import { Meteor } from 'meteor/meteor'; import { ServiceConfiguration } from 'meteor/service-configuration'; import _ from 'underscore'; import { Settings } from '../../../models/server/raw'; import { hasPermission } from '../../../authorization/server'; import { API, ResultFor } from '../api'; import { SettingsEvents, settings } from '../../../settings/server'; import { setValue } from '../../../settings/server/raw'; import { ISetting, ISettingColor, isSettingAction, isSettingColor } from '../../../../definition/ISetting'; import { isOauthCustomConfiguration, isSettingsUpdatePropDefault, isSettingsUpdatePropsActions, isSettingsUpdatePropsColor, } from '../../../../definition/rest/v1/settings'; const fetchSettings = async ( query: Parameters[0], sort: Parameters[1]['sort'], offset: Parameters[1]['skip'], count: Parameters[1]['limit'], fields: Parameters[1]['projection'], ): Promise => { const settings = (await Settings.find(query, { sort: sort || { _id: 1 }, skip: offset, limit: count, projection: { _id: 1, value: 1, enterprise: 1, invalidValue: 1, modules: 1, ...fields }, }).toArray()) as unknown as ISetting[]; SettingsEvents.emit('fetch-settings', settings); return settings; }; // settings endpoints API.v1.addRoute( 'settings.public', { authRequired: false }, { async get() { const { offset, count } = this.getPaginationItems(); const { sort, fields, query } = this.parseJsonQuery(); const ourQuery = { ...query, hidden: { $ne: true }, public: true, }; const settings = await fetchSettings(ourQuery, sort, offset, count, fields); return API.v1.success({ settings, count: settings.length, offset, total: await Settings.find(ourQuery).count(), }); }, }, ); API.v1.addRoute( 'settings.oauth', { authRequired: false }, { get() { const oAuthServicesEnabled = ServiceConfiguration.configurations.find({}, { fields: { secret: 0 } }).fetch(); return API.v1.success({ services: oAuthServicesEnabled.map((service) => { if (!isOauthCustomConfiguration(service)) { return service; } if (service.custom || (service.service && ['saml', 'cas', 'wordpress'].includes(service.service))) { return { ...service }; } return { _id: service._id, name: service.service, clientId: service.appId || service.clientId || service.consumerKey, buttonLabelText: service.buttonLabelText || '', buttonColor: service.buttonColor || '', buttonLabelColor: service.buttonLabelColor || '', custom: false, }; }), }); }, }, ); API.v1.addRoute( 'settings.addCustomOAuth', { authRequired: true, twoFactorRequired: true }, { async post() { if (!this.bodyParams.name || !this.bodyParams.name.trim()) { throw new Meteor.Error('error-name-param-not-provided', 'The parameter "name" is required'); } await Meteor.call('addOAuthService', this.bodyParams.name, this.userId); return API.v1.success(); }, }, ); API.v1.addRoute( 'settings', { authRequired: true }, { async get() { const { offset, count } = this.getPaginationItems(); const { sort, fields, query } = this.parseJsonQuery(); let ourQuery: Parameters[0] = { hidden: { $ne: true }, }; if (!hasPermission(this.userId, 'view-privileged-setting')) { ourQuery.public = true; } ourQuery = Object.assign({}, query, ourQuery); const settings = await fetchSettings(ourQuery, sort, offset, count, fields); return API.v1.success({ settings, count: settings.length, offset, total: Settings.find(ourQuery).count(), }); }, }, ); API.v1.addRoute( 'settings/:_id', { authRequired: true }, { async get() { if (!hasPermission(this.userId, 'view-privileged-setting')) { return API.v1.unauthorized(); } const setting = await Settings.findOneNotHiddenById(this.urlParams._id); if (!setting) { return API.v1.failure(); } return API.v1.success(_.pick(setting, '_id', 'value')); }, post: { twoFactorRequired: true, async action(): Promise> { if (!hasPermission(this.userId, 'edit-privileged-setting')) { return API.v1.unauthorized(); } if (typeof this.urlParams._id !== 'string') { throw new Meteor.Error('error-id-param-not-provided', 'The parameter "id" is required'); } // allow special handling of particular setting types const setting = await Settings.findOneNotHiddenById(this.urlParams._id); if (!setting) { return API.v1.failure(); } if (isSettingAction(setting) && isSettingsUpdatePropsActions(this.bodyParams) && this.bodyParams.execute) { // execute the configured method Meteor.call(setting.value); return API.v1.success(); } if (isSettingColor(setting) && isSettingsUpdatePropsColor(this.bodyParams)) { Settings.updateOptionsById(this.urlParams._id, { editor: this.bodyParams.editor, }); Settings.updateValueNotHiddenById(this.urlParams._id, this.bodyParams.value); return API.v1.success(); } if ( isSettingsUpdatePropDefault(this.bodyParams) && (await Settings.updateValueNotHiddenById(this.urlParams._id, this.bodyParams.value)) ) { const s = await Settings.findOneNotHiddenById(this.urlParams._id); if (!s) { return API.v1.failure(); } settings.set(s); setValue(this.urlParams._id, this.bodyParams.value); return API.v1.success(); } return API.v1.failure(); }, }, }, ); API.v1.addRoute( 'service.configurations', { authRequired: false }, { get() { return API.v1.success({ configurations: ServiceConfiguration.configurations.find({}, { fields: { secret: 0 } }).fetch(), }); }, }, );