@oneuptime/common 10.0.65 → 10.0.67

package/Models/DatabaseModels/UserTelegram.ts

@@ -0,0 +1,312 @@
+import Project from "./Project";
+import User from "./User";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import Route from "../../Types/API/Route";
+import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import CurrentUserCanAccessRecordBy from "../../Types/Database/CurrentUserCanAccessRecordBy";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import Text from "../../Types/Text";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+
+@TenantColumn("projectId")
+@AllowAccessIfSubscriptionIsUnpaid()
+@TableAccessControl({
+  create: [Permission.CurrentUser],
+  read: [Permission.CurrentUser],
+  delete: [Permission.CurrentUser],
+  update: [Permission.CurrentUser],
+})
+@CrudApiEndpoint(new Route("/user-telegram"))
+@Entity({
+  name: "UserTelegram",
+})
+@TableMetadata({
+  tableName: "UserTelegram",
+  singularName: "Telegram Account",
+  pluralName: "Telegram Accounts",
+  icon: IconProp.Telegram,
+  tableDescription: "Telegram accounts used for Telegram notifications.",
+})
+@CurrentUserCanAccessRecordBy("userId")
+class UserTelegram extends BaseModel {
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+  })
+  @ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "projectId" })
+  public project?: Project = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public projectId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [Permission.CurrentUser],
+  })
+  @TableColumn({
+    title: "Telegram Handle",
+    required: false,
+    unique: false,
+    type: TableColumnType.ShortText,
+    canReadOnRelationQuery: true,
+    description:
+      "Optional Telegram username / handle (e.g. @alice) for your own reference.",
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    unique: false,
+    nullable: true,
+  })
+  public telegramUserHandle?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    title: "Telegram Chat ID",
+    required: false,
+    unique: false,
+    type: TableColumnType.ShortText,
+    canReadOnRelationQuery: false,
+    description:
+      "Telegram chat ID captured from the OneUptime bot after verification. Populated automatically.",
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    unique: false,
+    nullable: true,
+  })
+  public telegramChatId?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "user",
+    type: TableColumnType.Entity,
+    modelType: User,
+    title: "User",
+    description: "Relation to User who this Telegram account belongs to",
+  })
+  @ManyToOne(
+    () => {
+      return User;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "userId" })
+  public user?: User = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    title: "User ID",
+    description: "User ID who this Telegram account belongs to",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  @Index()
+  public userId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType.Entity,
+    modelType: User,
+    title: "Created by User",
+    description:
+      "Relation to User who created this object (if this object was created by a User)",
+  })
+  @ManyToOne(
+    () => {
+      return User;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "createdByUserId" })
+  public createdByUser?: User = undefined;
+
+  @ColumnAccessControl({
+    create: [Permission.CurrentUser],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    title: "Created by User ID",
+    description:
+      "User ID who created this object (if this object was created by a User)",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public createdByUserId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType.Entity,
+    title: "Deleted by User",
+    modelType: User,
+    description:
+      "Relation to User who deleted this object (if this object was deleted by a User)",
+  })
+  @ManyToOne(
+    () => {
+      return User;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "deletedByUserId" })
+  public deletedByUser?: User = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    title: "Deleted by User ID",
+    description:
+      "User ID who deleted this object (if this object was deleted by a User)",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public deletedByUserId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    title: "Is Verified",
+    description: "Is this Telegram account verified?",
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    defaultValue: false,
+  })
+  @Column({
+    type: ColumnType.Boolean,
+    default: false,
+  })
+  public isVerified?: boolean = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [Permission.CurrentUser],
+    update: [],
+  })
+  @TableColumn({
+    title: "Verification Code",
+    description:
+      "Temporary Verification Code. The user sends /start <code> to the OneUptime bot to verify.",
+    isDefaultValueColumn: true,
+    computed: true,
+    required: true,
+    type: TableColumnType.ShortText,
+    forceGetDefaultValueOnCreate: () => {
+      return Text.generateRandomNumber(6);
+    },
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    nullable: false,
+    length: ColumnLength.ShortText,
+  })
+  public verificationCode?: string = undefined;
+}
+
+export default UserTelegram;

package/Server/API/KubernetesResourceAPI.ts

@@ -0,0 +1,129 @@
+import KubernetesResource from "../../Models/DatabaseModels/KubernetesResource";
+import KubernetesCluster from "../../Models/DatabaseModels/KubernetesCluster";
+import BadDataException from "../../Types/Exception/BadDataException";
+import ObjectID from "../../Types/ObjectID";
+import KubernetesResourceService, {
+  InventorySummary,
+  Service as KubernetesResourceServiceType,
+} from "../Services/KubernetesResourceService";
+import KubernetesClusterService from "../Services/KubernetesClusterService";
+import UserMiddleware from "../Middleware/UserAuthorization";
+import Response from "../Utils/Response";
+import BaseAPI from "./BaseAPI";
+import {
+  ExpressRequest,
+  ExpressResponse,
+  NextFunction,
+} from "../Utils/Express";
+import CommonAPI from "./CommonAPI";
+import DatabaseCommonInteractionProps from "../../Types/BaseDatabase/DatabaseCommonInteractionProps";
+import NotFoundException from "../../Types/Exception/NotFoundException";
+import { JSONObject } from "../../Types/JSON";
+
+/*
+ * ------------------------------------------------------------------
+ * KubernetesResourceAPI
+ *
+ * Augments the auto-generated CRUD router with a single custom
+ * endpoint the Kubernetes overview page uses to fetch counts and
+ * health summaries in one round-trip:
+ *
+ *   POST /kubernetes-resource/inventory-summary/:clusterId
+ *
+ * The standard CRUD endpoints (list / get) are still registered by
+ * BaseAPI; the UI uses them via ModelAPI for detail-page reads.
+ * Write endpoints reject (@TableAccessControl create/update/delete
+ * = []); ingest writes go through KubernetesResourceService as root.
+ * ------------------------------------------------------------------
+ */
+export default class KubernetesResourceAPI extends BaseAPI<
+  KubernetesResource,
+  KubernetesResourceServiceType
+> {
+  public constructor() {
+    super(KubernetesResource, KubernetesResourceService);
+
+    this.router.post(
+      `${new this.entityType()
+        .getCrudApiPath()
+        ?.toString()}/inventory-summary/:clusterId`,
+      UserMiddleware.getUserMiddleware,
+      async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
+        try {
+          await this.getInventorySummary(req, res);
+        } catch (err) {
+          next(err);
+        }
+      },
+    );
+  }
+
+  private async getInventorySummary(
+    req: ExpressRequest,
+    res: ExpressResponse,
+  ): Promise<void> {
+    const clusterIdParam: string | undefined = req.params["clusterId"];
+
+    if (!clusterIdParam) {
+      throw new BadDataException("Cluster ID is required");
+    }
+
+    let kubernetesClusterId: ObjectID;
+    try {
+      kubernetesClusterId = new ObjectID(clusterIdParam);
+    } catch {
+      throw new BadDataException("Invalid Cluster ID");
+    }
+
+    const props: DatabaseCommonInteractionProps =
+      await CommonAPI.getDatabaseCommonInteractionProps(req);
+
+    /*
+     * Authorize: the caller must be able to read the parent cluster.
+     * findOneById applies the full ACL chain; a null return means 404
+     * (either the cluster doesn't exist or the caller cannot see it —
+     * indistinguishable on purpose).
+     */
+    const cluster: KubernetesCluster | null =
+      await KubernetesClusterService.findOneById({
+        id: kubernetesClusterId,
+        select: {
+          _id: true,
+          projectId: true,
+        },
+        props,
+      });
+
+    if (!cluster || !cluster.projectId) {
+      throw new NotFoundException("Kubernetes Cluster not found");
+    }
+
+    const summary: InventorySummary = await this.service.getInventorySummary({
+      projectId: cluster.projectId,
+      kubernetesClusterId,
+    });
+
+    const responseBody: JSONObject = {
+      countsByKind: summary.countsByKind as unknown as JSONObject,
+      podPhaseCounts: summary.podPhaseCounts as unknown as JSONObject,
+      nodeReadyCounts: summary.nodeReadyCounts as unknown as JSONObject,
+      nodePressureCounts: summary.nodePressureCounts as unknown as JSONObject,
+      // Convenience fields so the UI doesn't have to repeat COALESCE:
+      pvcCount: summary.countsByKind["PersistentVolumeClaim"] || 0,
+      pvCount: summary.countsByKind["PersistentVolume"] || 0,
+      nodeCount: summary.countsByKind["Node"] || 0,
+      podCount: summary.countsByKind["Pod"] || 0,
+      namespaceCount: summary.countsByKind["Namespace"] || 0,
+      deploymentCount: summary.countsByKind["Deployment"] || 0,
+      statefulSetCount: summary.countsByKind["StatefulSet"] || 0,
+      daemonSetCount: summary.countsByKind["DaemonSet"] || 0,
+      jobCount: summary.countsByKind["Job"] || 0,
+      cronJobCount: summary.countsByKind["CronJob"] || 0,
+      hpaCount: summary.countsByKind["HorizontalPodAutoscaler"] || 0,
+      vpaCount: summary.countsByKind["VerticalPodAutoscaler"] || 0,
+      containerCount: summary.containerCount,
+    };
+
+    return Response.sendJsonObjectResponse(req, res, responseBody);
+  }
+}

package/Server/API/UserTelegramAPI.ts

@@ -0,0 +1,167 @@
+import UserMiddleware from "../Middleware/UserAuthorization";
+import GlobalConfigService from "../Services/GlobalConfigService";
+import UserTelegramService, {
+  Service as UserTelegramServiceType,
+} from "../Services/UserTelegramService";
+import {
+  ExpressRequest,
+  ExpressResponse,
+  NextFunction,
+  OneUptimeRequest,
+} from "../Utils/Express";
+import Response from "../Utils/Response";
+import BaseAPI from "./BaseAPI";
+import BadDataException from "../../Types/Exception/BadDataException";
+import ObjectID from "../../Types/ObjectID";
+import UserTelegram from "../../Models/DatabaseModels/UserTelegram";
+import GlobalConfig from "../../Models/DatabaseModels/GlobalConfig";
+
+export default class UserTelegramAPI extends BaseAPI<
+  UserTelegram,
+  UserTelegramServiceType
+> {
+  public constructor() {
+    super(UserTelegram, UserTelegramService);
+
+    this.router.post(
+      `${new this.entityType().getCrudApiPath()?.toString()}/verification-info`,
+      UserMiddleware.getUserMiddleware,
+      async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
+        try {
+          req = req as OneUptimeRequest;
+
+          if (!req.body.itemId) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Invalid item ID"),
+            );
+          }
+
+          const item: UserTelegram | null = await this.service.findOneById({
+            id: req.body["itemId"],
+            props: {
+              isRoot: true,
+            },
+            select: {
+              userId: true,
+              projectId: true,
+              verificationCode: true,
+              isVerified: true,
+            },
+          });
+
+          if (!item) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Item not found"),
+            );
+          }
+
+          if (
+            item.userId?.toString() !==
+            (req as OneUptimeRequest)?.userAuthorization?.userId?.toString()
+          ) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Invalid user ID"),
+            );
+          }
+
+          const globalConfig: GlobalConfig | null =
+            await GlobalConfigService.findOneBy({
+              query: {
+                _id: ObjectID.getZeroObjectID().toString(),
+              },
+              props: {
+                isRoot: true,
+              },
+              select: {
+                telegramBotUsername: true,
+              },
+            });
+
+          const botUsername: string | undefined =
+            globalConfig?.telegramBotUsername?.trim() || undefined;
+
+          if (!botUsername) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException(
+                "Telegram bot is not configured. Please contact your OneUptime administrator.",
+              ),
+            );
+          }
+
+          return Response.sendJsonObjectResponse(req, res, {
+            verificationCode: item.verificationCode as string,
+            telegramBotUsername: botUsername,
+            isVerified: Boolean(item.isVerified),
+            deepLinkUrl: `https://t.me/${botUsername}?start=${item.verificationCode}`,
+            startCommand: `/start ${item.verificationCode}`,
+          });
+        } catch (err) {
+          return next(err);
+        }
+      },
+    );
+
+    this.router.post(
+      `${new this.entityType()
+        .getCrudApiPath()
+        ?.toString()}/resend-verification-code`,
+      UserMiddleware.getUserMiddleware,
+      async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
+        try {
+          req = req as OneUptimeRequest;
+
+          if (!req.body.itemId) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Invalid item ID"),
+            );
+          }
+
+          const item: UserTelegram | null = await this.service.findOneById({
+            id: req.body["itemId"],
+            props: {
+              isRoot: true,
+            },
+            select: {
+              userId: true,
+            },
+          });
+
+          if (!item) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Item not found"),
+            );
+          }
+
+          if (
+            item.userId?.toString() !==
+            (req as OneUptimeRequest)?.userAuthorization?.userId?.toString()
+          ) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Invalid user ID"),
+            );
+          }
+
+          await this.service.regenerateVerificationCode(req.body.itemId);
+
+          return Response.sendEmptySuccessResponse(req, res);
+        } catch (err) {
+          return next(err);
+        }
+      },
+    );
+  }
+}