mirror of
https://github.com/bitwarden/server.git
synced 2026-02-05 08:33:10 +08:00
* Get limited life attachment download URL This change limits url download to a 1min lifetime. This requires moving to a new container to allow for non-public blob access. Clients will have to call GetAttachmentData api function to receive the download URL. For backwards compatibility, attachment URLs are still present, but will not work for attachments stored in non-public access blobs. * Make GlobalSettings interface for testing * Test LocalAttachmentStorageService equivalence * Remove comment * Add missing globalSettings using * Simplify default attachment container * Default to attachments containe for existing methods A new upload method will be made for uploading to attachments-v2. For compatibility for clients which don't use these new methods, we need to still use the old container. The new container will be used only for new uploads * Remove Default MetaData fixture. * Keep attachments container blob-level security for all instances * Close unclosed FileStream * Favor default value for noop services
225 lines
8.2 KiB
C#
225 lines
8.2 KiB
C#
using System.Threading.Tasks;
|
|
using System;
|
|
using Bit.Core.Enums;
|
|
using Bit.Core.Repositories;
|
|
using Bit.Core.Models.Data;
|
|
using System.Linq;
|
|
using System.Collections.Generic;
|
|
using Bit.Core.Models.Table;
|
|
using Bit.Core.Context;
|
|
using Bit.Core.Settings;
|
|
|
|
namespace Bit.Core.Services
|
|
{
|
|
public class EventService : IEventService
|
|
{
|
|
private readonly IEventWriteService _eventWriteService;
|
|
private readonly IOrganizationUserRepository _organizationUserRepository;
|
|
private readonly IApplicationCacheService _applicationCacheService;
|
|
private readonly ICurrentContext _currentContext;
|
|
private readonly GlobalSettings _globalSettings;
|
|
|
|
public EventService(
|
|
IEventWriteService eventWriteService,
|
|
IOrganizationUserRepository organizationUserRepository,
|
|
IApplicationCacheService applicationCacheService,
|
|
ICurrentContext currentContext,
|
|
GlobalSettings globalSettings)
|
|
{
|
|
_eventWriteService = eventWriteService;
|
|
_organizationUserRepository = organizationUserRepository;
|
|
_applicationCacheService = applicationCacheService;
|
|
_currentContext = currentContext;
|
|
_globalSettings = globalSettings;
|
|
}
|
|
|
|
public async Task LogUserEventAsync(Guid userId, EventType type, DateTime? date = null)
|
|
{
|
|
var events = new List<IEvent>
|
|
{
|
|
new EventMessage(_currentContext)
|
|
{
|
|
UserId = userId,
|
|
ActingUserId = userId,
|
|
Type = type,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
}
|
|
};
|
|
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
var orgs = await _currentContext.OrganizationMembershipAsync(_organizationUserRepository, userId);
|
|
var orgEvents = orgs.Where(o => CanUseEvents(orgAbilities, o.Id))
|
|
.Select(o => new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = o.Id,
|
|
UserId = userId,
|
|
ActingUserId = userId,
|
|
Type = type,
|
|
Date = DateTime.UtcNow
|
|
});
|
|
|
|
if (orgEvents.Any())
|
|
{
|
|
events.AddRange(orgEvents);
|
|
await _eventWriteService.CreateManyAsync(events);
|
|
}
|
|
else
|
|
{
|
|
await _eventWriteService.CreateAsync(events.First());
|
|
}
|
|
}
|
|
|
|
public async Task LogCipherEventAsync(Cipher cipher, EventType type, DateTime? date = null)
|
|
{
|
|
var e = await BuildCipherEventMessageAsync(cipher, type, date);
|
|
if (e != null)
|
|
{
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
}
|
|
|
|
public async Task LogCipherEventsAsync(IEnumerable<Tuple<Cipher, EventType, DateTime?>> events)
|
|
{
|
|
var cipherEvents = new List<IEvent>();
|
|
foreach (var ev in events)
|
|
{
|
|
var e = await BuildCipherEventMessageAsync(ev.Item1, ev.Item2, ev.Item3);
|
|
if (e != null)
|
|
{
|
|
cipherEvents.Add(e);
|
|
}
|
|
}
|
|
await _eventWriteService.CreateManyAsync(cipherEvents);
|
|
}
|
|
|
|
private async Task<EventMessage> BuildCipherEventMessageAsync(Cipher cipher, EventType type, DateTime? date = null)
|
|
{
|
|
// Only logging organization cipher events for now.
|
|
if (!cipher.OrganizationId.HasValue || (!_currentContext?.UserId.HasValue ?? true))
|
|
{
|
|
return null;
|
|
}
|
|
|
|
if (cipher.OrganizationId.HasValue)
|
|
{
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
if (!CanUseEvents(orgAbilities, cipher.OrganizationId.Value))
|
|
{
|
|
return null;
|
|
}
|
|
}
|
|
|
|
return new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = cipher.OrganizationId,
|
|
UserId = cipher.OrganizationId.HasValue ? null : cipher.UserId,
|
|
CipherId = cipher.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
}
|
|
|
|
public async Task LogCollectionEventAsync(Collection collection, EventType type, DateTime? date = null)
|
|
{
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
if (!CanUseEvents(orgAbilities, collection.OrganizationId))
|
|
{
|
|
return;
|
|
}
|
|
|
|
var e = new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = collection.OrganizationId,
|
|
CollectionId = collection.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
|
|
public async Task LogGroupEventAsync(Group group, EventType type, DateTime? date = null)
|
|
{
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
if (!CanUseEvents(orgAbilities, group.OrganizationId))
|
|
{
|
|
return;
|
|
}
|
|
|
|
var e = new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = group.OrganizationId,
|
|
GroupId = group.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
|
|
public async Task LogPolicyEventAsync(Policy policy, EventType type, DateTime? date = null)
|
|
{
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
if (!CanUseEvents(orgAbilities, policy.OrganizationId))
|
|
{
|
|
return;
|
|
}
|
|
|
|
var e = new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = policy.OrganizationId,
|
|
PolicyId = policy.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
|
|
public async Task LogOrganizationUserEventAsync(OrganizationUser organizationUser, EventType type,
|
|
DateTime? date = null)
|
|
{
|
|
var orgAbilities = await _applicationCacheService.GetOrganizationAbilitiesAsync();
|
|
if (!CanUseEvents(orgAbilities, organizationUser.OrganizationId))
|
|
{
|
|
return;
|
|
}
|
|
|
|
var e = new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = organizationUser.OrganizationId,
|
|
UserId = organizationUser.UserId,
|
|
OrganizationUserId = organizationUser.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
|
|
public async Task LogOrganizationEventAsync(Organization organization, EventType type, DateTime? date = null)
|
|
{
|
|
if (!organization.Enabled || !organization.UseEvents)
|
|
{
|
|
return;
|
|
}
|
|
|
|
var e = new EventMessage(_currentContext)
|
|
{
|
|
OrganizationId = organization.Id,
|
|
Type = type,
|
|
ActingUserId = _currentContext?.UserId,
|
|
Date = date.GetValueOrDefault(DateTime.UtcNow)
|
|
};
|
|
await _eventWriteService.CreateAsync(e);
|
|
}
|
|
|
|
private bool CanUseEvents(IDictionary<Guid, OrganizationAbility> orgAbilities, Guid orgId)
|
|
{
|
|
return orgAbilities != null && orgAbilities.ContainsKey(orgId) &&
|
|
orgAbilities[orgId].Enabled && orgAbilities[orgId].UseEvents;
|
|
}
|
|
}
|
|
}
|