botserver/packages/admin.gbapp/dialogs/AdminDialog.ts

/*****************************************************************************\
|                                               ( )_  _                       |
|    _ _    _ __   _ _    __    ___ ___     _ _ | ,_)(_)  ___   ___     _     |
|   ( '_`\ ( '__)/'_` ) /'_ `\/' _ ` _ `\ /'_` )| |  | |/',__)/' _ `\ /'_`\   |
|   | (_) )| |  ( (_| |( (_) || ( ) ( ) |( (_| || |_ | |\__, \| ( ) |( (_) )  |
|   | ,__/'(_)  `\__,_)`\__  |(_) (_) (_)`\__,_)`\__)(_)(____/(_) (_)`\___/'  |
|   | |                ( )_) |                                                |
|   (_)                 \___/'                                                |
|                                                                             |
| General Bots Copyright (c) Pragmatismo.io. All rights reserved.             |
| Licensed under the AGPL-3.0.                                                |
|                                                                             |
| According to our dual licensing model, this program can be used either      |
| under the terms of the GNU Affero General Public License, version 3,        |
| or under a proprietary license.                                             |
|                                                                             |
| The texts of the GNU Affero General Public License with an additional       |
| permission and of our proprietary license can be found at and               |
| in the LICENSE file you have received along with this program.              |
|                                                                             |
| This program is distributed in the hope that it will be useful,             |
| but WITHOUT ANY WARRANTY without even the implied warranty of               |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the                |
| GNU Affero General Public License for more details.                         |
|                                                                             |
| "General Bots" is a registered trademark of Pragmatismo.io.                 |
| The licensing of the program under the AGPLv3 does not imply a              |
| trademark license. Therefore any rights, title and interest in              |
| our trademarks remain entirely with us.                                     |
|                                                                             |
\*****************************************************************************/

/**
 * @fileoverview General Bots server core.
 */

'use strict';

const UrlJoin = require("url-join");
import { GBMinInstance } from "botlib";
import { IGBDialog } from "botlib";
import { GBDeployer } from "../../core.gbapp/services/GBDeployer";
import { GBImporter } from "../../core.gbapp/services/GBImporter";
import { GBConfigService } from "../../core.gbapp/services/GBConfigService";
import { BotAdapter } from "botbuilder";
import { GBAdminService } from "../services/GBAdminService";
import { Messages } from "../strings";
import { WaterfallDialog } from "botbuilder-dialogs";

/**
 * Dialogs for administration tasks.
 */
export class AdminDialog extends IGBDialog {
  static async createFarmCommand(text: any, min: GBMinInstance) {}

  static async undeployPackageCommand(text: any, min: GBMinInstance) {
    let packageName = text.split(" ")[1];
    let importer = new GBImporter(min.core);
    let deployer = new GBDeployer(min.core, importer);
    await deployer.undeployPackageFromLocalPath(
      min.instance,
      UrlJoin("packages", packageName)
    );
  }

  static async deployPackageCommand(text: string, deployer: GBDeployer) {
    let packageName = text.split(" ")[1];
    let additionalPath = GBConfigService.get("ADDITIONAL_DEPLOY_PATH");
    await deployer.deployPackageFromLocalPath(
      UrlJoin(additionalPath, packageName)
    );
  }
  /**
   * Setup dialogs flows and define services call.
   *
   * @param bot The bot adapter.
   * @param min The minimal bot instance data.
   */
  static setup(bot: BotAdapter, min: GBMinInstance) {
    // Setup services.

    let importer = new GBImporter(min.core);
    let deployer = new GBDeployer(min.core, importer);

    min.dialogs.add(
      new WaterfallDialog("/admin", [
        async step => {
          const locale = step.context.activity.locale;
          const prompt = Messages[locale].authenticate;
          await step.prompt("textPrompt", prompt);
          return await step.next();
        },
        async step => {
          const locale = step.context.activity.locale;
          let password = step.result;
          if (
            password === GBConfigService.get("ADMIN_PASS") &&
            GBAdminService.StrongRegex.test(password)
          ) {
            await step.context.sendActivity(Messages[locale].welcome);
            await step.prompt("textPrompt", Messages[locale].which_task);
          } else {
            await step.prompt("textPrompt", Messages[locale].wrong_password);
            await step.endDialog();
          }
          return await step.next();
        },
        async step => {
          const locale = step.context.activity.locale;
          var text = step.result;
          let cmdName = text.split(" ")[0];

          step.context.sendActivity(Messages[locale].working(cmdName));
          let unknownCommand = false;

          if (text === "quit") {
            await step.replaceDialog("/");
          } else if (cmdName === "createFarm") {
            await AdminDialog.createFarmCommand(text, deployer);
            await step.replaceDialog("/admin", { firstRun: false });
          } else if (cmdName === "deployPackage") {
            await AdminDialog.deployPackageCommand(text, deployer);
            await step.replaceDialog("/admin", { firstRun: false });
          } else if (cmdName === "redeployPackage") {
            await AdminDialog.undeployPackageCommand(text, min);
            await AdminDialog.deployPackageCommand(text, deployer);
            await step.replaceDialog("/admin", { firstRun: false });
          } else if (cmdName === "undeployPackage") {
            await AdminDialog.undeployPackageCommand(text, min);
            await step.replaceDialog("/admin", { firstRun: false });
          } else if (cmdName === "setupSecurity") {
            await AdminDialog.setupSecurity(min, step);
          } else {
            unknownCommand = true;
          }

          if (unknownCommand) {
            await step.context.sendActivity(Messages[locale].unknown_command);
          } else {
            await step.context.sendActivity(
              Messages[locale].finshed_working(cmdName)
            );
          }
          await step.endDialog();
          await step.replaceDialog("/answer", { query: text });
          return await step.next();
        }
      ])
    );
  }

  private static async setupSecurity(min: any, step: any) {
    const locale = step.activity.locale;
    let state = `${min.instance.instanceId}${Math.floor(
      Math.random() * 1000000000
    )}`;
    await min.adminService.setValue(
      min.instance.instanceId,
      "AntiCSRFAttackState",
      state
    );
    let url = `https://login.microsoftonline.com/${
      min.instance.authenticatorTenant
    }/oauth2/authorize?client_id=${
      min.instance.authenticatorClientId
    }&response_type=code&redirect_uri=${min.instance.botEndpoint}/${
      min.instance.botId
    }/token&state=${state}&response_mode=query`;

    await step.sendActivity(Messages[locale].consent(url));
  }
}