PromucFlow_constructor/app/rts/src/server.ts

import http from "http"
import path from "path"
import express from "express"
import SocketIO from "socket.io"
import { MongoClient, ObjectId } from "mongodb"
import type mongodb from "mongodb"
import axios from "axios"

const MONGODB_URI = process.env.APPSMITH_MONGODB_URI
if (MONGODB_URI == null || MONGODB_URI === "" || !MONGODB_URI.startsWith("mongodb")) {
	console.error("Please provide a valid value for `APPSMITH_MONGODB_URI`.")
	process.exit(1)
}

const API_BASE_URL = process.env.APPSMITH_API_BASE_URL
if (API_BASE_URL == null || API_BASE_URL === "") {
	console.error("Please provide a valid value for `APPSMITH_API_BASE_URL`.")
	process.exit(1)
}

console.log("Connecting to MongoDB at", MONGODB_URI)

const ROOMS = {}

main()

interface Policy {
	permission: string
	users: string[]
	groups: string[]
}

function main() {
	const app = express()
	const server = new http.Server(app)
	const io = new SocketIO.Server(server, {
		// TODO: Remove this CORS configuration.
		cors: {
			origin: "*",
		},
	})

	const port = 8091

	app.get("/", (req, res) => {
		res.redirect("/index.html")
	})

	app.get("/info", (req, res) => {
		return res.json({ rooms: ROOMS })
	});

	io.on("connection", (socket) => {
		socket.join("default_room")
		onSocketConnected(socket)
			.catch((error) => console.error("Error in socket connected handler", error))
	})

	watchMongoDB(io)
		.catch((error) => console.error("Error watching MongoDB", error))

	app.use(express.static(path.join(__dirname, "static")))
	server.listen(port, () => {
		console.log(`RTS running at http://localhost:${port}`)
	})
}

async function onSocketConnected(socket) {
	const connectionCookie = socket.handshake.headers.cookie
	console.log("new user connected with cookie", connectionCookie)

	socket.on("disconnect", () => {
		console.log("user disconnected", connectionCookie)
	})

	let isAuthenticated = true

	if (connectionCookie != null && connectionCookie !== "") {
		isAuthenticated = await tryAuth(socket, connectionCookie)
		socket.emit("authStatus", { isAuthenticated })
	}

	socket.on("auth", async ({ cookie }) => {
		isAuthenticated = await tryAuth(socket, cookie)
		socket.emit("authStatus", { isAuthenticated })
	});
}

async function tryAuth(socket, cookie) {
	const sessionCookie = cookie.match(/\bSESSION=\S+/)[0]
	let response
	try {
		response = await axios.request({
			method: "GET",
			url: API_BASE_URL + "/applications/new",
			headers: {
				Cookie: sessionCookie,
			},
		})
	} catch (error) {
		if (error.response?.status === 401) {
			console.info("Couldn't authenticate user with cookie:", sessionCookie)
		} else {
			console.error("Error authenticating", error)
		}
		return false
	}

	const email = response.data.data.user.email
	ROOMS[email] = []
	socket.join("email:" + email)
	console.log("A socket joined email:" + email)

	/*for (const org of response.data.data.organizationApplications) {
		for (const app of org.applications) {
			ROOMS[email].push(app.id)
			console.log("Joining", app.id)
			socket.join("application:" + app.id)
		}
	}//*/

	socket.on("disconnect", (reason) => {
		delete ROOMS[email]
	});

	return true
}

async function watchMongoDB(io) {
	const client = await MongoClient.connect(MONGODB_URI, { useUnifiedTopology: true });
	const db = client.db()

	interface CommentThread {
		applicationId: string
	}

	interface Comment {
		threadId: string
		policies: Policy[]
		createdAt: string
		updatedAt: string
		creationTime: string
		updationTime: string
	}

	const threadCollection: mongodb.Collection<CommentThread> = db.collection("commentThread")

	const commentChangeStream = db.collection("comment").watch(
		[
			// Prevent server-internal fields from being sent to the client.
			{
				$unset: [
					"deletedAt",
					"deleted",
					"_class",
				].map(f => "fullDocument." + f)
			},
		],
		{ fullDocument: "updateLookup" }
	);

	commentChangeStream.on("change", async (event: mongodb.ChangeEventCR<Comment>) => {
		console.log("comment event", event)
		const comment: Comment = event.fullDocument
		const { applicationId }: CommentThread = await threadCollection.findOne(
			{ _id: new ObjectId(comment.threadId) },
			{ projection: { applicationId: 1 } },
		)

		comment.creationTime = comment.createdAt
		comment.updationTime = comment.updatedAt
		delete comment.createdAt
		delete comment.updatedAt

		let target = io
		let shouldEmit = false

		for (const email of findPolicyEmails(comment.policies, "read:comments")) {
			shouldEmit = true
			console.log("Emitting comment to email", email)
			target = target.to("email:" + email)
		}

		if (shouldEmit) {
			const eventName = event.operationType + ":" + event.ns.coll
			console.log("Emitting", eventName)
			target.emit(eventName, { comment })
		}
	})

	const threadChangeStream = threadCollection.watch(
		[
			// Prevent server-internal fields from being sent to the client.
			{
				$unset: [
					"deletedAt",
					"deleted",
					"_class",
				].map(f => "fullDocument." + f)
			},
		],
		{ fullDocument: "updateLookup" }
	);

	threadChangeStream.on("change", async (event: mongodb.ChangeEventCR) => {
		console.log("thread event", event)
		const thread = event.fullDocument
		if (thread == null) {
			// This happens when `event.operationType === "drop"`, when a comment is deleted.
			console.error("Null document recieved for comment change event", event)
			return
		}

		thread.creationTime = thread.createdAt
		thread.updationTime = thread.updatedAt
		delete thread.createdAt
		delete thread.updatedAt
		thread.isViewed = false

		let target = io
		let shouldEmit = false

		for (const email of findPolicyEmails(thread.policies, "read:commentThreads")) {
			shouldEmit = true
			console.log("Emitting thread to email", email)
			target = target.to("email:" + email)
		}

		if (shouldEmit) {
			const eventName = event.operationType + ":" + event.ns.coll
			console.log("Emitting", eventName)
			target.emit(eventName, { thread })
		}
	})

	process.on("exit", () => {
		(commentChangeStream != null ? commentChangeStream.close() : Promise.bind(client).resolve())
			.then(client.close.bind(client))
			.finally("Fin")
	})

	console.log("Watching MongoDB")
}

function findPolicyEmails(policies: Policy[], permission: string): string[] {
	const emails: string[] = []
	for (const policy of policies) {
		if (policy.permission === permission) {
			for (const email of policy.users) {
				console.log("Emitting comment to email", email)
				emails.push(email)
			}
			break
		}
	}
	return emails
}