feat: provide the guest form to allow guest creation anywhere

Signed-off-by: Kent Delante <kent.delante@proton.me>

Author: Kent Delante

lib/AppInfo/Application.php

@@ -9,6 +9,7 @@
 
 use OCA\Files\Event\LoadAdditionalScriptsEvent;
 use OCA\Guests\Capabilities;
+use OCA\Guests\Events\GuestCreatedEvent;
 use OCA\Guests\GroupBackend;
 use OCA\Guests\Hooks;
 use OCA\Guests\Listener\BeforeUserManagementRenderedListener;
@@ -32,6 +33,7 @@
 use OCP\Notification\IManager as INotificationManager;
 use OCP\Share\Events\ShareCreatedEvent;
 use OCP\User\Events\UserFirstTimeLoggedInEvent;
+use OCP\Util;
 
 class Application extends App implements IBootstrap {
 	public const APP_ID = 'guests';
@@ -59,12 +61,14 @@ public function boot(IBootContext $context): void {
 		$this->setupGuestRestrictions($context->getAppContainer(), $context->getServerContainer());
 		$this->setupNotifications($context->getAppContainer());
 		$context->getAppContainer()->query(RestrictionManager::class)->lateSetupRestrictions();
+		Util::addScript('guests', 'guests-init');
 	}
 
 	private function setupGuestManagement(IAppContainer $container, IServerContainer $server): void {
 		$hookManager = $container->query(Hooks::class);
 		$server->get(IEventDispatcher::class)->addListener(ShareCreatedEvent::class, [$hookManager, 'handlePostShare']);
 		$server->get(IEventDispatcher::class)->addListener(UserFirstTimeLoggedInEvent::class, [$hookManager, 'handleFirstLogin']);
+		$server->get(IEventDispatcher::class)->addListener(GuestCreatedEvent::class, [$hookManager, 'handlePostCreate']);
 	}
 
 	private function setupGuestRestrictions(IAppContainer $container, IServerContainer $server): void {

lib/Controller/UsersController.php

@@ -13,12 +13,14 @@
 use OCA\Guests\Config;
 use OCA\Guests\Db\Transfer;
 use OCA\Guests\Db\TransferMapper;
+use OCA\Guests\Events\GuestCreatedEvent;
 use OCA\Guests\GuestManager;
 use OCA\Guests\TransferService;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\Http;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\AppFramework\OCSController;
+use OCP\EventDispatcher\IEventDispatcher;
 use OCP\Group\ISubAdmin;
 use OCP\IGroupManager;
 use OCP\IL10N;
@@ -42,6 +44,7 @@ public function __construct(
 		private IGroupManager $groupManager,
 		private TransferService $transferService,
 		private TransferMapper $transferMapper,
+		private IEventDispatcher $eventDispatcher,
 	) {
 		parent::__construct($appName, $request);
 	}
@@ -55,7 +58,7 @@ public function __construct(
 	 * @param array $groups
 	 * @return DataResponse
 	 */
-	public function create(string $email, string $displayName, string $language, array $groups): DataResponse {
+	public function create(string $email, string $displayName, string $language, array $groups, bool $sendInvite = true): DataResponse {
 		$errorMessages = [];
 		$currentUser = $this->userSession->getUser();
 
@@ -142,6 +145,7 @@ public function create(string $email, string $displayName, string $language, arr
 			if ($this->userManager instanceof PublicEmitter) {
 				$this->userManager->emit('\OC\User', 'assignedUserId', [$username]);
 			}
+			$this->eventDispatcher->dispatchTyped(new GuestCreatedEvent($username, $sendInvite));
 			foreach ($groupObjects as $group) {
 				$group->addUser($guestUser);
 			}

lib/Events/GuestCreatedEvent.php

@@ -0,0 +1,28 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * SPDX-FileCopyrightText: 2019 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\Guests\Events;
+
+use OCP\EventDispatcher\Event;
+
+class GuestCreatedEvent extends Event {
+	public function __construct(
+		private string $userId,
+		private bool $sendInviteEmail,
+	) {
+		parent::__construct();
+	}
+
+	public function getUserId(): string {
+		return $this->userId;
+	}
+
+	public function shouldSendInviteEmail(): bool {
+		return $this->sendInviteEmail;
+	}
+}

lib/Hooks.php

@@ -10,6 +10,7 @@
 
 use OC\Files\Filesystem;
 use OCA\Guests\AppInfo\Application;
+use OCA\Guests\Events\GuestCreatedEvent;
 use OCA\Guests\Storage\ReadOnlyJail;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\IAppContainer;
@@ -76,7 +77,6 @@ public function handlePostShare(ShareCreatedEvent $event): void {
 		$this->logger->debug("checking if '$shareWith' has a password",
 			['app' => Application::APP_ID]);
 
-
 		$passwordToken = $this->config->getUserValue(
 			$shareWith,
 			'core',
@@ -97,9 +97,9 @@ public function handlePostShare(ShareCreatedEvent $event): void {
 				$this->mail->sendGuestInviteMail(
 					$uid,
 					$shareWith,
-					$share,
 					$token,
-					$lang
+					$lang,
+					$share
 				);
 				$share->setMailSend(false);
 			}
@@ -170,4 +170,64 @@ public function handleFirstLogin(UserFirstTimeLoggedInEvent $event): void {
 			$guestUser->delete();
 		}
 	}
+
+	public function handlePostCreate(GuestCreatedEvent $event): void {
+		if (!$event->shouldSendInviteEmail()) {
+			return;
+		}
+
+		$guest = $event->getUserId();
+
+		if (!$this->guestManager->isGuest($guest)) {
+			$this->logger->debug(
+				"ignoring user '$guest', not a guest",
+				['app' => Application::APP_ID]
+			);
+
+			return;
+		}
+
+		$user = $this->userSession->getUser();
+
+		if (!$user) {
+			throw new \Exception(
+				'post_assign_id hook triggered without user in session'
+			);
+		}
+
+		$this->logger->debug("checking if '$guest' has a password",
+			['app' => Application::APP_ID]);
+
+
+		$guestUser = $this->userManager->get($guest);
+
+		$passwordToken = $this->config->getUserValue(
+			$guest,
+			'core',
+			'lostpassword',
+			null
+		);
+
+		$uid = $user->getUID();
+
+		try {
+			if ($passwordToken) {
+				// user has not yet activated his account
+				$decryptedToken = $this->crypto->decrypt($passwordToken, strtolower($guest) . $this->config->getSystemValue('secret'));
+				[, $token] = explode(':', $decryptedToken);
+				$lang = $this->config->getUserValue($guest, 'core', 'lang', '');
+				// send invitation
+				$this->mail->sendGuestInviteMail(
+					$uid,
+					$guest,
+					$token,
+					$lang
+				);
+			}
+		} catch (DoesNotExistException $ex) {
+			$this->logger->error("'$guest' does not exist", ['app' => Application::APP_ID]);
+		} catch (\Exception $e) {
+			$this->logger->error('Failed to send guest activation mail', ['app' => Application::APP_ID, 'exception' => $e]);
+		}
+	}
 }

lib/Listener/LoadAdditionalScriptsListener.php

@@ -12,6 +12,7 @@
 
 use OCA\Files\Event\LoadAdditionalScriptsEvent;
 use OCA\Guests\Config;
+use OCP\AppFramework\Services\IInitialState;
 use OCP\EventDispatcher\Event;
 use OCP\EventDispatcher\IEventListener;
 use OCP\Util;
@@ -23,10 +24,13 @@ class LoadAdditionalScriptsListener implements IEventListener {
 
 	public function __construct(
 		private Config $config,
+		private IInitialState $initialState,
 	) {
 	}
 
 	public function handle(Event $event): void {
+		$this->initialState->provideInitialState('canCreateGuests', $this->config->canCreateGuests());
+
 		// If the user cannot create guests, we don't need to load the script
 		if (!$this->config->canCreateGuests()) {
 			return;

lib/Mail.php

@@ -10,6 +10,7 @@
 
 use OCP\Defaults;
 use OCP\IConfig;
+use OCP\IL10N;
 use OCP\IURLGenerator;
 use OCP\IUserManager;
 use OCP\IUserSession;
@@ -40,53 +41,83 @@ public function __construct(
 	 * @param $uid
 	 * @throws \Exception
 	 */
-	public function sendGuestInviteMail(string $uid, string $shareWith, Share\IShare $share, string $token, string $language = ''): void {
+	public function sendGuestInviteMail(string $uid, string $guest, string $token, string $language = '', ?Share\IShare $share = null): void {
 		if ($language === '') {
 			$language = null;
 		}
 		$l10n = $this->l10nFactory->get('guests', $language);
 
 		$passwordLink = $this->urlGenerator->linkToRouteAbsolute(
 			'core.lost.resetform',
-			['userId' => $shareWith, 'token' => $token]
+			['userId' => $guest, 'token' => $token]
 		);
 
-		$this->logger->debug("sending invite to $shareWith: $passwordLink", ['app' => 'guests']);
-
-		$targetUser = $this->userManager->get($shareWith);
-		$shareWithEmail = $targetUser->getEMailAddress();
-		if (!$shareWithEmail) {
+		$targetUser = $this->userManager->get($guest);
+		$guestEmail = $targetUser->getEMailAddress();
+		if (!$guestEmail) {
 			throw new \Exception('Guest user created without email');
 		}
 		$replyTo = $this->userManager->get($uid)->getEMailAddress();
 		$senderDisplayName = $this->userSession->getUser()->getDisplayName();
 
+		if (empty($share)) {
+			[ $subject, $emailTemplate ] = $this->composeInviteMessage($senderDisplayName, $guestEmail, $passwordLink, $l10n);
+		} else {
+			[ $subject, $emailTemplate ] = $this->composeShareMessage($share, $senderDisplayName, $guestEmail, $passwordLink, $l10n);
+		}
+
+		try {
+			$message = $this->mailer->createMessage();
+			$message->setTo([$guestEmail => $targetUser->getDisplayName()]);
+			$message->setSubject($subject);
+			$message->setHtmlBody($emailTemplate->renderHtml());
+			$message->setPlainBody($emailTemplate->renderText());
+			$message->setFrom([
+				Util::getDefaultEmailAddress('sharing-noreply') =>
+					$l10n->t('%s via %s', [
+						$senderDisplayName,
+						$this->defaults->getName()
+					]),
+			]);
+
+			if (!is_null($replyTo)) {
+				$message->setReplyTo([$replyTo]);
+			}
+
+			$this->mailer->send($message);
+		} catch (\Exception $e) {
+			throw new \Exception($l10n->t(
+				'Couldn\'t send reset email. Please contact your administrator.'
+			));
+		}
+	}
+
+	private function composeShareMessage(Share\IShare $share, string $senderDisplayName, string $guestEmail, string $passwordLink, IL10N $l10n): array {
 		$filename = trim($share->getTarget(), '/');
-		$subject = $l10n->t('%s shared »%s« with you', [$senderDisplayName, $filename]);
+		$subject = $l10n->t('%s shared a file with you', [$senderDisplayName]);
 		$expiration = $share->getExpirationDate();
 
 		$link = $this->urlGenerator->linkToRouteAbsolute(
 			'files.viewcontroller.showFile', ['fileid' => $share->getNodeId(), 'direct' => 1]
 		);
-
-		$emailTemplate = $this->mailer->createEMailTemplate('guest.invite');
+		$emailTemplate = $this->mailer->createEMailTemplate('guest.share');
 
 		$emailTemplate->addHeader();
-		$emailTemplate->addHeading($l10n->t('Incoming share'));
+		$emailTemplate->addHeading($l10n->t('%s shared a file with you', [$senderDisplayName]));
 
 		$emailTemplate->addBodyText(
 			$l10n->t('Hey there,')
 		);
 
 		$emailTemplate->addBodyText(
-			$l10n->t('%s just shared »%s« with you.', [$senderDisplayName, $filename])
+			$l10n->t('%s just invited you and shared »%s« with you.', [$senderDisplayName, $filename])
 		);
 
 		$emailTemplate->addBodyText(
 			$l10n->t('You can access the shared file by activating your guest account.')
 		);
 		$emailTemplate->addBodyText(
-			$l10n->t('After your account is activated you can view the share by logging in with %s.', [$shareWithEmail])
+			$l10n->t('After your account is activated you can view the share by logging in with %s.', [$guestEmail])
 		);
 
 		if ($expiration) {
@@ -104,29 +135,38 @@ public function sendGuestInviteMail(string $uid, string $shareWith, Share\IShare
 		);
 		$emailTemplate->addFooter();
 
-		try {
-			$message = $this->mailer->createMessage();
-			$message->setTo([$shareWithEmail => $targetUser->getDisplayName()]);
-			$message->setSubject($subject);
-			$message->setHtmlBody($emailTemplate->renderHtml());
-			$message->setPlainBody($emailTemplate->renderText());
-			$message->setFrom([
-				Util::getDefaultEmailAddress('sharing-noreply') =>
-					$l10n->t('%s via %s', [
-						$senderDisplayName,
-						$this->defaults->getName()
-					]),
-			]);
+		return [ $subject, $emailTemplate ];
+	}
 
-			if (!is_null($replyTo)) {
-				$message->setReplyTo([$replyTo]);
-			}
+	private function composeInviteMessage(string $senderDisplayName, string $guestEmail, string $passwordLink, IL10N $l10n): array {
+		$subject = $l10n->t('%s invited you as a guest', [$senderDisplayName]);
 
-			$this->mailer->send($message);
-		} catch (\Exception $e) {
-			throw new \Exception($l10n->t(
-				'Couldn\'t send reset email. Please contact your administrator.'
-			));
-		}
+		$emailTemplate = $this->mailer->createEMailTemplate('guest.invite');
+
+		$emailTemplate->addHeader();
+		$emailTemplate->addHeading($l10n->t('You have been invited'));
+
+		$emailTemplate->addBodyText(
+			$l10n->t('Hey there,')
+		);
+
+		$emailTemplate->addBodyText(
+			$l10n->t('%s just invited you.', [$senderDisplayName])
+		);
+
+		$emailTemplate->addBodyText(
+			$l10n->t('You can activate your guest account with the button below.')
+		);
+		$emailTemplate->addBodyText(
+			$l10n->t('After your account is activated you can log in with %s.', [$guestEmail])
+		);
+
+		$emailTemplate->addBodyButton(
+			$l10n->t('Activate account'),
+			$passwordLink
+		);
+		$emailTemplate->addFooter();
+
+		return [ $subject, $emailTemplate ];
 	}
 }