name with $shareWith", |
|
135 | + ['app' => 'federatedfilesharing'] |
|
136 | + ); |
|
137 | + } |
|
138 | + } else { |
|
139 | + $this->logger->info( |
|
140 | + "could not share $name, invalid contact $shareWith", |
|
141 | + ['app' => 'federatedfilesharing'] |
|
142 | + ); |
|
143 | + } |
|
144 | + |
|
145 | + return false; |
|
146 | + } |
|
147 | + |
|
148 | + /** |
|
149 | + * ask owner to re-share the file with the given user |
|
150 | + * |
|
151 | + * @param string $token |
|
152 | + * @param string $id remote Id |
|
153 | + * @param string $shareId internal share Id |
|
154 | + * @param string $remote remote address of the owner |
|
155 | + * @param string $shareWith |
|
156 | + * @param int $permission |
|
157 | + * @param string $filename |
|
158 | + * @return array|false |
|
159 | + * @throws \OC\HintException |
|
160 | + * @throws \OC\ServerNotAvailableException |
|
161 | + */ |
|
162 | + public function requestReShare($token, $id, $shareId, $remote, $shareWith, $permission, $filename) { |
|
163 | + $fields = [ |
|
164 | + 'shareWith' => $shareWith, |
|
165 | + 'token' => $token, |
|
166 | + 'permission' => $permission, |
|
167 | + 'remoteId' => $shareId, |
|
168 | + ]; |
|
169 | + |
|
170 | + $ocmFields = $fields; |
|
171 | + $ocmFields['remoteId'] = (string)$id; |
|
172 | + $ocmFields['localId'] = $shareId; |
|
173 | + $ocmFields['name'] = $filename; |
|
174 | + |
|
175 | + $ocmResult = $this->tryOCMEndPoint($remote, $ocmFields, 'reshare'); |
|
176 | + if (is_array($ocmResult) && isset($ocmResult['token']) && isset($ocmResult['providerId'])) { |
|
177 | + return [$ocmResult['token'], $ocmResult['providerId']]; |
|
178 | + } |
|
179 | + |
|
180 | + $result = $this->tryLegacyEndPoint(rtrim($remote, '/'), '/' . $id . '/reshare', $fields); |
|
181 | + $status = json_decode($result['result'], true); |
|
182 | + |
|
183 | + $httpRequestSuccessful = $result['success']; |
|
184 | + $ocsCallSuccessful = $status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200; |
|
185 | + $validToken = isset($status['ocs']['data']['token']) && is_string($status['ocs']['data']['token']); |
|
186 | + $validRemoteId = isset($status['ocs']['data']['remoteId']); |
|
187 | + |
|
188 | + if ($httpRequestSuccessful && $ocsCallSuccessful && $validToken && $validRemoteId) { |
|
189 | + return [ |
|
190 | + $status['ocs']['data']['token'], |
|
191 | + $status['ocs']['data']['remoteId'] |
|
192 | + ]; |
|
193 | + } elseif (!$validToken) { |
|
194 | + $this->logger->info( |
|
195 | + "invalid or missing token requesting re-share for $filename to $remote", |
|
196 | + ['app' => 'federatedfilesharing'] |
|
197 | + ); |
|
198 | + } elseif (!$validRemoteId) { |
|
199 | + $this->logger->info( |
|
200 | + "missing remote id requesting re-share for $filename to $remote", |
|
201 | + ['app' => 'federatedfilesharing'] |
|
202 | + ); |
|
203 | + } else { |
|
204 | + $this->logger->info( |
|
205 | + "failed requesting re-share for $filename to $remote", |
|
206 | + ['app' => 'federatedfilesharing'] |
|
207 | + ); |
|
208 | + } |
|
209 | + |
|
210 | + return false; |
|
211 | + } |
|
212 | + |
|
213 | + /** |
|
214 | + * send server-to-server unshare to remote server |
|
215 | + * |
|
216 | + * @param string $remote url |
|
217 | + * @param string $id share id |
|
218 | + * @param string $token |
|
219 | + * @return bool |
|
220 | + */ |
|
221 | + public function sendRemoteUnShare($remote, $id, $token) { |
|
222 | + $this->sendUpdateToRemote($remote, $id, $token, 'unshare'); |
|
223 | + } |
|
224 | + |
|
225 | + /** |
|
226 | + * send server-to-server unshare to remote server |
|
227 | + * |
|
228 | + * @param string $remote url |
|
229 | + * @param string $id share id |
|
230 | + * @param string $token |
|
231 | + * @return bool |
|
232 | + */ |
|
233 | + public function sendRevokeShare($remote, $id, $token) { |
|
234 | + $this->sendUpdateToRemote($remote, $id, $token, 'reshare_undo'); |
|
235 | + } |
|
236 | + |
|
237 | + /** |
|
238 | + * send notification to remote server if the permissions was changed |
|
239 | + * |
|
240 | + * @param string $remote |
|
241 | + * @param string $remoteId |
|
242 | + * @param string $token |
|
243 | + * @param int $permissions |
|
244 | + * @return bool |
|
245 | + */ |
|
246 | + public function sendPermissionChange($remote, $remoteId, $token, $permissions) { |
|
247 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'permissions', ['permissions' => $permissions]); |
|
248 | + } |
|
249 | + |
|
250 | + /** |
|
251 | + * forward accept reShare to remote server |
|
252 | + * |
|
253 | + * @param string $remote |
|
254 | + * @param string $remoteId |
|
255 | + * @param string $token |
|
256 | + */ |
|
257 | + public function sendAcceptShare($remote, $remoteId, $token) { |
|
258 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'accept'); |
|
259 | + } |
|
260 | + |
|
261 | + /** |
|
262 | + * forward decline reShare to remote server |
|
263 | + * |
|
264 | + * @param string $remote |
|
265 | + * @param string $remoteId |
|
266 | + * @param string $token |
|
267 | + */ |
|
268 | + public function sendDeclineShare($remote, $remoteId, $token) { |
|
269 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'decline'); |
|
270 | + } |
|
271 | + |
|
272 | + /** |
|
273 | + * inform remote server whether server-to-server share was accepted/declined |
|
274 | + * |
|
275 | + * @param string $remote |
|
276 | + * @param string $token |
|
277 | + * @param string $remoteId Share id on the remote host |
|
278 | + * @param string $action possible actions: accept, decline, unshare, revoke, permissions |
|
279 | + * @param array $data |
|
280 | + * @param int $try |
|
281 | + * @return boolean |
|
282 | + */ |
|
283 | + public function sendUpdateToRemote($remote, $remoteId, $token, $action, $data = [], $try = 0) { |
|
284 | + $fields = [ |
|
285 | + 'token' => $token, |
|
286 | + 'remoteId' => $remoteId |
|
287 | + ]; |
|
288 | + foreach ($data as $key => $value) { |
|
289 | + $fields[$key] = $value; |
|
290 | + } |
|
291 | + |
|
292 | + $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $remoteId . '/' . $action, $fields, $action); |
|
293 | + $status = json_decode($result['result'], true); |
|
294 | + |
|
295 | + if ($result['success'] && |
|
296 | + ($status['ocs']['meta']['statuscode'] === 100 || |
|
297 | + $status['ocs']['meta']['statuscode'] === 200 |
|
298 | + ) |
|
299 | + ) { |
|
300 | + return true; |
|
301 | + } elseif ($try === 0) { |
|
302 | + // only add new job on first try |
|
303 | + $this->jobList->add('OCA\FederatedFileSharing\BackgroundJob\RetryJob', |
|
304 | + [ |
|
305 | + 'remote' => $remote, |
|
306 | + 'remoteId' => $remoteId, |
|
307 | + 'token' => $token, |
|
308 | + 'action' => $action, |
|
309 | + 'data' => json_encode($data), |
|
310 | + 'try' => $try, |
|
311 | + 'lastRun' => $this->getTimestamp() |
|
312 | + ] |
|
313 | + ); |
|
314 | + } |
|
315 | + |
|
316 | + return false; |
|
317 | + } |
|
318 | + |
|
319 | + |
|
320 | + /** |
|
321 | + * return current timestamp |
|
322 | + * |
|
323 | + * @return int |
|
324 | + */ |
|
325 | + protected function getTimestamp() { |
|
326 | + return time(); |
|
327 | + } |
|
328 | + |
|
329 | + /** |
|
330 | + * try http post with the given protocol, if no protocol is given we pick |
|
331 | + * the secure one (https) |
|
332 | + * |
|
333 | + * @param string $remoteDomain |
|
334 | + * @param string $urlSuffix |
|
335 | + * @param array $fields post parameters |
|
336 | + * @param string $action define the action (possible values: share, reshare, accept, decline, unshare, revoke, permissions) |
|
337 | + * @return array |
|
338 | + * @throws \Exception |
|
339 | + */ |
|
340 | + protected function tryHttpPostToShareEndpoint($remoteDomain, $urlSuffix, array $fields, $action = "share") { |
|
341 | + if ($this->addressHandler->urlContainProtocol($remoteDomain) === false) { |
|
342 | + $remoteDomain = 'https://' . $remoteDomain; |
|
343 | + } |
|
344 | + |
|
345 | + $result = [ |
|
346 | + 'success' => false, |
|
347 | + 'result' => '', |
|
348 | + ]; |
|
349 | + |
|
350 | + // if possible we use the new OCM API |
|
351 | + $ocmResult = $this->tryOCMEndPoint($remoteDomain, $fields, $action); |
|
352 | + if (is_array($ocmResult)) { |
|
353 | + $result['success'] = true; |
|
354 | + $result['result'] = json_encode([ |
|
355 | + 'ocs' => ['meta' => ['statuscode' => 200]]]); |
|
356 | + return $result; |
|
357 | + } |
|
358 | + |
|
359 | + return $this->tryLegacyEndPoint($remoteDomain, $urlSuffix, $fields); |
|
360 | + } |
|
361 | + |
|
362 | + /** |
|
363 | + * try old federated sharing API if the OCM api doesn't work |
|
364 | + * |
|
365 | + * @param $remoteDomain |
|
366 | + * @param $urlSuffix |
|
367 | + * @param array $fields |
|
368 | + * @return mixed |
|
369 | + * @throws \Exception |
|
370 | + */ |
|
371 | + protected function tryLegacyEndPoint($remoteDomain, $urlSuffix, array $fields) { |
|
372 | + $result = [ |
|
373 | + 'success' => false, |
|
374 | + 'result' => '', |
|
375 | + ]; |
|
376 | + |
|
377 | + // Fall back to old API |
|
378 | + $client = $this->httpClientService->newClient(); |
|
379 | + $federationEndpoints = $this->discoveryService->discover($remoteDomain, 'FEDERATED_SHARING'); |
|
380 | + $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
381 | + try { |
|
382 | + $response = $client->post($remoteDomain . $endpoint . $urlSuffix . '?format=' . self::RESPONSE_FORMAT, [ |
|
383 | + 'body' => $fields, |
|
384 | + 'timeout' => 10, |
|
385 | + 'connect_timeout' => 10, |
|
386 | + ]); |
|
387 | + $result['result'] = $response->getBody(); |
|
388 | + $result['success'] = true; |
|
389 | + } catch (\Exception $e) { |
|
390 | + // if flat re-sharing is not supported by the remote server |
|
391 | + // we re-throw the exception and fall back to the old behaviour. |
|
392 | + // (flat re-shares has been introduced in Nextcloud 9.1) |
|
393 | + if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
394 | + throw $e; |
|
395 | + } |
|
396 | + } |
|
397 | + |
|
398 | + return $result; |
|
399 | + } |
|
400 | + |
|
401 | + /** |
|
402 | + * send action regarding federated sharing to the remote server using the OCM API |
|
403 | + * |
|
404 | + * @param $remoteDomain |
|
405 | + * @param $fields |
|
406 | + * @param $action |
|
407 | + * |
|
408 | + * @return array|false |
|
409 | + */ |
|
410 | + protected function tryOCMEndPoint($remoteDomain, $fields, $action) { |
|
411 | + switch ($action) { |
|
412 | + case 'share': |
|
413 | + $share = $this->cloudFederationFactory->getCloudFederationShare( |
|
414 | + $fields['shareWith'] . '@' . $remoteDomain, |
|
415 | + $fields['name'], |
|
416 | + '', |
|
417 | + $fields['remoteId'], |
|
418 | + $fields['ownerFederatedId'], |
|
419 | + $fields['owner'], |
|
420 | + $fields['sharedByFederatedId'], |
|
421 | + $fields['sharedBy'], |
|
422 | + $fields['token'], |
|
423 | + $fields['shareType'], |
|
424 | + 'file' |
|
425 | + ); |
|
426 | + return $this->federationProviderManager->sendShare($share); |
|
427 | + case 'reshare': |
|
428 | + // ask owner to reshare a file |
|
429 | + $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
430 | + $notification->setMessage('REQUEST_RESHARE', |
|
431 | + 'file', |
|
432 | + $fields['remoteId'], |
|
433 | + [ |
|
434 | + 'sharedSecret' => $fields['token'], |
|
435 | + 'shareWith' => $fields['shareWith'], |
|
436 | + 'senderId' => $fields['localId'], |
|
437 | + 'shareType' => $fields['shareType'], |
|
438 | + 'message' => 'Ask owner to reshare the file' |
|
439 | + ] |
|
440 | + ); |
|
441 | + return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
442 | + case 'unshare': |
|
443 | + //owner unshares the file from the recipient again |
|
444 | + $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
445 | + $notification->setMessage('SHARE_UNSHARED', |
|
446 | + 'file', |
|
447 | + $fields['remoteId'], |
|
448 | + [ |
|
449 | + 'sharedSecret' => $fields['token'], |
|
450 | + 'messgage' => 'file is no longer shared with you' |
|
451 | + ] |
|
452 | + ); |
|
453 | + return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
454 | + case 'reshare_undo': |
|
455 | + // if a reshare was unshared we send the information to the initiator/owner |
|
456 | + $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
457 | + $notification->setMessage('RESHARE_UNDO', |
|
458 | + 'file', |
|
459 | + $fields['remoteId'], |
|
460 | + [ |
|
461 | + 'sharedSecret' => $fields['token'], |
|
462 | + 'message' => 'reshare was revoked' |
|
463 | + ] |
|
464 | + ); |
|
465 | + return $this->federationProviderManager->sendNotification($remoteDomain, $notification); |
|
466 | + } |
|
467 | + |
|
468 | + return false; |
|
469 | + } |
|
470 | 470 | } |
@@ -51,602 +51,602 @@ |
||
51 | 51 | use OCP\Share\IShare; |
52 | 52 | |
53 | 53 | class Manager { |
54 | - public const STORAGE = '\OCA\Files_Sharing\External\Storage'; |
|
55 | - |
|
56 | - /** @var string|null */ |
|
57 | - private $uid; |
|
58 | - |
|
59 | - /** @var IDBConnection */ |
|
60 | - private $connection; |
|
61 | - |
|
62 | - /** @var \OC\Files\Mount\Manager */ |
|
63 | - private $mountManager; |
|
64 | - |
|
65 | - /** @var IStorageFactory */ |
|
66 | - private $storageLoader; |
|
67 | - |
|
68 | - /** @var IClientService */ |
|
69 | - private $clientService; |
|
70 | - |
|
71 | - /** @var IManager */ |
|
72 | - private $notificationManager; |
|
73 | - |
|
74 | - /** @var IDiscoveryService */ |
|
75 | - private $discoveryService; |
|
76 | - |
|
77 | - /** @var ICloudFederationProviderManager */ |
|
78 | - private $cloudFederationProviderManager; |
|
79 | - |
|
80 | - /** @var ICloudFederationFactory */ |
|
81 | - private $cloudFederationFactory; |
|
82 | - |
|
83 | - /** @var IGroupManager */ |
|
84 | - private $groupManager; |
|
85 | - |
|
86 | - /** @var IUserManager */ |
|
87 | - private $userManager; |
|
88 | - |
|
89 | - /** @var IEventDispatcher */ |
|
90 | - private $eventDispatcher; |
|
91 | - |
|
92 | - public function __construct(IDBConnection $connection, |
|
93 | - \OC\Files\Mount\Manager $mountManager, |
|
94 | - IStorageFactory $storageLoader, |
|
95 | - IClientService $clientService, |
|
96 | - IManager $notificationManager, |
|
97 | - IDiscoveryService $discoveryService, |
|
98 | - ICloudFederationProviderManager $cloudFederationProviderManager, |
|
99 | - ICloudFederationFactory $cloudFederationFactory, |
|
100 | - IGroupManager $groupManager, |
|
101 | - IUserManager $userManager, |
|
102 | - ?string $uid, |
|
103 | - IEventDispatcher $eventDispatcher) { |
|
104 | - $this->connection = $connection; |
|
105 | - $this->mountManager = $mountManager; |
|
106 | - $this->storageLoader = $storageLoader; |
|
107 | - $this->clientService = $clientService; |
|
108 | - $this->uid = $uid; |
|
109 | - $this->notificationManager = $notificationManager; |
|
110 | - $this->discoveryService = $discoveryService; |
|
111 | - $this->cloudFederationProviderManager = $cloudFederationProviderManager; |
|
112 | - $this->cloudFederationFactory = $cloudFederationFactory; |
|
113 | - $this->groupManager = $groupManager; |
|
114 | - $this->userManager = $userManager; |
|
115 | - $this->eventDispatcher = $eventDispatcher; |
|
116 | - } |
|
117 | - |
|
118 | - /** |
|
119 | - * add new server-to-server share |
|
120 | - * |
|
121 | - * @param string $remote |
|
122 | - * @param string $token |
|
123 | - * @param string $password |
|
124 | - * @param string $name |
|
125 | - * @param string $owner |
|
126 | - * @param int $shareType |
|
127 | - * @param boolean $accepted |
|
128 | - * @param string $user |
|
129 | - * @param string $remoteId |
|
130 | - * @param int $parent |
|
131 | - * @return Mount|null |
|
132 | - * @throws \Doctrine\DBAL\Exception |
|
133 | - */ |
|
134 | - public function addShare($remote, $token, $password, $name, $owner, $shareType, $accepted = false, $user = null, $remoteId = '', $parent = -1) { |
|
135 | - $user = $user ? $user : $this->uid; |
|
136 | - $accepted = $accepted ? IShare::STATUS_ACCEPTED : IShare::STATUS_PENDING; |
|
137 | - $name = Filesystem::normalizePath('/' . $name); |
|
138 | - |
|
139 | - if ($accepted !== IShare::STATUS_ACCEPTED) { |
|
140 | - // To avoid conflicts with the mount point generation later, |
|
141 | - // we only use a temporary mount point name here. The real |
|
142 | - // mount point name will be generated when accepting the share, |
|
143 | - // using the original share item name. |
|
144 | - $tmpMountPointName = '{{TemporaryMountPointName#' . $name . '}}'; |
|
145 | - $mountPoint = $tmpMountPointName; |
|
146 | - $hash = md5($tmpMountPointName); |
|
147 | - $data = [ |
|
148 | - 'remote' => $remote, |
|
149 | - 'share_token' => $token, |
|
150 | - 'password' => $password, |
|
151 | - 'name' => $name, |
|
152 | - 'owner' => $owner, |
|
153 | - 'user' => $user, |
|
154 | - 'mountpoint' => $mountPoint, |
|
155 | - 'mountpoint_hash' => $hash, |
|
156 | - 'accepted' => $accepted, |
|
157 | - 'remote_id' => $remoteId, |
|
158 | - 'share_type' => $shareType, |
|
159 | - ]; |
|
160 | - |
|
161 | - $i = 1; |
|
162 | - while (!$this->connection->insertIfNotExist('*PREFIX*share_external', $data, ['user', 'mountpoint_hash'])) { |
|
163 | - // The external share already exists for the user |
|
164 | - $data['mountpoint'] = $tmpMountPointName . '-' . $i; |
|
165 | - $data['mountpoint_hash'] = md5($data['mountpoint']); |
|
166 | - $i++; |
|
167 | - } |
|
168 | - return null; |
|
169 | - } |
|
170 | - |
|
171 | - $mountPoint = Files::buildNotExistingFileName('/', $name); |
|
172 | - $mountPoint = Filesystem::normalizePath('/' . $mountPoint); |
|
173 | - $hash = md5($mountPoint); |
|
174 | - |
|
175 | - $this->writeShareToDb($remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType); |
|
176 | - |
|
177 | - $options = [ |
|
178 | - 'remote' => $remote, |
|
179 | - 'token' => $token, |
|
180 | - 'password' => $password, |
|
181 | - 'mountpoint' => $mountPoint, |
|
182 | - 'owner' => $owner |
|
183 | - ]; |
|
184 | - return $this->mountShare($options); |
|
185 | - } |
|
186 | - |
|
187 | - /** |
|
188 | - * write remote share to the database |
|
189 | - * |
|
190 | - * @param $remote |
|
191 | - * @param $token |
|
192 | - * @param $password |
|
193 | - * @param $name |
|
194 | - * @param $owner |
|
195 | - * @param $user |
|
196 | - * @param $mountPoint |
|
197 | - * @param $hash |
|
198 | - * @param $accepted |
|
199 | - * @param $remoteId |
|
200 | - * @param $parent |
|
201 | - * @param $shareType |
|
202 | - * |
|
203 | - * @return void |
|
204 | - * @throws \Doctrine\DBAL\Driver\Exception |
|
205 | - */ |
|
206 | - private function writeShareToDb($remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType): void { |
|
207 | - $query = $this->connection->prepare(' |
|
54 | + public const STORAGE = '\OCA\Files_Sharing\External\Storage'; |
|
55 | + |
|
56 | + /** @var string|null */ |
|
57 | + private $uid; |
|
58 | + |
|
59 | + /** @var IDBConnection */ |
|
60 | + private $connection; |
|
61 | + |
|
62 | + /** @var \OC\Files\Mount\Manager */ |
|
63 | + private $mountManager; |
|
64 | + |
|
65 | + /** @var IStorageFactory */ |
|
66 | + private $storageLoader; |
|
67 | + |
|
68 | + /** @var IClientService */ |
|
69 | + private $clientService; |
|
70 | + |
|
71 | + /** @var IManager */ |
|
72 | + private $notificationManager; |
|
73 | + |
|
74 | + /** @var IDiscoveryService */ |
|
75 | + private $discoveryService; |
|
76 | + |
|
77 | + /** @var ICloudFederationProviderManager */ |
|
78 | + private $cloudFederationProviderManager; |
|
79 | + |
|
80 | + /** @var ICloudFederationFactory */ |
|
81 | + private $cloudFederationFactory; |
|
82 | + |
|
83 | + /** @var IGroupManager */ |
|
84 | + private $groupManager; |
|
85 | + |
|
86 | + /** @var IUserManager */ |
|
87 | + private $userManager; |
|
88 | + |
|
89 | + /** @var IEventDispatcher */ |
|
90 | + private $eventDispatcher; |
|
91 | + |
|
92 | + public function __construct(IDBConnection $connection, |
|
93 | + \OC\Files\Mount\Manager $mountManager, |
|
94 | + IStorageFactory $storageLoader, |
|
95 | + IClientService $clientService, |
|
96 | + IManager $notificationManager, |
|
97 | + IDiscoveryService $discoveryService, |
|
98 | + ICloudFederationProviderManager $cloudFederationProviderManager, |
|
99 | + ICloudFederationFactory $cloudFederationFactory, |
|
100 | + IGroupManager $groupManager, |
|
101 | + IUserManager $userManager, |
|
102 | + ?string $uid, |
|
103 | + IEventDispatcher $eventDispatcher) { |
|
104 | + $this->connection = $connection; |
|
105 | + $this->mountManager = $mountManager; |
|
106 | + $this->storageLoader = $storageLoader; |
|
107 | + $this->clientService = $clientService; |
|
108 | + $this->uid = $uid; |
|
109 | + $this->notificationManager = $notificationManager; |
|
110 | + $this->discoveryService = $discoveryService; |
|
111 | + $this->cloudFederationProviderManager = $cloudFederationProviderManager; |
|
112 | + $this->cloudFederationFactory = $cloudFederationFactory; |
|
113 | + $this->groupManager = $groupManager; |
|
114 | + $this->userManager = $userManager; |
|
115 | + $this->eventDispatcher = $eventDispatcher; |
|
116 | + } |
|
117 | + |
|
118 | + /** |
|
119 | + * add new server-to-server share |
|
120 | + * |
|
121 | + * @param string $remote |
|
122 | + * @param string $token |
|
123 | + * @param string $password |
|
124 | + * @param string $name |
|
125 | + * @param string $owner |
|
126 | + * @param int $shareType |
|
127 | + * @param boolean $accepted |
|
128 | + * @param string $user |
|
129 | + * @param string $remoteId |
|
130 | + * @param int $parent |
|
131 | + * @return Mount|null |
|
132 | + * @throws \Doctrine\DBAL\Exception |
|
133 | + */ |
|
134 | + public function addShare($remote, $token, $password, $name, $owner, $shareType, $accepted = false, $user = null, $remoteId = '', $parent = -1) { |
|
135 | + $user = $user ? $user : $this->uid; |
|
136 | + $accepted = $accepted ? IShare::STATUS_ACCEPTED : IShare::STATUS_PENDING; |
|
137 | + $name = Filesystem::normalizePath('/' . $name); |
|
138 | + |
|
139 | + if ($accepted !== IShare::STATUS_ACCEPTED) { |
|
140 | + // To avoid conflicts with the mount point generation later, |
|
141 | + // we only use a temporary mount point name here. The real |
|
142 | + // mount point name will be generated when accepting the share, |
|
143 | + // using the original share item name. |
|
144 | + $tmpMountPointName = '{{TemporaryMountPointName#' . $name . '}}'; |
|
145 | + $mountPoint = $tmpMountPointName; |
|
146 | + $hash = md5($tmpMountPointName); |
|
147 | + $data = [ |
|
148 | + 'remote' => $remote, |
|
149 | + 'share_token' => $token, |
|
150 | + 'password' => $password, |
|
151 | + 'name' => $name, |
|
152 | + 'owner' => $owner, |
|
153 | + 'user' => $user, |
|
154 | + 'mountpoint' => $mountPoint, |
|
155 | + 'mountpoint_hash' => $hash, |
|
156 | + 'accepted' => $accepted, |
|
157 | + 'remote_id' => $remoteId, |
|
158 | + 'share_type' => $shareType, |
|
159 | + ]; |
|
160 | + |
|
161 | + $i = 1; |
|
162 | + while (!$this->connection->insertIfNotExist('*PREFIX*share_external', $data, ['user', 'mountpoint_hash'])) { |
|
163 | + // The external share already exists for the user |
|
164 | + $data['mountpoint'] = $tmpMountPointName . '-' . $i; |
|
165 | + $data['mountpoint_hash'] = md5($data['mountpoint']); |
|
166 | + $i++; |
|
167 | + } |
|
168 | + return null; |
|
169 | + } |
|
170 | + |
|
171 | + $mountPoint = Files::buildNotExistingFileName('/', $name); |
|
172 | + $mountPoint = Filesystem::normalizePath('/' . $mountPoint); |
|
173 | + $hash = md5($mountPoint); |
|
174 | + |
|
175 | + $this->writeShareToDb($remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType); |
|
176 | + |
|
177 | + $options = [ |
|
178 | + 'remote' => $remote, |
|
179 | + 'token' => $token, |
|
180 | + 'password' => $password, |
|
181 | + 'mountpoint' => $mountPoint, |
|
182 | + 'owner' => $owner |
|
183 | + ]; |
|
184 | + return $this->mountShare($options); |
|
185 | + } |
|
186 | + |
|
187 | + /** |
|
188 | + * write remote share to the database |
|
189 | + * |
|
190 | + * @param $remote |
|
191 | + * @param $token |
|
192 | + * @param $password |
|
193 | + * @param $name |
|
194 | + * @param $owner |
|
195 | + * @param $user |
|
196 | + * @param $mountPoint |
|
197 | + * @param $hash |
|
198 | + * @param $accepted |
|
199 | + * @param $remoteId |
|
200 | + * @param $parent |
|
201 | + * @param $shareType |
|
202 | + * |
|
203 | + * @return void |
|
204 | + * @throws \Doctrine\DBAL\Driver\Exception |
|
205 | + */ |
|
206 | + private function writeShareToDb($remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType): void { |
|
207 | + $query = $this->connection->prepare(' |
|
208 | 208 | INSERT INTO `*PREFIX*share_external` |
209 | 209 | (`remote`, `share_token`, `password`, `name`, `owner`, `user`, `mountpoint`, `mountpoint_hash`, `accepted`, `remote_id`, `parent`, `share_type`) |
210 | 210 | VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) |
211 | 211 | '); |
212 | - $query->execute([$remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType]); |
|
213 | - } |
|
214 | - |
|
215 | - /** |
|
216 | - * get share |
|
217 | - * |
|
218 | - * @param int $id share id |
|
219 | - * @return mixed share of false |
|
220 | - */ |
|
221 | - public function getShare($id) { |
|
222 | - $getShare = $this->connection->prepare(' |
|
212 | + $query->execute([$remote, $token, $password, $name, $owner, $user, $mountPoint, $hash, $accepted, $remoteId, $parent, $shareType]); |
|
213 | + } |
|
214 | + |
|
215 | + /** |
|
216 | + * get share |
|
217 | + * |
|
218 | + * @param int $id share id |
|
219 | + * @return mixed share of false |
|
220 | + */ |
|
221 | + public function getShare($id) { |
|
222 | + $getShare = $this->connection->prepare(' |
|
223 | 223 | SELECT `id`, `remote`, `remote_id`, `share_token`, `name`, `owner`, `user`, `mountpoint`, `accepted`, `parent`, `share_type`, `password`, `mountpoint_hash` |
224 | 224 | FROM `*PREFIX*share_external` |
225 | 225 | WHERE `id` = ?'); |
226 | - $result = $getShare->execute([$id]); |
|
227 | - $share = $result->fetch(); |
|
228 | - $result->closeCursor(); |
|
229 | - $validShare = is_array($share) && isset($share['share_type']) && isset($share['user']); |
|
230 | - |
|
231 | - // check if the user is allowed to access it |
|
232 | - if ($validShare && (int)$share['share_type'] === IShare::TYPE_USER && $share['user'] === $this->uid) { |
|
233 | - return $share; |
|
234 | - } elseif ($validShare && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
235 | - $user = $this->userManager->get($this->uid); |
|
236 | - if ($this->groupManager->get($share['user'])->inGroup($user)) { |
|
237 | - return $share; |
|
238 | - } |
|
239 | - } |
|
240 | - |
|
241 | - return false; |
|
242 | - } |
|
243 | - |
|
244 | - /** |
|
245 | - * accept server-to-server share |
|
246 | - * |
|
247 | - * @param int $id |
|
248 | - * @return bool True if the share could be accepted, false otherwise |
|
249 | - */ |
|
250 | - public function acceptShare($id) { |
|
251 | - $share = $this->getShare($id); |
|
252 | - $result = false; |
|
253 | - |
|
254 | - if ($share) { |
|
255 | - \OC_Util::setupFS($this->uid); |
|
256 | - $shareFolder = Helper::getShareFolder(); |
|
257 | - $mountPoint = Files::buildNotExistingFileName($shareFolder, $share['name']); |
|
258 | - $mountPoint = Filesystem::normalizePath($mountPoint); |
|
259 | - $hash = md5($mountPoint); |
|
260 | - $userShareAccepted = false; |
|
261 | - |
|
262 | - if ((int)$share['share_type'] === IShare::TYPE_USER) { |
|
263 | - $acceptShare = $this->connection->prepare(' |
|
226 | + $result = $getShare->execute([$id]); |
|
227 | + $share = $result->fetch(); |
|
228 | + $result->closeCursor(); |
|
229 | + $validShare = is_array($share) && isset($share['share_type']) && isset($share['user']); |
|
230 | + |
|
231 | + // check if the user is allowed to access it |
|
232 | + if ($validShare && (int)$share['share_type'] === IShare::TYPE_USER && $share['user'] === $this->uid) { |
|
233 | + return $share; |
|
234 | + } elseif ($validShare && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
235 | + $user = $this->userManager->get($this->uid); |
|
236 | + if ($this->groupManager->get($share['user'])->inGroup($user)) { |
|
237 | + return $share; |
|
238 | + } |
|
239 | + } |
|
240 | + |
|
241 | + return false; |
|
242 | + } |
|
243 | + |
|
244 | + /** |
|
245 | + * accept server-to-server share |
|
246 | + * |
|
247 | + * @param int $id |
|
248 | + * @return bool True if the share could be accepted, false otherwise |
|
249 | + */ |
|
250 | + public function acceptShare($id) { |
|
251 | + $share = $this->getShare($id); |
|
252 | + $result = false; |
|
253 | + |
|
254 | + if ($share) { |
|
255 | + \OC_Util::setupFS($this->uid); |
|
256 | + $shareFolder = Helper::getShareFolder(); |
|
257 | + $mountPoint = Files::buildNotExistingFileName($shareFolder, $share['name']); |
|
258 | + $mountPoint = Filesystem::normalizePath($mountPoint); |
|
259 | + $hash = md5($mountPoint); |
|
260 | + $userShareAccepted = false; |
|
261 | + |
|
262 | + if ((int)$share['share_type'] === IShare::TYPE_USER) { |
|
263 | + $acceptShare = $this->connection->prepare(' |
|
264 | 264 | UPDATE `*PREFIX*share_external` |
265 | 265 | SET `accepted` = ?, |
266 | 266 | `mountpoint` = ?, |
267 | 267 | `mountpoint_hash` = ? |
268 | 268 | WHERE `id` = ? AND `user` = ?'); |
269 | - $userShareAccepted = $acceptShare->execute([1, $mountPoint, $hash, $id, $this->uid]); |
|
270 | - } else { |
|
271 | - try { |
|
272 | - $this->writeShareToDb( |
|
273 | - $share['remote'], |
|
274 | - $share['share_token'], |
|
275 | - $share['password'], |
|
276 | - $share['name'], |
|
277 | - $share['owner'], |
|
278 | - $this->uid, |
|
279 | - $mountPoint, $hash, 1, |
|
280 | - $share['remote_id'], |
|
281 | - $id, |
|
282 | - $share['share_type']); |
|
283 | - $result = true; |
|
284 | - } catch (Exception $e) { |
|
285 | - $result = false; |
|
286 | - } |
|
287 | - } |
|
288 | - if ($userShareAccepted !== false) { |
|
289 | - $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'accept'); |
|
290 | - $event = new FederatedShareAddedEvent($share['remote']); |
|
291 | - $this->eventDispatcher->dispatchTyped($event); |
|
292 | - $result = true; |
|
293 | - } |
|
294 | - } |
|
295 | - |
|
296 | - // Make sure the user has no notification for something that does not exist anymore. |
|
297 | - $this->processNotification($id); |
|
298 | - |
|
299 | - return $result; |
|
300 | - } |
|
301 | - |
|
302 | - /** |
|
303 | - * decline server-to-server share |
|
304 | - * |
|
305 | - * @param int $id |
|
306 | - * @return bool True if the share could be declined, false otherwise |
|
307 | - */ |
|
308 | - public function declineShare($id) { |
|
309 | - $share = $this->getShare($id); |
|
310 | - $result = false; |
|
311 | - |
|
312 | - if ($share && (int)$share['share_type'] === IShare::TYPE_USER) { |
|
313 | - $removeShare = $this->connection->prepare(' |
|
269 | + $userShareAccepted = $acceptShare->execute([1, $mountPoint, $hash, $id, $this->uid]); |
|
270 | + } else { |
|
271 | + try { |
|
272 | + $this->writeShareToDb( |
|
273 | + $share['remote'], |
|
274 | + $share['share_token'], |
|
275 | + $share['password'], |
|
276 | + $share['name'], |
|
277 | + $share['owner'], |
|
278 | + $this->uid, |
|
279 | + $mountPoint, $hash, 1, |
|
280 | + $share['remote_id'], |
|
281 | + $id, |
|
282 | + $share['share_type']); |
|
283 | + $result = true; |
|
284 | + } catch (Exception $e) { |
|
285 | + $result = false; |
|
286 | + } |
|
287 | + } |
|
288 | + if ($userShareAccepted !== false) { |
|
289 | + $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'accept'); |
|
290 | + $event = new FederatedShareAddedEvent($share['remote']); |
|
291 | + $this->eventDispatcher->dispatchTyped($event); |
|
292 | + $result = true; |
|
293 | + } |
|
294 | + } |
|
295 | + |
|
296 | + // Make sure the user has no notification for something that does not exist anymore. |
|
297 | + $this->processNotification($id); |
|
298 | + |
|
299 | + return $result; |
|
300 | + } |
|
301 | + |
|
302 | + /** |
|
303 | + * decline server-to-server share |
|
304 | + * |
|
305 | + * @param int $id |
|
306 | + * @return bool True if the share could be declined, false otherwise |
|
307 | + */ |
|
308 | + public function declineShare($id) { |
|
309 | + $share = $this->getShare($id); |
|
310 | + $result = false; |
|
311 | + |
|
312 | + if ($share && (int)$share['share_type'] === IShare::TYPE_USER) { |
|
313 | + $removeShare = $this->connection->prepare(' |
|
314 | 314 | DELETE FROM `*PREFIX*share_external` WHERE `id` = ? AND `user` = ?'); |
315 | - $removeShare->execute([$id, $this->uid]); |
|
316 | - $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
317 | - |
|
318 | - $this->processNotification($id); |
|
319 | - $result = true; |
|
320 | - } elseif ($share && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
321 | - try { |
|
322 | - $this->writeShareToDb( |
|
323 | - $share['remote'], |
|
324 | - $share['share_token'], |
|
325 | - $share['password'], |
|
326 | - $share['name'], |
|
327 | - $share['owner'], |
|
328 | - $this->uid, |
|
329 | - $share['mountpoint'], |
|
330 | - $share['mountpoint_hash'], |
|
331 | - 0, |
|
332 | - $share['remote_id'], |
|
333 | - $id, |
|
334 | - $share['share_type']); |
|
335 | - $result = true; |
|
336 | - } catch (Exception $e) { |
|
337 | - $result = false; |
|
338 | - } |
|
339 | - $this->processNotification($id); |
|
340 | - } |
|
341 | - |
|
342 | - return $result; |
|
343 | - } |
|
344 | - |
|
345 | - /** |
|
346 | - * @param int $remoteShare |
|
347 | - */ |
|
348 | - public function processNotification($remoteShare) { |
|
349 | - $filter = $this->notificationManager->createNotification(); |
|
350 | - $filter->setApp('files_sharing') |
|
351 | - ->setUser($this->uid) |
|
352 | - ->setObject('remote_share', (int) $remoteShare); |
|
353 | - $this->notificationManager->markProcessed($filter); |
|
354 | - } |
|
355 | - |
|
356 | - /** |
|
357 | - * inform remote server whether server-to-server share was accepted/declined |
|
358 | - * |
|
359 | - * @param string $remote |
|
360 | - * @param string $token |
|
361 | - * @param string $remoteId Share id on the remote host |
|
362 | - * @param string $feedback |
|
363 | - * @return boolean |
|
364 | - */ |
|
365 | - private function sendFeedbackToRemote($remote, $token, $remoteId, $feedback) { |
|
366 | - $result = $this->tryOCMEndPoint($remote, $token, $remoteId, $feedback); |
|
367 | - |
|
368 | - if (is_array($result)) { |
|
369 | - return true; |
|
370 | - } |
|
371 | - |
|
372 | - $federationEndpoints = $this->discoveryService->discover($remote, 'FEDERATED_SHARING'); |
|
373 | - $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
374 | - |
|
375 | - $url = rtrim($remote, '/') . $endpoint . '/' . $remoteId . '/' . $feedback . '?format=' . Share::RESPONSE_FORMAT; |
|
376 | - $fields = ['token' => $token]; |
|
377 | - |
|
378 | - $client = $this->clientService->newClient(); |
|
379 | - |
|
380 | - try { |
|
381 | - $response = $client->post( |
|
382 | - $url, |
|
383 | - [ |
|
384 | - 'body' => $fields, |
|
385 | - 'connect_timeout' => 10, |
|
386 | - ] |
|
387 | - ); |
|
388 | - } catch (\Exception $e) { |
|
389 | - return false; |
|
390 | - } |
|
391 | - |
|
392 | - $status = json_decode($response->getBody(), true); |
|
393 | - |
|
394 | - return ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
395 | - } |
|
396 | - |
|
397 | - /** |
|
398 | - * try send accept message to ocm end-point |
|
399 | - * |
|
400 | - * @param string $remoteDomain |
|
401 | - * @param string $token |
|
402 | - * @param string $remoteId id of the share |
|
403 | - * @param string $feedback |
|
404 | - * @return array|false |
|
405 | - */ |
|
406 | - protected function tryOCMEndPoint($remoteDomain, $token, $remoteId, $feedback) { |
|
407 | - switch ($feedback) { |
|
408 | - case 'accept': |
|
409 | - $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
410 | - $notification->setMessage( |
|
411 | - 'SHARE_ACCEPTED', |
|
412 | - 'file', |
|
413 | - $remoteId, |
|
414 | - [ |
|
415 | - 'sharedSecret' => $token, |
|
416 | - 'message' => 'Recipient accept the share' |
|
417 | - ] |
|
418 | - |
|
419 | - ); |
|
420 | - return $this->cloudFederationProviderManager->sendNotification($remoteDomain, $notification); |
|
421 | - case 'decline': |
|
422 | - $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
423 | - $notification->setMessage( |
|
424 | - 'SHARE_DECLINED', |
|
425 | - 'file', |
|
426 | - $remoteId, |
|
427 | - [ |
|
428 | - 'sharedSecret' => $token, |
|
429 | - 'message' => 'Recipient declined the share' |
|
430 | - ] |
|
431 | - |
|
432 | - ); |
|
433 | - return $this->cloudFederationProviderManager->sendNotification($remoteDomain, $notification); |
|
434 | - } |
|
435 | - |
|
436 | - return false; |
|
437 | - } |
|
438 | - |
|
439 | - |
|
440 | - /** |
|
441 | - * remove '/user/files' from the path and trailing slashes |
|
442 | - * |
|
443 | - * @param string $path |
|
444 | - * @return string |
|
445 | - */ |
|
446 | - protected function stripPath($path) { |
|
447 | - $prefix = '/' . $this->uid . '/files'; |
|
448 | - return rtrim(substr($path, strlen($prefix)), '/'); |
|
449 | - } |
|
450 | - |
|
451 | - public function getMount($data) { |
|
452 | - $data['manager'] = $this; |
|
453 | - $mountPoint = '/' . $this->uid . '/files' . $data['mountpoint']; |
|
454 | - $data['mountpoint'] = $mountPoint; |
|
455 | - $data['certificateManager'] = \OC::$server->getCertificateManager(); |
|
456 | - return new Mount(self::STORAGE, $mountPoint, $data, $this, $this->storageLoader); |
|
457 | - } |
|
458 | - |
|
459 | - /** |
|
460 | - * @param array $data |
|
461 | - * @return Mount |
|
462 | - */ |
|
463 | - protected function mountShare($data) { |
|
464 | - $mount = $this->getMount($data); |
|
465 | - $this->mountManager->addMount($mount); |
|
466 | - return $mount; |
|
467 | - } |
|
468 | - |
|
469 | - /** |
|
470 | - * @return \OC\Files\Mount\Manager |
|
471 | - */ |
|
472 | - public function getMountManager() { |
|
473 | - return $this->mountManager; |
|
474 | - } |
|
475 | - |
|
476 | - /** |
|
477 | - * @param string $source |
|
478 | - * @param string $target |
|
479 | - * @return bool |
|
480 | - */ |
|
481 | - public function setMountPoint($source, $target) { |
|
482 | - $source = $this->stripPath($source); |
|
483 | - $target = $this->stripPath($target); |
|
484 | - $sourceHash = md5($source); |
|
485 | - $targetHash = md5($target); |
|
486 | - |
|
487 | - $query = $this->connection->prepare(' |
|
315 | + $removeShare->execute([$id, $this->uid]); |
|
316 | + $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
317 | + |
|
318 | + $this->processNotification($id); |
|
319 | + $result = true; |
|
320 | + } elseif ($share && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
321 | + try { |
|
322 | + $this->writeShareToDb( |
|
323 | + $share['remote'], |
|
324 | + $share['share_token'], |
|
325 | + $share['password'], |
|
326 | + $share['name'], |
|
327 | + $share['owner'], |
|
328 | + $this->uid, |
|
329 | + $share['mountpoint'], |
|
330 | + $share['mountpoint_hash'], |
|
331 | + 0, |
|
332 | + $share['remote_id'], |
|
333 | + $id, |
|
334 | + $share['share_type']); |
|
335 | + $result = true; |
|
336 | + } catch (Exception $e) { |
|
337 | + $result = false; |
|
338 | + } |
|
339 | + $this->processNotification($id); |
|
340 | + } |
|
341 | + |
|
342 | + return $result; |
|
343 | + } |
|
344 | + |
|
345 | + /** |
|
346 | + * @param int $remoteShare |
|
347 | + */ |
|
348 | + public function processNotification($remoteShare) { |
|
349 | + $filter = $this->notificationManager->createNotification(); |
|
350 | + $filter->setApp('files_sharing') |
|
351 | + ->setUser($this->uid) |
|
352 | + ->setObject('remote_share', (int) $remoteShare); |
|
353 | + $this->notificationManager->markProcessed($filter); |
|
354 | + } |
|
355 | + |
|
356 | + /** |
|
357 | + * inform remote server whether server-to-server share was accepted/declined |
|
358 | + * |
|
359 | + * @param string $remote |
|
360 | + * @param string $token |
|
361 | + * @param string $remoteId Share id on the remote host |
|
362 | + * @param string $feedback |
|
363 | + * @return boolean |
|
364 | + */ |
|
365 | + private function sendFeedbackToRemote($remote, $token, $remoteId, $feedback) { |
|
366 | + $result = $this->tryOCMEndPoint($remote, $token, $remoteId, $feedback); |
|
367 | + |
|
368 | + if (is_array($result)) { |
|
369 | + return true; |
|
370 | + } |
|
371 | + |
|
372 | + $federationEndpoints = $this->discoveryService->discover($remote, 'FEDERATED_SHARING'); |
|
373 | + $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
374 | + |
|
375 | + $url = rtrim($remote, '/') . $endpoint . '/' . $remoteId . '/' . $feedback . '?format=' . Share::RESPONSE_FORMAT; |
|
376 | + $fields = ['token' => $token]; |
|
377 | + |
|
378 | + $client = $this->clientService->newClient(); |
|
379 | + |
|
380 | + try { |
|
381 | + $response = $client->post( |
|
382 | + $url, |
|
383 | + [ |
|
384 | + 'body' => $fields, |
|
385 | + 'connect_timeout' => 10, |
|
386 | + ] |
|
387 | + ); |
|
388 | + } catch (\Exception $e) { |
|
389 | + return false; |
|
390 | + } |
|
391 | + |
|
392 | + $status = json_decode($response->getBody(), true); |
|
393 | + |
|
394 | + return ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
395 | + } |
|
396 | + |
|
397 | + /** |
|
398 | + * try send accept message to ocm end-point |
|
399 | + * |
|
400 | + * @param string $remoteDomain |
|
401 | + * @param string $token |
|
402 | + * @param string $remoteId id of the share |
|
403 | + * @param string $feedback |
|
404 | + * @return array|false |
|
405 | + */ |
|
406 | + protected function tryOCMEndPoint($remoteDomain, $token, $remoteId, $feedback) { |
|
407 | + switch ($feedback) { |
|
408 | + case 'accept': |
|
409 | + $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
410 | + $notification->setMessage( |
|
411 | + 'SHARE_ACCEPTED', |
|
412 | + 'file', |
|
413 | + $remoteId, |
|
414 | + [ |
|
415 | + 'sharedSecret' => $token, |
|
416 | + 'message' => 'Recipient accept the share' |
|
417 | + ] |
|
418 | + |
|
419 | + ); |
|
420 | + return $this->cloudFederationProviderManager->sendNotification($remoteDomain, $notification); |
|
421 | + case 'decline': |
|
422 | + $notification = $this->cloudFederationFactory->getCloudFederationNotification(); |
|
423 | + $notification->setMessage( |
|
424 | + 'SHARE_DECLINED', |
|
425 | + 'file', |
|
426 | + $remoteId, |
|
427 | + [ |
|
428 | + 'sharedSecret' => $token, |
|
429 | + 'message' => 'Recipient declined the share' |
|
430 | + ] |
|
431 | + |
|
432 | + ); |
|
433 | + return $this->cloudFederationProviderManager->sendNotification($remoteDomain, $notification); |
|
434 | + } |
|
435 | + |
|
436 | + return false; |
|
437 | + } |
|
438 | + |
|
439 | + |
|
440 | + /** |
|
441 | + * remove '/user/files' from the path and trailing slashes |
|
442 | + * |
|
443 | + * @param string $path |
|
444 | + * @return string |
|
445 | + */ |
|
446 | + protected function stripPath($path) { |
|
447 | + $prefix = '/' . $this->uid . '/files'; |
|
448 | + return rtrim(substr($path, strlen($prefix)), '/'); |
|
449 | + } |
|
450 | + |
|
451 | + public function getMount($data) { |
|
452 | + $data['manager'] = $this; |
|
453 | + $mountPoint = '/' . $this->uid . '/files' . $data['mountpoint']; |
|
454 | + $data['mountpoint'] = $mountPoint; |
|
455 | + $data['certificateManager'] = \OC::$server->getCertificateManager(); |
|
456 | + return new Mount(self::STORAGE, $mountPoint, $data, $this, $this->storageLoader); |
|
457 | + } |
|
458 | + |
|
459 | + /** |
|
460 | + * @param array $data |
|
461 | + * @return Mount |
|
462 | + */ |
|
463 | + protected function mountShare($data) { |
|
464 | + $mount = $this->getMount($data); |
|
465 | + $this->mountManager->addMount($mount); |
|
466 | + return $mount; |
|
467 | + } |
|
468 | + |
|
469 | + /** |
|
470 | + * @return \OC\Files\Mount\Manager |
|
471 | + */ |
|
472 | + public function getMountManager() { |
|
473 | + return $this->mountManager; |
|
474 | + } |
|
475 | + |
|
476 | + /** |
|
477 | + * @param string $source |
|
478 | + * @param string $target |
|
479 | + * @return bool |
|
480 | + */ |
|
481 | + public function setMountPoint($source, $target) { |
|
482 | + $source = $this->stripPath($source); |
|
483 | + $target = $this->stripPath($target); |
|
484 | + $sourceHash = md5($source); |
|
485 | + $targetHash = md5($target); |
|
486 | + |
|
487 | + $query = $this->connection->prepare(' |
|
488 | 488 | UPDATE `*PREFIX*share_external` |
489 | 489 | SET `mountpoint` = ?, `mountpoint_hash` = ? |
490 | 490 | WHERE `mountpoint_hash` = ? |
491 | 491 | AND `user` = ? |
492 | 492 | '); |
493 | - $result = (bool)$query->execute([$target, $targetHash, $sourceHash, $this->uid]); |
|
493 | + $result = (bool)$query->execute([$target, $targetHash, $sourceHash, $this->uid]); |
|
494 | 494 | |
495 | - return $result; |
|
496 | - } |
|
495 | + return $result; |
|
496 | + } |
|
497 | 497 | |
498 | - public function removeShare($mountPoint): bool { |
|
499 | - $mountPointObj = $this->mountManager->find($mountPoint); |
|
500 | - $id = $mountPointObj->getStorage()->getCache()->getId(''); |
|
498 | + public function removeShare($mountPoint): bool { |
|
499 | + $mountPointObj = $this->mountManager->find($mountPoint); |
|
500 | + $id = $mountPointObj->getStorage()->getCache()->getId(''); |
|
501 | 501 | |
502 | - $mountPoint = $this->stripPath($mountPoint); |
|
503 | - $hash = md5($mountPoint); |
|
502 | + $mountPoint = $this->stripPath($mountPoint); |
|
503 | + $hash = md5($mountPoint); |
|
504 | 504 | |
505 | - try { |
|
506 | - $getShare = $this->connection->prepare(' |
|
505 | + try { |
|
506 | + $getShare = $this->connection->prepare(' |
|
507 | 507 | SELECT `remote`, `share_token`, `remote_id`, `share_type`, `id` |
508 | 508 | FROM `*PREFIX*share_external` |
509 | 509 | WHERE `mountpoint_hash` = ? AND `user` = ?'); |
510 | - $result = $getShare->execute([$hash, $this->uid]); |
|
511 | - $share = $result->fetch(); |
|
512 | - $result->closeCursor(); |
|
513 | - if ($share !== false && (int)$share['share_type'] === IShare::TYPE_USER) { |
|
514 | - try { |
|
515 | - $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
516 | - } catch (\Throwable $e) { |
|
517 | - // if we fail to notify the remote (probably cause the remote is down) |
|
518 | - // we still want the share to be gone to prevent undeletable remotes |
|
519 | - } |
|
520 | - |
|
521 | - $query = $this->connection->prepare(' |
|
510 | + $result = $getShare->execute([$hash, $this->uid]); |
|
511 | + $share = $result->fetch(); |
|
512 | + $result->closeCursor(); |
|
513 | + if ($share !== false && (int)$share['share_type'] === IShare::TYPE_USER) { |
|
514 | + try { |
|
515 | + $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
516 | + } catch (\Throwable $e) { |
|
517 | + // if we fail to notify the remote (probably cause the remote is down) |
|
518 | + // we still want the share to be gone to prevent undeletable remotes |
|
519 | + } |
|
520 | + |
|
521 | + $query = $this->connection->prepare(' |
|
522 | 522 | DELETE FROM `*PREFIX*share_external` |
523 | 523 | WHERE `id` = ? |
524 | 524 | '); |
525 | - $deleteResult = $query->execute([(int)$share['id']]); |
|
526 | - $deleteResult->closeCursor(); |
|
527 | - } elseif ($share !== false && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
528 | - $query = $this->connection->prepare(' |
|
525 | + $deleteResult = $query->execute([(int)$share['id']]); |
|
526 | + $deleteResult->closeCursor(); |
|
527 | + } elseif ($share !== false && (int)$share['share_type'] === IShare::TYPE_GROUP) { |
|
528 | + $query = $this->connection->prepare(' |
|
529 | 529 | UPDATE `*PREFIX*share_external` |
530 | 530 | SET `accepted` = ? |
531 | 531 | WHERE `id` = ?'); |
532 | - $updateResult = $query->execute([0, (int)$share['id']]); |
|
533 | - $updateResult->closeCursor(); |
|
534 | - } |
|
535 | - |
|
536 | - $this->removeReShares($id); |
|
537 | - } catch (\Doctrine\DBAL\Exception $ex) { |
|
538 | - return false; |
|
539 | - } |
|
540 | - |
|
541 | - return true; |
|
542 | - } |
|
543 | - |
|
544 | - /** |
|
545 | - * remove re-shares from share table and mapping in the federated_reshares table |
|
546 | - * |
|
547 | - * @param $mountPointId |
|
548 | - */ |
|
549 | - protected function removeReShares($mountPointId) { |
|
550 | - $selectQuery = $this->connection->getQueryBuilder(); |
|
551 | - $query = $this->connection->getQueryBuilder(); |
|
552 | - $selectQuery->select('id')->from('share') |
|
553 | - ->where($selectQuery->expr()->eq('file_source', $query->createNamedParameter($mountPointId))); |
|
554 | - $select = $selectQuery->getSQL(); |
|
555 | - |
|
556 | - |
|
557 | - $query->delete('federated_reshares') |
|
558 | - ->where($query->expr()->in('share_id', $query->createFunction('(' . $select . ')'))); |
|
559 | - $query->execute(); |
|
560 | - |
|
561 | - $deleteReShares = $this->connection->getQueryBuilder(); |
|
562 | - $deleteReShares->delete('share') |
|
563 | - ->where($deleteReShares->expr()->eq('file_source', $deleteReShares->createNamedParameter($mountPointId))); |
|
564 | - $deleteReShares->execute(); |
|
565 | - } |
|
566 | - |
|
567 | - /** |
|
568 | - * remove all shares for user $uid if the user was deleted |
|
569 | - * |
|
570 | - * @param string $uid |
|
571 | - */ |
|
572 | - public function removeUserShares($uid): bool { |
|
573 | - try { |
|
574 | - $getShare = $this->connection->prepare(' |
|
532 | + $updateResult = $query->execute([0, (int)$share['id']]); |
|
533 | + $updateResult->closeCursor(); |
|
534 | + } |
|
535 | + |
|
536 | + $this->removeReShares($id); |
|
537 | + } catch (\Doctrine\DBAL\Exception $ex) { |
|
538 | + return false; |
|
539 | + } |
|
540 | + |
|
541 | + return true; |
|
542 | + } |
|
543 | + |
|
544 | + /** |
|
545 | + * remove re-shares from share table and mapping in the federated_reshares table |
|
546 | + * |
|
547 | + * @param $mountPointId |
|
548 | + */ |
|
549 | + protected function removeReShares($mountPointId) { |
|
550 | + $selectQuery = $this->connection->getQueryBuilder(); |
|
551 | + $query = $this->connection->getQueryBuilder(); |
|
552 | + $selectQuery->select('id')->from('share') |
|
553 | + ->where($selectQuery->expr()->eq('file_source', $query->createNamedParameter($mountPointId))); |
|
554 | + $select = $selectQuery->getSQL(); |
|
555 | + |
|
556 | + |
|
557 | + $query->delete('federated_reshares') |
|
558 | + ->where($query->expr()->in('share_id', $query->createFunction('(' . $select . ')'))); |
|
559 | + $query->execute(); |
|
560 | + |
|
561 | + $deleteReShares = $this->connection->getQueryBuilder(); |
|
562 | + $deleteReShares->delete('share') |
|
563 | + ->where($deleteReShares->expr()->eq('file_source', $deleteReShares->createNamedParameter($mountPointId))); |
|
564 | + $deleteReShares->execute(); |
|
565 | + } |
|
566 | + |
|
567 | + /** |
|
568 | + * remove all shares for user $uid if the user was deleted |
|
569 | + * |
|
570 | + * @param string $uid |
|
571 | + */ |
|
572 | + public function removeUserShares($uid): bool { |
|
573 | + try { |
|
574 | + $getShare = $this->connection->prepare(' |
|
575 | 575 | SELECT `remote`, `share_token`, `remote_id` |
576 | 576 | FROM `*PREFIX*share_external` |
577 | 577 | WHERE `user` = ?'); |
578 | - $result = $getShare->execute([$uid]); |
|
579 | - $shares = $result->fetchAll(); |
|
580 | - $result->closeCursor(); |
|
581 | - foreach ($shares as $share) { |
|
582 | - $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
583 | - } |
|
584 | - |
|
585 | - $query = $this->connection->prepare(' |
|
578 | + $result = $getShare->execute([$uid]); |
|
579 | + $shares = $result->fetchAll(); |
|
580 | + $result->closeCursor(); |
|
581 | + foreach ($shares as $share) { |
|
582 | + $this->sendFeedbackToRemote($share['remote'], $share['share_token'], $share['remote_id'], 'decline'); |
|
583 | + } |
|
584 | + |
|
585 | + $query = $this->connection->prepare(' |
|
586 | 586 | DELETE FROM `*PREFIX*share_external` |
587 | 587 | WHERE `user` = ? |
588 | 588 | '); |
589 | - $deleteResult = $query->execute([$uid]); |
|
590 | - $deleteResult->closeCursor(); |
|
591 | - } catch (\Doctrine\DBAL\Exception $ex) { |
|
592 | - return false; |
|
593 | - } |
|
594 | - |
|
595 | - return true; |
|
596 | - } |
|
597 | - |
|
598 | - /** |
|
599 | - * return a list of shares which are not yet accepted by the user |
|
600 | - * |
|
601 | - * @return array list of open server-to-server shares |
|
602 | - */ |
|
603 | - public function getOpenShares() { |
|
604 | - return $this->getShares(false); |
|
605 | - } |
|
606 | - |
|
607 | - /** |
|
608 | - * return a list of shares which are accepted by the user |
|
609 | - * |
|
610 | - * @return array list of accepted server-to-server shares |
|
611 | - */ |
|
612 | - public function getAcceptedShares() { |
|
613 | - return $this->getShares(true); |
|
614 | - } |
|
615 | - |
|
616 | - /** |
|
617 | - * return a list of shares for the user |
|
618 | - * |
|
619 | - * @param bool|null $accepted True for accepted only, |
|
620 | - * false for not accepted, |
|
621 | - * null for all shares of the user |
|
622 | - * @return array list of open server-to-server shares |
|
623 | - */ |
|
624 | - private function getShares($accepted) { |
|
625 | - $user = $this->userManager->get($this->uid); |
|
626 | - $groups = $this->groupManager->getUserGroups($user); |
|
627 | - $userGroups = []; |
|
628 | - foreach ($groups as $group) { |
|
629 | - $userGroups[] = $group->getGID(); |
|
630 | - } |
|
631 | - |
|
632 | - $query = 'SELECT `id`, `remote`, `remote_id`, `share_token`, `name`, `owner`, `user`, `mountpoint`, `accepted` |
|
589 | + $deleteResult = $query->execute([$uid]); |
|
590 | + $deleteResult->closeCursor(); |
|
591 | + } catch (\Doctrine\DBAL\Exception $ex) { |
|
592 | + return false; |
|
593 | + } |
|
594 | + |
|
595 | + return true; |
|
596 | + } |
|
597 | + |
|
598 | + /** |
|
599 | + * return a list of shares which are not yet accepted by the user |
|
600 | + * |
|
601 | + * @return array list of open server-to-server shares |
|
602 | + */ |
|
603 | + public function getOpenShares() { |
|
604 | + return $this->getShares(false); |
|
605 | + } |
|
606 | + |
|
607 | + /** |
|
608 | + * return a list of shares which are accepted by the user |
|
609 | + * |
|
610 | + * @return array list of accepted server-to-server shares |
|
611 | + */ |
|
612 | + public function getAcceptedShares() { |
|
613 | + return $this->getShares(true); |
|
614 | + } |
|
615 | + |
|
616 | + /** |
|
617 | + * return a list of shares for the user |
|
618 | + * |
|
619 | + * @param bool|null $accepted True for accepted only, |
|
620 | + * false for not accepted, |
|
621 | + * null for all shares of the user |
|
622 | + * @return array list of open server-to-server shares |
|
623 | + */ |
|
624 | + private function getShares($accepted) { |
|
625 | + $user = $this->userManager->get($this->uid); |
|
626 | + $groups = $this->groupManager->getUserGroups($user); |
|
627 | + $userGroups = []; |
|
628 | + foreach ($groups as $group) { |
|
629 | + $userGroups[] = $group->getGID(); |
|
630 | + } |
|
631 | + |
|
632 | + $query = 'SELECT `id`, `remote`, `remote_id`, `share_token`, `name`, `owner`, `user`, `mountpoint`, `accepted` |
|
633 | 633 | FROM `*PREFIX*share_external` |
634 | 634 | WHERE (`user` = ? OR `user` IN (?))'; |
635 | - $parameters = [$this->uid, implode(',',$userGroups)]; |
|
636 | - if (!is_null($accepted)) { |
|
637 | - $query .= ' AND `accepted` = ?'; |
|
638 | - $parameters[] = (int) $accepted; |
|
639 | - } |
|
640 | - $query .= ' ORDER BY `id` ASC'; |
|
641 | - |
|
642 | - $sharesQuery = $this->connection->prepare($query); |
|
643 | - try { |
|
644 | - $result = $sharesQuery->execute($parameters); |
|
645 | - $shares = $result->fetchAll(); |
|
646 | - $result->closeCursor(); |
|
647 | - return $shares; |
|
648 | - } catch (\Doctrine\DBAL\Exception $e) { |
|
649 | - return []; |
|
650 | - } |
|
651 | - } |
|
635 | + $parameters = [$this->uid, implode(',',$userGroups)]; |
|
636 | + if (!is_null($accepted)) { |
|
637 | + $query .= ' AND `accepted` = ?'; |
|
638 | + $parameters[] = (int) $accepted; |
|
639 | + } |
|
640 | + $query .= ' ORDER BY `id` ASC'; |
|
641 | + |
|
642 | + $sharesQuery = $this->connection->prepare($query); |
|
643 | + try { |
|
644 | + $result = $sharesQuery->execute($parameters); |
|
645 | + $shares = $result->fetchAll(); |
|
646 | + $result->closeCursor(); |
|
647 | + return $shares; |
|
648 | + } catch (\Doctrine\DBAL\Exception $e) { |
|
649 | + return []; |
|
650 | + } |
|
651 | + } |
|
652 | 652 | } |