[MM-15067] Permit Bot accounts to create user access tokens if Enable Personal Access Tokens set to "false" (#10658)
* Permit Bot accounts to create user access tokens if EnableUserAccessTokens config setting is set to false * User is now outside of the go routine because we need user.IsBot for this ticket. This renders the goroutine and channel unnecessary * move err check following user def
Этот коммит содержится в:
@@ -9,7 +9,6 @@ import (
|
|||||||
|
|
||||||
"github.com/mattermost/mattermost-server/mlog"
|
"github.com/mattermost/mattermost-server/mlog"
|
||||||
"github.com/mattermost/mattermost-server/model"
|
"github.com/mattermost/mattermost-server/model"
|
||||||
"github.com/mattermost/mattermost-server/store"
|
|
||||||
)
|
)
|
||||||
|
|
||||||
func (a *App) CreateSession(session *model.Session) (*model.Session, *model.AppError) {
|
func (a *App) CreateSession(session *model.Session) (*model.Session, *model.AppError) {
|
||||||
@@ -242,32 +241,26 @@ func (a *App) UpdateLastActivityAtIfNeeded(session model.Session) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
func (a *App) CreateUserAccessToken(token *model.UserAccessToken) (*model.UserAccessToken, *model.AppError) {
|
func (a *App) CreateUserAccessToken(token *model.UserAccessToken) (*model.UserAccessToken, *model.AppError) {
|
||||||
if !*a.Config().ServiceSettings.EnableUserAccessTokens {
|
|
||||||
|
user, err := a.Srv.Store.User().Get(token.UserId)
|
||||||
|
if err != nil {
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
if !*a.Config().ServiceSettings.EnableUserAccessTokens && !user.IsBot {
|
||||||
return nil, model.NewAppError("CreateUserAccessToken", "app.user_access_token.disabled", nil, "", http.StatusNotImplemented)
|
return nil, model.NewAppError("CreateUserAccessToken", "app.user_access_token.disabled", nil, "", http.StatusNotImplemented)
|
||||||
}
|
}
|
||||||
|
|
||||||
token.Token = model.NewId()
|
token.Token = model.NewId()
|
||||||
|
|
||||||
uchan := make(chan store.StoreResult, 1)
|
|
||||||
go func() {
|
|
||||||
user, err := a.Srv.Store.User().Get(token.UserId)
|
|
||||||
uchan <- store.StoreResult{Data: user, Err: err}
|
|
||||||
close(uchan)
|
|
||||||
}()
|
|
||||||
|
|
||||||
result := <-a.Srv.Store.UserAccessToken().Save(token)
|
result := <-a.Srv.Store.UserAccessToken().Save(token)
|
||||||
if result.Err != nil {
|
if result.Err != nil {
|
||||||
return nil, result.Err
|
return nil, result.Err
|
||||||
}
|
}
|
||||||
token = result.Data.(*model.UserAccessToken)
|
token = result.Data.(*model.UserAccessToken)
|
||||||
|
|
||||||
if result := <-uchan; result.Err != nil {
|
if err := a.SendUserAccessTokenAddedEmail(user.Email, user.Locale, a.GetSiteURL()); err != nil {
|
||||||
mlog.Error(result.Err.Error())
|
return nil, err
|
||||||
} else {
|
|
||||||
user := result.Data.(*model.User)
|
|
||||||
if err := a.SendUserAccessTokenAddedEmail(user.Email, user.Locale, a.GetSiteURL()); err != nil {
|
|
||||||
mlog.Error(err.Error())
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
return token, nil
|
return token, nil
|
||||||
|
|||||||
Ссылка в новой задаче
Block a user