MM-24867: local mode for inviteUsersToTeam (#14558)

local mode support for inviteUsersToTeam

https://mattermost.atlassian.net/browse/MM-24867

api4/team_local.go

@@ -22,6 +22,115 @@ func (api *API) InitTeamLocal() {
 	api.BaseRoutes.TeamByName.Handle("", api.ApiLocal(getTeamByName)).Methods("GET")
 	api.BaseRoutes.TeamMembers.Handle("", api.ApiLocal(addTeamMember)).Methods("POST")
 	api.BaseRoutes.TeamMember.Handle("", api.ApiLocal(removeTeamMember)).Methods("DELETE")
+
+	api.BaseRoutes.Teams.Handle("", api.ApiLocal(getAllTeams)).Methods("GET")
+	api.BaseRoutes.Team.Handle("/invite/email", api.ApiLocal(localInviteUsersToTeam)).Methods("POST")
+}
+
+func localInviteUsersToTeam(c *Context, w http.ResponseWriter, r *http.Request) {
+	c.RequireTeamId()
+	if c.Err != nil {
+		return
+	}
+
+	if !*c.App.Config().ServiceSettings.EnableEmailInvitations {
+		c.Err = model.NewAppError("localInviteUsersToTeam", "api.team.invite_members.disabled.app_error", nil, "", http.StatusNotImplemented)
+		return
+	}
+
+	emailList := model.ArrayFromJson(r.Body)
+	if len(emailList) == 0 {
+		c.SetInvalidParam("user_email")
+		return
+	}
+	for i := range emailList {
+		email := strings.ToLower(emailList[i])
+		if !model.IsValidEmail(email) {
+			c.Err = model.NewAppError("localInviteUsersToTeam", "api.team.invite_members.invalid_email.app_error", map[string]interface{}{"Address": email}, "", http.StatusBadRequest)
+			return
+		}
+		emailList[i] = email
+	}
+
+	auditRec := c.MakeAuditRecord("localInviteUsersToTeam", audit.Fail)
+	defer c.LogAuditRec(auditRec)
+	auditRec.AddMeta("team_id", c.Params.TeamId)
+	auditRec.AddMeta("count", len(emailList))
+	auditRec.AddMeta("emails", emailList)
+
+	team, err := c.App.Srv().Store.Team().Get(c.Params.TeamId)
+	if err != nil {
+		c.Err = err
+		return
+	}
+
+	allowedDomains := []string{team.AllowedDomains, *c.App.Config().TeamSettings.RestrictCreationToDomains}
+
+	if r.URL.Query().Get("graceful") != "" {
+		var invitesWithErrors []*model.EmailInviteWithError
+		var goodEmails, errList []string
+		for _, email := range emailList {
+			invite := &model.EmailInviteWithError{
+				Email: email,
+				Error: nil,
+			}
+			if !isEmailAddressAllowed(email, allowedDomains) {
+				invite.Error = model.NewAppError("localInviteUsersToTeam", "api.team.invite_members.invalid_email.app_error", map[string]interface{}{"Addresses": email}, "", http.StatusBadRequest)
+				errList = append(errList, model.EmailInviteWithErrorToString(invite))
+			} else {
+				goodEmails = append(goodEmails, email)
+			}
+			invitesWithErrors = append(invitesWithErrors, invite)
+		}
+		auditRec.AddMeta("errors", errList)
+		if len(goodEmails) > 0 {
+			c.App.SendInviteEmails(team, "Administrator", "mmctl "+model.NewId(), goodEmails, *c.App.Config().ServiceSettings.SiteURL)
+		}
+		// in graceful mode we return both the successful ones and the failed ones
+		w.Write([]byte(model.EmailInviteWithErrorToJson(invitesWithErrors)))
+	} else {
+		var invalidEmailList []string
+
+		for _, email := range emailList {
+			if !isEmailAddressAllowed(email, allowedDomains) {
+				invalidEmailList = append(invalidEmailList, email)
+			}
+		}
+		if len(invalidEmailList) > 0 {
+			s := strings.Join(invalidEmailList, ", ")
+			c.Err = model.NewAppError("localInviteUsersToTeam", "api.team.invite_members.invalid_email.app_error", map[string]interface{}{"Addresses": s}, "", http.StatusBadRequest)
+			return
+		}
+		c.App.SendInviteEmails(team, "Administrator", "mmctl "+model.NewId(), emailList, *c.App.Config().ServiceSettings.SiteURL)
+		ReturnStatusOK(w)
+	}
+	auditRec.Success()
+}
+
+func isEmailAddressAllowed(email string, allowedDomains []string) bool {
+	for _, restriction := range allowedDomains {
+		domains := normalizeDomains(restriction)
+		if len(domains) <= 0 {
+			continue
+		}
+		matched := false
+		for _, d := range domains {
+			if strings.HasSuffix(email, "@"+d) {
+				matched = true
+				break
+			}
+		}
+		if !matched {
+			return false
+		}
+	}
+	return true
+}
+
+func normalizeDomains(domains string) []string {
+	// commas and @ signs are optional
+	// can be in the form of "@corp.mattermost.com, mattermost.com mattermost.org" -> corp.mattermost.com mattermost.com mattermost.org
+	return strings.Fields(strings.TrimSpace(strings.ToLower(strings.Replace(strings.Replace(domains, "@", " ", -1), ",", " ", -1))))
 }
 
 func localCreateTeam(c *Context, w http.ResponseWriter, r *http.Request) {