package handler import ( "context" "github.com/caos/zitadel/internal/domain" caos_errs "github.com/caos/zitadel/internal/errors" "github.com/caos/zitadel/internal/eventstore/v1" es_sdk "github.com/caos/zitadel/internal/eventstore/v1/sdk" iam_model "github.com/caos/zitadel/internal/iam/model" "github.com/caos/zitadel/internal/iam/repository/eventsourcing/model" iam_view "github.com/caos/zitadel/internal/iam/repository/view" org_view "github.com/caos/zitadel/internal/org/repository/view" "github.com/caos/logging" es_models "github.com/caos/zitadel/internal/eventstore/v1/models" "github.com/caos/zitadel/internal/eventstore/v1/query" "github.com/caos/zitadel/internal/eventstore/v1/spooler" org_model "github.com/caos/zitadel/internal/org/model" org_es_model "github.com/caos/zitadel/internal/org/repository/eventsourcing/model" es_model "github.com/caos/zitadel/internal/user/repository/eventsourcing/model" view_model "github.com/caos/zitadel/internal/user/repository/view/model" ) const ( userTable = "notification.notify_users" ) type NotifyUser struct { handler iamID string subscription *v1.Subscription } func newNotifyUser( handler handler, iamID string, ) *NotifyUser { h := &NotifyUser{ handler: handler, iamID: iamID, } h.subscribe() return h } func (k *NotifyUser) subscribe() { k.subscription = k.es.Subscribe(k.AggregateTypes()...) go func() { for event := range k.subscription.Events { query.ReduceEvent(k, event) } }() } func (p *NotifyUser) ViewModel() string { return userTable } func (_ *NotifyUser) AggregateTypes() []es_models.AggregateType { return []es_models.AggregateType{es_model.UserAggregate, org_es_model.OrgAggregate} } func (p *NotifyUser) CurrentSequence() (uint64, error) { sequence, err := p.view.GetLatestNotifyUserSequence() if err != nil { return 0, err } return sequence.CurrentSequence, nil } func (p *NotifyUser) EventQuery() (*es_models.SearchQuery, error) { sequence, err := p.view.GetLatestNotifyUserSequence() if err != nil { return nil, err } return es_models.NewSearchQuery(). AggregateTypeFilter(p.AggregateTypes()...). LatestSequenceFilter(sequence.CurrentSequence), nil } func (u *NotifyUser) Reduce(event *es_models.Event) (err error) { switch event.AggregateType { case es_model.UserAggregate: return u.ProcessUser(event) case org_es_model.OrgAggregate: return u.ProcessOrg(event) default: return nil } } func (u *NotifyUser) ProcessUser(event *es_models.Event) (err error) { user := new(view_model.NotifyUser) switch event.Type { case es_model.UserAdded, es_model.UserRegistered, es_model.HumanRegistered, es_model.HumanAdded, es_model.MachineAdded: err := user.AppendEvent(event) if err != nil { return err } err = u.fillLoginNames(user) case es_model.UserProfileChanged, es_model.UserEmailChanged, es_model.UserEmailVerified, es_model.UserPhoneChanged, es_model.UserPhoneVerified, es_model.UserPhoneRemoved, es_model.HumanProfileChanged, es_model.HumanEmailChanged, es_model.HumanEmailVerified, es_model.HumanPhoneChanged, es_model.HumanPhoneVerified, es_model.HumanPhoneRemoved, es_model.MachineChanged: user, err = u.view.NotifyUserByID(event.AggregateID) if err != nil { return err } err = user.AppendEvent(event) case es_model.DomainClaimed, es_model.UserUserNameChanged: user, err = u.view.NotifyUserByID(event.AggregateID) if err != nil { return err } err = user.AppendEvent(event) if err != nil { return err } err = u.fillLoginNames(user) case es_model.UserRemoved: return u.view.DeleteNotifyUser(event.AggregateID, event) default: return u.view.ProcessedNotifyUserSequence(event) } if err != nil { return err } return u.view.PutNotifyUser(user, event) } func (u *NotifyUser) ProcessOrg(event *es_models.Event) (err error) { switch event.Type { case org_es_model.OrgDomainVerified, org_es_model.OrgDomainRemoved, org_es_model.OrgIAMPolicyAdded, org_es_model.OrgIAMPolicyChanged, org_es_model.OrgIAMPolicyRemoved: return u.fillLoginNamesOnOrgUsers(event) case org_es_model.OrgDomainPrimarySet: return u.fillPreferredLoginNamesOnOrgUsers(event) default: return u.view.ProcessedNotifyUserSequence(event) } } func (u *NotifyUser) fillLoginNamesOnOrgUsers(event *es_models.Event) error { org, err := u.getOrgByID(context.Background(), event.ResourceOwner) if err != nil { return err } policy := org.OrgIamPolicy if policy == nil { policy, err = u.getDefaultOrgIAMPolicy(context.Background()) if err != nil { return err } } users, err := u.view.NotifyUsersByOrgID(event.AggregateID) if err != nil { return err } for _, user := range users { user.SetLoginNames(policy, org.Domains) err := u.view.PutNotifyUser(user, event) if err != nil { return err } } return u.view.ProcessedNotifyUserSequence(event) } func (u *NotifyUser) fillPreferredLoginNamesOnOrgUsers(event *es_models.Event) error { org, err := u.getOrgByID(context.Background(), event.ResourceOwner) if err != nil { return err } policy := org.OrgIamPolicy if policy == nil { policy, err = u.getDefaultOrgIAMPolicy(context.Background()) if err != nil { return err } } if !policy.UserLoginMustBeDomain { return nil } users, err := u.view.NotifyUsersByOrgID(event.AggregateID) if err != nil { return err } for _, user := range users { user.PreferredLoginName = user.GenerateLoginName(org.GetPrimaryDomain().Domain, policy.UserLoginMustBeDomain) err := u.view.PutNotifyUser(user, event) if err != nil { return err } } return nil } func (u *NotifyUser) fillLoginNames(user *view_model.NotifyUser) (err error) { org, err := u.getOrgByID(context.Background(), user.ResourceOwner) if err != nil { return err } policy := org.OrgIamPolicy if policy == nil { policy, err = u.getDefaultOrgIAMPolicy(context.Background()) if err != nil { return err } } user.SetLoginNames(policy, org.Domains) user.PreferredLoginName = user.GenerateLoginName(org.GetPrimaryDomain().Domain, policy.UserLoginMustBeDomain) return nil } func (p *NotifyUser) OnError(event *es_models.Event, err error) error { logging.LogWithFields("SPOOL-9spwf", "id", event.AggregateID).WithError(err).Warn("something went wrong in notify user handler") return spooler.HandleError(event, err, p.view.GetLatestNotifyUserFailedEvent, p.view.ProcessedNotifyUserFailedEvent, p.view.ProcessedNotifyUserSequence, p.errorCountUntilSkip) } func (u *NotifyUser) OnSuccess() error { return spooler.HandleSuccess(u.view.UpdateNotifyUserSpoolerRunTimestamp) } func (u *NotifyUser) getOrgByID(ctx context.Context, orgID string) (*org_model.Org, error) { query, err := org_view.OrgByIDQuery(orgID, 0) if err != nil { return nil, err } esOrg := &org_es_model.Org{ ObjectRoot: es_models.ObjectRoot{ AggregateID: orgID, }, } err = es_sdk.Filter(ctx, u.Eventstore().FilterEvents, esOrg.AppendEvents, query) if err != nil && !caos_errs.IsNotFound(err) { return nil, err } if esOrg.Sequence == 0 { return nil, caos_errs.ThrowNotFound(nil, "EVENT-kVLb2", "Errors.Org.NotFound") } return org_es_model.OrgToModel(esOrg), nil } func (u *NotifyUser) getIAMByID(ctx context.Context) (*iam_model.IAM, error) { query, err := iam_view.IAMByIDQuery(domain.IAMID, 0) if err != nil { return nil, err } iam := &model.IAM{ ObjectRoot: es_models.ObjectRoot{ AggregateID: domain.IAMID, }, } err = es_sdk.Filter(ctx, u.Eventstore().FilterEvents, iam.AppendEvents, query) if err != nil && caos_errs.IsNotFound(err) && iam.Sequence == 0 { return nil, err } return model.IAMToModel(iam), nil } func (u *NotifyUser) getDefaultOrgIAMPolicy(ctx context.Context) (*iam_model.OrgIAMPolicy, error) { existingIAM, err := u.getIAMByID(ctx) if err != nil { return nil, err } if existingIAM.DefaultOrgIAMPolicy == nil { return nil, caos_errs.ThrowNotFound(nil, "EVENT-2Fj8s", "Errors.IAM.OrgIAMPolicy.NotExisting") } return existingIAM.DefaultOrgIAMPolicy, nil }