| | | 1 | | using Elsa.Abstractions; |
| | | 2 | | using Elsa.Common.Models; |
| | | 3 | | using Elsa.Workflows.Api.Constants; |
| | | 4 | | using Elsa.Workflows.Api.Requirements; |
| | | 5 | | using Elsa.Workflows.Api.Security; |
| | | 6 | | using Elsa.Workflows.Management; |
| | | 7 | | using Elsa.Workflows.Management.Filters; |
| | | 8 | | using JetBrains.Annotations; |
| | | 9 | | using Microsoft.AspNetCore.Authorization; |
| | | 10 | | |
| | | 11 | | namespace Elsa.Workflows.Api.Endpoints.WorkflowDefinitions.Publish; |
| | | 12 | | |
| | | 13 | | [PublicAPI] |
| | 3 | 14 | | internal class Publish( |
| | 3 | 15 | | IWorkflowDefinitionStore store, |
| | 3 | 16 | | IWorkflowDefinitionPublisher workflowDefinitionPublisher, |
| | 3 | 17 | | IWorkflowDefinitionLinker linker, |
| | 3 | 18 | | IAuthorizationService authorizationService, |
| | 3 | 19 | | IWorkflowDefinitionService workflowDefinitionService, |
| | 3 | 20 | | WorkflowDefinitionScriptAuthorizationService scriptAuthorizationService) |
| | | 21 | | : ElsaEndpoint<Request, Response> |
| | | 22 | | { |
| | | 23 | | public override void Configure() |
| | | 24 | | { |
| | 3 | 25 | | Post("/workflow-definitions/{definitionId}/publish"); |
| | 3 | 26 | | ConfigurePermissions("publish:workflow-definitions"); |
| | 3 | 27 | | } |
| | | 28 | | |
| | | 29 | | public override async Task HandleAsync(Request request, CancellationToken cancellationToken) |
| | | 30 | | { |
| | 0 | 31 | | var filter = new WorkflowDefinitionFilter |
| | 0 | 32 | | { |
| | 0 | 33 | | DefinitionId = request.DefinitionId, |
| | 0 | 34 | | VersionOptions = VersionOptions.Latest |
| | 0 | 35 | | }; |
| | | 36 | | |
| | 0 | 37 | | var definition = await store.FindAsync(filter, cancellationToken); |
| | | 38 | | |
| | 0 | 39 | | if (definition == null) |
| | | 40 | | { |
| | 0 | 41 | | await Send.NotFoundAsync(cancellationToken); |
| | 0 | 42 | | return; |
| | | 43 | | } |
| | | 44 | | |
| | 0 | 45 | | var authorizationResult = await authorizationService.AuthorizeAsync(User, new NotReadOnlyResource(definition), A |
| | | 46 | | |
| | 0 | 47 | | if (!authorizationResult.Succeeded) |
| | | 48 | | { |
| | 0 | 49 | | await Send.ForbiddenAsync(cancellationToken); |
| | 0 | 50 | | return; |
| | | 51 | | } |
| | | 52 | | |
| | 0 | 53 | | var workflowGraph = await workflowDefinitionService.MaterializeWorkflowAsync(definition, cancellationToken); |
| | 0 | 54 | | var scriptAuthorizationResult = await scriptAuthorizationService.AuthorizeAsync(workflowGraph.Workflow, User, ca |
| | 0 | 55 | | if (!scriptAuthorizationResult.Succeeded) |
| | | 56 | | { |
| | 0 | 57 | | await WorkflowDefinitionScriptAuthorizationFailure.SendAsync(scriptAuthorizationResult, Send.ForbiddenAsync, |
| | 0 | 58 | | return; |
| | | 59 | | } |
| | | 60 | | |
| | 0 | 61 | | var isPublished = definition.IsPublished; |
| | 0 | 62 | | var result = !isPublished ? await workflowDefinitionPublisher.PublishAsync(definition, cancellationToken) : null |
| | 0 | 63 | | var mappedDefinition = await linker.MapAsync(definition, cancellationToken); |
| | 0 | 64 | | var response = new Response(mappedDefinition, isPublished, result?.AffectedWorkflows.WorkflowDefinitions.Count ? |
| | 0 | 65 | | await Send.OkAsync(response, cancellationToken); |
| | 0 | 66 | | } |
| | | 67 | | } |