mirror of
https://github.com/discourse/discourse.git
synced 2024-12-17 19:23:44 +08:00
270 lines
7.9 KiB
Ruby
270 lines
7.9 KiB
Ruby
require_dependency 'rate_limiter'
|
|
|
|
class Invite < ActiveRecord::Base
|
|
include RateLimiter::OnCreateRecord
|
|
include Trashable
|
|
|
|
rate_limit :limit_invites_per_day
|
|
|
|
belongs_to :user
|
|
belongs_to :topic
|
|
belongs_to :invited_by, class_name: 'User'
|
|
|
|
has_many :invited_groups
|
|
has_many :groups, through: :invited_groups
|
|
has_many :topic_invites
|
|
has_many :topics, through: :topic_invites, source: :topic
|
|
validates_presence_of :invited_by_id
|
|
validates :email, email: true
|
|
|
|
before_create do
|
|
self.invite_key ||= SecureRandom.hex
|
|
end
|
|
|
|
before_validation do
|
|
self.email = Email.downcase(email) unless email.nil?
|
|
end
|
|
|
|
validate :user_doesnt_already_exist
|
|
attr_accessor :email_already_exists
|
|
|
|
def user_doesnt_already_exist
|
|
@email_already_exists = false
|
|
return if email.blank?
|
|
u = User.find_by("email = ?", Email.downcase(email))
|
|
if u && u.id != self.user_id
|
|
@email_already_exists = true
|
|
errors.add(:email)
|
|
end
|
|
end
|
|
|
|
def redeemed?
|
|
redeemed_at.present?
|
|
end
|
|
|
|
def expired?
|
|
created_at < SiteSetting.invite_expiry_days.days.ago
|
|
end
|
|
|
|
# link_valid? indicates whether the invite link can be used to log in to the site
|
|
def link_valid?
|
|
invalidated_at.nil?
|
|
end
|
|
|
|
def redeem
|
|
InviteRedeemer.new(self).redeem unless expired? || destroyed? || !link_valid?
|
|
end
|
|
|
|
|
|
def add_groups_for_topic(topic)
|
|
if topic.category
|
|
(topic.category.groups - groups).each { |group| group.add(user) }
|
|
end
|
|
end
|
|
|
|
def self.extend_permissions(topic, user, invited_by)
|
|
if topic.private_message?
|
|
topic.grant_permission_to_user(user.email)
|
|
elsif topic.category && topic.category.groups.any?
|
|
if Guardian.new(invited_by).can_invite_to?(topic) && !SiteSetting.enable_sso
|
|
(topic.category.groups - user.groups).each { |group| group.add(user) }
|
|
end
|
|
end
|
|
end
|
|
|
|
def self.invite_by_email(email, invited_by, topic=nil, group_ids=nil)
|
|
create_invite_by_email(email, invited_by, topic, group_ids, true)
|
|
end
|
|
|
|
# generate invite link
|
|
def self.generate_invite_link(email, invited_by, topic=nil, group_ids=nil)
|
|
invite = create_invite_by_email(email, invited_by, topic, group_ids, false)
|
|
return "#{Discourse.base_url}/invites/#{invite.invite_key}" if invite
|
|
end
|
|
|
|
# Create an invite for a user, supplying an optional topic
|
|
#
|
|
# Return the previously existing invite if already exists. Returns nil if the invite can't be created.
|
|
def self.create_invite_by_email(email, invited_by, topic=nil, group_ids=nil, send_email=true)
|
|
lower_email = Email.downcase(email)
|
|
user = User.find_by(email: lower_email)
|
|
|
|
if user
|
|
extend_permissions(topic, user, invited_by) if topic
|
|
return nil
|
|
end
|
|
|
|
invite = Invite.with_deleted
|
|
.where(email: lower_email, invited_by_id: invited_by.id)
|
|
.order('created_at DESC')
|
|
.first
|
|
|
|
if invite && (invite.expired? || invite.deleted_at)
|
|
invite.destroy
|
|
invite = nil
|
|
end
|
|
|
|
if !invite
|
|
invite = Invite.create!(invited_by: invited_by, email: lower_email)
|
|
end
|
|
|
|
if topic && !invite.topic_invites.pluck(:topic_id).include?(topic.id)
|
|
invite.topic_invites.create!(invite_id: invite.id, topic_id: topic.id)
|
|
# to correct association
|
|
topic.reload
|
|
end
|
|
|
|
if group_ids.present?
|
|
group_ids = group_ids - invite.invited_groups.pluck(:group_id)
|
|
group_ids.each do |group_id|
|
|
invite.invited_groups.create!(group_id: group_id)
|
|
end
|
|
else
|
|
if topic && topic.category # && Guardian.new(invited_by).can_invite_to?(topic)
|
|
group_ids = topic.category.groups.pluck(:id) - invite.invited_groups.pluck(:group_id)
|
|
group_ids.each { |group_id| invite.invited_groups.create!(group_id: group_id) }
|
|
end
|
|
end
|
|
|
|
Jobs.enqueue(:invite_email, invite_id: invite.id) if send_email
|
|
|
|
invite.reload
|
|
invite
|
|
end
|
|
|
|
# generate invite tokens without email
|
|
def self.generate_disposable_tokens(invited_by, quantity=nil, group_names=nil)
|
|
invite_tokens = []
|
|
quantity ||= 1
|
|
group_ids = get_group_ids(group_names)
|
|
|
|
quantity.to_i.times do
|
|
invite = Invite.create!(invited_by: invited_by)
|
|
group_ids = group_ids - invite.invited_groups.pluck(:group_id)
|
|
group_ids.each do |group_id|
|
|
invite.invited_groups.create!(group_id: group_id)
|
|
end
|
|
invite_tokens.push(invite.invite_key)
|
|
end
|
|
|
|
invite_tokens
|
|
end
|
|
|
|
def self.get_group_ids(group_names)
|
|
group_ids = []
|
|
if group_names
|
|
group_names = group_names.split(',')
|
|
group_names.each { |group_name|
|
|
group_detail = Group.find_by_name(group_name)
|
|
group_ids.push(group_detail.id) if group_detail
|
|
}
|
|
end
|
|
group_ids
|
|
end
|
|
|
|
def self.find_all_invites_from(inviter, offset=0, limit=SiteSetting.invites_per_page)
|
|
Invite.where(invited_by_id: inviter.id)
|
|
.where('invites.email IS NOT NULL')
|
|
.includes(:user => :user_stat)
|
|
.order('CASE WHEN invites.user_id IS NOT NULL THEN 0 ELSE 1 END',
|
|
'user_stats.time_read DESC',
|
|
'invites.redeemed_at DESC')
|
|
.limit(limit)
|
|
.offset(offset)
|
|
.references('user_stats')
|
|
end
|
|
|
|
def self.find_pending_invites_from(inviter, offset=0)
|
|
find_all_invites_from(inviter, offset).where('invites.user_id IS NULL').order('invites.created_at DESC')
|
|
end
|
|
|
|
def self.find_redeemed_invites_from(inviter, offset=0)
|
|
find_all_invites_from(inviter, offset).where('invites.user_id IS NOT NULL').order('invites.redeemed_at DESC')
|
|
end
|
|
|
|
def self.find_pending_invites_count(inviter)
|
|
find_all_invites_from(inviter, 0, nil).where('invites.user_id IS NULL').count
|
|
end
|
|
|
|
def self.find_redeemed_invites_count(inviter)
|
|
find_all_invites_from(inviter, 0, nil).where('invites.user_id IS NOT NULL').count
|
|
end
|
|
|
|
def self.filter_by(email_or_username)
|
|
if email_or_username
|
|
where(
|
|
'(LOWER(invites.email) LIKE :filter) or (LOWER(users.username) LIKE :filter)',
|
|
filter: "%#{email_or_username.downcase}%"
|
|
)
|
|
else
|
|
all
|
|
end
|
|
end
|
|
|
|
def self.invalidate_for_email(email)
|
|
i = Invite.find_by(email: Email.downcase(email))
|
|
if i
|
|
i.invalidated_at = Time.zone.now
|
|
i.save
|
|
end
|
|
i
|
|
end
|
|
|
|
def self.redeem_from_email(email)
|
|
invite = Invite.find_by(email: Email.downcase(email))
|
|
if invite
|
|
InviteRedeemer.new(invite).redeem
|
|
end
|
|
invite
|
|
end
|
|
|
|
def self.redeem_from_token(token, email, username=nil, name=nil, topic_id=nil)
|
|
invite = Invite.find_by(invite_key: token)
|
|
if invite
|
|
invite.update_column(:email, email)
|
|
invite.topic_invites.create!(invite_id: invite.id, topic_id: topic_id) if topic_id && Topic.find_by_id(topic_id) && !invite.topic_invites.pluck(:topic_id).include?(topic_id)
|
|
user = InviteRedeemer.new(invite, username, name).redeem
|
|
end
|
|
user
|
|
end
|
|
|
|
def resend_invite
|
|
self.update_columns(created_at: Time.zone.now, updated_at: Time.zone.now)
|
|
Jobs.enqueue(:invite_email, invite_id: self.id)
|
|
end
|
|
|
|
def limit_invites_per_day
|
|
RateLimiter.new(invited_by, "invites-per-day", SiteSetting.max_invites_per_day, 1.day.to_i)
|
|
end
|
|
|
|
def self.base_directory
|
|
File.join(Rails.root, "public", "uploads", "csv", RailsMultisite::ConnectionManagement.current_db)
|
|
end
|
|
|
|
def self.chunk_path(identifier, filename, chunk_number)
|
|
File.join(Invite.base_directory, "tmp", identifier, "#{filename}.part#{chunk_number}")
|
|
end
|
|
end
|
|
|
|
# == Schema Information
|
|
#
|
|
# Table name: invites
|
|
#
|
|
# id :integer not null, primary key
|
|
# invite_key :string(32) not null
|
|
# email :string
|
|
# invited_by_id :integer not null
|
|
# user_id :integer
|
|
# redeemed_at :datetime
|
|
# created_at :datetime not null
|
|
# updated_at :datetime not null
|
|
# deleted_at :datetime
|
|
# deleted_by_id :integer
|
|
# invalidated_at :datetime
|
|
#
|
|
# Indexes
|
|
#
|
|
# index_invites_on_email_and_invited_by_id (email,invited_by_id)
|
|
# index_invites_on_invite_key (invite_key) UNIQUE
|
|
#
|