[NEW] Cloud Workspace bridge

app/apps/server/bridges/bridges.js

@@ -2,6 +2,7 @@ import { AppBridges } from '@rocket.chat/apps-engine/server/bridges';
 
 import { AppActivationBridge } from './activation';
 import { AppDetailChangesBridge } from './details';
+import { AppCloudBridge } from './cloud';
 import { AppCommandsBridge } from './commands';
 import { AppApisBridge } from './api';
 import { AppEnvironmentalVariableBridge } from './environmental';
@@ -39,6 +40,7 @@ export class RealAppBridges extends AppBridges {
 		this._uploadBridge = new AppUploadBridge(orch);
 		this._uiInteractionBridge = new UiInteractionBridge(orch);
 		this._schedulerBridge = new AppSchedulerBridge(orch);
+		this._cloudWorkspaceBridge = new AppCloudBridge(orch);
 	}
 
 	getCommandBridge() {
@@ -108,4 +110,8 @@ export class RealAppBridges extends AppBridges {
 	getSchedulerBridge() {
 		return this._schedulerBridge;
 	}
+
+	getCloudWorkspaceBridge() {
+		return this._cloudWorkspaceBridge;
+	}
 }

app/apps/server/bridges/cloud.ts

@@ -0,0 +1,21 @@
+import { Meteor } from 'meteor/meteor';
+import { ICloudWorkspaceBridge } from '@rocket.chat/apps-engine/server/bridges';
+import { IWorkspaceToken } from '@rocket.chat/apps-engine/definition/cloud/IWorkspaceToken';
+
+import { getWorkspaceAccessTokenWithScope } from '../../../cloud/server';
+import { AppServerOrchestrator } from '../orchestrator';
+
+const boundGetWorkspaceAccessToken = Meteor.bindEnvironment(getWorkspaceAccessTokenWithScope);
+
+export class AppCloudBridge implements ICloudWorkspaceBridge {
+	// eslint-disable-next-line no-empty-function
+	constructor(private readonly orch: AppServerOrchestrator) {}
+
+	public async getWorkspaceToken(scope: string, appId: string): Promise<IWorkspaceToken> {
+		this.orch.debugLog(`App ${ appId } is getting the workspace's token`);
+
+		const token = boundGetWorkspaceAccessToken(scope);
+
+		return token;
+	}
+}

app/apps/server/orchestrator.js

@@ -18,7 +18,7 @@ function isTesting() {
 	return process.env.TEST_MODE === 'true';
 }
 
-class AppServerOrchestrator {
+export class AppServerOrchestrator {
 	constructor() {
 		this._isInitialized = false;
 	}

app/cloud/server/functions/getWorkspaceAccessToken.js

@@ -1,12 +1,7 @@
-import { HTTP } from 'meteor/http';
-
-
-import { getRedirectUri } from './getRedirectUri';
 import { retrieveRegistrationStatus } from './retrieveRegistrationStatus';
-import { unregisterWorkspace } from './unregisterWorkspace';
+import { getWorkspaceAccessTokenWithScope } from './getWorkspaceAccessTokenWithScope';
 import { Settings } from '../../../models';
 import { settings } from '../../../settings';
-import { workspaceScopes } from '../oauthScopes';
 
 export function getWorkspaceAccessToken(forceNew = false, scope = '', save = true) {
 	const { connectToCloud, workspaceRegistered } = retrieveRegistrationStatus();
@@ -15,60 +10,19 @@ export function getWorkspaceAccessToken(forceNew = false, scope = '', save = tru
 		return '';
 	}
 
-	const client_id = settings.get('Cloud_Workspace_Client_Id');
-	if (!client_id) {
-		return '';
-	}
-
 	const expires = Settings.findOneById('Cloud_Workspace_Access_Token_Expires_At');
 	const now = new Date();
 
 	if (now < expires.value && !forceNew) {
 		return settings.get('Cloud_Workspace_Access_Token');
 	}
 
-	const cloudUrl = settings.get('Cloud_Url');
-	const client_secret = settings.get('Cloud_Workspace_Client_Secret');
-	const redirectUri = getRedirectUri();
-
-	if (scope === '') {
-		scope = workspaceScopes.join(' ');
-	}
-
-	let authTokenResult;
-	try {
-		authTokenResult = HTTP.post(`${ cloudUrl }/api/oauth/token`, {
-			headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-			params: {
-				client_id,
-				client_secret,
-				scope,
-				grant_type: 'client_credentials',
-				redirect_uri: redirectUri,
-			},
-		});
-	} catch (e) {
-		if (e.response && e.response.data && e.response.data.error) {
-			console.error(`Failed to get AccessToken from Rocket.Chat Cloud.  Error: ${ e.response.data.error }`);
-
-			if (e.response.data.error === 'oauth_invalid_client_credentials') {
-				console.error('Server has been unregistered from cloud');
-				unregisterWorkspace();
-			}
-		} else {
-			console.error(e);
-		}
-
-		return '';
-	}
+	const accessToken = getWorkspaceAccessTokenWithScope(scope);
 
 	if (save) {
-		const expiresAt = new Date();
-		expiresAt.setSeconds(expiresAt.getSeconds() + authTokenResult.data.expires_in);
-
-		Settings.updateValueById('Cloud_Workspace_Access_Token', authTokenResult.data.access_token);
-		Settings.updateValueById('Cloud_Workspace_Access_Token_Expires_At', expiresAt);
+		Settings.updateValueById('Cloud_Workspace_Access_Token', accessToken.token);
+		Settings.updateValueById('Cloud_Workspace_Access_Token_Expires_At', accessToken.expiresAt);
 	}
 
-	return authTokenResult.data.access_token;
+	return accessToken.token;
 }

app/cloud/server/functions/getWorkspaceAccessTokenWithScope.js

@@ -0,0 +1,64 @@
+import { HTTP } from 'meteor/http';
+
+
+import { getRedirectUri } from './getRedirectUri';
+import { retrieveRegistrationStatus } from './retrieveRegistrationStatus';
+import { unregisterWorkspace } from './unregisterWorkspace';
+import { settings } from '../../../settings';
+
+export function getWorkspaceAccessTokenWithScope(scope = '') {
+	const { connectToCloud, workspaceRegistered } = retrieveRegistrationStatus();
+
+	const tokenResponse = { token: '', expiresAt: new Date() };
+
+	if (!connectToCloud || !workspaceRegistered) {
+		return tokenResponse;
+	}
+
+	const client_id = settings.get('Cloud_Workspace_Client_Id');
+	if (!client_id) {
+		return tokenResponse;
+	}
+
+	if (scope === '') {
+		return tokenResponse;
+	}
+
+	const cloudUrl = settings.get('Cloud_Url');
+	const client_secret = settings.get('Cloud_Workspace_Client_Secret');
+	const redirectUri = getRedirectUri();
+
+	let authTokenResult;
+	try {
+		authTokenResult = HTTP.post(`${ cloudUrl }/api/oauth/token`, {
+			headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+			params: {
+				client_id,
+				client_secret,
+				scope,
+				grant_type: 'client_credentials',
+				redirect_uri: redirectUri,
+			},
+		});
+	} catch (e) {
+		if (e.response && e.response.data && e.response.data.error) {
+			console.error(`Failed to get AccessToken from Rocket.Chat Cloud.  Error: ${ e.response.data.error }`);
+
+			if (e.response.data.error === 'oauth_invalid_client_credentials') {
+				console.error('Server has been unregistered from cloud');
+				unregisterWorkspace();
+			}
+		} else {
+			console.error(e);
+		}
+
+		return tokenResponse;
+	}
+
+	const expiresAt = new Date();
+	expiresAt.setSeconds(expiresAt.getSeconds() + authTokenResult.data.expires_in);
+
+	tokenResponse.expiresAt = expiresAt;
+
+	return tokenResponse;
+}

app/cloud/server/index.js

@@ -3,6 +3,7 @@ import { SyncedCron } from 'meteor/littledata:synced-cron';
 
 import './methods';
 import { getWorkspaceAccessToken } from './functions/getWorkspaceAccessToken';
+import { getWorkspaceAccessTokenWithScope } from './functions/getWorkspaceAccessTokenWithScope';
 import { getWorkspaceLicense } from './functions/getWorkspaceLicense';
 import { getUserCloudAccessToken } from './functions/getUserCloudAccessToken';
 import { getWorkspaceKey } from './functions/getWorkspaceKey';
@@ -40,4 +41,4 @@ Meteor.startup(function() {
 	});
 });
 
-export { getWorkspaceAccessToken, getWorkspaceLicense, getWorkspaceKey, getUserCloudAccessToken };
+export { getWorkspaceAccessToken, getWorkspaceAccessTokenWithScope, getWorkspaceLicense, getWorkspaceKey, getUserCloudAccessToken };