import Planka upstream

2026-07-18 11:48:22 +08:00
commit c26fd3b190
1564 changed files with 214813 additions and 0 deletions
@@ -0,0 +1,228 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+const bcrypt = require('bcrypt');
+const { v4: uuid } = require('uuid');
+
+module.exports = {
+  inputs: {
+    record: {
+      type: 'ref',
+      required: true,
+    },
+    values: {
+      type: 'json',
+      required: true,
+    },
+    actorUser: {
+      type: 'ref',
+      required: true,
+    },
+    request: {
+      type: 'ref',
+    },
+  },
+
+  exits: {
+    emailAlreadyInUse: {},
+    usernameAlreadyInUse: {},
+    activeLimitReached: {},
+  },
+
+  async fn(inputs) {
+    const { values } = inputs;
+
+    if (!_.isUndefined(values.email)) {
+      values.email = values.email.toLowerCase();
+    }
+
+    if (_.isNull(values.apiKey)) {
+      Object.assign(values, {
+        apiKeyPrefix: null,
+        apiKeyHash: null,
+        apiKeyCreatedAt: null,
+      });
+
+      delete values.apiKey;
+    }
+
+    let isOnlyPrivateFieldsChange = false;
+    let isOnlyPersonalFieldsChange = false;
+    let isOnlyPasswordChange = false;
+    let isDeactivatedChangeToTrue = false;
+
+    if (_.difference(Object.keys(values), User.PRIVATE_FIELD_NAMES).length === 0) {
+      isOnlyPrivateFieldsChange = true;
+    }
+
+    if (_.difference(Object.keys(values), User.PERSONAL_FIELD_NAMES).length === 0) {
+      isOnlyPersonalFieldsChange = true;
+    }
+
+    if (!_.isUndefined(values.password)) {
+      if (Object.keys(values).length === 1) {
+        isOnlyPasswordChange = true;
+      }
+
+      values.password = await bcrypt.hash(values.password, 10);
+      values.passwordChangedAt = new Date().toUTCString(); // FIXME: hack
+    }
+
+    if (values.username) {
+      values.username = values.username.toLowerCase();
+    }
+
+    if (values.apiKeyHash) {
+      values.apiKeyCreatedAt = new Date().toISOString();
+    }
+
+    if (values.isDeactivated && values.isDeactivated !== inputs.record.isDeactivated) {
+      isDeactivatedChangeToTrue = true;
+    }
+
+    let user;
+    let uploadedFile;
+
+    try {
+      ({ user, uploadedFile } = await User.qm.updateOne(inputs.record.id, values));
+    } catch (error) {
+      if (error.code === 'E_UNIQUE') {
+        throw 'emailAlreadyInUse';
+      }
+
+      if (
+        error.name === 'AdapterError' &&
+        error.raw.constraint === 'user_account_username_unique'
+      ) {
+        throw 'usernameAlreadyInUse';
+      }
+
+      if (error.message === 'activeLimitReached') {
+        throw 'activeLimitReached';
+      }
+
+      throw error;
+    }
+
+    if (user) {
+      if (uploadedFile) {
+        sails.helpers.utils.removeUnreferencedUploadedFiles(uploadedFile);
+      }
+
+      if (!_.isUndefined(values.password) || isDeactivatedChangeToTrue) {
+        sails.sockets.broadcast(`user:${user.id}`, 'logout', undefined, inputs.request);
+
+        if (
+          !isDeactivatedChangeToTrue &&
+          user.id === inputs.actorUser.id &&
+          inputs.request &&
+          inputs.request.isSocket
+        ) {
+          const tempRoom = uuid();
+
+          sails.sockets.addRoomMembersToRooms(`@user:${user.id}`, tempRoom, () => {
+            sails.sockets.leave(inputs.request, tempRoom, () => {
+              sails.sockets.leaveAll(tempRoom);
+            });
+          });
+        } else {
+          sails.sockets.leaveAll(`@user:${user.id}`);
+        }
+      }
+
+      if (!isOnlyPasswordChange) {
+        if (isOnlyPersonalFieldsChange) {
+          sails.sockets.broadcast(
+            `user:${user.id}`,
+            'userUpdate',
+            {
+              item: sails.helpers.users.presentOne(user, user),
+            },
+            inputs.request,
+          );
+        } else {
+          const scoper = sails.helpers.users.makeScoper(user);
+          const privateUserRelatedUserIds = await scoper.getPrivateUserRelatedUserIds();
+
+          privateUserRelatedUserIds.forEach((userId) => {
+            sails.sockets.broadcast(
+              `user:${userId}`,
+              'userUpdate',
+              {
+                // FIXME: hack
+                item: sails.helpers.users.presentOne(user, {
+                  id: userId,
+                  role: User.Roles.ADMIN,
+                }),
+              },
+              inputs.request,
+            );
+          });
+
+          if (!isOnlyPrivateFieldsChange) {
+            if (inputs.record.role === User.Roles.ADMIN && user.role !== User.Roles.ADMIN) {
+              const managerProjectIds = await sails.helpers.users.getManagerProjectIds(user.id);
+
+              const sharedProjects = await Project.qm.getShared({
+                exceptIdOrIds: managerProjectIds,
+              });
+
+              const projectIds = sails.helpers.utils.mapRecords(sharedProjects);
+
+              const boards = await Board.qm.getByProjectIds(projectIds);
+              const boardIds = sails.helpers.utils.mapRecords(boards);
+
+              const boardMemberships = await BoardMembership.qm.getByBoardIdsAndUserId(
+                boardIds,
+                user.id,
+              );
+
+              const missingBoardIds = _.difference(
+                boardIds,
+                sails.helpers.utils.mapRecords(boardMemberships, 'boardId'),
+              );
+
+              missingBoardIds.forEach((boardId) => {
+                sails.sockets.removeRoomMembersFromRooms(`@user:${user.id}`, `board:${boardId}`);
+              });
+            }
+
+            const publicUserRelatedUserIds = await scoper.getPublicUserRelatedUserIds();
+
+            publicUserRelatedUserIds.forEach((userId) => {
+              sails.sockets.broadcast(
+                `user:${userId}`,
+                'userUpdate',
+                {
+                  // FIXME: hack
+                  item: sails.helpers.users.presentOne(user, {
+                    id: userId,
+                  }),
+                },
+                inputs.request,
+              );
+            });
+          }
+        }
+
+        const webhooks = await Webhook.qm.getAll();
+
+        sails.helpers.utils.sendWebhooks.with({
+          webhooks,
+          event: Webhook.Events.USER_UPDATE,
+          buildData: () => ({
+            item: sails.helpers.users.presentOne(user),
+          }),
+          buildPrevData: () => ({
+            item: sails.helpers.users.presentOne(inputs.record),
+          }),
+          user: inputs.actorUser,
+        });
+      }
+    }
+
+    return user;
+  },
+};