github.com/wgh-/mattermost-server@v4.8.0-rc2+incompatible/model/incoming_webhook.go (about)

     1  // Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
     2  // See License.txt for license information.
     3  
     4  package model
     5  
     6  import (
     7  	"bytes"
     8  	"encoding/json"
     9  	"io"
    10  	"net/http"
    11  	"regexp"
    12  )
    13  
    14  const (
    15  	DEFAULT_WEBHOOK_USERNAME = "webhook"
    16  )
    17  
    18  type IncomingWebhook struct {
    19  	Id          string `json:"id"`
    20  	CreateAt    int64  `json:"create_at"`
    21  	UpdateAt    int64  `json:"update_at"`
    22  	DeleteAt    int64  `json:"delete_at"`
    23  	UserId      string `json:"user_id"`
    24  	ChannelId   string `json:"channel_id"`
    25  	TeamId      string `json:"team_id"`
    26  	DisplayName string `json:"display_name"`
    27  	Description string `json:"description"`
    28  	Username    string `json:"username"`
    29  	IconURL     string `json:"icon_url"`
    30  }
    31  
    32  type IncomingWebhookRequest struct {
    33  	Text        string             `json:"text"`
    34  	Username    string             `json:"username"`
    35  	IconURL     string             `json:"icon_url"`
    36  	ChannelName string             `json:"channel"`
    37  	Props       StringInterface    `json:"props"`
    38  	Attachments []*SlackAttachment `json:"attachments"`
    39  	Type        string             `json:"type"`
    40  }
    41  
    42  func (o *IncomingWebhook) ToJson() string {
    43  	b, _ := json.Marshal(o)
    44  	return string(b)
    45  }
    46  
    47  func IncomingWebhookFromJson(data io.Reader) *IncomingWebhook {
    48  	var o *IncomingWebhook
    49  	json.NewDecoder(data).Decode(&o)
    50  	return o
    51  }
    52  
    53  func IncomingWebhookListToJson(l []*IncomingWebhook) string {
    54  	b, _ := json.Marshal(l)
    55  	return string(b)
    56  }
    57  
    58  func IncomingWebhookListFromJson(data io.Reader) []*IncomingWebhook {
    59  	var o []*IncomingWebhook
    60  	json.NewDecoder(data).Decode(&o)
    61  	return o
    62  }
    63  
    64  func (o *IncomingWebhook) IsValid() *AppError {
    65  
    66  	if len(o.Id) != 26 {
    67  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.id.app_error", nil, "", http.StatusBadRequest)
    68  
    69  	}
    70  
    71  	if o.CreateAt == 0 {
    72  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.create_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
    73  	}
    74  
    75  	if o.UpdateAt == 0 {
    76  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.update_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
    77  	}
    78  
    79  	if len(o.UserId) != 26 {
    80  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.user_id.app_error", nil, "", http.StatusBadRequest)
    81  	}
    82  
    83  	if len(o.ChannelId) != 26 {
    84  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.channel_id.app_error", nil, "", http.StatusBadRequest)
    85  	}
    86  
    87  	if len(o.TeamId) != 26 {
    88  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.team_id.app_error", nil, "", http.StatusBadRequest)
    89  	}
    90  
    91  	if len(o.DisplayName) > 64 {
    92  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.display_name.app_error", nil, "", http.StatusBadRequest)
    93  	}
    94  
    95  	if len(o.Description) > 128 {
    96  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.description.app_error", nil, "", http.StatusBadRequest)
    97  	}
    98  
    99  	if len(o.Username) > 64 {
   100  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.username.app_error", nil, "", http.StatusBadRequest)
   101  	}
   102  
   103  	if len(o.IconURL) > 1024 {
   104  		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.icon_url.app_error", nil, "", http.StatusBadRequest)
   105  	}
   106  
   107  	return nil
   108  }
   109  
   110  func (o *IncomingWebhook) PreSave() {
   111  	if o.Id == "" {
   112  		o.Id = NewId()
   113  	}
   114  
   115  	o.CreateAt = GetMillis()
   116  	o.UpdateAt = o.CreateAt
   117  }
   118  
   119  func (o *IncomingWebhook) PreUpdate() {
   120  	o.UpdateAt = GetMillis()
   121  }
   122  
   123  // escapeControlCharsFromPayload escapes control chars (\n, \t) from a byte slice.
   124  // Context:
   125  // JSON strings are not supposed to contain control characters such as \n, \t,
   126  // ... but some incoming webhooks might still send invalid JSON and we want to
   127  // try to handle that. An example invalid JSON string from an incoming webhook
   128  // might look like this (strings for both "text" and "fallback" attributes are
   129  // invalid JSON strings because they contain unescaped newlines and tabs):
   130  //  `{
   131  //    "text": "this is a test
   132  //						 that contains a newline and tabs",
   133  //    "attachments": [
   134  //      {
   135  //        "fallback": "Required plain-text summary of the attachment
   136  //										that contains a newline and tabs",
   137  //        "color": "#36a64f",
   138  //  			...
   139  //        "text": "Optional text that appears within the attachment
   140  //								 that contains a newline and tabs",
   141  //  			...
   142  //        "thumb_url": "http://example.com/path/to/thumb.png"
   143  //      }
   144  //    ]
   145  //  }`
   146  // This function will search for `"key": "value"` pairs, and escape \n, \t
   147  // from the value.
   148  func escapeControlCharsFromPayload(by []byte) []byte {
   149  	// we'll search for `"text": "..."` or `"fallback": "..."`, ...
   150  	keys := "text|fallback|pretext|author_name|title|value"
   151  
   152  	// the regexp reads like this:
   153  	// (?s): this flag let . match \n (default is false)
   154  	// "(keys)": we search for the keys defined above
   155  	// \s*:\s*: followed by 0..n spaces/tabs, a colon then 0..n spaces/tabs
   156  	// ": a double-quote
   157  	// (\\"|[^"])*: any number of times the `\"` string or any char but a double-quote
   158  	// ": a double-quote
   159  	r := `(?s)"(` + keys + `)"\s*:\s*"(\\"|[^"])*"`
   160  	re := regexp.MustCompile(r)
   161  
   162  	// the function that will escape \n and \t on the regexp matches
   163  	repl := func(b []byte) []byte {
   164  		if bytes.Contains(b, []byte("\n")) {
   165  			b = bytes.Replace(b, []byte("\n"), []byte("\\n"), -1)
   166  		}
   167  		if bytes.Contains(b, []byte("\t")) {
   168  			b = bytes.Replace(b, []byte("\t"), []byte("\\t"), -1)
   169  		}
   170  
   171  		return b
   172  	}
   173  
   174  	return re.ReplaceAllFunc(by, repl)
   175  }
   176  
   177  func decodeIncomingWebhookRequest(by []byte) (*IncomingWebhookRequest, error) {
   178  	decoder := json.NewDecoder(bytes.NewReader(by))
   179  	var o IncomingWebhookRequest
   180  	err := decoder.Decode(&o)
   181  	if err == nil {
   182  		return &o, nil
   183  	} else {
   184  		return nil, err
   185  	}
   186  }
   187  
   188  func IncomingWebhookRequestFromJson(data io.Reader) (*IncomingWebhookRequest, *AppError) {
   189  	buf := new(bytes.Buffer)
   190  	buf.ReadFrom(data)
   191  	by := buf.Bytes()
   192  
   193  	// Try to decode the JSON data. Only if it fails, try to escape control
   194  	// characters from the strings contained in the JSON data.
   195  	o, err := decodeIncomingWebhookRequest(by)
   196  	if err != nil {
   197  		o, err = decodeIncomingWebhookRequest(escapeControlCharsFromPayload(by))
   198  		if err != nil {
   199  			return nil, NewAppError("IncomingWebhookRequestFromJson", "Unable to parse incoming data", nil, err.Error(), http.StatusBadRequest)
   200  		}
   201  	}
   202  
   203  	o.Attachments = StringifySlackFieldValue(o.Attachments)
   204  
   205  	return o, nil
   206  }
   207  
   208  func (o *IncomingWebhookRequest) ToJson() string {
   209  	b, err := json.Marshal(o)
   210  	if err != nil {
   211  		return ""
   212  	} else {
   213  		return string(b)
   214  	}
   215  }