|
|
@@ -1,12 +1,72 @@
|
|
|
# Copyright (C) 2012-2016 Zammad Foundation, http://zammad-foundation.org/
|
|
|
+require_dependency 'channel/driver/twitter'
|
|
|
|
|
|
class ChannelsTwitterController < ApplicationController
|
|
|
- prepend_before_action { authentication_check(permission: 'admin.channel_twitter') }
|
|
|
+ prepend_before_action -> { authentication_check(permission: 'admin.channel_twitter') }, except: %i[webhook_incoming webhook_verify]
|
|
|
+ skip_before_action :verify_csrf_token, only: %i[webhook_incoming webhook_verify]
|
|
|
+
|
|
|
+ before_action :validate_webhook_signature!, only: :webhook_incoming
|
|
|
+
|
|
|
+ def webhook_incoming
|
|
|
+ ::Channel::Driver::Twitter.new.process(params.permit!.to_h, @channel)
|
|
|
+ render json: {}
|
|
|
+ end
|
|
|
+
|
|
|
+ def validate_webhook_signature!
|
|
|
+ header_name = 'x-twitter-webhooks-signature'
|
|
|
+ given_signature = request.headers[header_name]
|
|
|
+ raise Exceptions::UnprocessableEntity, "Missing '#{header_name}' header" if given_signature.blank?
|
|
|
+
|
|
|
+ calculated_signature = hmac_signature_by_app(request.raw_post)
|
|
|
+ raise Exceptions::NotAuthorized if calculated_signature != given_signature
|
|
|
+ raise Exceptions::UnprocessableEntity, "Missing 'for_user_id' in payload!" if params[:for_user_id].blank?
|
|
|
+
|
|
|
+ @channel = nil
|
|
|
+ Channel.where(area: 'Twitter::Account', active: true).each do |channel|
|
|
|
+ next if channel.options[:user].blank?
|
|
|
+ next if channel.options[:user][:id].to_s != params[:for_user_id].to_s
|
|
|
+
|
|
|
+ @channel = channel
|
|
|
+ end
|
|
|
+
|
|
|
+ raise Exceptions::UnprocessableEntity, "No such channel for user id '#{params[:for_user_id]}'!" if !@channel
|
|
|
+
|
|
|
+ true
|
|
|
+ end
|
|
|
+
|
|
|
+ def hmac_signature_by_app(content)
|
|
|
+ external_credential = ExternalCredential.find_by(name: 'twitter')
|
|
|
+ raise Exceptions::UnprocessableEntity, 'No such external_credential \'twitter\'!' if !external_credential
|
|
|
+
|
|
|
+ hmac_signature_gen(external_credential.credentials[:consumer_secret], content)
|
|
|
+ end
|
|
|
+
|
|
|
+ def hmac_signature_gen(consumer_secret, content)
|
|
|
+ hashed = OpenSSL::HMAC.digest('sha256', consumer_secret, content)
|
|
|
+ hashed = Base64.strict_encode64(hashed)
|
|
|
+ "sha256=#{hashed}"
|
|
|
+ end
|
|
|
+
|
|
|
+ def webhook_verify
|
|
|
+ external_credential = Cache.get('external_credential_twitter')
|
|
|
+ if !external_credential && ExternalCredential.exists?(name: 'twitter')
|
|
|
+ external_credential = ExternalCredential.find_by(name: 'twitter').credentials
|
|
|
+ end
|
|
|
+ raise Exceptions::UnprocessableEntity, 'No external_credential in cache!' if external_credential.blank?
|
|
|
+ raise Exceptions::UnprocessableEntity, 'No external_credential[:consumer_secret] in cache!' if external_credential[:consumer_secret].blank?
|
|
|
+ raise Exceptions::UnprocessableEntity, 'No crc_token in verify payload from twitter!' if params['crc_token'].blank?
|
|
|
+
|
|
|
+ render json: {
|
|
|
+ response_token: hmac_signature_gen(external_credential[:consumer_secret], params['crc_token'])
|
|
|
+ }
|
|
|
+ end
|
|
|
|
|
|
def index
|
|
|
assets = {}
|
|
|
+ external_credential_ids = []
|
|
|
ExternalCredential.where(name: 'twitter').each do |external_credential|
|
|
|
assets = external_credential.assets(assets)
|
|
|
+ external_credential_ids.push external_credential.id
|
|
|
end
|
|
|
channel_ids = []
|
|
|
Channel.where(area: 'Twitter::Account').order(:id).each do |channel|
|
|
|
@@ -16,6 +76,7 @@ class ChannelsTwitterController < ApplicationController
|
|
|
render json: {
|
|
|
assets: assets,
|
|
|
channel_ids: channel_ids,
|
|
|
+ external_credential_ids: external_credential_ids,
|
|
|
callback_url: ExternalCredential.callback_url('twitter'),
|
|
|
}
|
|
|
end
|
Martin Edenhofer