mirror of
https://github.com/netbirdio/netbird.git
synced 2024-11-29 11:33:48 +01:00
d4b6d7646c
Implement user deletion across all IDP-ss. Expires all user peers when the user is deleted. Users are permanently removed from a local store, but in IDP, we remove Netbird attributes for the user untilUserDeleteFromIDPEnabled setting is not enabled. To test, an admin user should remove any additional users. Until the UI incorporates this feature, use a curl DELETE request targeting the /users/<USER_ID> management endpoint. Note that this request only removes user attributes and doesn't trigger a delete from the IDP. To enable user removal from the IdP, set UserDeleteFromIDPEnabled to true in account settings. Until we have a UI for this, make this change directly in the store file. Store the deleted email addresses in encrypted in activity store.
107 lines
2.8 KiB
Go
107 lines
2.8 KiB
Go
package http
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/netbirdio/netbird/management/server"
|
|
"github.com/netbirdio/netbird/management/server/activity"
|
|
"github.com/netbirdio/netbird/management/server/http/api"
|
|
"github.com/netbirdio/netbird/management/server/http/util"
|
|
"github.com/netbirdio/netbird/management/server/jwtclaims"
|
|
)
|
|
|
|
// EventsHandler HTTP handler
|
|
type EventsHandler struct {
|
|
accountManager server.AccountManager
|
|
claimsExtractor *jwtclaims.ClaimsExtractor
|
|
}
|
|
|
|
// NewEventsHandler creates a new EventsHandler HTTP handler
|
|
func NewEventsHandler(accountManager server.AccountManager, authCfg AuthCfg) *EventsHandler {
|
|
return &EventsHandler{
|
|
accountManager: accountManager,
|
|
claimsExtractor: jwtclaims.NewClaimsExtractor(
|
|
jwtclaims.WithAudience(authCfg.Audience),
|
|
jwtclaims.WithUserIDClaim(authCfg.UserIDClaim),
|
|
),
|
|
}
|
|
}
|
|
|
|
// GetAllEvents list of the given account
|
|
func (h *EventsHandler) GetAllEvents(w http.ResponseWriter, r *http.Request) {
|
|
claims := h.claimsExtractor.FromRequestContext(r)
|
|
account, user, err := h.accountManager.GetAccountFromToken(claims)
|
|
if err != nil {
|
|
log.Error(err)
|
|
http.Redirect(w, r, "/", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
accountEvents, err := h.accountManager.GetEvents(account.Id, user.Id)
|
|
if err != nil {
|
|
util.WriteError(err, w)
|
|
return
|
|
}
|
|
events := make([]*api.Event, len(accountEvents))
|
|
for i, e := range accountEvents {
|
|
events[i] = toEventResponse(e)
|
|
}
|
|
|
|
err = h.fillEventsWithInitiatorEmail(events, account.Id, user.Id)
|
|
if err != nil {
|
|
util.WriteError(err, w)
|
|
return
|
|
}
|
|
|
|
util.WriteJSONObject(w, events)
|
|
}
|
|
|
|
func (h *EventsHandler) fillEventsWithInitiatorEmail(events []*api.Event, accountId, userId string) error {
|
|
// build email map based on users
|
|
userInfos, err := h.accountManager.GetUsersFromAccount(accountId, userId)
|
|
if err != nil {
|
|
log.Errorf("failed to get users from account: %s", err)
|
|
return err
|
|
}
|
|
|
|
emails := make(map[string]string)
|
|
for _, ui := range userInfos {
|
|
emails[ui.ID] = ui.Email
|
|
}
|
|
|
|
// fill event with email of initiator
|
|
var ok bool
|
|
for _, event := range events {
|
|
if event.InitiatorEmail == "" {
|
|
event.InitiatorEmail, ok = emails[event.InitiatorId]
|
|
if !ok {
|
|
log.Warnf("failed to resolve email for initiator: %s", event.InitiatorId)
|
|
}
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func toEventResponse(event *activity.Event) *api.Event {
|
|
meta := make(map[string]string)
|
|
if event.Meta != nil {
|
|
for s, a := range event.Meta {
|
|
meta[s] = fmt.Sprintf("%v", a)
|
|
}
|
|
}
|
|
e := &api.Event{
|
|
Id: fmt.Sprint(event.ID),
|
|
InitiatorId: event.InitiatorID,
|
|
InitiatorEmail: event.InitiatorEmail,
|
|
Activity: event.Activity.Message(),
|
|
ActivityCode: api.EventActivityCode(event.Activity.StringCode()),
|
|
TargetId: event.TargetID,
|
|
Timestamp: event.Timestamp,
|
|
Meta: meta,
|
|
}
|
|
return e
|
|
}
|