[MM-15067] Permit Bot accounts to create user access tokens if Enable Personal Access Tokens set to "false" (#10658)
* Permit Bot accounts to create user access tokens if EnableUserAccessTokens config setting is set to false * User is now outside of the go routine because we need user.IsBot for this ticket. This renders the goroutine and channel unnecessary * move err check following user def
Этот коммит содержится в:
@@ -9,7 +9,6 @@ import (
|
||||
|
||||
"github.com/mattermost/mattermost-server/mlog"
|
||||
"github.com/mattermost/mattermost-server/model"
|
||||
"github.com/mattermost/mattermost-server/store"
|
||||
)
|
||||
|
||||
func (a *App) CreateSession(session *model.Session) (*model.Session, *model.AppError) {
|
||||
@@ -242,32 +241,26 @@ func (a *App) UpdateLastActivityAtIfNeeded(session model.Session) {
|
||||
}
|
||||
|
||||
func (a *App) CreateUserAccessToken(token *model.UserAccessToken) (*model.UserAccessToken, *model.AppError) {
|
||||
if !*a.Config().ServiceSettings.EnableUserAccessTokens {
|
||||
|
||||
user, err := a.Srv.Store.User().Get(token.UserId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
if !*a.Config().ServiceSettings.EnableUserAccessTokens && !user.IsBot {
|
||||
return nil, model.NewAppError("CreateUserAccessToken", "app.user_access_token.disabled", nil, "", http.StatusNotImplemented)
|
||||
}
|
||||
|
||||
token.Token = model.NewId()
|
||||
|
||||
uchan := make(chan store.StoreResult, 1)
|
||||
go func() {
|
||||
user, err := a.Srv.Store.User().Get(token.UserId)
|
||||
uchan <- store.StoreResult{Data: user, Err: err}
|
||||
close(uchan)
|
||||
}()
|
||||
|
||||
result := <-a.Srv.Store.UserAccessToken().Save(token)
|
||||
if result.Err != nil {
|
||||
return nil, result.Err
|
||||
}
|
||||
token = result.Data.(*model.UserAccessToken)
|
||||
|
||||
if result := <-uchan; result.Err != nil {
|
||||
mlog.Error(result.Err.Error())
|
||||
} else {
|
||||
user := result.Data.(*model.User)
|
||||
if err := a.SendUserAccessTokenAddedEmail(user.Email, user.Locale, a.GetSiteURL()); err != nil {
|
||||
mlog.Error(err.Error())
|
||||
}
|
||||
if err := a.SendUserAccessTokenAddedEmail(user.Email, user.Locale, a.GetSiteURL()); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return token, nil
|
||||
|
||||
Ссылка в новой задаче
Block a user