github.com/cozy/cozy-stack@v0.0.0-20240603063001-31110fa4cae1/web/bitwarden/folders.go

package bitwarden

import (
	"encoding/json"
	"net/http"
	"time"

	"github.com/cozy/cozy-stack/model/bitwarden"
	"github.com/cozy/cozy-stack/model/bitwarden/settings"
	"github.com/cozy/cozy-stack/model/permission"
	"github.com/cozy/cozy-stack/pkg/consts"
	"github.com/cozy/cozy-stack/pkg/couchdb"
	"github.com/cozy/cozy-stack/pkg/metadata"
	"github.com/cozy/cozy-stack/web/middlewares"
	"github.com/labstack/echo/v4"
)

// https://github.com/bitwarden/jslib/blob/master/common/src/models/request/folderRequest.ts
type folderRequest struct {
	Name string `json:"name"`
}

func (r *folderRequest) toFolder() *bitwarden.Folder {
	f := bitwarden.Folder{
		Name: r.Name,
	}
	md := metadata.New()
	md.DocTypeVersion = bitwarden.DocTypeVersion
	f.Metadata = md
	return &f
}

// https://github.com/bitwarden/jslib/blob/master/common/src/models/response/folderResponse.ts
type folderResponse struct {
	ID     string    `json:"Id"`
	Name   string    `json:"Name"`
	Date   time.Time `json:"RevisionDate"`
	Object string    `json:"Object"`
}

func newFolderResponse(f *bitwarden.Folder) *folderResponse {
	r := folderResponse{
		ID:     f.CouchID,
		Name:   f.Name,
		Object: "folder",
	}
	if f.Metadata != nil {
		r.Date = f.Metadata.UpdatedAt.UTC()
	}
	return &r
}

type foldersList struct {
	Data   []*folderResponse `json:"Data"`
	Object string            `json:"Object"`
}

// ListFolders is the route for listing the Bitwarden folders.
// No pagination yet.
func ListFolders(c echo.Context) error {
	inst := middlewares.GetInstance(c)
	if err := middlewares.AllowWholeType(c, permission.GET, consts.BitwardenFolders); err != nil {
		return c.JSON(http.StatusUnauthorized, echo.Map{
			"error": "invalid token",
		})
	}

	var folders []*bitwarden.Folder
	req := &couchdb.AllDocsRequest{}
	if err := couchdb.GetAllDocs(inst, consts.BitwardenFolders, req, &folders); err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	res := &foldersList{Object: "list"}
	for _, f := range folders {
		res.Data = append(res.Data, newFolderResponse(f))
	}
	return c.JSON(http.StatusOK, res)
}

// CreateFolder is the route to add a folder via the Bitwarden API.
func CreateFolder(c echo.Context) error {
	inst := middlewares.GetInstance(c)
	if err := middlewares.AllowWholeType(c, permission.POST, consts.BitwardenFolders); err != nil {
		return c.JSON(http.StatusUnauthorized, echo.Map{
			"error": "invalid token",
		})
	}

	var req folderRequest
	if err := json.NewDecoder(c.Request().Body).Decode(&req); err != nil {
		return c.JSON(http.StatusBadRequest, echo.Map{
			"error": "invalid JSON",
		})
	}
	if req.Name == "" {
		return c.JSON(http.StatusBadRequest, echo.Map{
			"error": "missing name",
		})
	}

	folder := req.toFolder()
	if err := couchdb.CreateDoc(inst, folder); err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	_ = settings.UpdateRevisionDate(inst, nil)
	res := newFolderResponse(folder)
	return c.JSON(http.StatusOK, res)
}

// GetFolder returns information about a single folder.
func GetFolder(c echo.Context) error {
	inst := middlewares.GetInstance(c)
	if err := middlewares.AllowWholeType(c, permission.GET, consts.BitwardenFolders); err != nil {
		return c.JSON(http.StatusUnauthorized, echo.Map{
			"error": "invalid token",
		})
	}

	id := c.Param("id")
	if id == "" {
		return c.JSON(http.StatusNotFound, echo.Map{
			"error": "missing id",
		})
	}

	folder := &bitwarden.Folder{}
	if err := couchdb.GetDoc(inst, consts.BitwardenFolders, id, folder); err != nil {
		if couchdb.IsNotFoundError(err) {
			return c.JSON(http.StatusNotFound, echo.Map{
				"error": "not found",
			})
		}
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	res := newFolderResponse(folder)
	return c.JSON(http.StatusOK, res)
}

// RenameFolder is the route for changing the (encrypted) name of a folder.
func RenameFolder(c echo.Context) error {
	inst := middlewares.GetInstance(c)
	if err := middlewares.AllowWholeType(c, permission.PUT, consts.BitwardenFolders); err != nil {
		return c.JSON(http.StatusUnauthorized, echo.Map{
			"error": "invalid token",
		})
	}

	id := c.Param("id")
	if id == "" {
		return c.JSON(http.StatusNotFound, echo.Map{
			"error": "missing id",
		})
	}

	folder := &bitwarden.Folder{}
	if err := couchdb.GetDoc(inst, consts.BitwardenFolders, id, folder); err != nil {
		if couchdb.IsNotFoundError(err) {
			return c.JSON(http.StatusNotFound, echo.Map{
				"error": "not found",
			})
		}
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	var req folderRequest
	if err := json.NewDecoder(c.Request().Body).Decode(&req); err != nil {
		return c.JSON(http.StatusBadRequest, echo.Map{
			"error": "invalid JSON",
		})
	}
	if req.Name == "" {
		return c.JSON(http.StatusBadRequest, echo.Map{
			"error": "missing name",
		})
	}

	folder.Name = req.Name
	if folder.Metadata == nil {
		md := metadata.New()
		md.DocTypeVersion = bitwarden.DocTypeVersion
		folder.Metadata = md
	}
	folder.Metadata.ChangeUpdatedAt()
	if err := couchdb.UpdateDoc(inst, folder); err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	_ = settings.UpdateRevisionDate(inst, nil)
	res := newFolderResponse(folder)
	return c.JSON(http.StatusOK, res)
}

// DeleteFolder is the handler for the route to delete a folder.
func DeleteFolder(c echo.Context) error {
	inst := middlewares.GetInstance(c)
	if err := middlewares.AllowWholeType(c, permission.DELETE, consts.BitwardenFolders); err != nil {
		return c.JSON(http.StatusUnauthorized, echo.Map{
			"error": "invalid token",
		})
	}

	id := c.Param("id")
	if id == "" {
		return c.JSON(http.StatusNotFound, echo.Map{
			"error": "missing id",
		})
	}

	folder := &bitwarden.Folder{}
	if err := couchdb.GetDoc(inst, consts.BitwardenFolders, id, folder); err != nil {
		if couchdb.IsNotFoundError(err) {
			return c.JSON(http.StatusNotFound, echo.Map{
				"error": "not found",
			})
		}
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	// Move the ciphers that are in this folder to outside of it
	ciphers, err := bitwarden.FindCiphersInFolder(inst, id)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}
	docs := make([]interface{}, len(ciphers))
	olds := make([]interface{}, len(ciphers))
	for i, doc := range ciphers {
		olds[i] = doc.Clone()
		doc.FolderID = ""
		docs[i] = ciphers[i]
	}
	if err := couchdb.BulkUpdateDocs(inst, consts.BitwardenCiphers, docs, olds); err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	if folder.Metadata == nil {
		md := metadata.New()
		md.DocTypeVersion = bitwarden.DocTypeVersion
		folder.Metadata = md
	}
	folder.Metadata.ChangeUpdatedAt()
	if err := couchdb.DeleteDoc(inst, folder); err != nil {
		return c.JSON(http.StatusInternalServerError, echo.Map{
			"error": err.Error(),
		})
	}

	_ = settings.UpdateRevisionDate(inst, nil)
	return c.NoContent(http.StatusOK)
}