botserver/packages/admin.gbapp/dialogs/AdminDialog.ts

/*****************************************************************************\
|                                               ( )_  _                       |
|    _ _    _ __   _ _    __    ___ ___     _ _ | ,_)(_)  ___   ___     _     |
|   ( '_`\ ( '__)/'_` ) /'_ `\/' _ ` _ `\ /'_` )| |  | |/',__)/' _ `\ /'_`\   |
|   | (_) )| |  ( (_| |( (_) || ( ) ( ) |( (_| || |_ | |\__, \| ( ) |( (_) )  |
|   | ,__/'(_)  `\__,_)`\__  |(_) (_) (_)`\__,_)`\__)(_)(____/(_) (_)`\___/'  |
|   | |                ( )_) |                                                |
|   (_)                 \___/'                                                |
|                                                                             |
| General Bots Copyright (c) Pragmatismo.io. All rights reserved.             |
| Licensed under the AGPL-3.0.                                                |
|                                                                             |
| According to our dual licensing model, this program can be used either      |
| under the terms of the GNU Affero General Public License, version 3,        |
| or under a proprietary license.                                             |
|                                                                             |
| The texts of the GNU Affero General Public License with an additional       |
| permission and of our proprietary license can be found at and               |
| in the LICENSE file you have received along with this program.              |
|                                                                             |
| This program is distributed in the hope that it will be useful,             |
| but WITHOUT ANY WARRANTY without even the implied warranty of               |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the                |
| GNU Affero General Public License for more details.                         |
|                                                                             |
| "General Bots" is a registered trademark of Pragmatismo.io.                 |
| The licensing of the program under the AGPLv3 does not imply a              |
| trademark license. Therefore any rights, title and interest in              |
| our trademarks remain entirely with us.                                     |
|                                                                             |
\*****************************************************************************/

/**
 * @fileoverview General Bots server core.
 */

'use strict';

const UrlJoin = require('url-join');
import { BotAdapter } from 'botbuilder';
import { WaterfallDialog } from 'botbuilder-dialogs';
import { GBMinInstance } from 'botlib';
import { IGBDialog } from 'botlib';
import { GBConfigService } from '../../core.gbapp/services/GBConfigService';
import { GBDeployer } from '../../core.gbapp/services/GBDeployer';
import { GBImporter } from '../../core.gbapp/services/GBImporter';
import { GBAdminService } from '../services/GBAdminService';
import { Messages } from '../strings';

/**
 * Dialogs for administration tasks.
 */
export class AdminDialog extends IGBDialog {
  public static async createFarmCommand(text: any, min: GBMinInstance) {}

  public static async undeployPackageCommand(text: any, min: GBMinInstance) {
    const packageName = text.split(' ')[1];
    const importer = new GBImporter(min.core);
    const deployer = new GBDeployer(min.core, importer);
    await deployer.undeployPackageFromLocalPath(
      min.instance,
      UrlJoin('packages', packageName)
    );
  }

  public static async deployPackageCommand(text: string, deployer: GBDeployer) {
    const packageName = text.split(' ')[1];
    const additionalPath = GBConfigService.get('ADDITIONAL_DEPLOY_PATH');
    await deployer.deployPackageFromLocalPath(
      UrlJoin(additionalPath, packageName)
    );
  }
  /**
   * Setup dialogs flows and define services call.
   *
   * @param bot The bot adapter.
   * @param min The minimal bot instance data.
   */
  public static setup(bot: BotAdapter, min: GBMinInstance) {
    // Setup services.

    const importer = new GBImporter(min.core);
    const deployer = new GBDeployer(min.core, importer);

    min.dialogs.add(
      new WaterfallDialog('/admin', [
        async step => {
          const locale = step.context.activity.locale;
          const prompt = Messages[locale].authenticate;
          await step.prompt('textPrompt', prompt);
          return await step.next();
        },
        async step => {
          const locale = step.context.activity.locale;
          const password = step.result;
          if (
            password === GBConfigService.get('ADMIN_PASS') &&
            GBAdminService.StrongRegex.test(password)
          ) {
            await step.context.sendActivity(Messages[locale].welcome);
            await step.prompt('textPrompt', Messages[locale].which_task);
          } else {
            await step.prompt('textPrompt', Messages[locale].wrong_password);
            await step.endDialog();
          }
          return await step.next();
        },
        async step => {
          const locale = step.context.activity.locale;
          const text = step.result;
          const cmdName = text.split(' ')[0];

          step.context.sendActivity(Messages[locale].working(cmdName));
          let unknownCommand = false;

          if (text === 'quit') {
            await step.replaceDialog('/');
          } else if (cmdName === 'createFarm') {
            await AdminDialog.createFarmCommand(text, deployer);
            await step.replaceDialog('/admin', { firstRun: false });
          } else if (cmdName === 'deployPackage') {
            await AdminDialog.deployPackageCommand(text, deployer);
            await step.replaceDialog('/admin', { firstRun: false });
          } else if (cmdName === 'redeployPackage') {
            await AdminDialog.undeployPackageCommand(text, min);
            await AdminDialog.deployPackageCommand(text, deployer);
            await step.replaceDialog('/admin', { firstRun: false });
          } else if (cmdName === 'undeployPackage') {
            await AdminDialog.undeployPackageCommand(text, min);
            await step.replaceDialog('/admin', { firstRun: false });
          } else if (cmdName === 'setupSecurity') {
            await AdminDialog.setupSecurity(min, step);
          } else {
            unknownCommand = true;
          }

          if (unknownCommand) {
            await step.context.sendActivity(Messages[locale].unknown_command);
          } else {
            await step.context.sendActivity(
              Messages[locale].finshed_working(cmdName)
            );
          }
          await step.endDialog();
          await step.replaceDialog('/answer', { query: text });
          return await step.next();
        }
      ])
    );
  }

  private static async setupSecurity(min: any, step: any) {
    const locale = step.activity.locale;
    const state = `${min.instance.instanceId}${Math.floor(
      Math.random() * 1000000000
    )}`;
    await min.adminService.setValue(
      min.instance.instanceId,
      'AntiCSRFAttackState',
      state
    );
    const url = `https://login.microsoftonline.com/${
      min.instance.authenticatorTenant
    }/oauth2/authorize?client_id=${
      min.instance.authenticatorClientId
    }&response_type=code&redirect_uri=${min.instance.botEndpoint}/${
      min.instance.botId
    }/token&state=${state}&response_mode=query`;

    await step.sendActivity(Messages[locale].consent(url));
  }
}