dashboard/app/http/endpoints/api/integrations/activateintegration.go
2022-07-10 13:19:01 +01:00

97 lines
2.3 KiB
Go

package api
import (
dbclient "github.com/TicketsBot/GoPanel/database"
"github.com/TicketsBot/GoPanel/utils"
"github.com/gin-gonic/gin"
"strconv"
)
type activateIntegrationBody struct {
Secrets map[string]string `json:"secrets"`
}
func ActivateIntegrationHandler(ctx *gin.Context) {
userId := ctx.Keys["userid"].(uint64)
guildId := ctx.Keys["guildid"].(uint64)
activeCount, err := dbclient.Client.CustomIntegrationGuilds.GetGuildIntegrationCount(guildId)
if err != nil {
ctx.JSON(500, utils.ErrorJson(err))
return
}
if activeCount >= 5 {
ctx.JSON(400, utils.ErrorStr("You can only have 5 integrations active at once"))
return
}
integrationId, err := strconv.Atoi(ctx.Param("integrationid"))
if err != nil {
ctx.JSON(400, utils.ErrorStr("Invalid integration ID"))
return
}
var data activateIntegrationBody
if err := ctx.BindJSON(&data); err != nil {
ctx.JSON(400, utils.ErrorJson(err))
return
}
// Check the integration is public or the user created it
canActivate, err := dbclient.Client.CustomIntegrationGuilds.CanActivate(integrationId, userId)
if err != nil {
ctx.JSON(500, utils.ErrorJson(err))
return
}
if !canActivate {
ctx.JSON(403, utils.ErrorStr("You do not have permission to activate this integration"))
return
}
// Check the secret values are valid
secrets, err := dbclient.Client.CustomIntegrationSecrets.GetByIntegration(integrationId)
if err != nil {
ctx.JSON(500, utils.ErrorJson(err))
return
}
if len(secrets) != len(data.Secrets) {
ctx.JSON(400, utils.ErrorStr("Invalid secret values"))
return
}
// Since we've checked the length, we can just iterate over the secrets and they're guaranteed to be correct
secretMap := make(map[int]string)
for secretName, value := range data.Secrets {
if len(value) == 0 || len(value) > 255 {
ctx.JSON(400, utils.ErrorStr("Secret values must be between 1 and 255 characters"))
return
}
found := false
inner:
for _, secret := range secrets {
if secret.Name == secretName {
found = true
secretMap[secret.Id] = value
break inner
}
}
if !found {
ctx.JSON(400, utils.ErrorStr("Invalid secret values"))
return
}
}
if err := dbclient.Client.CustomIntegrationGuilds.AddToGuildWithSecrets(integrationId, guildId, secretMap); err != nil {
ctx.JSON(500, utils.ErrorJson(err))
return
}
ctx.Status(204)
}