File Manager - BorneoXploit

Editing: TalkBotsService.php

<?php

declare(strict_types=1);

/**
 * SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
 * SPDX-License-Identifier: AGPL-3.0-or-later
 */

namespace OCA\AppAPI\Service;

use OCA\AppAPI\Db\ExApp;
use OCA\Talk\Events\BotInstallEvent;
use OCA\Talk\Events\BotUninstallEvent;
use OCP\EventDispatcher\IEventDispatcher;
use OCP\IURLGenerator;
use OCP\Security\ISecureRandom;

class TalkBotsService {

public function __construct(
		private readonly ExAppConfigService  $exAppConfigService,
		private readonly IEventDispatcher    $dispatcher,
		private readonly ISecureRandom       $random,
		private readonly IURLGenerator       $urlGenerator,
	) {
	}

public function registerExAppBot(ExApp $exApp, string $name, string $route, string $description): ?array {
		if (!class_exists(BotInstallEvent::class)) {
			return null;
		}

[$id, $url, $secret] = $this->getExAppTalkBotConfig($exApp, $route);

$event = new BotInstallEvent(
			$name,
			$secret,
			$url,
			$description,
		);
		$this->dispatcher->dispatchTyped($event);

$this->exAppConfigService->setAppConfigValue($exApp->getAppid(), $id, $secret);
		$this->exAppConfigService->setAppConfigValue($exApp->getAppid(), 'talk_bot_route_' . $id, $route);

return [
			'id' => $id,
			'secret' => $secret,
		];
	}

public function unregisterExAppBot(ExApp $exApp, string $route): ?bool {
		if (!class_exists(BotUninstallEvent::class)) {
			return null;
		}

[$id, $url, $secret] = $this->getExAppTalkBotConfig($exApp, $route);

$event = new BotUninstallEvent($secret, $url);
		$this->dispatcher->dispatchTyped($event);

if ($this->exAppConfigService->deleteAppConfigValues([$id], $exApp->getAppid()) !== 1) {
			return null;
		}
		return true;
	}

private function getExAppTalkBotConfig(ExApp $exApp, string $route): array {
		$url = $this->urlGenerator->linkToOCSRouteAbsolute(
			'app_api.TalkBot.proxyTalkMessage', ['appId' => $exApp->getAppid(), 'route' => $route]
		);
		$id = $this->getExAppTalkBotHash($exApp->getAppid(), $route);

$exAppConfig = $this->exAppConfigService->getAppConfig($exApp->getAppid(), $id);
		if ($exAppConfig === null) {
			$secret = $this->random->generate(64, ISecureRandom::CHAR_HUMAN_READABLE);
		} else {
			$secret = $exAppConfig->getConfigvalue(); // Do not regenerate already registered bot secret
		}
		return [$id, $url, $secret];
	}

public function getTalkBotSecret(string $appId, string $route): ?string {
		$exAppConfig = $this->exAppConfigService->getAppConfig($appId, $this->getExAppTalkBotHash($appId, $route));
		return $exAppConfig?->getConfigvalue();
	}

public function unregisterExAppTalkBots(ExApp $exApp): void {
		$exAppConfigs = $this->exAppConfigService->getAllAppConfig($exApp->getAppid());
		foreach ($exAppConfigs as $exAppConfig) {
			if (str_starts_with($exAppConfig->getConfigkey(), 'talk_bot_route_')) {
				$route = $exAppConfig->getConfigvalue();
				$id = $this->getExAppTalkBotHash($exApp->getAppid(), $route);
				$configHash = substr($exAppConfig->getConfigkey(), 15);
				if ($id === $configHash) {
					$this->unregisterExAppBot($exApp, $route);
					$this->exAppConfigService->deleteAppConfig($exAppConfig);
				}
			}
		}
	}

private function getExAppTalkBotHash(string $appId, string $route): string {
		return sha1($appId . '_' . $route);
	}
}

Cancel