| | | 1 | | using Elsa.Authorization; |
| | | 2 | | using Elsa.Abstractions; |
| | | 3 | | using Elsa.Common.Models; |
| | | 4 | | using Elsa.Workflows.Api.Constants; |
| | | 5 | | using Elsa.Workflows.Api.Requirements; |
| | | 6 | | using Elsa.Workflows.Api.Security; |
| | | 7 | | using Elsa.Workflows.Management; |
| | | 8 | | using Elsa.Workflows.Management.Filters; |
| | | 9 | | using JetBrains.Annotations; |
| | | 10 | | using Microsoft.AspNetCore.Authorization; |
| | | 11 | | |
| | | 12 | | namespace Elsa.Workflows.Api.Endpoints.WorkflowDefinitions.Publish; |
| | | 13 | | |
| | | 14 | | [PublicAPI] |
| | 3 | 15 | | internal class Publish( |
| | 3 | 16 | | IWorkflowDefinitionStore store, |
| | 3 | 17 | | IWorkflowDefinitionPublisher workflowDefinitionPublisher, |
| | 3 | 18 | | IWorkflowDefinitionLinker linker, |
| | 3 | 19 | | IAuthorizationService authorizationService, |
| | 3 | 20 | | IWorkflowDefinitionService workflowDefinitionService, |
| | 3 | 21 | | WorkflowDefinitionScriptAuthorizationService scriptAuthorizationService) |
| | | 22 | | : ElsaEndpoint<Request, Response> |
| | | 23 | | { |
| | | 24 | | public override void Configure() |
| | | 25 | | { |
| | 3 | 26 | | Post("/workflow-definitions/{definitionId}/publish"); |
| | 3 | 27 | | RequirePermission(Elsa.Workflows.Api.Permissions.WorkflowPermissions.Definitions, "publish"); |
| | 3 | 28 | | } |
| | | 29 | | |
| | | 30 | | public override async Task HandleAsync(Request request, CancellationToken cancellationToken) |
| | | 31 | | { |
| | 0 | 32 | | var filter = new WorkflowDefinitionFilter |
| | 0 | 33 | | { |
| | 0 | 34 | | DefinitionId = request.DefinitionId, |
| | 0 | 35 | | VersionOptions = VersionOptions.Latest |
| | 0 | 36 | | }; |
| | | 37 | | |
| | 0 | 38 | | var definition = await store.FindAsync(filter, cancellationToken); |
| | | 39 | | |
| | 0 | 40 | | if (definition == null) |
| | | 41 | | { |
| | 0 | 42 | | await Send.NotFoundAsync(cancellationToken); |
| | 0 | 43 | | return; |
| | | 44 | | } |
| | | 45 | | |
| | 0 | 46 | | var authorizationResult = await authorizationService.AuthorizeAsync(User, new NotReadOnlyResource(definition), A |
| | | 47 | | |
| | 0 | 48 | | if (!authorizationResult.Succeeded) |
| | | 49 | | { |
| | 0 | 50 | | await Send.ForbiddenAsync(cancellationToken); |
| | 0 | 51 | | return; |
| | | 52 | | } |
| | | 53 | | |
| | 0 | 54 | | var workflowGraph = await workflowDefinitionService.MaterializeWorkflowAsync(definition, cancellationToken); |
| | 0 | 55 | | var scriptAuthorizationResult = await scriptAuthorizationService.AuthorizeAsync(workflowGraph.Workflow, cancella |
| | 0 | 56 | | if (!scriptAuthorizationResult.Succeeded) |
| | | 57 | | { |
| | 0 | 58 | | await WorkflowDefinitionScriptAuthorizationFailure.SendAsync(scriptAuthorizationResult, message => AddError( |
| | 0 | 59 | | return; |
| | | 60 | | } |
| | | 61 | | |
| | 0 | 62 | | var isPublished = definition.IsPublished; |
| | 0 | 63 | | var result = !isPublished ? await workflowDefinitionPublisher.PublishAsync(definition, cancellationToken) : null |
| | | 64 | | |
| | 0 | 65 | | if (result is { Succeeded: false }) |
| | | 66 | | { |
| | 0 | 67 | | foreach (var validationError in result.ValidationErrors) |
| | 0 | 68 | | AddError(validationError.Message); |
| | | 69 | | |
| | 0 | 70 | | await Send.ErrorsAsync(400, cancellationToken); |
| | 0 | 71 | | return; |
| | | 72 | | } |
| | | 73 | | |
| | 0 | 74 | | var validationErrors = result?.ValidationErrors.Select(e => e.Message).ToList() ?? []; |
| | 0 | 75 | | var mappedDefinition = await linker.MapAsync(definition, cancellationToken); |
| | 0 | 76 | | var response = new Response(mappedDefinition, isPublished, result?.AffectedWorkflows.WorkflowDefinitions.Count ? |
| | 0 | 77 | | await Send.OkAsync(response, cancellationToken); |
| | 0 | 78 | | } |
| | | 79 | | } |