UserMutations.cs

Go to the documentation of this file.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
 
using HotChocolate;
using HotChocolate.Types;
using HotChocolate.Types.Relay;
 
using Tgstation.Server.Api.Models.Request;
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Authority;
using Tgstation.Server.Host.GraphQL.Mutations.Payloads;
using Tgstation.Server.Host.GraphQL.Types;
using Tgstation.Server.Host.GraphQL.Types.OAuth;
using Tgstation.Server.Host.Models.Transformers;
using Tgstation.Server.Host.Security;
 
namespace Tgstation.Server.Host.GraphQL.Mutations
{
    [ExtendObjectType(typeof(Mutation))]
    [GraphQLDescription(Mutation.GraphQLDescription)]
    public sealed class UserMutations
    {
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserByPasswordAndPermissionSet(
            string name,
            string password,
            bool? enabled,
            IEnumerable<OAuthConnection>? oAuthConnections,
            IEnumerable<OidcConnection>? oidcConnections,
            PermissionSetInput? permissionSet,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(name);
            ArgumentNullException.ThrowIfNull(password);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        Name = name,
                        Password = password,
                        Enabled = enabled,
                        PermissionSet = permissionSet != null
                            ? new Api.Models.PermissionSet
                            {
                                AdministrationRights = permissionSet.AdministrationRights,
                                InstanceManagerRights = permissionSet.InstanceManagerRights,
                            }
                            : null,
                        OAuthConnections = oAuthConnections
                            ?.Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    false,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserByPasswordAndGroup(
            string name,
            string password,
            bool? enabled,
            IEnumerable<OAuthConnection>? oAuthConnections,
            IEnumerable<OidcConnection>? oidcConnections,
            [ID(nameof(UserGroup))] long groupId,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(name);
            ArgumentNullException.ThrowIfNull(password);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        Name = name,
                        Password = password,
                        Enabled = enabled,
                        Group = new Api.Models.Internal.UserGroup
                        {
                            Id = groupId,
                        },
                        OAuthConnections = oAuthConnections
                            ?.Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    false,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserByServiceConnectionAndPermissionSet(
            string name,
            IEnumerable<OAuthConnection>? oAuthConnections,
            IEnumerable<OidcConnection>? oidcConnections,
            bool? enabled,
            PermissionSetInput? permissionSet,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(name);
            ArgumentNullException.ThrowIfNull(oAuthConnections);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        Name = name,
                        Password = String.Empty,
                        Enabled = enabled,
                        PermissionSet = permissionSet != null
                            ? new Api.Models.PermissionSet
                            {
                                AdministrationRights = permissionSet.AdministrationRights,
                                InstanceManagerRights = permissionSet.InstanceManagerRights,
                            }
                            : null,
                        OAuthConnections = oAuthConnections
                            .Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    true,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserByServiceConnectionAndGroup(
            string name,
            IEnumerable<OAuthConnection> oAuthConnections,
            IEnumerable<OidcConnection> oidcConnections,
            [ID(nameof(UserGroup))] long groupId,
            bool? enabled,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(name);
            ArgumentNullException.ThrowIfNull(oAuthConnections);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        Name = name,
                        Password = String.Empty,
                        Enabled = enabled,
                        Group = new Api.Models.Internal.UserGroup
                        {
                            Id = groupId,
                        },
                        OAuthConnections = oAuthConnections
                            .Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    true,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserBySystemIDAndPermissionSet(
            string systemIdentifier,
            bool? enabled,
            IEnumerable<OAuthConnection>? oAuthConnections,
            IEnumerable<OidcConnection>? oidcConnections,
            PermissionSetInput permissionSet,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(systemIdentifier);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        SystemIdentifier = systemIdentifier,
                        Enabled = enabled,
                        PermissionSet = permissionSet != null
                            ? new Api.Models.PermissionSet
                            {
                                AdministrationRights = permissionSet.AdministrationRights,
                                InstanceManagerRights = permissionSet.InstanceManagerRights,
                            }
                            : null,
                        OAuthConnections = oAuthConnections
                            ?.Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    false,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> CreateUserBySystemIDAndGroup(
            string systemIdentifier,
            bool? enabled,
            [ID(nameof(UserGroup))] long groupId,
            IEnumerable<OAuthConnection>? oAuthConnections,
            IEnumerable<OidcConnection>? oidcConnections,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(systemIdentifier);
            ArgumentNullException.ThrowIfNull(userAuthority);
 
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                authority => authority.Create(
                    new UserCreateRequest
                    {
                        SystemIdentifier = systemIdentifier,
                        Enabled = enabled,
                        Group = new Api.Models.Internal.UserGroup
                        {
                            Id = groupId,
                        },
                        OAuthConnections = oAuthConnections
                            ?.Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = oidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    false,
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize(AdministrationRights.WriteUsers | AdministrationRights.EditOwnPassword)]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> SetCurrentUserPassword(
            string newPassword,
            [Service] IAuthenticationContext authenticationContext,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(newPassword);
            ArgumentNullException.ThrowIfNull(userAuthority);
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                async authority => await authority.Update(
                    new UserUpdateRequest
                    {
                        Id = authenticationContext.User.Id,
                        Password = newPassword,
                    },
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize(AdministrationRights.WriteUsers | AdministrationRights.EditOwnServiceConnections)]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> SetCurrentServiceConnections(
            IEnumerable<OAuthConnection>? newOAuthConnections,
            IEnumerable<OidcConnection>? newOidcConnections,
            [Service] IAuthenticationContext authenticationContext,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(newOAuthConnections);
            ArgumentNullException.ThrowIfNull(userAuthority);
            return userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                async authority => await authority.Update(
                    new UserUpdateRequest
                    {
                        Id = authenticationContext.User.Id,
                        OAuthConnections = newOAuthConnections
                            .Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = newOidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    cancellationToken));
        }
 
        [TgsGraphQLAuthorize(AdministrationRights.WriteUsers)]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> UpdateUser(
            [ID(nameof(User))] long id,
            string? casingOnlyNameChange,
            string? newPassword,
            bool? enabled,
            IEnumerable<OAuthConnection>? newOAuthConnections,
            IEnumerable<OidcConnection>? newOidcConnections,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(userAuthority);
            return UpdateUserCore(
                id,
                casingOnlyNameChange,
                newPassword,
                enabled,
                null,
                null,
                newOAuthConnections,
                newOidcConnections,
                userAuthority,
                cancellationToken);
        }
 
        [TgsGraphQLAuthorize(AdministrationRights.WriteUsers)]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> UpdateUserSetOwnedPermissionSet(
            [ID(nameof(User))] long id,
            string? casingOnlyNameChange,
            string? newPassword,
            bool? enabled,
            PermissionSetInput newPermissionSet,
            IEnumerable<OAuthConnection>? newOAuthConnections,
            IEnumerable<OidcConnection>? newOidcConnections,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(userAuthority);
            return UpdateUserCore(
                id,
                casingOnlyNameChange,
                newPassword,
                enabled,
                newPermissionSet,
                null,
                newOAuthConnections,
                newOidcConnections,
                userAuthority,
                cancellationToken);
        }
 
        [TgsGraphQLAuthorize(AdministrationRights.WriteUsers)]
        [Error(typeof(ErrorMessageException))]
        public ValueTask<User> UpdateUserSetGroup(
            [ID(nameof(User))] long id,
            string? casingOnlyNameChange,
            string? newPassword,
            bool? enabled,
            [ID(nameof(UserGroup))] long newGroupId,
            IEnumerable<OAuthConnection>? newOAuthConnections,
            IEnumerable<OidcConnection>? newOidcConnections,
            [Service] IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(userAuthority);
            return UpdateUserCore(
                id,
                casingOnlyNameChange,
                newPassword,
                enabled,
                null,
                newGroupId,
                newOAuthConnections,
                newOidcConnections,
                userAuthority,
                cancellationToken);
        }
 
        ValueTask<User> UpdateUserCore(
            [ID(nameof(User))] long id,
            string? casingOnlyNameChange,
            string? newPassword,
            bool? enabled,
            PermissionSetInput? newPermissionSet,
            long? newGroupId,
            IEnumerable<OAuthConnection>? newOAuthConnections,
            IEnumerable<OidcConnection>? newOidcConnections,
            IGraphQLAuthorityInvoker<IUserAuthority> userAuthority,
            CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<Models.User, User, UserGraphQLTransformer>(
                async authority => await authority.Update(
                    new UserUpdateRequest
                    {
                        Id = id,
                        Name = casingOnlyNameChange,
                        Password = newPassword,
                        Enabled = enabled,
                        PermissionSet = newPermissionSet != null
                            ? new Api.Models.PermissionSet
                            {
                                InstanceManagerRights = newPermissionSet.InstanceManagerRights,
                                AdministrationRights = newPermissionSet.AdministrationRights,
                            }
                            : null,
                        Group = newGroupId.HasValue
                            ? new Api.Models.Internal.UserGroup
                            {
                                Id = newGroupId.Value,
                            }
                            : null,
                        OAuthConnections = newOAuthConnections
                            ?.Select(oAuthConnection => new Api.Models.OAuthConnection
                            {
                                ExternalUserId = oAuthConnection.ExternalUserId,
                                Provider = oAuthConnection.Provider,
                            })
                            .ToList(),
                        OidcConnections = newOidcConnections
                            ?.Select(oidcConnection => new Api.Models.OidcConnection
                            {
                                ExternalUserId = oidcConnection.ExternalUserId,
                                SchemeKey = oidcConnection.SchemeKey,
                            })
                            .ToList(),
                    },
                    cancellationToken));
    }
}