@@ -27,37 +27,37 @@ |
||
27 | 27 | |
28 | 28 | class CloudFederationFactory implements ICloudFederationFactory { |
29 | 29 | |
30 | - /** |
|
31 | - * get a CloudFederationShare Object to prepare a share you want to send |
|
32 | - * |
|
33 | - * @param string $shareWith |
|
34 | - * @param string $name resource name (e.g. document.odt) |
|
35 | - * @param string $description share description (optional) |
|
36 | - * @param string $providerId resource UID on the provider side |
|
37 | - * @param string $owner provider specific UID of the user who owns the resource |
|
38 | - * @param string $ownerDisplayName display name of the user who shared the item |
|
39 | - * @param string $sharedBy provider specific UID of the user who shared the resource |
|
40 | - * @param string $sharedByDisplayName display name of the user who shared the resource |
|
41 | - * @param string $sharedSecret used to authenticate requests across servers |
|
42 | - * @param string $shareType ('group' or 'user' share) |
|
43 | - * @param $resourceType ('file', 'calendar',...) |
|
44 | - * @return ICloudFederationShare |
|
45 | - * |
|
46 | - * @since 14.0.0 |
|
47 | - */ |
|
48 | - public function getCloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $sharedSecret, $shareType, $resourceType) { |
|
49 | - return new CloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $shareType, $resourceType, $sharedSecret); |
|
50 | - } |
|
30 | + /** |
|
31 | + * get a CloudFederationShare Object to prepare a share you want to send |
|
32 | + * |
|
33 | + * @param string $shareWith |
|
34 | + * @param string $name resource name (e.g. document.odt) |
|
35 | + * @param string $description share description (optional) |
|
36 | + * @param string $providerId resource UID on the provider side |
|
37 | + * @param string $owner provider specific UID of the user who owns the resource |
|
38 | + * @param string $ownerDisplayName display name of the user who shared the item |
|
39 | + * @param string $sharedBy provider specific UID of the user who shared the resource |
|
40 | + * @param string $sharedByDisplayName display name of the user who shared the resource |
|
41 | + * @param string $sharedSecret used to authenticate requests across servers |
|
42 | + * @param string $shareType ('group' or 'user' share) |
|
43 | + * @param $resourceType ('file', 'calendar',...) |
|
44 | + * @return ICloudFederationShare |
|
45 | + * |
|
46 | + * @since 14.0.0 |
|
47 | + */ |
|
48 | + public function getCloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $sharedSecret, $shareType, $resourceType) { |
|
49 | + return new CloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $shareType, $resourceType, $sharedSecret); |
|
50 | + } |
|
51 | 51 | |
52 | - /** |
|
53 | - * get a Cloud FederationNotification object to prepare a notification you |
|
54 | - * want to send |
|
55 | - * |
|
56 | - * @return ICloudFederationNotification |
|
57 | - * |
|
58 | - * @since 14.0.0 |
|
59 | - */ |
|
60 | - public function getCloudFederationNotification() { |
|
61 | - return new CloudFederationNotification(); |
|
62 | - } |
|
52 | + /** |
|
53 | + * get a Cloud FederationNotification object to prepare a notification you |
|
54 | + * want to send |
|
55 | + * |
|
56 | + * @return ICloudFederationNotification |
|
57 | + * |
|
58 | + * @since 14.0.0 |
|
59 | + */ |
|
60 | + public function getCloudFederationNotification() { |
|
61 | + return new CloudFederationNotification(); |
|
62 | + } |
|
63 | 63 | } |
@@ -33,358 +33,358 @@ |
||
33 | 33 | use OCP\OCS\IDiscoveryService; |
34 | 34 | |
35 | 35 | class Notifications { |
36 | - const RESPONSE_FORMAT = 'json'; // default response format for ocs calls |
|
37 | - |
|
38 | - /** @var AddressHandler */ |
|
39 | - private $addressHandler; |
|
40 | - |
|
41 | - /** @var IClientService */ |
|
42 | - private $httpClientService; |
|
43 | - |
|
44 | - /** @var IDiscoveryService */ |
|
45 | - private $discoveryService; |
|
46 | - |
|
47 | - /** @var IJobList */ |
|
48 | - private $jobList; |
|
49 | - |
|
50 | - /** @var ICloudFederationProviderManager */ |
|
51 | - private $federationProviderManager; |
|
52 | - |
|
53 | - /** @var ICloudFederationFactory */ |
|
54 | - private $cloudFederationFactory; |
|
55 | - |
|
56 | - /** |
|
57 | - * @param AddressHandler $addressHandler |
|
58 | - * @param IClientService $httpClientService |
|
59 | - * @param IDiscoveryService $discoveryService |
|
60 | - * @param IJobList $jobList |
|
61 | - * @param ICloudFederationProviderManager $federationProviderManager |
|
62 | - * @param ICloudFederationFactory $cloudFederationFactory |
|
63 | - */ |
|
64 | - public function __construct( |
|
65 | - AddressHandler $addressHandler, |
|
66 | - IClientService $httpClientService, |
|
67 | - IDiscoveryService $discoveryService, |
|
68 | - IJobList $jobList, |
|
69 | - ICloudFederationProviderManager $federationProviderManager, |
|
70 | - ICloudFederationFactory $cloudFederationFactory |
|
71 | - ) { |
|
72 | - $this->addressHandler = $addressHandler; |
|
73 | - $this->httpClientService = $httpClientService; |
|
74 | - $this->discoveryService = $discoveryService; |
|
75 | - $this->jobList = $jobList; |
|
76 | - $this->federationProviderManager = $federationProviderManager; |
|
77 | - $this->cloudFederationFactory = $cloudFederationFactory; |
|
78 | - } |
|
79 | - |
|
80 | - /** |
|
81 | - * send server-to-server share to remote server |
|
82 | - * |
|
83 | - * @param string $token |
|
84 | - * @param string $shareWith |
|
85 | - * @param string $name |
|
86 | - * @param int $remote_id |
|
87 | - * @param string $owner |
|
88 | - * @param string $ownerFederatedId |
|
89 | - * @param string $sharedBy |
|
90 | - * @param string $sharedByFederatedId |
|
91 | - * @return bool |
|
92 | - * @throws \OC\HintException |
|
93 | - * @throws \OC\ServerNotAvailableException |
|
94 | - */ |
|
95 | - public function sendRemoteShare($token, $shareWith, $name, $remote_id, $owner, $ownerFederatedId, $sharedBy, $sharedByFederatedId) { |
|
96 | - |
|
97 | - list($user, $remote) = $this->addressHandler->splitUserRemote($shareWith); |
|
98 | - |
|
99 | - if ($user && $remote) { |
|
100 | - $local = $this->addressHandler->generateRemoteURL(); |
|
101 | - |
|
102 | - $fields = array( |
|
103 | - 'shareWith' => $user, |
|
104 | - 'token' => $token, |
|
105 | - 'name' => $name, |
|
106 | - 'remoteId' => $remote_id, |
|
107 | - 'owner' => $owner, |
|
108 | - 'ownerFederatedId' => $ownerFederatedId, |
|
109 | - 'sharedBy' => $sharedBy, |
|
110 | - 'sharedByFederatedId' => $sharedByFederatedId, |
|
111 | - 'remote' => $local, |
|
112 | - ); |
|
113 | - |
|
114 | - $result = $this->tryHttpPostToShareEndpoint($remote, '', $fields); |
|
115 | - $status = json_decode($result['result'], true); |
|
116 | - |
|
117 | - $ocsStatus = isset($status['ocs']); |
|
118 | - $ocsSuccess = $ocsStatus && ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
119 | - |
|
120 | - if ($result['success'] && (!$ocsStatus ||$ocsSuccess)) { |
|
121 | - \OC_Hook::emit('OCP\Share', 'federated_share_added', ['server' => $remote]); |
|
122 | - return true; |
|
123 | - } |
|
124 | - |
|
125 | - } |
|
126 | - |
|
127 | - return false; |
|
128 | - } |
|
129 | - |
|
130 | - /** |
|
131 | - * ask owner to re-share the file with the given user |
|
132 | - * |
|
133 | - * @param string $token |
|
134 | - * @param int $id remote Id |
|
135 | - * @param int $shareId internal share Id |
|
136 | - * @param string $remote remote address of the owner |
|
137 | - * @param string $shareWith |
|
138 | - * @param int $permission |
|
139 | - * @return bool |
|
140 | - * @throws \OC\HintException |
|
141 | - * @throws \OC\ServerNotAvailableException |
|
142 | - */ |
|
143 | - public function requestReShare($token, $id, $shareId, $remote, $shareWith, $permission) { |
|
144 | - |
|
145 | - $fields = array( |
|
146 | - 'shareWith' => $shareWith, |
|
147 | - 'token' => $token, |
|
148 | - 'permission' => $permission, |
|
149 | - 'remoteId' => $shareId |
|
150 | - ); |
|
151 | - |
|
152 | - $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $id . '/reshare', $fields); |
|
153 | - $status = json_decode($result['result'], true); |
|
154 | - |
|
155 | - $httpRequestSuccessful = $result['success']; |
|
156 | - $ocsCallSuccessful = $status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200; |
|
157 | - $validToken = isset($status['ocs']['data']['token']) && is_string($status['ocs']['data']['token']); |
|
158 | - $validRemoteId = isset($status['ocs']['data']['remoteId']); |
|
159 | - |
|
160 | - if ($httpRequestSuccessful && $ocsCallSuccessful && $validToken && $validRemoteId) { |
|
161 | - return [ |
|
162 | - $status['ocs']['data']['token'], |
|
163 | - (int)$status['ocs']['data']['remoteId'] |
|
164 | - ]; |
|
165 | - } |
|
166 | - |
|
167 | - return false; |
|
168 | - } |
|
169 | - |
|
170 | - /** |
|
171 | - * send server-to-server unshare to remote server |
|
172 | - * |
|
173 | - * @param string $remote url |
|
174 | - * @param int $id share id |
|
175 | - * @param string $token |
|
176 | - * @return bool |
|
177 | - */ |
|
178 | - public function sendRemoteUnShare($remote, $id, $token) { |
|
179 | - $this->sendUpdateToRemote($remote, $id, $token, 'unshare'); |
|
180 | - } |
|
181 | - |
|
182 | - /** |
|
183 | - * send server-to-server unshare to remote server |
|
184 | - * |
|
185 | - * @param string $remote url |
|
186 | - * @param int $id share id |
|
187 | - * @param string $token |
|
188 | - * @return bool |
|
189 | - */ |
|
190 | - public function sendRevokeShare($remote, $id, $token) { |
|
191 | - $this->sendUpdateToRemote($remote, $id, $token, 'revoke'); |
|
192 | - } |
|
193 | - |
|
194 | - /** |
|
195 | - * send notification to remote server if the permissions was changed |
|
196 | - * |
|
197 | - * @param string $remote |
|
198 | - * @param int $remoteId |
|
199 | - * @param string $token |
|
200 | - * @param int $permissions |
|
201 | - * @return bool |
|
202 | - */ |
|
203 | - public function sendPermissionChange($remote, $remoteId, $token, $permissions) { |
|
204 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'permissions', ['permissions' => $permissions]); |
|
205 | - } |
|
206 | - |
|
207 | - /** |
|
208 | - * forward accept reShare to remote server |
|
209 | - * |
|
210 | - * @param string $remote |
|
211 | - * @param int $remoteId |
|
212 | - * @param string $token |
|
213 | - */ |
|
214 | - public function sendAcceptShare($remote, $remoteId, $token) { |
|
215 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'accept'); |
|
216 | - } |
|
217 | - |
|
218 | - /** |
|
219 | - * forward decline reShare to remote server |
|
220 | - * |
|
221 | - * @param string $remote |
|
222 | - * @param int $remoteId |
|
223 | - * @param string $token |
|
224 | - */ |
|
225 | - public function sendDeclineShare($remote, $remoteId, $token) { |
|
226 | - $this->sendUpdateToRemote($remote, $remoteId, $token, 'decline'); |
|
227 | - } |
|
228 | - |
|
229 | - /** |
|
230 | - * inform remote server whether server-to-server share was accepted/declined |
|
231 | - * |
|
232 | - * @param string $remote |
|
233 | - * @param string $token |
|
234 | - * @param int $remoteId Share id on the remote host |
|
235 | - * @param string $action possible actions: accept, decline, unshare, revoke, permissions |
|
236 | - * @param array $data |
|
237 | - * @param int $try |
|
238 | - * @return boolean |
|
239 | - */ |
|
240 | - public function sendUpdateToRemote($remote, $remoteId, $token, $action, $data = [], $try = 0) { |
|
241 | - |
|
242 | - $fields = array('token' => $token); |
|
243 | - foreach ($data as $key => $value) { |
|
244 | - $fields[$key] = $value; |
|
245 | - } |
|
246 | - |
|
247 | - $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $remoteId . '/' . $action, $fields); |
|
248 | - $status = json_decode($result['result'], true); |
|
249 | - |
|
250 | - if ($result['success'] && |
|
251 | - ($status['ocs']['meta']['statuscode'] === 100 || |
|
252 | - $status['ocs']['meta']['statuscode'] === 200 |
|
253 | - ) |
|
254 | - ) { |
|
255 | - return true; |
|
256 | - } elseif ($try === 0) { |
|
257 | - // only add new job on first try |
|
258 | - $this->jobList->add('OCA\FederatedFileSharing\BackgroundJob\RetryJob', |
|
259 | - [ |
|
260 | - 'remote' => $remote, |
|
261 | - 'remoteId' => $remoteId, |
|
262 | - 'token' => $token, |
|
263 | - 'action' => $action, |
|
264 | - 'data' => json_encode($data), |
|
265 | - 'try' => $try, |
|
266 | - 'lastRun' => $this->getTimestamp() |
|
267 | - ] |
|
268 | - ); |
|
269 | - } |
|
270 | - |
|
271 | - return false; |
|
272 | - } |
|
273 | - |
|
274 | - |
|
275 | - /** |
|
276 | - * return current timestamp |
|
277 | - * |
|
278 | - * @return int |
|
279 | - */ |
|
280 | - protected function getTimestamp() { |
|
281 | - return time(); |
|
282 | - } |
|
283 | - |
|
284 | - /** |
|
285 | - * try http post with the given protocol, if no protocol is given we pick |
|
286 | - * the secure one (https) |
|
287 | - * |
|
288 | - * @param string $remoteDomain |
|
289 | - * @param string $urlSuffix |
|
290 | - * @param array $fields post parameters |
|
291 | - * @param string $action define the action (possible values: share, reshare, accept, decline, unshare, revoke, permissions) |
|
292 | - * @return array |
|
293 | - * @throws \Exception |
|
294 | - */ |
|
295 | - protected function tryHttpPostToShareEndpoint($remoteDomain, $urlSuffix, array $fields, $action="share") { |
|
296 | - |
|
297 | - if ($this->addressHandler->urlContainProtocol($remoteDomain) === false) { |
|
298 | - $remoteDomain = 'https://' . $remoteDomain; |
|
299 | - } |
|
300 | - |
|
301 | - $result = [ |
|
302 | - 'success' => false, |
|
303 | - 'result' => '', |
|
304 | - ]; |
|
305 | - |
|
306 | - // if possible we use the new OCM API |
|
307 | - $ocmResult = $this->tryOCMEndPoint($remoteDomain, $fields, $action); |
|
308 | - if ($ocmResult) { |
|
309 | - $result['success'] = true; |
|
310 | - return $result; |
|
311 | - } |
|
312 | - |
|
313 | - // Fall back to old API |
|
314 | - $client = $this->httpClientService->newClient(); |
|
315 | - $federationEndpoints = $this->discoveryService->discover($remoteDomain, 'FEDERATED_SHARING'); |
|
316 | - $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
317 | - try { |
|
318 | - $response = $client->post($remoteDomain . $endpoint . $urlSuffix . '?format=' . self::RESPONSE_FORMAT, [ |
|
319 | - 'body' => $fields, |
|
320 | - 'timeout' => 10, |
|
321 | - 'connect_timeout' => 10, |
|
322 | - ]); |
|
323 | - $result['result'] = $response->getBody(); |
|
324 | - $result['success'] = true; |
|
325 | - } catch (\Exception $e) { |
|
326 | - // if flat re-sharing is not supported by the remote server |
|
327 | - // we re-throw the exception and fall back to the old behaviour. |
|
328 | - // (flat re-shares has been introduced in Nextcloud 9.1) |
|
329 | - if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
330 | - throw $e; |
|
331 | - } |
|
332 | - } |
|
333 | - |
|
334 | - return $result; |
|
335 | - } |
|
336 | - |
|
337 | - /** |
|
338 | - * check if server supports the new OCM api and ask for the correct end-point |
|
339 | - * |
|
340 | - * @param string $url |
|
341 | - * @return string |
|
342 | - */ |
|
343 | - protected function getOCMEndPoint($url) { |
|
344 | - $client = $this->httpClientService->newClient(); |
|
345 | - try { |
|
346 | - $response = $client->get($url, ['timeout' => 10, 'connect_timeout' => 10]); |
|
347 | - } catch (\Exception $e) { |
|
348 | - return ''; |
|
349 | - } |
|
350 | - |
|
351 | - $result = $response->getBody(); |
|
352 | - $result = json_decode($result, true); |
|
353 | - |
|
354 | - if (isset($result['end-point'])) { |
|
355 | - return $result['end-point']; |
|
356 | - } |
|
357 | - |
|
358 | - return ''; |
|
359 | - } |
|
360 | - |
|
361 | - /** |
|
362 | - * send action regarding federated sharing to the remote server using the OCM API |
|
363 | - * |
|
364 | - * @param $remoteDomain |
|
365 | - * @param $fields |
|
366 | - * @param $action |
|
367 | - * |
|
368 | - * @return bool |
|
369 | - */ |
|
370 | - protected function tryOCMEndPoint($remoteDomain, $fields, $action) { |
|
371 | - switch ($action) { |
|
372 | - case 'share': |
|
373 | - $share = $this->cloudFederationFactory->getCloudFederationShare( |
|
374 | - $fields['shareWith'] . '@' . $remoteDomain, |
|
375 | - $fields['name'], |
|
376 | - '', |
|
377 | - $fields['remoteId'], |
|
378 | - $fields['ownerFederatedId'], |
|
379 | - $fields['owner'], |
|
380 | - $fields['sharedByFederatedId'], |
|
381 | - $fields['sharedBy'], |
|
382 | - $fields['token'], |
|
383 | - 'user', |
|
384 | - 'file' |
|
385 | - ); |
|
386 | - return $this->federationProviderManager->sendShare($share); |
|
387 | - } |
|
388 | - |
|
389 | - } |
|
36 | + const RESPONSE_FORMAT = 'json'; // default response format for ocs calls |
|
37 | + |
|
38 | + /** @var AddressHandler */ |
|
39 | + private $addressHandler; |
|
40 | + |
|
41 | + /** @var IClientService */ |
|
42 | + private $httpClientService; |
|
43 | + |
|
44 | + /** @var IDiscoveryService */ |
|
45 | + private $discoveryService; |
|
46 | + |
|
47 | + /** @var IJobList */ |
|
48 | + private $jobList; |
|
49 | + |
|
50 | + /** @var ICloudFederationProviderManager */ |
|
51 | + private $federationProviderManager; |
|
52 | + |
|
53 | + /** @var ICloudFederationFactory */ |
|
54 | + private $cloudFederationFactory; |
|
55 | + |
|
56 | + /** |
|
57 | + * @param AddressHandler $addressHandler |
|
58 | + * @param IClientService $httpClientService |
|
59 | + * @param IDiscoveryService $discoveryService |
|
60 | + * @param IJobList $jobList |
|
61 | + * @param ICloudFederationProviderManager $federationProviderManager |
|
62 | + * @param ICloudFederationFactory $cloudFederationFactory |
|
63 | + */ |
|
64 | + public function __construct( |
|
65 | + AddressHandler $addressHandler, |
|
66 | + IClientService $httpClientService, |
|
67 | + IDiscoveryService $discoveryService, |
|
68 | + IJobList $jobList, |
|
69 | + ICloudFederationProviderManager $federationProviderManager, |
|
70 | + ICloudFederationFactory $cloudFederationFactory |
|
71 | + ) { |
|
72 | + $this->addressHandler = $addressHandler; |
|
73 | + $this->httpClientService = $httpClientService; |
|
74 | + $this->discoveryService = $discoveryService; |
|
75 | + $this->jobList = $jobList; |
|
76 | + $this->federationProviderManager = $federationProviderManager; |
|
77 | + $this->cloudFederationFactory = $cloudFederationFactory; |
|
78 | + } |
|
79 | + |
|
80 | + /** |
|
81 | + * send server-to-server share to remote server |
|
82 | + * |
|
83 | + * @param string $token |
|
84 | + * @param string $shareWith |
|
85 | + * @param string $name |
|
86 | + * @param int $remote_id |
|
87 | + * @param string $owner |
|
88 | + * @param string $ownerFederatedId |
|
89 | + * @param string $sharedBy |
|
90 | + * @param string $sharedByFederatedId |
|
91 | + * @return bool |
|
92 | + * @throws \OC\HintException |
|
93 | + * @throws \OC\ServerNotAvailableException |
|
94 | + */ |
|
95 | + public function sendRemoteShare($token, $shareWith, $name, $remote_id, $owner, $ownerFederatedId, $sharedBy, $sharedByFederatedId) { |
|
96 | + |
|
97 | + list($user, $remote) = $this->addressHandler->splitUserRemote($shareWith); |
|
98 | + |
|
99 | + if ($user && $remote) { |
|
100 | + $local = $this->addressHandler->generateRemoteURL(); |
|
101 | + |
|
102 | + $fields = array( |
|
103 | + 'shareWith' => $user, |
|
104 | + 'token' => $token, |
|
105 | + 'name' => $name, |
|
106 | + 'remoteId' => $remote_id, |
|
107 | + 'owner' => $owner, |
|
108 | + 'ownerFederatedId' => $ownerFederatedId, |
|
109 | + 'sharedBy' => $sharedBy, |
|
110 | + 'sharedByFederatedId' => $sharedByFederatedId, |
|
111 | + 'remote' => $local, |
|
112 | + ); |
|
113 | + |
|
114 | + $result = $this->tryHttpPostToShareEndpoint($remote, '', $fields); |
|
115 | + $status = json_decode($result['result'], true); |
|
116 | + |
|
117 | + $ocsStatus = isset($status['ocs']); |
|
118 | + $ocsSuccess = $ocsStatus && ($status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200); |
|
119 | + |
|
120 | + if ($result['success'] && (!$ocsStatus ||$ocsSuccess)) { |
|
121 | + \OC_Hook::emit('OCP\Share', 'federated_share_added', ['server' => $remote]); |
|
122 | + return true; |
|
123 | + } |
|
124 | + |
|
125 | + } |
|
126 | + |
|
127 | + return false; |
|
128 | + } |
|
129 | + |
|
130 | + /** |
|
131 | + * ask owner to re-share the file with the given user |
|
132 | + * |
|
133 | + * @param string $token |
|
134 | + * @param int $id remote Id |
|
135 | + * @param int $shareId internal share Id |
|
136 | + * @param string $remote remote address of the owner |
|
137 | + * @param string $shareWith |
|
138 | + * @param int $permission |
|
139 | + * @return bool |
|
140 | + * @throws \OC\HintException |
|
141 | + * @throws \OC\ServerNotAvailableException |
|
142 | + */ |
|
143 | + public function requestReShare($token, $id, $shareId, $remote, $shareWith, $permission) { |
|
144 | + |
|
145 | + $fields = array( |
|
146 | + 'shareWith' => $shareWith, |
|
147 | + 'token' => $token, |
|
148 | + 'permission' => $permission, |
|
149 | + 'remoteId' => $shareId |
|
150 | + ); |
|
151 | + |
|
152 | + $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $id . '/reshare', $fields); |
|
153 | + $status = json_decode($result['result'], true); |
|
154 | + |
|
155 | + $httpRequestSuccessful = $result['success']; |
|
156 | + $ocsCallSuccessful = $status['ocs']['meta']['statuscode'] === 100 || $status['ocs']['meta']['statuscode'] === 200; |
|
157 | + $validToken = isset($status['ocs']['data']['token']) && is_string($status['ocs']['data']['token']); |
|
158 | + $validRemoteId = isset($status['ocs']['data']['remoteId']); |
|
159 | + |
|
160 | + if ($httpRequestSuccessful && $ocsCallSuccessful && $validToken && $validRemoteId) { |
|
161 | + return [ |
|
162 | + $status['ocs']['data']['token'], |
|
163 | + (int)$status['ocs']['data']['remoteId'] |
|
164 | + ]; |
|
165 | + } |
|
166 | + |
|
167 | + return false; |
|
168 | + } |
|
169 | + |
|
170 | + /** |
|
171 | + * send server-to-server unshare to remote server |
|
172 | + * |
|
173 | + * @param string $remote url |
|
174 | + * @param int $id share id |
|
175 | + * @param string $token |
|
176 | + * @return bool |
|
177 | + */ |
|
178 | + public function sendRemoteUnShare($remote, $id, $token) { |
|
179 | + $this->sendUpdateToRemote($remote, $id, $token, 'unshare'); |
|
180 | + } |
|
181 | + |
|
182 | + /** |
|
183 | + * send server-to-server unshare to remote server |
|
184 | + * |
|
185 | + * @param string $remote url |
|
186 | + * @param int $id share id |
|
187 | + * @param string $token |
|
188 | + * @return bool |
|
189 | + */ |
|
190 | + public function sendRevokeShare($remote, $id, $token) { |
|
191 | + $this->sendUpdateToRemote($remote, $id, $token, 'revoke'); |
|
192 | + } |
|
193 | + |
|
194 | + /** |
|
195 | + * send notification to remote server if the permissions was changed |
|
196 | + * |
|
197 | + * @param string $remote |
|
198 | + * @param int $remoteId |
|
199 | + * @param string $token |
|
200 | + * @param int $permissions |
|
201 | + * @return bool |
|
202 | + */ |
|
203 | + public function sendPermissionChange($remote, $remoteId, $token, $permissions) { |
|
204 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'permissions', ['permissions' => $permissions]); |
|
205 | + } |
|
206 | + |
|
207 | + /** |
|
208 | + * forward accept reShare to remote server |
|
209 | + * |
|
210 | + * @param string $remote |
|
211 | + * @param int $remoteId |
|
212 | + * @param string $token |
|
213 | + */ |
|
214 | + public function sendAcceptShare($remote, $remoteId, $token) { |
|
215 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'accept'); |
|
216 | + } |
|
217 | + |
|
218 | + /** |
|
219 | + * forward decline reShare to remote server |
|
220 | + * |
|
221 | + * @param string $remote |
|
222 | + * @param int $remoteId |
|
223 | + * @param string $token |
|
224 | + */ |
|
225 | + public function sendDeclineShare($remote, $remoteId, $token) { |
|
226 | + $this->sendUpdateToRemote($remote, $remoteId, $token, 'decline'); |
|
227 | + } |
|
228 | + |
|
229 | + /** |
|
230 | + * inform remote server whether server-to-server share was accepted/declined |
|
231 | + * |
|
232 | + * @param string $remote |
|
233 | + * @param string $token |
|
234 | + * @param int $remoteId Share id on the remote host |
|
235 | + * @param string $action possible actions: accept, decline, unshare, revoke, permissions |
|
236 | + * @param array $data |
|
237 | + * @param int $try |
|
238 | + * @return boolean |
|
239 | + */ |
|
240 | + public function sendUpdateToRemote($remote, $remoteId, $token, $action, $data = [], $try = 0) { |
|
241 | + |
|
242 | + $fields = array('token' => $token); |
|
243 | + foreach ($data as $key => $value) { |
|
244 | + $fields[$key] = $value; |
|
245 | + } |
|
246 | + |
|
247 | + $result = $this->tryHttpPostToShareEndpoint(rtrim($remote, '/'), '/' . $remoteId . '/' . $action, $fields); |
|
248 | + $status = json_decode($result['result'], true); |
|
249 | + |
|
250 | + if ($result['success'] && |
|
251 | + ($status['ocs']['meta']['statuscode'] === 100 || |
|
252 | + $status['ocs']['meta']['statuscode'] === 200 |
|
253 | + ) |
|
254 | + ) { |
|
255 | + return true; |
|
256 | + } elseif ($try === 0) { |
|
257 | + // only add new job on first try |
|
258 | + $this->jobList->add('OCA\FederatedFileSharing\BackgroundJob\RetryJob', |
|
259 | + [ |
|
260 | + 'remote' => $remote, |
|
261 | + 'remoteId' => $remoteId, |
|
262 | + 'token' => $token, |
|
263 | + 'action' => $action, |
|
264 | + 'data' => json_encode($data), |
|
265 | + 'try' => $try, |
|
266 | + 'lastRun' => $this->getTimestamp() |
|
267 | + ] |
|
268 | + ); |
|
269 | + } |
|
270 | + |
|
271 | + return false; |
|
272 | + } |
|
273 | + |
|
274 | + |
|
275 | + /** |
|
276 | + * return current timestamp |
|
277 | + * |
|
278 | + * @return int |
|
279 | + */ |
|
280 | + protected function getTimestamp() { |
|
281 | + return time(); |
|
282 | + } |
|
283 | + |
|
284 | + /** |
|
285 | + * try http post with the given protocol, if no protocol is given we pick |
|
286 | + * the secure one (https) |
|
287 | + * |
|
288 | + * @param string $remoteDomain |
|
289 | + * @param string $urlSuffix |
|
290 | + * @param array $fields post parameters |
|
291 | + * @param string $action define the action (possible values: share, reshare, accept, decline, unshare, revoke, permissions) |
|
292 | + * @return array |
|
293 | + * @throws \Exception |
|
294 | + */ |
|
295 | + protected function tryHttpPostToShareEndpoint($remoteDomain, $urlSuffix, array $fields, $action="share") { |
|
296 | + |
|
297 | + if ($this->addressHandler->urlContainProtocol($remoteDomain) === false) { |
|
298 | + $remoteDomain = 'https://' . $remoteDomain; |
|
299 | + } |
|
300 | + |
|
301 | + $result = [ |
|
302 | + 'success' => false, |
|
303 | + 'result' => '', |
|
304 | + ]; |
|
305 | + |
|
306 | + // if possible we use the new OCM API |
|
307 | + $ocmResult = $this->tryOCMEndPoint($remoteDomain, $fields, $action); |
|
308 | + if ($ocmResult) { |
|
309 | + $result['success'] = true; |
|
310 | + return $result; |
|
311 | + } |
|
312 | + |
|
313 | + // Fall back to old API |
|
314 | + $client = $this->httpClientService->newClient(); |
|
315 | + $federationEndpoints = $this->discoveryService->discover($remoteDomain, 'FEDERATED_SHARING'); |
|
316 | + $endpoint = isset($federationEndpoints['share']) ? $federationEndpoints['share'] : '/ocs/v2.php/cloud/shares'; |
|
317 | + try { |
|
318 | + $response = $client->post($remoteDomain . $endpoint . $urlSuffix . '?format=' . self::RESPONSE_FORMAT, [ |
|
319 | + 'body' => $fields, |
|
320 | + 'timeout' => 10, |
|
321 | + 'connect_timeout' => 10, |
|
322 | + ]); |
|
323 | + $result['result'] = $response->getBody(); |
|
324 | + $result['success'] = true; |
|
325 | + } catch (\Exception $e) { |
|
326 | + // if flat re-sharing is not supported by the remote server |
|
327 | + // we re-throw the exception and fall back to the old behaviour. |
|
328 | + // (flat re-shares has been introduced in Nextcloud 9.1) |
|
329 | + if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
330 | + throw $e; |
|
331 | + } |
|
332 | + } |
|
333 | + |
|
334 | + return $result; |
|
335 | + } |
|
336 | + |
|
337 | + /** |
|
338 | + * check if server supports the new OCM api and ask for the correct end-point |
|
339 | + * |
|
340 | + * @param string $url |
|
341 | + * @return string |
|
342 | + */ |
|
343 | + protected function getOCMEndPoint($url) { |
|
344 | + $client = $this->httpClientService->newClient(); |
|
345 | + try { |
|
346 | + $response = $client->get($url, ['timeout' => 10, 'connect_timeout' => 10]); |
|
347 | + } catch (\Exception $e) { |
|
348 | + return ''; |
|
349 | + } |
|
350 | + |
|
351 | + $result = $response->getBody(); |
|
352 | + $result = json_decode($result, true); |
|
353 | + |
|
354 | + if (isset($result['end-point'])) { |
|
355 | + return $result['end-point']; |
|
356 | + } |
|
357 | + |
|
358 | + return ''; |
|
359 | + } |
|
360 | + |
|
361 | + /** |
|
362 | + * send action regarding federated sharing to the remote server using the OCM API |
|
363 | + * |
|
364 | + * @param $remoteDomain |
|
365 | + * @param $fields |
|
366 | + * @param $action |
|
367 | + * |
|
368 | + * @return bool |
|
369 | + */ |
|
370 | + protected function tryOCMEndPoint($remoteDomain, $fields, $action) { |
|
371 | + switch ($action) { |
|
372 | + case 'share': |
|
373 | + $share = $this->cloudFederationFactory->getCloudFederationShare( |
|
374 | + $fields['shareWith'] . '@' . $remoteDomain, |
|
375 | + $fields['name'], |
|
376 | + '', |
|
377 | + $fields['remoteId'], |
|
378 | + $fields['ownerFederatedId'], |
|
379 | + $fields['owner'], |
|
380 | + $fields['sharedByFederatedId'], |
|
381 | + $fields['sharedBy'], |
|
382 | + $fields['token'], |
|
383 | + 'user', |
|
384 | + 'file' |
|
385 | + ); |
|
386 | + return $this->federationProviderManager->sendShare($share); |
|
387 | + } |
|
388 | + |
|
389 | + } |
|
390 | 390 | } |
@@ -25,42 +25,42 @@ |
||
25 | 25 | |
26 | 26 | class BadRequestException extends HintException { |
27 | 27 | |
28 | - private $parameterList; |
|
28 | + private $parameterList; |
|
29 | 29 | |
30 | - /** |
|
31 | - * BadRequestException constructor. |
|
32 | - * |
|
33 | - * @param array $missingParameters |
|
34 | - */ |
|
35 | - public function __construct(array $missingParameters) { |
|
36 | - $l = \OC::$server->getL10N('federation'); |
|
37 | - $this->parameterList = $missingParameters; |
|
38 | - $parameterList = implode(',', $missingParameters); |
|
39 | - $message = 'Parameters missing in order to complete the request. Missing Parameters: ' . $parameterList; |
|
40 | - $hint = $l->t('Parameters missing in order to complete the request. Missing Parameters: "%s"', [$parameterList]); |
|
41 | - parent::__construct($message, $hint); |
|
42 | - } |
|
30 | + /** |
|
31 | + * BadRequestException constructor. |
|
32 | + * |
|
33 | + * @param array $missingParameters |
|
34 | + */ |
|
35 | + public function __construct(array $missingParameters) { |
|
36 | + $l = \OC::$server->getL10N('federation'); |
|
37 | + $this->parameterList = $missingParameters; |
|
38 | + $parameterList = implode(',', $missingParameters); |
|
39 | + $message = 'Parameters missing in order to complete the request. Missing Parameters: ' . $parameterList; |
|
40 | + $hint = $l->t('Parameters missing in order to complete the request. Missing Parameters: "%s"', [$parameterList]); |
|
41 | + parent::__construct($message, $hint); |
|
42 | + } |
|
43 | 43 | |
44 | - /** |
|
45 | - * get array with the return message as defined in the OCM API |
|
46 | - * |
|
47 | - * @return array |
|
48 | - */ |
|
49 | - public function getReturnMessage() { |
|
50 | - $result = [ |
|
51 | - 'message' => 'RESOURCE_NOT_FOUND', |
|
52 | - 'validationErrors' =>[ |
|
53 | - ] |
|
54 | - ]; |
|
44 | + /** |
|
45 | + * get array with the return message as defined in the OCM API |
|
46 | + * |
|
47 | + * @return array |
|
48 | + */ |
|
49 | + public function getReturnMessage() { |
|
50 | + $result = [ |
|
51 | + 'message' => 'RESOURCE_NOT_FOUND', |
|
52 | + 'validationErrors' =>[ |
|
53 | + ] |
|
54 | + ]; |
|
55 | 55 | |
56 | - foreach ($this->parameterList as $missingParameter) { |
|
57 | - $result['validationErrors'] = [ |
|
58 | - 'name' => $missingParameter, |
|
59 | - 'message' => 'NOT_FOUND' |
|
60 | - ]; |
|
61 | - } |
|
56 | + foreach ($this->parameterList as $missingParameter) { |
|
57 | + $result['validationErrors'] = [ |
|
58 | + 'name' => $missingParameter, |
|
59 | + 'message' => 'NOT_FOUND' |
|
60 | + ]; |
|
61 | + } |
|
62 | 62 | |
63 | - return $result; |
|
64 | - } |
|
63 | + return $result; |
|
64 | + } |
|
65 | 65 | |
66 | 66 | } |
@@ -25,16 +25,16 @@ |
||
25 | 25 | |
26 | 26 | class AuthenticationFailedException extends HintException { |
27 | 27 | |
28 | - /** |
|
29 | - * BadRequestException constructor. |
|
30 | - * |
|
31 | - * @param array $missingParameters |
|
32 | - */ |
|
33 | - public function __construct() { |
|
34 | - $l = \OC::$server->getL10N('federation'); |
|
35 | - $message = 'Authentication failed, wrong token or provider ID given'; |
|
36 | - $hint = $l->t('Authentication failed, wrong token or provider ID given'); |
|
37 | - parent::__construct($message, $hint); |
|
38 | - } |
|
28 | + /** |
|
29 | + * BadRequestException constructor. |
|
30 | + * |
|
31 | + * @param array $missingParameters |
|
32 | + */ |
|
33 | + public function __construct() { |
|
34 | + $l = \OC::$server->getL10N('federation'); |
|
35 | + $message = 'Authentication failed, wrong token or provider ID given'; |
|
36 | + $hint = $l->t('Authentication failed, wrong token or provider ID given'); |
|
37 | + parent::__construct($message, $hint); |
|
38 | + } |
|
39 | 39 | |
40 | 40 | } |
@@ -39,41 +39,41 @@ |
||
39 | 39 | |
40 | 40 | interface ICloudFederationProvider { |
41 | 41 | |
42 | - /** |
|
43 | - * get the name of the share type, handled by this provider |
|
44 | - * |
|
45 | - * @return string |
|
46 | - * |
|
47 | - * @since 14.0.0 |
|
48 | - */ |
|
49 | - public function getShareType(); |
|
42 | + /** |
|
43 | + * get the name of the share type, handled by this provider |
|
44 | + * |
|
45 | + * @return string |
|
46 | + * |
|
47 | + * @since 14.0.0 |
|
48 | + */ |
|
49 | + public function getShareType(); |
|
50 | 50 | |
51 | - /** |
|
52 | - * share received from another server |
|
53 | - * |
|
54 | - * @param ICloudFederationShare $share |
|
55 | - * @return string provider specific unique ID of the share |
|
56 | - * |
|
57 | - * @throws ProviderCouldNotAddShareException |
|
58 | - * |
|
59 | - * @since 14.0.0 |
|
60 | - */ |
|
61 | - public function shareReceived(ICloudFederationShare $share); |
|
51 | + /** |
|
52 | + * share received from another server |
|
53 | + * |
|
54 | + * @param ICloudFederationShare $share |
|
55 | + * @return string provider specific unique ID of the share |
|
56 | + * |
|
57 | + * @throws ProviderCouldNotAddShareException |
|
58 | + * |
|
59 | + * @since 14.0.0 |
|
60 | + */ |
|
61 | + public function shareReceived(ICloudFederationShare $share); |
|
62 | 62 | |
63 | - /** |
|
64 | - * notification received from another server |
|
65 | - * |
|
66 | - * @param string $notificationType (e.g SHARE_ACCEPTED) |
|
67 | - * @param string $providerId share ID |
|
68 | - * @param array $notification provider specific notification |
|
69 | - * |
|
70 | - * @throws ShareNotFoundException |
|
71 | - * @throws ActionNotSupportedException |
|
72 | - * @throws BadRequestException |
|
73 | - * @throws AuthenticationFailedException |
|
74 | - * |
|
75 | - * @since 14.0.0 |
|
76 | - */ |
|
77 | - public function notificationReceived($notificationType, $providerId, array $notification); |
|
63 | + /** |
|
64 | + * notification received from another server |
|
65 | + * |
|
66 | + * @param string $notificationType (e.g SHARE_ACCEPTED) |
|
67 | + * @param string $providerId share ID |
|
68 | + * @param array $notification provider specific notification |
|
69 | + * |
|
70 | + * @throws ShareNotFoundException |
|
71 | + * @throws ActionNotSupportedException |
|
72 | + * @throws BadRequestException |
|
73 | + * @throws AuthenticationFailedException |
|
74 | + * |
|
75 | + * @since 14.0.0 |
|
76 | + */ |
|
77 | + public function notificationReceived($notificationType, $providerId, array $notification); |
|
78 | 78 | |
79 | 79 | } |
@@ -36,172 +36,172 @@ |
||
36 | 36 | */ |
37 | 37 | interface IShareProvider { |
38 | 38 | |
39 | - /** |
|
40 | - * Return the identifier of this provider. |
|
41 | - * |
|
42 | - * @return string Containing only [a-zA-Z0-9] |
|
43 | - * @since 9.0.0 |
|
44 | - */ |
|
45 | - public function identifier(); |
|
46 | - |
|
47 | - /** |
|
48 | - * Create a share |
|
49 | - * |
|
50 | - * @param \OCP\Share\IShare $share |
|
51 | - * @return \OCP\Share\IShare The share object |
|
52 | - * @since 9.0.0 |
|
53 | - */ |
|
54 | - public function create(\OCP\Share\IShare $share); |
|
55 | - |
|
56 | - /** |
|
57 | - * Update a share |
|
58 | - * |
|
59 | - * @param \OCP\Share\IShare $share |
|
60 | - * @return \OCP\Share\IShare The share object |
|
61 | - * @since 9.0.0 |
|
62 | - */ |
|
63 | - public function update(\OCP\Share\IShare $share); |
|
64 | - |
|
65 | - /** |
|
66 | - * Delete a share |
|
67 | - * |
|
68 | - * @param \OCP\Share\IShare $share |
|
69 | - * @since 9.0.0 |
|
70 | - */ |
|
71 | - public function delete(\OCP\Share\IShare $share); |
|
72 | - |
|
73 | - /** |
|
74 | - * Unshare a file from self as recipient. |
|
75 | - * This may require special handling. If a user unshares a group |
|
76 | - * share from their self then the original group share should still exist. |
|
77 | - * |
|
78 | - * @param \OCP\Share\IShare $share |
|
79 | - * @param string $recipient UserId of the recipient |
|
80 | - * @since 9.0.0 |
|
81 | - */ |
|
82 | - public function deleteFromSelf(\OCP\Share\IShare $share, $recipient); |
|
83 | - |
|
84 | - /** |
|
85 | - * Move a share as a recipient. |
|
86 | - * This is updating the share target. Thus the mount point of the recipient. |
|
87 | - * This may require special handling. If a user moves a group share |
|
88 | - * the target should only be changed for them. |
|
89 | - * |
|
90 | - * @param \OCP\Share\IShare $share |
|
91 | - * @param string $recipient userId of recipient |
|
92 | - * @return \OCP\Share\IShare |
|
93 | - * @since 9.0.0 |
|
94 | - */ |
|
95 | - public function move(\OCP\Share\IShare $share, $recipient); |
|
96 | - |
|
97 | - /** |
|
98 | - * Get all shares by the given user in a folder |
|
99 | - * |
|
100 | - * @param string $userId |
|
101 | - * @param Folder $node |
|
102 | - * @param bool $reshares Also get the shares where $user is the owner instead of just the shares where $user is the initiator |
|
103 | - * @return \OCP\Share\IShare[] |
|
104 | - * @since 11.0.0 |
|
105 | - */ |
|
106 | - public function getSharesInFolder($userId, Folder $node, $reshares); |
|
107 | - |
|
108 | - /** |
|
109 | - * Get all shares by the given user |
|
110 | - * |
|
111 | - * @param string $userId |
|
112 | - * @param int $shareType |
|
113 | - * @param Node|null $node |
|
114 | - * @param bool $reshares Also get the shares where $user is the owner instead of just the shares where $user is the initiator |
|
115 | - * @param int $limit The maximum number of shares to be returned, -1 for all shares |
|
116 | - * @param int $offset |
|
117 | - * @return \OCP\Share\IShare[] |
|
118 | - * @since 9.0.0 |
|
119 | - */ |
|
120 | - public function getSharesBy($userId, $shareType, $node, $reshares, $limit, $offset); |
|
121 | - |
|
122 | - /** |
|
123 | - * Get share by id |
|
124 | - * |
|
125 | - * @param int $id |
|
126 | - * @param string|null $recipientId |
|
127 | - * @return \OCP\Share\IShare |
|
128 | - * @throws ShareNotFoundException |
|
129 | - * @since 9.0.0 |
|
130 | - */ |
|
131 | - public function getShareById($id, $recipientId = null); |
|
132 | - |
|
133 | - /** |
|
134 | - * Get shares for a given path |
|
135 | - * |
|
136 | - * @param Node $path |
|
137 | - * @return \OCP\Share\IShare[] |
|
138 | - * @since 9.0.0 |
|
139 | - */ |
|
140 | - public function getSharesByPath(Node $path); |
|
141 | - |
|
142 | - /** |
|
143 | - * Get shared with the given user |
|
144 | - * |
|
145 | - * @param string $userId get shares where this user is the recipient |
|
146 | - * @param int $shareType |
|
147 | - * @param Node|null $node |
|
148 | - * @param int $limit The max number of entries returned, -1 for all |
|
149 | - * @param int $offset |
|
150 | - * @return \OCP\Share\IShare[] |
|
151 | - * @since 9.0.0 |
|
152 | - */ |
|
153 | - public function getSharedWith($userId, $shareType, $node, $limit, $offset); |
|
154 | - |
|
155 | - /** |
|
156 | - * Get a share by token |
|
157 | - * |
|
158 | - * @param string $token |
|
159 | - * @return \OCP\Share\IShare |
|
160 | - * @throws ShareNotFound |
|
161 | - * @since 9.0.0 |
|
162 | - */ |
|
163 | - public function getShareByToken($token); |
|
164 | - |
|
165 | - /** |
|
166 | - * A user is deleted from the system |
|
167 | - * So clean up the relevant shares. |
|
168 | - * |
|
169 | - * @param string $uid |
|
170 | - * @param int $shareType |
|
171 | - * @since 9.1.0 |
|
172 | - */ |
|
173 | - public function userDeleted($uid, $shareType); |
|
174 | - |
|
175 | - /** |
|
176 | - * A group is deleted from the system. |
|
177 | - * We have to clean up all shares to this group. |
|
178 | - * Providers not handling group shares should just return |
|
179 | - * |
|
180 | - * @param string $gid |
|
181 | - * @since 9.1.0 |
|
182 | - */ |
|
183 | - public function groupDeleted($gid); |
|
184 | - |
|
185 | - /** |
|
186 | - * A user is deleted from a group |
|
187 | - * We have to clean up all the related user specific group shares |
|
188 | - * Providers not handling group shares should just return |
|
189 | - * |
|
190 | - * @param string $uid |
|
191 | - * @param string $gid |
|
192 | - * @since 9.1.0 |
|
193 | - */ |
|
194 | - public function userDeletedFromGroup($uid, $gid); |
|
195 | - |
|
196 | - /** |
|
197 | - * Get the access list to the array of provided nodes. |
|
198 | - * |
|
199 | - * @see IManager::getAccessList() for sample docs |
|
200 | - * |
|
201 | - * @param Node[] $nodes The list of nodes to get access for |
|
202 | - * @param bool $currentAccess If current access is required (like for removed shares that might get revived later) |
|
203 | - * @return array |
|
204 | - * @since 12 |
|
205 | - */ |
|
206 | - public function getAccessList($nodes, $currentAccess); |
|
39 | + /** |
|
40 | + * Return the identifier of this provider. |
|
41 | + * |
|
42 | + * @return string Containing only [a-zA-Z0-9] |
|
43 | + * @since 9.0.0 |
|
44 | + */ |
|
45 | + public function identifier(); |
|
46 | + |
|
47 | + /** |
|
48 | + * Create a share |
|
49 | + * |
|
50 | + * @param \OCP\Share\IShare $share |
|
51 | + * @return \OCP\Share\IShare The share object |
|
52 | + * @since 9.0.0 |
|
53 | + */ |
|
54 | + public function create(\OCP\Share\IShare $share); |
|
55 | + |
|
56 | + /** |
|
57 | + * Update a share |
|
58 | + * |
|
59 | + * @param \OCP\Share\IShare $share |
|
60 | + * @return \OCP\Share\IShare The share object |
|
61 | + * @since 9.0.0 |
|
62 | + */ |
|
63 | + public function update(\OCP\Share\IShare $share); |
|
64 | + |
|
65 | + /** |
|
66 | + * Delete a share |
|
67 | + * |
|
68 | + * @param \OCP\Share\IShare $share |
|
69 | + * @since 9.0.0 |
|
70 | + */ |
|
71 | + public function delete(\OCP\Share\IShare $share); |
|
72 | + |
|
73 | + /** |
|
74 | + * Unshare a file from self as recipient. |
|
75 | + * This may require special handling. If a user unshares a group |
|
76 | + * share from their self then the original group share should still exist. |
|
77 | + * |
|
78 | + * @param \OCP\Share\IShare $share |
|
79 | + * @param string $recipient UserId of the recipient |
|
80 | + * @since 9.0.0 |
|
81 | + */ |
|
82 | + public function deleteFromSelf(\OCP\Share\IShare $share, $recipient); |
|
83 | + |
|
84 | + /** |
|
85 | + * Move a share as a recipient. |
|
86 | + * This is updating the share target. Thus the mount point of the recipient. |
|
87 | + * This may require special handling. If a user moves a group share |
|
88 | + * the target should only be changed for them. |
|
89 | + * |
|
90 | + * @param \OCP\Share\IShare $share |
|
91 | + * @param string $recipient userId of recipient |
|
92 | + * @return \OCP\Share\IShare |
|
93 | + * @since 9.0.0 |
|
94 | + */ |
|
95 | + public function move(\OCP\Share\IShare $share, $recipient); |
|
96 | + |
|
97 | + /** |
|
98 | + * Get all shares by the given user in a folder |
|
99 | + * |
|
100 | + * @param string $userId |
|
101 | + * @param Folder $node |
|
102 | + * @param bool $reshares Also get the shares where $user is the owner instead of just the shares where $user is the initiator |
|
103 | + * @return \OCP\Share\IShare[] |
|
104 | + * @since 11.0.0 |
|
105 | + */ |
|
106 | + public function getSharesInFolder($userId, Folder $node, $reshares); |
|
107 | + |
|
108 | + /** |
|
109 | + * Get all shares by the given user |
|
110 | + * |
|
111 | + * @param string $userId |
|
112 | + * @param int $shareType |
|
113 | + * @param Node|null $node |
|
114 | + * @param bool $reshares Also get the shares where $user is the owner instead of just the shares where $user is the initiator |
|
115 | + * @param int $limit The maximum number of shares to be returned, -1 for all shares |
|
116 | + * @param int $offset |
|
117 | + * @return \OCP\Share\IShare[] |
|
118 | + * @since 9.0.0 |
|
119 | + */ |
|
120 | + public function getSharesBy($userId, $shareType, $node, $reshares, $limit, $offset); |
|
121 | + |
|
122 | + /** |
|
123 | + * Get share by id |
|
124 | + * |
|
125 | + * @param int $id |
|
126 | + * @param string|null $recipientId |
|
127 | + * @return \OCP\Share\IShare |
|
128 | + * @throws ShareNotFoundException |
|
129 | + * @since 9.0.0 |
|
130 | + */ |
|
131 | + public function getShareById($id, $recipientId = null); |
|
132 | + |
|
133 | + /** |
|
134 | + * Get shares for a given path |
|
135 | + * |
|
136 | + * @param Node $path |
|
137 | + * @return \OCP\Share\IShare[] |
|
138 | + * @since 9.0.0 |
|
139 | + */ |
|
140 | + public function getSharesByPath(Node $path); |
|
141 | + |
|
142 | + /** |
|
143 | + * Get shared with the given user |
|
144 | + * |
|
145 | + * @param string $userId get shares where this user is the recipient |
|
146 | + * @param int $shareType |
|
147 | + * @param Node|null $node |
|
148 | + * @param int $limit The max number of entries returned, -1 for all |
|
149 | + * @param int $offset |
|
150 | + * @return \OCP\Share\IShare[] |
|
151 | + * @since 9.0.0 |
|
152 | + */ |
|
153 | + public function getSharedWith($userId, $shareType, $node, $limit, $offset); |
|
154 | + |
|
155 | + /** |
|
156 | + * Get a share by token |
|
157 | + * |
|
158 | + * @param string $token |
|
159 | + * @return \OCP\Share\IShare |
|
160 | + * @throws ShareNotFound |
|
161 | + * @since 9.0.0 |
|
162 | + */ |
|
163 | + public function getShareByToken($token); |
|
164 | + |
|
165 | + /** |
|
166 | + * A user is deleted from the system |
|
167 | + * So clean up the relevant shares. |
|
168 | + * |
|
169 | + * @param string $uid |
|
170 | + * @param int $shareType |
|
171 | + * @since 9.1.0 |
|
172 | + */ |
|
173 | + public function userDeleted($uid, $shareType); |
|
174 | + |
|
175 | + /** |
|
176 | + * A group is deleted from the system. |
|
177 | + * We have to clean up all shares to this group. |
|
178 | + * Providers not handling group shares should just return |
|
179 | + * |
|
180 | + * @param string $gid |
|
181 | + * @since 9.1.0 |
|
182 | + */ |
|
183 | + public function groupDeleted($gid); |
|
184 | + |
|
185 | + /** |
|
186 | + * A user is deleted from a group |
|
187 | + * We have to clean up all the related user specific group shares |
|
188 | + * Providers not handling group shares should just return |
|
189 | + * |
|
190 | + * @param string $uid |
|
191 | + * @param string $gid |
|
192 | + * @since 9.1.0 |
|
193 | + */ |
|
194 | + public function userDeletedFromGroup($uid, $gid); |
|
195 | + |
|
196 | + /** |
|
197 | + * Get the access list to the array of provided nodes. |
|
198 | + * |
|
199 | + * @see IManager::getAccessList() for sample docs |
|
200 | + * |
|
201 | + * @param Node[] $nodes The list of nodes to get access for |
|
202 | + * @param bool $currentAccess If current access is required (like for removed shares that might get revived later) |
|
203 | + * @return array |
|
204 | + * @since 12 |
|
205 | + */ |
|
206 | + public function getAccessList($nodes, $currentAccess); |
|
207 | 207 | } |
@@ -42,190 +42,190 @@ |
||
42 | 42 | */ |
43 | 43 | class CloudFederationProviderManager implements ICloudFederationProviderManager { |
44 | 44 | |
45 | - /** @var array list of available cloud federation providers */ |
|
46 | - private $cloudFederationProvider; |
|
47 | - |
|
48 | - /** @var IAppManager */ |
|
49 | - private $appManager; |
|
50 | - |
|
51 | - /** @var IClientService */ |
|
52 | - private $httpClientService; |
|
53 | - |
|
54 | - /** @var ICloudIdManager */ |
|
55 | - private $cloudIdManager; |
|
56 | - |
|
57 | - /** @var ILogger */ |
|
58 | - private $logger; |
|
59 | - |
|
60 | - private $supportedAPIVersion = '1.0-proposal1'; |
|
61 | - |
|
62 | - /** |
|
63 | - * CloudFederationProviderManager constructor. |
|
64 | - * |
|
65 | - * @param IAppManager $appManager |
|
66 | - * @param IClientService $httpClientService |
|
67 | - * @param ICloudIdManager $cloudIdManager |
|
68 | - * @param ILogger $logger |
|
69 | - */ |
|
70 | - public function __construct(IAppManager $appManager, |
|
71 | - IClientService $httpClientService, |
|
72 | - ICloudIdManager $cloudIdManager, |
|
73 | - ILogger $logger) { |
|
74 | - $this->cloudFederationProvider= []; |
|
75 | - $this->appManager = $appManager; |
|
76 | - $this->httpClientService = $httpClientService; |
|
77 | - $this->cloudIdManager = $cloudIdManager; |
|
78 | - $this->logger = $logger; |
|
79 | - } |
|
80 | - |
|
81 | - |
|
82 | - /** |
|
83 | - * Registers an callback function which must return an cloud federation provider |
|
84 | - * |
|
85 | - * @param string $shareType which share type does the provider handles |
|
86 | - * @param string $displayName user facing name of the federated share provider |
|
87 | - * @param callable $callback |
|
88 | - */ |
|
89 | - public function addCloudFederationProvider($shareType, $displayName, callable $callback) { |
|
90 | - \OC::$server->getRemoteApiFactory(); |
|
91 | - |
|
92 | - $this->cloudFederationProvider[$shareType] = [ |
|
93 | - 'shareType' => $shareType, |
|
94 | - 'displayName' => $displayName, |
|
95 | - 'callback' => $callback, |
|
96 | - ]; |
|
97 | - |
|
98 | - } |
|
99 | - |
|
100 | - /** |
|
101 | - * remove cloud federation provider |
|
102 | - * |
|
103 | - * @param string $providerId |
|
104 | - */ |
|
105 | - public function removeCloudFederationProvider($providerId) { |
|
106 | - unset($this->cloudFederationProvider[$providerId]); |
|
107 | - } |
|
108 | - |
|
109 | - /** |
|
110 | - * get a list of all cloudFederationProviders |
|
111 | - * |
|
112 | - * @return array [id => ['id' => $id, 'displayName' => $displayName, 'callback' => callback]] |
|
113 | - */ |
|
114 | - public function getAllCloudFederationProviders() { |
|
115 | - return $this->cloudFederationProvider; |
|
116 | - } |
|
117 | - |
|
118 | - /** |
|
119 | - * get a specific cloud federation provider |
|
120 | - * |
|
121 | - * @param string $shareType |
|
122 | - * @return ICloudFederationProvider |
|
123 | - * @throws ProviderDoesNotExistsException |
|
124 | - */ |
|
125 | - public function getCloudFederationProvider($shareType) { |
|
126 | - if (isset($this->cloudFederationProvider[$shareType])) { |
|
127 | - return call_user_func($this->cloudFederationProvider[$shareType]['callback']); |
|
128 | - } else { |
|
129 | - throw new ProviderDoesNotExistsException($shareType); |
|
130 | - } |
|
131 | - } |
|
132 | - |
|
133 | - public function sendShare(ICloudFederationShare $share) { |
|
134 | - $cloudID = $this->cloudIdManager->resolveCloudId($share->getShareWith()); |
|
135 | - $ocmEndPoint = $this->getOCMEndPoint($cloudID->getRemote()); |
|
136 | - |
|
137 | - if (empty($ocmEndPoint)) { |
|
138 | - return false; |
|
139 | - } |
|
140 | - |
|
141 | - $client = $this->httpClientService->newClient(); |
|
142 | - try { |
|
143 | - $response = $client->post($ocmEndPoint . '/shares', [ |
|
144 | - 'body' => $share->getShare(), |
|
145 | - 'timeout' => 10, |
|
146 | - 'connect_timeout' => 10, |
|
147 | - ]); |
|
148 | - |
|
149 | - if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
150 | - return true; |
|
151 | - } |
|
152 | - |
|
153 | - } catch (\Exception $e) { |
|
154 | - // if flat re-sharing is not supported by the remote server |
|
155 | - // we re-throw the exception and fall back to the old behaviour. |
|
156 | - // (flat re-shares has been introduced in Nextcloud 9.1) |
|
157 | - if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
158 | - throw $e; |
|
159 | - } |
|
160 | - } |
|
161 | - |
|
162 | - return false; |
|
163 | - |
|
164 | - } |
|
165 | - |
|
166 | - /** |
|
167 | - * @param string $url |
|
168 | - * @param ICloudFederationNotification $notification |
|
169 | - * @return bool |
|
170 | - */ |
|
171 | - public function sendNotification($url, ICloudFederationNotification $notification) { |
|
172 | - $ocmEndPoint = $this->getOCMEndPoint($url); |
|
173 | - |
|
174 | - if (empty($ocmEndPoint)) { |
|
175 | - return false; |
|
176 | - } |
|
177 | - |
|
178 | - $client = $this->httpClientService->newClient(); |
|
179 | - try { |
|
180 | - $response = $client->post($ocmEndPoint . '/notifications', [ |
|
181 | - 'body' => $notification->getMessage(), |
|
182 | - 'timeout' => 10, |
|
183 | - 'connect_timeout' => 10, |
|
184 | - ]); |
|
185 | - if ($response->getStatusCode() === Http::STATUS_OK) { |
|
186 | - return true; |
|
187 | - } |
|
188 | - } catch (\Exception $e) { |
|
189 | - // log the error and return false |
|
190 | - $this->logger->error('error while sending notification for federated share: ' . $e->getMessage()); |
|
191 | - } |
|
192 | - |
|
193 | - return false; |
|
194 | - } |
|
195 | - |
|
196 | - /** |
|
197 | - * check if the new cloud federation API is ready to be used |
|
198 | - * |
|
199 | - * @return bool |
|
200 | - */ |
|
201 | - public function isReady() { |
|
202 | - return $this->appManager->isEnabledForUser('cloud_federation_api', false); |
|
203 | - } |
|
204 | - /** |
|
205 | - * check if server supports the new OCM api and ask for the correct end-point |
|
206 | - * |
|
207 | - * @param string $url full base URL of the cloud server |
|
208 | - * @return string |
|
209 | - */ |
|
210 | - protected function getOCMEndPoint($url) { |
|
211 | - $client = $this->httpClientService->newClient(); |
|
212 | - try { |
|
213 | - $response = $client->get($url . '/ocm-provider/', ['timeout' => 10, 'connect_timeout' => 10]); |
|
214 | - } catch (\Exception $e) { |
|
215 | - return ''; |
|
216 | - } |
|
217 | - |
|
218 | - $result = $response->getBody(); |
|
219 | - $result = json_decode($result, true); |
|
220 | - |
|
221 | - $supportedVersion = isset($result['apiVersion']) && $result['apiVersion'] === $this->supportedAPIVersion; |
|
222 | - |
|
223 | - if (isset($result['endPoint']) && $supportedVersion) { |
|
224 | - return $result['endPoint']; |
|
225 | - } |
|
226 | - |
|
227 | - return ''; |
|
228 | - } |
|
45 | + /** @var array list of available cloud federation providers */ |
|
46 | + private $cloudFederationProvider; |
|
47 | + |
|
48 | + /** @var IAppManager */ |
|
49 | + private $appManager; |
|
50 | + |
|
51 | + /** @var IClientService */ |
|
52 | + private $httpClientService; |
|
53 | + |
|
54 | + /** @var ICloudIdManager */ |
|
55 | + private $cloudIdManager; |
|
56 | + |
|
57 | + /** @var ILogger */ |
|
58 | + private $logger; |
|
59 | + |
|
60 | + private $supportedAPIVersion = '1.0-proposal1'; |
|
61 | + |
|
62 | + /** |
|
63 | + * CloudFederationProviderManager constructor. |
|
64 | + * |
|
65 | + * @param IAppManager $appManager |
|
66 | + * @param IClientService $httpClientService |
|
67 | + * @param ICloudIdManager $cloudIdManager |
|
68 | + * @param ILogger $logger |
|
69 | + */ |
|
70 | + public function __construct(IAppManager $appManager, |
|
71 | + IClientService $httpClientService, |
|
72 | + ICloudIdManager $cloudIdManager, |
|
73 | + ILogger $logger) { |
|
74 | + $this->cloudFederationProvider= []; |
|
75 | + $this->appManager = $appManager; |
|
76 | + $this->httpClientService = $httpClientService; |
|
77 | + $this->cloudIdManager = $cloudIdManager; |
|
78 | + $this->logger = $logger; |
|
79 | + } |
|
80 | + |
|
81 | + |
|
82 | + /** |
|
83 | + * Registers an callback function which must return an cloud federation provider |
|
84 | + * |
|
85 | + * @param string $shareType which share type does the provider handles |
|
86 | + * @param string $displayName user facing name of the federated share provider |
|
87 | + * @param callable $callback |
|
88 | + */ |
|
89 | + public function addCloudFederationProvider($shareType, $displayName, callable $callback) { |
|
90 | + \OC::$server->getRemoteApiFactory(); |
|
91 | + |
|
92 | + $this->cloudFederationProvider[$shareType] = [ |
|
93 | + 'shareType' => $shareType, |
|
94 | + 'displayName' => $displayName, |
|
95 | + 'callback' => $callback, |
|
96 | + ]; |
|
97 | + |
|
98 | + } |
|
99 | + |
|
100 | + /** |
|
101 | + * remove cloud federation provider |
|
102 | + * |
|
103 | + * @param string $providerId |
|
104 | + */ |
|
105 | + public function removeCloudFederationProvider($providerId) { |
|
106 | + unset($this->cloudFederationProvider[$providerId]); |
|
107 | + } |
|
108 | + |
|
109 | + /** |
|
110 | + * get a list of all cloudFederationProviders |
|
111 | + * |
|
112 | + * @return array [id => ['id' => $id, 'displayName' => $displayName, 'callback' => callback]] |
|
113 | + */ |
|
114 | + public function getAllCloudFederationProviders() { |
|
115 | + return $this->cloudFederationProvider; |
|
116 | + } |
|
117 | + |
|
118 | + /** |
|
119 | + * get a specific cloud federation provider |
|
120 | + * |
|
121 | + * @param string $shareType |
|
122 | + * @return ICloudFederationProvider |
|
123 | + * @throws ProviderDoesNotExistsException |
|
124 | + */ |
|
125 | + public function getCloudFederationProvider($shareType) { |
|
126 | + if (isset($this->cloudFederationProvider[$shareType])) { |
|
127 | + return call_user_func($this->cloudFederationProvider[$shareType]['callback']); |
|
128 | + } else { |
|
129 | + throw new ProviderDoesNotExistsException($shareType); |
|
130 | + } |
|
131 | + } |
|
132 | + |
|
133 | + public function sendShare(ICloudFederationShare $share) { |
|
134 | + $cloudID = $this->cloudIdManager->resolveCloudId($share->getShareWith()); |
|
135 | + $ocmEndPoint = $this->getOCMEndPoint($cloudID->getRemote()); |
|
136 | + |
|
137 | + if (empty($ocmEndPoint)) { |
|
138 | + return false; |
|
139 | + } |
|
140 | + |
|
141 | + $client = $this->httpClientService->newClient(); |
|
142 | + try { |
|
143 | + $response = $client->post($ocmEndPoint . '/shares', [ |
|
144 | + 'body' => $share->getShare(), |
|
145 | + 'timeout' => 10, |
|
146 | + 'connect_timeout' => 10, |
|
147 | + ]); |
|
148 | + |
|
149 | + if ($response->getStatusCode() === Http::STATUS_CREATED) { |
|
150 | + return true; |
|
151 | + } |
|
152 | + |
|
153 | + } catch (\Exception $e) { |
|
154 | + // if flat re-sharing is not supported by the remote server |
|
155 | + // we re-throw the exception and fall back to the old behaviour. |
|
156 | + // (flat re-shares has been introduced in Nextcloud 9.1) |
|
157 | + if ($e->getCode() === Http::STATUS_INTERNAL_SERVER_ERROR) { |
|
158 | + throw $e; |
|
159 | + } |
|
160 | + } |
|
161 | + |
|
162 | + return false; |
|
163 | + |
|
164 | + } |
|
165 | + |
|
166 | + /** |
|
167 | + * @param string $url |
|
168 | + * @param ICloudFederationNotification $notification |
|
169 | + * @return bool |
|
170 | + */ |
|
171 | + public function sendNotification($url, ICloudFederationNotification $notification) { |
|
172 | + $ocmEndPoint = $this->getOCMEndPoint($url); |
|
173 | + |
|
174 | + if (empty($ocmEndPoint)) { |
|
175 | + return false; |
|
176 | + } |
|
177 | + |
|
178 | + $client = $this->httpClientService->newClient(); |
|
179 | + try { |
|
180 | + $response = $client->post($ocmEndPoint . '/notifications', [ |
|
181 | + 'body' => $notification->getMessage(), |
|
182 | + 'timeout' => 10, |
|
183 | + 'connect_timeout' => 10, |
|
184 | + ]); |
|
185 | + if ($response->getStatusCode() === Http::STATUS_OK) { |
|
186 | + return true; |
|
187 | + } |
|
188 | + } catch (\Exception $e) { |
|
189 | + // log the error and return false |
|
190 | + $this->logger->error('error while sending notification for federated share: ' . $e->getMessage()); |
|
191 | + } |
|
192 | + |
|
193 | + return false; |
|
194 | + } |
|
195 | + |
|
196 | + /** |
|
197 | + * check if the new cloud federation API is ready to be used |
|
198 | + * |
|
199 | + * @return bool |
|
200 | + */ |
|
201 | + public function isReady() { |
|
202 | + return $this->appManager->isEnabledForUser('cloud_federation_api', false); |
|
203 | + } |
|
204 | + /** |
|
205 | + * check if server supports the new OCM api and ask for the correct end-point |
|
206 | + * |
|
207 | + * @param string $url full base URL of the cloud server |
|
208 | + * @return string |
|
209 | + */ |
|
210 | + protected function getOCMEndPoint($url) { |
|
211 | + $client = $this->httpClientService->newClient(); |
|
212 | + try { |
|
213 | + $response = $client->get($url . '/ocm-provider/', ['timeout' => 10, 'connect_timeout' => 10]); |
|
214 | + } catch (\Exception $e) { |
|
215 | + return ''; |
|
216 | + } |
|
217 | + |
|
218 | + $result = $response->getBody(); |
|
219 | + $result = json_decode($result, true); |
|
220 | + |
|
221 | + $supportedVersion = isset($result['apiVersion']) && $result['apiVersion'] === $this->supportedAPIVersion; |
|
222 | + |
|
223 | + if (isset($result['endPoint']) && $supportedVersion) { |
|
224 | + return $result['endPoint']; |
|
225 | + } |
|
226 | + |
|
227 | + return ''; |
|
228 | + } |
|
229 | 229 | |
230 | 230 | |
231 | 231 | } |
@@ -28,37 +28,37 @@ |
||
28 | 28 | |
29 | 29 | class Capabilities implements ICapability { |
30 | 30 | |
31 | - /** @var IURLGenerator */ |
|
32 | - private $urlGenerator; |
|
31 | + /** @var IURLGenerator */ |
|
32 | + private $urlGenerator; |
|
33 | 33 | |
34 | - public function __construct(IURLGenerator $urlGenerator) { |
|
35 | - $this->urlGenerator = $urlGenerator; |
|
36 | - } |
|
34 | + public function __construct(IURLGenerator $urlGenerator) { |
|
35 | + $this->urlGenerator = $urlGenerator; |
|
36 | + } |
|
37 | 37 | |
38 | - /** |
|
39 | - * Function an app uses to return the capabilities |
|
40 | - * |
|
41 | - * @return array Array containing the apps capabilities |
|
42 | - * @since 8.2.0 |
|
43 | - */ |
|
44 | - public function getCapabilities() { |
|
45 | - $url = $this->urlGenerator->linkToRouteAbsolute('cloud_federation_api.requesthandlercontroller.addShare'); |
|
46 | - $capabilities = ['ocm' => |
|
47 | - [ |
|
48 | - 'enabled' => true, |
|
49 | - 'apiVersion' => '1.0-proposal1', |
|
50 | - 'endPoint' => substr($url, 0, strrpos($url, '/')), |
|
51 | - 'shareTypes' => [ |
|
52 | - [ |
|
53 | - 'name' => 'file', |
|
54 | - 'protocols' => [ |
|
55 | - 'webdav' => '/public.php/webdav/', |
|
56 | - ] |
|
57 | - ], |
|
58 | - ] |
|
59 | - ] |
|
60 | - ]; |
|
38 | + /** |
|
39 | + * Function an app uses to return the capabilities |
|
40 | + * |
|
41 | + * @return array Array containing the apps capabilities |
|
42 | + * @since 8.2.0 |
|
43 | + */ |
|
44 | + public function getCapabilities() { |
|
45 | + $url = $this->urlGenerator->linkToRouteAbsolute('cloud_federation_api.requesthandlercontroller.addShare'); |
|
46 | + $capabilities = ['ocm' => |
|
47 | + [ |
|
48 | + 'enabled' => true, |
|
49 | + 'apiVersion' => '1.0-proposal1', |
|
50 | + 'endPoint' => substr($url, 0, strrpos($url, '/')), |
|
51 | + 'shareTypes' => [ |
|
52 | + [ |
|
53 | + 'name' => 'file', |
|
54 | + 'protocols' => [ |
|
55 | + 'webdav' => '/public.php/webdav/', |
|
56 | + ] |
|
57 | + ], |
|
58 | + ] |
|
59 | + ] |
|
60 | + ]; |
|
61 | 61 | |
62 | - return $capabilities; |
|
63 | - } |
|
62 | + return $capabilities; |
|
63 | + } |
|
64 | 64 | } |
@@ -51,233 +51,233 @@ |
||
51 | 51 | */ |
52 | 52 | class RequestHandlerController extends Controller { |
53 | 53 | |
54 | - /** @var ILogger */ |
|
55 | - private $logger; |
|
54 | + /** @var ILogger */ |
|
55 | + private $logger; |
|
56 | 56 | |
57 | - /** @var IUserManager */ |
|
58 | - private $userManager; |
|
57 | + /** @var IUserManager */ |
|
58 | + private $userManager; |
|
59 | 59 | |
60 | - /** @var IURLGenerator */ |
|
61 | - private $urlGenerator; |
|
60 | + /** @var IURLGenerator */ |
|
61 | + private $urlGenerator; |
|
62 | 62 | |
63 | - /** @var ICloudFederationProviderManager */ |
|
64 | - private $cloudFederationProviderManager; |
|
63 | + /** @var ICloudFederationProviderManager */ |
|
64 | + private $cloudFederationProviderManager; |
|
65 | 65 | |
66 | - /** @var Config */ |
|
67 | - private $config; |
|
66 | + /** @var Config */ |
|
67 | + private $config; |
|
68 | 68 | |
69 | - /** @var ICloudFederationFactory */ |
|
70 | - private $factory; |
|
69 | + /** @var ICloudFederationFactory */ |
|
70 | + private $factory; |
|
71 | 71 | |
72 | - /** @var ICloudIdManager */ |
|
73 | - private $cloudIdManager; |
|
72 | + /** @var ICloudIdManager */ |
|
73 | + private $cloudIdManager; |
|
74 | 74 | |
75 | - public function __construct($appName, |
|
76 | - IRequest $request, |
|
77 | - ILogger $logger, |
|
78 | - IUserManager $userManager, |
|
79 | - IURLGenerator $urlGenerator, |
|
80 | - ICloudFederationProviderManager $cloudFederationProviderManager, |
|
81 | - Config $config, |
|
82 | - ICloudFederationFactory $factory, |
|
83 | - ICloudIdManager $cloudIdManager |
|
84 | - ) { |
|
85 | - parent::__construct($appName, $request); |
|
75 | + public function __construct($appName, |
|
76 | + IRequest $request, |
|
77 | + ILogger $logger, |
|
78 | + IUserManager $userManager, |
|
79 | + IURLGenerator $urlGenerator, |
|
80 | + ICloudFederationProviderManager $cloudFederationProviderManager, |
|
81 | + Config $config, |
|
82 | + ICloudFederationFactory $factory, |
|
83 | + ICloudIdManager $cloudIdManager |
|
84 | + ) { |
|
85 | + parent::__construct($appName, $request); |
|
86 | 86 | |
87 | - $this->logger = $logger; |
|
88 | - $this->userManager = $userManager; |
|
89 | - $this->urlGenerator = $urlGenerator; |
|
90 | - $this->cloudFederationProviderManager = $cloudFederationProviderManager; |
|
91 | - $this->config = $config; |
|
92 | - $this->factory = $factory; |
|
93 | - $this->cloudIdManager = $cloudIdManager; |
|
94 | - } |
|
87 | + $this->logger = $logger; |
|
88 | + $this->userManager = $userManager; |
|
89 | + $this->urlGenerator = $urlGenerator; |
|
90 | + $this->cloudFederationProviderManager = $cloudFederationProviderManager; |
|
91 | + $this->config = $config; |
|
92 | + $this->factory = $factory; |
|
93 | + $this->cloudIdManager = $cloudIdManager; |
|
94 | + } |
|
95 | 95 | |
96 | - /** |
|
97 | - * add share |
|
98 | - * |
|
99 | - * @NoCSRFRequired |
|
100 | - * @PublicPage |
|
101 | - * @BruteForceProtection(action=receiveFederatedShare) |
|
102 | - * |
|
103 | - * @param string $shareWith |
|
104 | - * @param string $name resource name (e.g. document.odt) |
|
105 | - * @param string $description share description (optional) |
|
106 | - * @param string $providerId resource UID on the provider side |
|
107 | - * @param string $owner provider specific UID of the user who owns the resource |
|
108 | - * @param string $ownerDisplayName display name of the user who shared the item |
|
109 | - * @param string $sharedBy provider specific UID of the user who shared the resource |
|
110 | - * @param string $sharedByDisplayName display name of the user who shared the resource |
|
111 | - * @param string $sharedSecret use to authenticate accross servers |
|
112 | - * @param array $protocol (e,.g. ['name' => 'webdav', 'options' => ['username' => 'john', 'permissions' => 31]]) |
|
113 | - * @param string $shareType ('group' or 'user' share) |
|
114 | - * @param $resourceType ('file', 'calendar',...) |
|
115 | - * @return Http\DataResponse|JSONResponse |
|
116 | - * |
|
117 | - * Example: curl -H "Content-Type: application/json" -X POST -d '{"shareWith":"admin1@serve1","name":"welcome server2.txt","description":"desc","providerId":"2","owner":"admin2@http://localhost/server2","ownerDisplayName":"admin2 display","shareType":"user","resourceType":"file","protocol":{"name":"webdav","options":{"sharedSecret":"secret","permissions":"webdav-property"}}}' http://localhost/server/index.php/ocm/shares |
|
118 | - */ |
|
119 | - public function addShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $protocol, $shareType, $resourceType) { |
|
120 | - if (!$this->config->incomingRequestsEnabled()) { |
|
121 | - return new JSONResponse( |
|
122 | - ['message' => 'This server doesn\'t support outgoing federated shares'], |
|
123 | - Http::STATUS_NOT_IMPLEMENTED |
|
124 | - ); |
|
125 | - } |
|
96 | + /** |
|
97 | + * add share |
|
98 | + * |
|
99 | + * @NoCSRFRequired |
|
100 | + * @PublicPage |
|
101 | + * @BruteForceProtection(action=receiveFederatedShare) |
|
102 | + * |
|
103 | + * @param string $shareWith |
|
104 | + * @param string $name resource name (e.g. document.odt) |
|
105 | + * @param string $description share description (optional) |
|
106 | + * @param string $providerId resource UID on the provider side |
|
107 | + * @param string $owner provider specific UID of the user who owns the resource |
|
108 | + * @param string $ownerDisplayName display name of the user who shared the item |
|
109 | + * @param string $sharedBy provider specific UID of the user who shared the resource |
|
110 | + * @param string $sharedByDisplayName display name of the user who shared the resource |
|
111 | + * @param string $sharedSecret use to authenticate accross servers |
|
112 | + * @param array $protocol (e,.g. ['name' => 'webdav', 'options' => ['username' => 'john', 'permissions' => 31]]) |
|
113 | + * @param string $shareType ('group' or 'user' share) |
|
114 | + * @param $resourceType ('file', 'calendar',...) |
|
115 | + * @return Http\DataResponse|JSONResponse |
|
116 | + * |
|
117 | + * Example: curl -H "Content-Type: application/json" -X POST -d '{"shareWith":"admin1@serve1","name":"welcome server2.txt","description":"desc","providerId":"2","owner":"admin2@http://localhost/server2","ownerDisplayName":"admin2 display","shareType":"user","resourceType":"file","protocol":{"name":"webdav","options":{"sharedSecret":"secret","permissions":"webdav-property"}}}' http://localhost/server/index.php/ocm/shares |
|
118 | + */ |
|
119 | + public function addShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, $protocol, $shareType, $resourceType) { |
|
120 | + if (!$this->config->incomingRequestsEnabled()) { |
|
121 | + return new JSONResponse( |
|
122 | + ['message' => 'This server doesn\'t support outgoing federated shares'], |
|
123 | + Http::STATUS_NOT_IMPLEMENTED |
|
124 | + ); |
|
125 | + } |
|
126 | 126 | |
127 | - // check if all required parameters are set |
|
128 | - if ($shareWith === null || |
|
129 | - $name === null || |
|
130 | - $providerId === null || |
|
131 | - $owner === null || |
|
132 | - $resourceType === null || |
|
133 | - $shareType === null || |
|
134 | - !is_array($protocol) || |
|
135 | - !isset($protocol['name']) || |
|
136 | - !isset ($protocol['options']) || |
|
137 | - !is_array($protocol['options']) || |
|
138 | - !isset($protocol['options']['sharedSecret']) |
|
139 | - ) { |
|
140 | - return new JSONResponse( |
|
141 | - ['message' => 'Missing arguments'], |
|
142 | - Http::STATUS_BAD_REQUEST |
|
143 | - ); |
|
144 | - } |
|
127 | + // check if all required parameters are set |
|
128 | + if ($shareWith === null || |
|
129 | + $name === null || |
|
130 | + $providerId === null || |
|
131 | + $owner === null || |
|
132 | + $resourceType === null || |
|
133 | + $shareType === null || |
|
134 | + !is_array($protocol) || |
|
135 | + !isset($protocol['name']) || |
|
136 | + !isset ($protocol['options']) || |
|
137 | + !is_array($protocol['options']) || |
|
138 | + !isset($protocol['options']['sharedSecret']) |
|
139 | + ) { |
|
140 | + return new JSONResponse( |
|
141 | + ['message' => 'Missing arguments'], |
|
142 | + Http::STATUS_BAD_REQUEST |
|
143 | + ); |
|
144 | + } |
|
145 | 145 | |
146 | - $cloudId = $this->cloudIdManager->resolveCloudId($shareWith); |
|
147 | - $shareWithLocalId = $cloudId->getUser(); |
|
148 | - $shareWith = $this->mapUid($shareWithLocalId); |
|
146 | + $cloudId = $this->cloudIdManager->resolveCloudId($shareWith); |
|
147 | + $shareWithLocalId = $cloudId->getUser(); |
|
148 | + $shareWith = $this->mapUid($shareWithLocalId); |
|
149 | 149 | |
150 | - if (!$this->userManager->userExists($shareWith)) { |
|
151 | - return new JSONResponse( |
|
152 | - ['message' => 'User "' . $shareWith . '" does not exists at ' . $this->urlGenerator->getBaseUrl()], |
|
153 | - Http::STATUS_BAD_REQUEST |
|
154 | - ); |
|
155 | - } |
|
150 | + if (!$this->userManager->userExists($shareWith)) { |
|
151 | + return new JSONResponse( |
|
152 | + ['message' => 'User "' . $shareWith . '" does not exists at ' . $this->urlGenerator->getBaseUrl()], |
|
153 | + Http::STATUS_BAD_REQUEST |
|
154 | + ); |
|
155 | + } |
|
156 | 156 | |
157 | - // if no explicit display name is given, we use the uid as display name |
|
158 | - $ownerDisplayName = $ownerDisplayName === null ? $owner : $ownerDisplayName; |
|
159 | - $sharedByDisplayName = $sharedByDisplayName === null ? $sharedBy : $sharedByDisplayName; |
|
157 | + // if no explicit display name is given, we use the uid as display name |
|
158 | + $ownerDisplayName = $ownerDisplayName === null ? $owner : $ownerDisplayName; |
|
159 | + $sharedByDisplayName = $sharedByDisplayName === null ? $sharedBy : $sharedByDisplayName; |
|
160 | 160 | |
161 | - // sharedBy* parameter is optional, if nothing is set we assume that it is the same user as the owner |
|
162 | - if ($sharedBy === null) { |
|
163 | - $sharedBy = $owner; |
|
164 | - $sharedByDisplayName = $ownerDisplayName; |
|
165 | - } |
|
161 | + // sharedBy* parameter is optional, if nothing is set we assume that it is the same user as the owner |
|
162 | + if ($sharedBy === null) { |
|
163 | + $sharedBy = $owner; |
|
164 | + $sharedByDisplayName = $ownerDisplayName; |
|
165 | + } |
|
166 | 166 | |
167 | - try { |
|
168 | - $provider = $this->cloudFederationProviderManager->getCloudFederationProvider($resourceType); |
|
169 | - $share = $this->factory->getCloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, '', $shareType, $resourceType); |
|
170 | - $share->setProtocol($protocol); |
|
171 | - $id = $provider->shareReceived($share); |
|
172 | - } catch (ProviderDoesNotExistsException $e) { |
|
173 | - return new JSONResponse( |
|
174 | - ['message' => $e->getMessage()], |
|
175 | - Http::STATUS_NOT_IMPLEMENTED |
|
176 | - ); |
|
177 | - } catch (ProviderCouldNotAddShareException $e) { |
|
178 | - return new JSONResponse( |
|
179 | - ['message' => $e->getMessage()], |
|
180 | - $e->getCode() |
|
181 | - ); |
|
182 | - } catch (\Exception $e) { |
|
183 | - return new JSONResponse( |
|
184 | - ['message' => 'Internal error at ' . $this->urlGenerator->getBaseUrl()], |
|
185 | - Http::STATUS_BAD_REQUEST |
|
186 | - ); |
|
187 | - } |
|
167 | + try { |
|
168 | + $provider = $this->cloudFederationProviderManager->getCloudFederationProvider($resourceType); |
|
169 | + $share = $this->factory->getCloudFederationShare($shareWith, $name, $description, $providerId, $owner, $ownerDisplayName, $sharedBy, $sharedByDisplayName, '', $shareType, $resourceType); |
|
170 | + $share->setProtocol($protocol); |
|
171 | + $id = $provider->shareReceived($share); |
|
172 | + } catch (ProviderDoesNotExistsException $e) { |
|
173 | + return new JSONResponse( |
|
174 | + ['message' => $e->getMessage()], |
|
175 | + Http::STATUS_NOT_IMPLEMENTED |
|
176 | + ); |
|
177 | + } catch (ProviderCouldNotAddShareException $e) { |
|
178 | + return new JSONResponse( |
|
179 | + ['message' => $e->getMessage()], |
|
180 | + $e->getCode() |
|
181 | + ); |
|
182 | + } catch (\Exception $e) { |
|
183 | + return new JSONResponse( |
|
184 | + ['message' => 'Internal error at ' . $this->urlGenerator->getBaseUrl()], |
|
185 | + Http::STATUS_BAD_REQUEST |
|
186 | + ); |
|
187 | + } |
|
188 | 188 | |
189 | - return new JSONResponse( |
|
190 | - ['id' => $id, 'createdAt' => time()], |
|
191 | - Http::STATUS_CREATED); |
|
189 | + return new JSONResponse( |
|
190 | + ['id' => $id, 'createdAt' => time()], |
|
191 | + Http::STATUS_CREATED); |
|
192 | 192 | |
193 | - } |
|
193 | + } |
|
194 | 194 | |
195 | - /** |
|
196 | - * receive notification about existing share |
|
197 | - * |
|
198 | - * @NoCSRFRequired |
|
199 | - * @PublicPage |
|
200 | - * @BruteForceProtection(action=receiveFederatedShareNotification) |
|
201 | - * |
|
202 | - * @param string $notificationType (notification type, e.g. SHARE_ACCEPTED) |
|
203 | - * @param string $resourceType (calendar, file, contact,...) |
|
204 | - * @param string $providerId id of the share |
|
205 | - * @param array $notification the actual payload of the notification |
|
206 | - * @return JSONResponse |
|
207 | - */ |
|
208 | - public function receiveNotification($notificationType, $resourceType, $providerId, array $notification) { |
|
209 | - if (!$this->config->incomingRequestsEnabled()) { |
|
210 | - return new JSONResponse( |
|
211 | - ['message' => 'This server doesn\'t support outgoing federated shares'], |
|
212 | - Http::STATUS_NOT_IMPLEMENTED |
|
213 | - ); |
|
214 | - } |
|
195 | + /** |
|
196 | + * receive notification about existing share |
|
197 | + * |
|
198 | + * @NoCSRFRequired |
|
199 | + * @PublicPage |
|
200 | + * @BruteForceProtection(action=receiveFederatedShareNotification) |
|
201 | + * |
|
202 | + * @param string $notificationType (notification type, e.g. SHARE_ACCEPTED) |
|
203 | + * @param string $resourceType (calendar, file, contact,...) |
|
204 | + * @param string $providerId id of the share |
|
205 | + * @param array $notification the actual payload of the notification |
|
206 | + * @return JSONResponse |
|
207 | + */ |
|
208 | + public function receiveNotification($notificationType, $resourceType, $providerId, array $notification) { |
|
209 | + if (!$this->config->incomingRequestsEnabled()) { |
|
210 | + return new JSONResponse( |
|
211 | + ['message' => 'This server doesn\'t support outgoing federated shares'], |
|
212 | + Http::STATUS_NOT_IMPLEMENTED |
|
213 | + ); |
|
214 | + } |
|
215 | 215 | |
216 | - // check if all required parameters are set |
|
217 | - if ($notificationType === null || |
|
218 | - $resourceType === null || |
|
219 | - $providerId === null || |
|
220 | - !is_array($notification) |
|
221 | - ) { |
|
222 | - return new JSONResponse( |
|
223 | - ['message' => 'Missing arguments'], |
|
224 | - Http::STATUS_BAD_REQUEST |
|
225 | - ); |
|
226 | - } |
|
216 | + // check if all required parameters are set |
|
217 | + if ($notificationType === null || |
|
218 | + $resourceType === null || |
|
219 | + $providerId === null || |
|
220 | + !is_array($notification) |
|
221 | + ) { |
|
222 | + return new JSONResponse( |
|
223 | + ['message' => 'Missing arguments'], |
|
224 | + Http::STATUS_BAD_REQUEST |
|
225 | + ); |
|
226 | + } |
|
227 | 227 | |
228 | - try { |
|
229 | - $provider = $this->cloudFederationProviderManager->getCloudFederationProvider($resourceType); |
|
230 | - $provider->notificationReceived($notificationType, $providerId, $notification); |
|
231 | - } catch (ProviderDoesNotExistsException $e) { |
|
232 | - return new JSONResponse( |
|
233 | - ['message' => $e->getMessage()], |
|
234 | - Http::STATUS_BAD_REQUEST |
|
235 | - ); |
|
236 | - } catch (ShareNotFoundException $e) { |
|
237 | - return new JSONResponse( |
|
238 | - ['message' => $e->getMessage()], |
|
239 | - Http::STATUS_BAD_REQUEST |
|
240 | - ); |
|
241 | - } catch (ActionNotSupportedException $e) { |
|
242 | - return new JSONResponse( |
|
243 | - ['message' => $e->getMessage()], |
|
244 | - Http::STATUS_NOT_IMPLEMENTED |
|
245 | - ); |
|
246 | - } catch (BadRequestException $e) { |
|
247 | - return new JSONResponse($e->getReturnMessage(), Http::STATUS_BAD_REQUEST); |
|
248 | - } catch (AuthenticationFailedException $e) { |
|
249 | - return new JSONResponse(["message" => "RESOURCE_NOT_FOUND"], Http::STATUS_FORBIDDEN); |
|
250 | - } |
|
251 | - catch (\Exception $e) { |
|
252 | - return new JSONResponse( |
|
253 | - ['message' => 'Internal error at ' . $this->urlGenerator->getBaseUrl()], |
|
254 | - Http::STATUS_BAD_REQUEST |
|
255 | - ); |
|
256 | - } |
|
228 | + try { |
|
229 | + $provider = $this->cloudFederationProviderManager->getCloudFederationProvider($resourceType); |
|
230 | + $provider->notificationReceived($notificationType, $providerId, $notification); |
|
231 | + } catch (ProviderDoesNotExistsException $e) { |
|
232 | + return new JSONResponse( |
|
233 | + ['message' => $e->getMessage()], |
|
234 | + Http::STATUS_BAD_REQUEST |
|
235 | + ); |
|
236 | + } catch (ShareNotFoundException $e) { |
|
237 | + return new JSONResponse( |
|
238 | + ['message' => $e->getMessage()], |
|
239 | + Http::STATUS_BAD_REQUEST |
|
240 | + ); |
|
241 | + } catch (ActionNotSupportedException $e) { |
|
242 | + return new JSONResponse( |
|
243 | + ['message' => $e->getMessage()], |
|
244 | + Http::STATUS_NOT_IMPLEMENTED |
|
245 | + ); |
|
246 | + } catch (BadRequestException $e) { |
|
247 | + return new JSONResponse($e->getReturnMessage(), Http::STATUS_BAD_REQUEST); |
|
248 | + } catch (AuthenticationFailedException $e) { |
|
249 | + return new JSONResponse(["message" => "RESOURCE_NOT_FOUND"], Http::STATUS_FORBIDDEN); |
|
250 | + } |
|
251 | + catch (\Exception $e) { |
|
252 | + return new JSONResponse( |
|
253 | + ['message' => 'Internal error at ' . $this->urlGenerator->getBaseUrl()], |
|
254 | + Http::STATUS_BAD_REQUEST |
|
255 | + ); |
|
256 | + } |
|
257 | 257 | |
258 | 258 | |
259 | - return new JSONResponse([],Http::STATUS_CREATED); |
|
259 | + return new JSONResponse([],Http::STATUS_CREATED); |
|
260 | 260 | |
261 | - } |
|
261 | + } |
|
262 | 262 | |
263 | - /** |
|
264 | - * map login name to internal LDAP UID if a LDAP backend is in use |
|
265 | - * |
|
266 | - * @param string $uid |
|
267 | - * @return string mixed |
|
268 | - */ |
|
269 | - private function mapUid($uid) { |
|
270 | - \OC::$server->getURLGenerator()->linkToDocs('key'); |
|
271 | - // FIXME this should be a method in the user management instead |
|
272 | - $this->logger->debug('shareWith before, ' . $uid, ['app' => $this->appName]); |
|
273 | - \OCP\Util::emitHook( |
|
274 | - '\OCA\Files_Sharing\API\Server2Server', |
|
275 | - 'preLoginNameUsedAsUserName', |
|
276 | - array('uid' => &$uid) |
|
277 | - ); |
|
278 | - $this->logger->debug('shareWith after, ' . $uid, ['app' => $this->appName]); |
|
263 | + /** |
|
264 | + * map login name to internal LDAP UID if a LDAP backend is in use |
|
265 | + * |
|
266 | + * @param string $uid |
|
267 | + * @return string mixed |
|
268 | + */ |
|
269 | + private function mapUid($uid) { |
|
270 | + \OC::$server->getURLGenerator()->linkToDocs('key'); |
|
271 | + // FIXME this should be a method in the user management instead |
|
272 | + $this->logger->debug('shareWith before, ' . $uid, ['app' => $this->appName]); |
|
273 | + \OCP\Util::emitHook( |
|
274 | + '\OCA\Files_Sharing\API\Server2Server', |
|
275 | + 'preLoginNameUsedAsUserName', |
|
276 | + array('uid' => &$uid) |
|
277 | + ); |
|
278 | + $this->logger->debug('shareWith after, ' . $uid, ['app' => $this->appName]); |
|
279 | 279 | |
280 | - return $uid; |
|
281 | - } |
|
280 | + return $uid; |
|
281 | + } |
|
282 | 282 | |
283 | 283 | } |