Fs path {{FsPath}}, Target path "{{VirtualTargetDirPath}}/{{TargetName}}", size: {{FileSize}}
`, + Body: `Fs path {{.FsPath}}, Target path "{{.VirtualTargetDirPath}}/{{.TargetName}}", size: {{.FileSize}}
`, }, }, } @@ -7045,9 +7045,9 @@ func TestEventRuleIDPLogin(t *testing.T) { username := `test_"idp_"login` custom1 := `cust"oa"1` u := map[string]any{ - "username": "{{Name}}", + "username": "{{.Name}}", "status": 1, - "home_dir": filepath.Join(os.TempDir(), "{{IDPFieldcustom1}}"), + "home_dir": filepath.Join(os.TempDir(), "{{.IDPFieldcustom1}}"), "permissions": map[string][]string{ "/": {dataprovider.PermAny}, }, @@ -7055,7 +7055,7 @@ func TestEventRuleIDPLogin(t *testing.T) { userTmpl, err := json.Marshal(u) require.NoError(t, err) a := map[string]any{ - "username": "{{Name}}", + "username": "{{.Name}}", "status": 1, "permissions": []string{dataprovider.PermAdminAny}, } @@ -7081,8 +7081,8 @@ func TestEventRuleIDPLogin(t *testing.T) { Options: dataprovider.BaseEventActionOptions{ EmailConfig: dataprovider.EventActionEmailConfig{ Recipients: []string{"test@example.com"}, - Subject: `"{{Event}} {{StatusString}}"`, - Body: "{{Name}} Custom field: {{IDPFieldcustom1}}", + Subject: `"{{.Event}} {{.StatusString}}"`, + Body: "{{.Name}} Custom field: {{.IDPFieldcustom1}}", }, }, } @@ -7327,8 +7327,8 @@ func TestEventRuleEmailField(t *testing.T) { Type: dataprovider.ActionTypeEmail, Options: dataprovider.BaseEventActionOptions{ EmailConfig: dataprovider.EventActionEmailConfig{ - Recipients: []string{"{{Email}}"}, - Subject: `"{{Event}}" from "{{Name}}"`, + Recipients: []string{"{{.Email}}"}, + Subject: `"{{.Event}}" from "{{.Name}}"`, Body: "Sample email body", }, }, @@ -7342,7 +7342,7 @@ func TestEventRuleEmailField(t *testing.T) { EmailConfig: dataprovider.EventActionEmailConfig{ Recipients: []string{"failure@example.com"}, Subject: `"Failure`, - Body: "{{ErrorString}}", + Body: "{{.ErrorString}}", }, }, } @@ -7473,9 +7473,9 @@ func TestEventRuleCertificate(t *testing.T) { Options: dataprovider.BaseEventActionOptions{ EmailConfig: dataprovider.EventActionEmailConfig{ Recipients: []string{"test@example.com"}, - Subject: `"{{Event}} {{StatusString}}"`, + Subject: `"{{.Event}} {{.StatusString}}"`, ContentType: 0, - Body: "Domain: {{Name}} Timestamp: {{Timestamp}} {{ErrorString}} Date time: {{DateTime}}", + Body: "Domain: {{.Name}} Timestamp: {{.Timestamp}} {{.ErrorString}} Date time: {{.DateTime}}", }, }, } @@ -7613,8 +7613,8 @@ func TestEventRuleIPBlocked(t *testing.T) { Options: dataprovider.BaseEventActionOptions{ EmailConfig: dataprovider.EventActionEmailConfig{ Recipients: []string{"test3@example.com", "test4@example.com"}, - Subject: `New "{{Event}}"`, - Body: "IP: {{IP}} Timestamp: {{Timestamp}}", + Subject: `New "{{.Event}}"`, + Body: "IP: {{.IP}} Timestamp: {{.Timestamp}}", }, }, } diff --git a/internal/dataprovider/bolt.go b/internal/dataprovider/bolt.go index 104e9dbb..64fb238f 100644 --- a/internal/dataprovider/bolt.go +++ b/internal/dataprovider/bolt.go @@ -40,7 +40,7 @@ import ( ) const ( - boltDatabaseVersion = 31 + boltDatabaseVersion = 32 ) var ( @@ -3186,10 +3186,13 @@ func (p *BoltProvider) migrateDatabase() error { providerLog(logger.LevelError, "%v", err) logger.ErrorToConsole("%v", err) return err - case version == 29, version == 30: - logger.InfoToConsole("updating database schema version: %d -> 31", version) - providerLog(logger.LevelInfo, "updating database schema version: %d -> 31", version) - return updateBoltDatabaseVersion(p.dbHandle, 31) + case version == 29, version == 30, version == 31: + logger.InfoToConsole("updating database schema version: %d -> 32", version) + providerLog(logger.LevelInfo, "updating database schema version: %d -> 32", version) + if err := updateEventActions(); err != nil { + return err + } + return updateBoltDatabaseVersion(p.dbHandle, 32) default: if version > boltDatabaseVersion { providerLog(logger.LevelError, "database schema version %d is newer than the supported one: %d", version, @@ -3211,9 +3214,14 @@ func (p *BoltProvider) revertDatabase(targetVersion int) error { //nolint:gocycl return errors.New("current version match target version, nothing to do") } switch dbVersion.Version { - case 30, 31: + case 30, 31, 32: logger.InfoToConsole("downgrading database schema version: %d -> 29", dbVersion.Version) providerLog(logger.LevelInfo, "downgrading database schema version: %d -> 29", dbVersion.Version) + if dbVersion.Version == 32 { + if err := restoreEventActions(); err != nil { + return err + } + } return updateBoltDatabaseVersion(p.dbHandle, 29) default: return fmt.Errorf("database schema version not handled: %v", dbVersion.Version) diff --git a/internal/dataprovider/dataprovider.go b/internal/dataprovider/dataprovider.go index 9d523ca7..53a96294 100644 --- a/internal/dataprovider/dataprovider.go +++ b/internal/dataprovider/dataprovider.go @@ -27,6 +27,7 @@ import ( "crypto/sha512" "crypto/subtle" "crypto/x509" + "database/sql" "encoding/base64" "encoding/hex" "encoding/json" @@ -90,7 +91,7 @@ const ( CockroachDataProviderName = "cockroachdb" // DumpVersion defines the version for the dump. // For restore/load we support the current version and the previous one - DumpVersion = 16 + DumpVersion = 17 argonPwdPrefix = "$argon2id$" bcryptPwdPrefix = "$2a$" @@ -2557,6 +2558,17 @@ func DumpData(scopes []string) (BackupData, error) { func ParseDumpData(data []byte) (BackupData, error) { var dump BackupData err := json.Unmarshal(data, &dump) + if err != nil { + return dump, err + } + if dump.Version < 17 { + providerLog(logger.LevelInfo, "updating placeholders for actions restored from dump version %d", dump.Version) + eventActions, err := updateEventActionPlaceholders(dump.EventActions) + if err != nil { + return dump, fmt.Errorf("unable to update event action placeholders for dump version %d: %w", dump.Version, err) + } + dump.EventActions = eventActions + } return dump, err } @@ -4673,6 +4685,176 @@ func isExternalAuthConfigured(loginMethod string) bool { } } +func replaceTemplateVars(input string) string { + var result strings.Builder + i := 0 + for i < len(input) { + if i+2 <= len(input) && input[i:i+2] == "{{" { + if i+2 < len(input) { + nextChar := input[i+2] + if nextChar == ' ' || nextChar == '.' || nextChar == '-' { + // Don't replace if followed by space, dot or minus. + result.WriteString("{{") + i += 2 + continue + } + } + + // Find the closing "}}" + closing := strings.Index(input[i:], "}}") + if closing != -1 { + // Replace with {{. only if it's a proper template variable. + result.WriteString("{{.") + result.WriteString(input[i+2 : i+closing]) + result.WriteString("}}") + i += closing + 2 + continue + } + } + result.WriteByte(input[i]) + i++ + } + return result.String() +} + +func restoreTemplateVars(input string) string { + var result strings.Builder + i := 0 + + for i < len(input) { + if i+3 <= len(input) && input[i:i+3] == "{{." { + if i+3 < len(input) { + nextChar := input[i+3] + if nextChar == ' ' || nextChar == '.' || nextChar == '-' { + // Don't change if it's a space, dot, or minus + result.WriteString("{{.") + i += 3 + continue + } + } + // Find the closing "}}" + closing := strings.Index(input[i:], "}}") + if closing != -1 { + // Strip the dot and write the rest + result.WriteString("{{") + result.WriteString(input[i+3 : i+closing]) + result.WriteString("}}") + i += closing + 2 + continue + } + } + + result.WriteByte(input[i]) + i++ + } + + return result.String() +} + +func updateEventActionPlaceholders(actions []BaseEventAction) ([]BaseEventAction, error) { + var result []BaseEventAction + + for _, action := range actions { + options, err := json.Marshal(action.Options) + if err != nil { + return nil, err + } + convertedOptions := replaceTemplateVars(string(options)) + var opts BaseEventActionOptions + err = json.Unmarshal([]byte(convertedOptions), &opts) + if err != nil { + return nil, err + } + action.Options = opts + result = append(result, action) + } + + return result, nil +} + +func restoreEventActionsPlaceholders(actions []BaseEventAction) ([]BaseEventAction, error) { + var result []BaseEventAction + + for _, action := range actions { + options, err := json.Marshal(action.Options) + if err != nil { + return nil, err + } + convertedOptions := restoreTemplateVars(string(options)) + var opts BaseEventActionOptions + err = json.Unmarshal([]byte(convertedOptions), &opts) + if err != nil { + return nil, err + } + action.Options = opts + result = append(result, action) + } + + return result, nil +} + +func updateEventActions() error { + actions, err := provider.dumpEventActions() + if err != nil { + return err + } + convertedActions, err := updateEventActionPlaceholders(actions) + if err != nil { + return err + } + for _, action := range convertedActions { + providerLog(logger.LevelInfo, "updating placeholders for event action %q", action.Name) + if err := provider.updateEventAction(&action); err != nil { + return fmt.Errorf("unable to save updated event action %q: %w", action.Name, err) + } + } + return nil +} + +func restoreEventActions() error { + actions, err := provider.dumpEventActions() + if err != nil { + return err + } + convertedActions, err := restoreEventActionsPlaceholders(actions) + if err != nil { + return err + } + for _, action := range convertedActions { + providerLog(logger.LevelInfo, "restoring placeholders for event action %q", action.Name) + if err := provider.updateEventAction(&action); err != nil { + return fmt.Errorf("unable to save updated event action %q: %w", action.Name, err) + } + } + return nil +} + +func updateSQLDatabaseFrom31To32(dbHandle *sql.DB) error { + logger.InfoToConsole("updating database data version: 31 -> 32") + providerLog(logger.LevelInfo, "updating database data version: 31 -> 32") + + if err := updateEventActions(); err != nil { + return err + } + ctx, cancel := context.WithTimeout(context.Background(), longSQLQueryTimeout) + defer cancel() + + return sqlCommonUpdateDatabaseVersion(ctx, dbHandle, 32) +} + +func downgradeSQLDatabaseFrom32To31(dbHandle *sql.DB) error { + logger.InfoToConsole("downgrading database data version: 32 -> 31") + providerLog(logger.LevelInfo, "downgrading database data version: 32 -> 31") + + if err := restoreEventActions(); err != nil { + return err + } + ctx, cancel := context.WithTimeout(context.Background(), longSQLQueryTimeout) + defer cancel() + + return sqlCommonUpdateDatabaseVersion(ctx, dbHandle, 31) +} + func getConfigPath(name, configDir string) string { if !util.IsFileInputValid(name) { return "" diff --git a/internal/dataprovider/mysql.go b/internal/dataprovider/mysql.go index b35a6691..9bd1d8d9 100644 --- a/internal/dataprovider/mysql.go +++ b/internal/dataprovider/mysql.go @@ -818,6 +818,8 @@ func (p *MySQLProvider) migrateDatabase() error { return updateMySQLDatabaseFromV29(p.dbHandle) case version == 30: return updateMySQLDatabaseFromV30(p.dbHandle) + case version == 31: + return updateMySQLDatabaseFromV31(p.dbHandle) default: if version > sqlDatabaseVersion { providerLog(logger.LevelError, "database schema version %d is newer than the supported one: %d", version, @@ -844,6 +846,8 @@ func (p *MySQLProvider) revertDatabase(targetVersion int) error { return downgradeMySQLDatabaseFromV30(p.dbHandle) case 31: return downgradeMySQLDatabaseFromV31(p.dbHandle) + case 32: + return downgradeMySQLDatabaseFromV32(p.dbHandle) default: return fmt.Errorf("database schema version not handled: %d", dbVersion.Version) } @@ -890,7 +894,14 @@ func updateMySQLDatabaseFromV29(dbHandle *sql.DB) error { } func updateMySQLDatabaseFromV30(dbHandle *sql.DB) error { - return updateMySQLDatabaseFrom30To31(dbHandle) + if err := updateMySQLDatabaseFrom30To31(dbHandle); err != nil { + return err + } + return updateMySQLDatabaseFromV31(dbHandle) +} + +func updateMySQLDatabaseFromV31(dbHandle *sql.DB) error { + return updateSQLDatabaseFrom31To32(dbHandle) } func downgradeMySQLDatabaseFromV30(dbHandle *sql.DB) error { @@ -904,6 +915,13 @@ func downgradeMySQLDatabaseFromV31(dbHandle *sql.DB) error { return downgradeMySQLDatabaseFromV30(dbHandle) } +func downgradeMySQLDatabaseFromV32(dbHandle *sql.DB) error { + if err := downgradeSQLDatabaseFrom32To31(dbHandle); err != nil { + return err + } + return downgradeMySQLDatabaseFromV31(dbHandle) +} + func updateMySQLDatabaseFrom29To30(dbHandle *sql.DB) error { logger.InfoToConsole("updating database schema version: 29 -> 30") providerLog(logger.LevelInfo, "updating database schema version: 29 -> 30") diff --git a/internal/dataprovider/pgsql.go b/internal/dataprovider/pgsql.go index 19f4c35b..51bdc2f1 100644 --- a/internal/dataprovider/pgsql.go +++ b/internal/dataprovider/pgsql.go @@ -843,6 +843,8 @@ func (p *PGSQLProvider) migrateDatabase() error { //nolint:dupl return updatePGSQLDatabaseFromV29(p.dbHandle) case version == 30: return updatePGSQLDatabaseFromV30(p.dbHandle) + case version == 31: + return updatePGSQLDatabaseFromV31(p.dbHandle) default: if version > sqlDatabaseVersion { providerLog(logger.LevelError, "database schema version %d is newer than the supported one: %d", version, @@ -869,6 +871,8 @@ func (p *PGSQLProvider) revertDatabase(targetVersion int) error { return downgradePGSQLDatabaseFromV30(p.dbHandle) case 31: return downgradePGSQLDatabaseFromV31(p.dbHandle) + case 32: + return downgradePGSQLDatabaseFromV32(p.dbHandle) default: return fmt.Errorf("database schema version not handled: %d", dbVersion.Version) } @@ -915,7 +919,14 @@ func updatePGSQLDatabaseFromV29(dbHandle *sql.DB) error { } func updatePGSQLDatabaseFromV30(dbHandle *sql.DB) error { - return updatePGSQLDatabaseFrom30To31(dbHandle) + if err := updatePGSQLDatabaseFrom30To31(dbHandle); err != nil { + return err + } + return updatePGSQLDatabaseFromV31(dbHandle) +} + +func updatePGSQLDatabaseFromV31(dbHandle *sql.DB) error { + return updateSQLDatabaseFrom31To32(dbHandle) } func downgradePGSQLDatabaseFromV30(dbHandle *sql.DB) error { @@ -929,6 +940,13 @@ func downgradePGSQLDatabaseFromV31(dbHandle *sql.DB) error { return downgradePGSQLDatabaseFromV30(dbHandle) } +func downgradePGSQLDatabaseFromV32(dbHandle *sql.DB) error { + if err := downgradeSQLDatabaseFrom32To31(dbHandle); err != nil { + return err + } + return downgradePGSQLDatabaseFromV31(dbHandle) +} + func updatePGSQLDatabaseFrom29To30(dbHandle *sql.DB) error { logger.InfoToConsole("updating database schema version: 29 -> 30") providerLog(logger.LevelInfo, "updating database schema version: 29 -> 30") diff --git a/internal/dataprovider/sqlcommon.go b/internal/dataprovider/sqlcommon.go index 183166f1..aba4675f 100644 --- a/internal/dataprovider/sqlcommon.go +++ b/internal/dataprovider/sqlcommon.go @@ -36,7 +36,7 @@ import ( ) const ( - sqlDatabaseVersion = 31 + sqlDatabaseVersion = 32 defaultSQLQueryTimeout = 10 * time.Second longSQLQueryTimeout = 60 * time.Second ) diff --git a/internal/dataprovider/sqlite.go b/internal/dataprovider/sqlite.go index 27ded2bc..af37dd55 100644 --- a/internal/dataprovider/sqlite.go +++ b/internal/dataprovider/sqlite.go @@ -741,6 +741,8 @@ func (p *SQLiteProvider) migrateDatabase() error { //nolint:dupl return updateSQLiteDatabaseFromV29(p.dbHandle) case version == 30: return updateSQLiteDatabaseFromV30(p.dbHandle) + case version == 31: + return updateSQLiteDatabaseFromV31(p.dbHandle) default: if version > sqlDatabaseVersion { providerLog(logger.LevelError, "database schema version %d is newer than the supported one: %d", version, @@ -767,6 +769,8 @@ func (p *SQLiteProvider) revertDatabase(targetVersion int) error { return downgradeSQLiteDatabaseFromV30(p.dbHandle) case 31: return downgradeSQLiteDatabaseFromV31(p.dbHandle) + case 32: + return downgradeSQLiteDatabaseFromV32(p.dbHandle) default: return fmt.Errorf("database schema version not handled: %d", dbVersion.Version) } @@ -820,7 +824,14 @@ func updateSQLiteDatabaseFromV29(dbHandle *sql.DB) error { } func updateSQLiteDatabaseFromV30(dbHandle *sql.DB) error { - return updateSQLiteDatabaseFrom30To31(dbHandle) + if err := updateSQLiteDatabaseFrom30To31(dbHandle); err != nil { + return err + } + return updateSQLiteDatabaseFromV31(dbHandle) +} + +func updateSQLiteDatabaseFromV31(dbHandle *sql.DB) error { + return updateSQLDatabaseFrom31To32(dbHandle) } func downgradeSQLiteDatabaseFromV30(dbHandle *sql.DB) error { @@ -834,6 +845,13 @@ func downgradeSQLiteDatabaseFromV31(dbHandle *sql.DB) error { return downgradeSQLiteDatabaseFromV30(dbHandle) } +func downgradeSQLiteDatabaseFromV32(dbHandle *sql.DB) error { + if err := downgradeSQLDatabaseFrom32To31(dbHandle); err != nil { + return err + } + return downgradeSQLiteDatabaseFromV31(dbHandle) +} + func updateSQLiteDatabaseFrom29To30(dbHandle *sql.DB) error { logger.InfoToConsole("updating database schema version: 29 -> 30") providerLog(logger.LevelInfo, "updating database schema version: 29 -> 30") diff --git a/internal/httpd/httpd_test.go b/internal/httpd/httpd_test.go index e8a306c9..79ff65e7 100644 --- a/internal/httpd/httpd_test.go +++ b/internal/httpd/httpd_test.go @@ -628,6 +628,72 @@ func TestInitialization(t *testing.T) { assert.NoError(t, err) } +func TestMigrateEventActionPlaceholders(t *testing.T) { + if config.GetProviderConf().Driver == dataprovider.MemoryDataProviderName { + t.Skip("this test is not supported with the memory provider") + } + // Add some event actions using the old placeholders syntax + a1 := dataprovider.BaseEventAction{ + Name: xid.New().String(), + Type: dataprovider.ActionTypeEmail, + Options: dataprovider.BaseEventActionOptions{ + EmailConfig: dataprovider.EventActionEmailConfig{ + Recipients: []string{"failure@example.com"}, + Subject: `Failed "{{Event}}" from "{{Name}}"`, + Body: "Object name: {{ObjectName}} object type: {{ObjectType}}, IP: {{IP}}", + }, + }, + } + a2 := dataprovider.BaseEventAction{ + Name: xid.New().String(), + Type: dataprovider.ActionTypeFilesystem, + Options: dataprovider.BaseEventActionOptions{ + FsConfig: dataprovider.EventActionFilesystemConfig{ + Type: dataprovider.FilesystemActionRename, + Renames: []dataprovider.RenameConfig{ + { + KeyValue: dataprovider.KeyValue{ + Key: "/{{VirtualDirPath}}/{{ObjectName}}", + Value: "/{{ObjectName}}_renamed", + }, + }, + }, + }, + }, + } + action1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated) + assert.NoError(t, err) + action2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated) + assert.NoError(t, err) + // Revert the database to the previous version. + err = dataprovider.Close() + assert.NoError(t, err) + err = config.LoadConfig(configDir, "") + assert.NoError(t, err) + providerConf := config.GetProviderConf() + err = dataprovider.RevertDatabase(providerConf, configDir, 29) + assert.NoError(t, err) + // Close and initialize. + err = dataprovider.Close() + assert.NoError(t, err) + err = dataprovider.Initialize(providerConf, configDir, true) + assert.NoError(t, err) + // Check that actions are migrated. + action1Get, _, err := httpdtest.GetEventActionByName(action1.Name, http.StatusOK) + assert.NoError(t, err) + action2Get, _, err := httpdtest.GetEventActionByName(action2.Name, http.StatusOK) + assert.NoError(t, err) + assert.Equal(t, `Failed "{{.Event}}" from "{{.Name}}"`, action1Get.Options.EmailConfig.Subject) + assert.Equal(t, `Object name: {{.ObjectName}} object type: {{.ObjectType}}, IP: {{.IP}}`, action1Get.Options.EmailConfig.Body) + assert.Equal(t, `/{{.VirtualDirPath}}/{{.ObjectName}}`, action2Get.Options.FsConfig.Renames[0].Key) + assert.Equal(t, `/{{.ObjectName}}_renamed`, action2Get.Options.FsConfig.Renames[0].Value) + // Clenup. + _, err = httpdtest.RemoveEventAction(action1, http.StatusOK) + assert.NoError(t, err) + _, err = httpdtest.RemoveEventAction(action2, http.StatusOK) + assert.NoError(t, err) +} + func TestBasicUserHandling(t *testing.T) { u := getTestUser() u.Email = "user@user.com" @@ -1863,9 +1929,9 @@ func TestBasicActionRulesHandling(t *testing.T) { EmailConfig: dataprovider.EventActionEmailConfig{ Recipients: []string{"email@example.com"}, Bcc: []string{"bcc@example.com"}, - Subject: "Event: {{Event}}", + Subject: "Event: {{.Event}}", Body: "test mail body", - Attachments: []string{"/{{VirtualPath}}"}, + Attachments: []string{"/{{.VirtualPath}}"}, }, } @@ -1903,7 +1969,7 @@ func TestBasicActionRulesHandling(t *testing.T) { Value: "b", }, }, - Body: `{"event":"{{Event}}","name":"{{Name}}"}`, + Body: `{"event":"{{.Event}}","name":"{{.Name}}"}`, }, } action, _, err = httpdtest.UpdateEventAction(a, http.StatusOK) @@ -8362,7 +8428,7 @@ func TestLoaddata(t *testing.T) { Timeout: 10, SkipTLSVerify: true, Method: http.MethodPost, - Body: `{"event":"{{Event}}","name":"{{Name}}"}`, + Body: `{"event":"{{.Event}}","name":"{{.Name}}"}`, }, }, } @@ -8608,6 +8674,85 @@ func TestLoaddata(t *testing.T) { assert.NoError(t, err) } +func TestLoaddataConvertActions(t *testing.T) { + a1 := dataprovider.BaseEventAction{ + Name: xid.New().String(), + Type: dataprovider.ActionTypeEmail, + Options: dataprovider.BaseEventActionOptions{ + EmailConfig: dataprovider.EventActionEmailConfig{ + Recipients: []string{"failure@example.com"}, + Subject: `Failed "{{Event}}" from "{{Name}}"`, + Body: "Object name: {{ObjectName}} object type: {{ObjectType}}, IP: {{IP}}", + }, + }, + } + a2 := dataprovider.BaseEventAction{ + Name: xid.New().String(), + Type: dataprovider.ActionTypeFilesystem, + Options: dataprovider.BaseEventActionOptions{ + FsConfig: dataprovider.EventActionFilesystemConfig{ + Type: dataprovider.FilesystemActionRename, + Renames: []dataprovider.RenameConfig{ + { + KeyValue: dataprovider.KeyValue{ + Key: "/{{VirtualDirPath}}/{{ObjectName}}", + Value: "/{{ObjectName}}_renamed", + }, + }, + }, + }, + }, + } + backupData := dataprovider.BackupData{ + EventActions: []dataprovider.BaseEventAction{a1, a2}, + Version: 16, + } + backupContent, err := json.Marshal(backupData) + assert.NoError(t, err) + backupFilePath := filepath.Join(backupsPath, "backup.json") + err = os.WriteFile(backupFilePath, backupContent, os.ModePerm) + assert.NoError(t, err) + _, resp, err := httpdtest.Loaddata(backupFilePath, "1", "2", http.StatusOK) + assert.NoError(t, err, string(resp)) + // Check that actions are migrated. + action1, _, err := httpdtest.GetEventActionByName(a1.Name, http.StatusOK) + assert.NoError(t, err) + action2, _, err := httpdtest.GetEventActionByName(a2.Name, http.StatusOK) + assert.NoError(t, err) + assert.Equal(t, `Failed "{{.Event}}" from "{{.Name}}"`, action1.Options.EmailConfig.Subject) + assert.Equal(t, `Object name: {{.ObjectName}} object type: {{.ObjectType}}, IP: {{.IP}}`, action1.Options.EmailConfig.Body) + assert.Equal(t, `/{{.VirtualDirPath}}/{{.ObjectName}}`, action2.Options.FsConfig.Renames[0].Key) + assert.Equal(t, `/{{.ObjectName}}_renamed`, action2.Options.FsConfig.Renames[0].Value) + // If we restore a backup from the current version actions are not migrated. + backupData = dataprovider.BackupData{ + EventActions: []dataprovider.BaseEventAction{a1, a2}, + Version: dataprovider.DumpVersion, + } + backupContent, err = json.Marshal(backupData) + assert.NoError(t, err) + backupFilePath = filepath.Join(backupsPath, "backup.json") + err = os.WriteFile(backupFilePath, backupContent, os.ModePerm) + assert.NoError(t, err) + _, resp, err = httpdtest.Loaddata(backupFilePath, "1", "2", http.StatusOK) + assert.NoError(t, err, string(resp)) + action1, _, err = httpdtest.GetEventActionByName(a1.Name, http.StatusOK) + assert.NoError(t, err) + action2, _, err = httpdtest.GetEventActionByName(a2.Name, http.StatusOK) + assert.NoError(t, err) + assert.Equal(t, `Failed "{{Event}}" from "{{Name}}"`, action1.Options.EmailConfig.Subject) + assert.Equal(t, `Object name: {{ObjectName}} object type: {{ObjectType}}, IP: {{IP}}`, action1.Options.EmailConfig.Body) + assert.Equal(t, `/{{VirtualDirPath}}/{{ObjectName}}`, action2.Options.FsConfig.Renames[0].Key) + assert.Equal(t, `/{{ObjectName}}_renamed`, action2.Options.FsConfig.Renames[0].Value) + // Cleanup. + _, err = httpdtest.RemoveEventAction(action1, http.StatusOK) + assert.NoError(t, err) + _, err = httpdtest.RemoveEventAction(action2, http.StatusOK) + assert.NoError(t, err) + actions, _, err := httpdtest.GetEventActions(0, 0, http.StatusOK) + assert.NoError(t, err) + assert.Len(t, actions, 0) +} + func TestLoaddataMode(t *testing.T) { err := dataprovider.UpdateConfigs(nil, "", "", "") assert.NoError(t, err) @@ -8665,7 +8810,7 @@ func TestLoaddataMode(t *testing.T) { Timeout: 10, SkipTLSVerify: true, Method: http.MethodPost, - Body: `{"event":"{{Event}}","name":"{{Name}}"}`, + Body: `{"event":"{{.Event}}","name":"{{.Name}}"}`, }, }, } @@ -23831,7 +23976,7 @@ func TestWebEventAction(t *testing.T) { Value: "value1", }, }, - Body: `{"event":"{{Event}}","name":"{{Name}}"}`, + Body: `{"event":"{{.Event}}","name":"{{.Name}}"}`, }, }, } @@ -23950,12 +24095,12 @@ func TestWebEventAction(t *testing.T) { form.Del("http_headers[0][http_header_key]") form.Del("http_headers[0][http_header_val]") form.Set("multipart_body[0][http_part_name]", "part1") - form.Set("multipart_body[0][http_part_file]", "{{VirtualPath}}") + form.Set("multipart_body[0][http_part_file]", "{{.VirtualPath}}") form.Set("multipart_body[0][http_part_body]", "") form.Set("multipart_body[0][http_part_headers]", "X-MyHeader: a:b,c") form.Set("multipart_body[12][http_part_name]", "part2") form.Set("multipart_body[12][http_part_headers]", "Content-Type:application/json \r\n") - form.Set("multipart_body[12][http_part_body]", "{{ObjectData}}") + form.Set("multipart_body[12][http_part_body]", "{{.ObjectData}}") req, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name), bytes.NewBuffer([]byte(form.Encode()))) assert.NoError(t, err) @@ -23972,12 +24117,12 @@ func TestWebEventAction(t *testing.T) { assert.Equal(t, 0, dbAction.Options.HTTPConfig.Timeout) if assert.Len(t, dbAction.Options.HTTPConfig.Parts, 2) { assert.Equal(t, "part1", dbAction.Options.HTTPConfig.Parts[0].Name) - assert.Equal(t, "/{{VirtualPath}}", dbAction.Options.HTTPConfig.Parts[0].Filepath) + assert.Equal(t, "/{{.VirtualPath}}", dbAction.Options.HTTPConfig.Parts[0].Filepath) assert.Empty(t, dbAction.Options.HTTPConfig.Parts[0].Body) assert.Equal(t, "X-MyHeader", dbAction.Options.HTTPConfig.Parts[0].Headers[0].Key) assert.Equal(t, "a:b,c", dbAction.Options.HTTPConfig.Parts[0].Headers[0].Value) assert.Equal(t, "part2", dbAction.Options.HTTPConfig.Parts[1].Name) - assert.Equal(t, "{{ObjectData}}", dbAction.Options.HTTPConfig.Parts[1].Body) + assert.Equal(t, "{{.ObjectData}}", dbAction.Options.HTTPConfig.Parts[1].Body) assert.Empty(t, dbAction.Options.HTTPConfig.Parts[1].Filepath) assert.Equal(t, "Content-Type", dbAction.Options.HTTPConfig.Parts[1].Headers[0].Key) assert.Equal(t, "application/json", dbAction.Options.HTTPConfig.Parts[1].Headers[0].Value) diff --git a/internal/httpd/oidc_test.go b/internal/httpd/oidc_test.go index c8848ca0..cb0a4fc3 100644 --- a/internal/httpd/oidc_test.go +++ b/internal/httpd/oidc_test.go @@ -1182,18 +1182,18 @@ func TestOIDCEvMgrIntegration(t *testing.T) { // add a special chars to check json replacer username := `test_"oidc_eventmanager` u := map[string]any{ - "username": "{{Name}}", + "username": "{{.Name}}", "status": 1, - "home_dir": filepath.Join(os.TempDir(), "{{IDPFieldcustom1.sub}}"), + "home_dir": filepath.Join(os.TempDir(), "{{.IDPFieldcustom1.sub}}"), "permissions": map[string][]string{ "/": {dataprovider.PermAny}, }, - "description": "{{IDPFieldcustom2}}", + "description": "{{.IDPFieldcustom2}}", } userTmpl, err := json.Marshal(u) require.NoError(t, err) a := map[string]any{ - "username": "{{Name}}", + "username": "{{.Name}}", "status": 1, "permissions": []string{dataprovider.PermAdminAny}, } diff --git a/templates/webadmin/eventaction.html b/templates/webadmin/eventaction.html index 01a7b33e..c50f6b0c 100644 --- a/templates/webadmin/eventaction.html +++ b/templates/webadmin/eventaction.html @@ -889,115 +889,115 @@ explicit grant from the SFTPGo Team (support@sftpgo.com).- {{`{{Name}}`}} => Username, folder name, admin username for provider events, domain name for certificate events. + {{`{{.Name}}`}} => Username, folder name, admin username for provider events, domain name for certificate events.
- {{`{{Event}}`}} => Event name, for example "upload", "download" for filesystem events or "add", "update" for provider events. + {{`{{.Event}}`}} => Event name, for example "upload", "download" for filesystem events or "add", "update" for provider events.
- {{`{{Status}}`}} => Status for "upload", "download" and "ssh_cmd" events. 1 means no error, 2 means a generic error occurred, 3 means quota exceeded error. + {{`{{.Status}}`}} => Status for "upload", "download" and "ssh_cmd" events. 1 means no error, 2 means a generic error occurred, 3 means quota exceeded error.
- {{`{{StatusString}}`}} => Status as string. Possible values "OK", "KO". + {{`{{.StatusString}}`}} => Status as string. Possible values "OK", "KO".
- {{`{{ErrorString}}`}} => Error details. Replaced with an empty string if no errors occur. + {{`{{.ErrorString}}`}} => Error details. Replaced with an empty string if no errors occur.
- {{`{{VirtualPath}}`}} => Path seen by SFTPGo users, for example "/adir/afile.txt". + {{`{{.VirtualPath}}`}} => Path seen by SFTPGo users, for example "/adir/afile.txt".
- {{`{{EscapedVirtualPath}}`}} => HTTP query string encoded path, for example "%2Fadir%2Fafile.txt". + {{`{{.EscapedVirtualPath}}`}} => HTTP query string encoded path, for example "%2Fadir%2Fafile.txt".
- {{`{{VirtualDirPath}}`}} => Parent directory for VirtualPath, for example if VirtualPath is "/adir/afile.txt", VirtualDirPath is "/adir". + {{`{{.VirtualDirPath}}`}} => Parent directory for VirtualPath, for example if VirtualPath is "/adir/afile.txt", VirtualDirPath is "/adir".
- {{`{{FsPath}}`}} => Full filesystem path, for example "/user/homedir/adir/afile.txt" or "C:/data/user/homedir/adir/afile.txt" on Windows. + {{`{{.FsPath}}`}} => Full filesystem path, for example "/user/homedir/adir/afile.txt" or "C:/data/user/homedir/adir/afile.txt" on Windows.
- {{`{{Ext}}`}} => File extension, for example ".txt" if the filename is "afile.txt". + {{`{{.Ext}}`}} => File extension, for example ".txt" if the filename is "afile.txt".
- {{`{{ObjectName}}`}} => File/directory name, for example "afile.txt" or provider object name. + {{`{{.ObjectName}}`}} => File/directory name, for example "afile.txt" or provider object name.
- {{`{{ObjectBaseName}}`}} => Filename without extension, for example "afile" if the filename is "afile.txt". + {{`{{.ObjectBaseName}}`}} => Filename without extension, for example "afile" if the filename is "afile.txt".
- {{`{{ObjectType}}`}} => Object type for provider events: "user", "group", "admin", etc. + {{`{{.ObjectType}}`}} => Object type for provider events: "user", "group", "admin", etc.
- {{`{{VirtualTargetPath}}`}} => Virtual target path for renames. + {{`{{.VirtualTargetPath}}`}} => Virtual target path for renames.
- {{`{{VirtualTargetDirPath}}`}} => Parent directory for VirtualTargetPath. + {{`{{.VirtualTargetDirPath}}`}} => Parent directory for VirtualTargetPath.
- {{`{{TargetName}}`}} => Target object name for renames. + {{`{{.TargetName}}`}} => Target object name for renames.
- {{`{{FsTargetPath}}`}} => Full filesystem target path for renames. + {{`{{.FsTargetPath}}`}} => Full filesystem target path for renames.
- {{`{{FileSize}}`}} => File size. + {{`{{.FileSize}}`}} => File size.
- {{`{{Elapsed}}`}} => Elapsed time as milliseconds for filesystem events. + {{`{{.Elapsed}}`}} => Elapsed time as milliseconds for filesystem events.
- {{`{{Protocol}}`}} => Protocol, for example "SFTP", "FTP". + {{`{{.Protocol}}`}} => Protocol, for example "SFTP", "FTP".
- {{`{{IP}}`}} => Client IP address. + {{`{{.IP}}`}} => Client IP address.
- {{`{{Role}}`}} => User or admin role. + {{`{{.Role}}`}} => User or admin role.
- {{`{{Timestamp}}`}} => Event timestamp as nanoseconds since epoch. + {{`{{.Timestamp}}`}} => Event timestamp as nanoseconds since epoch.
- {{`{{DateTime}}`}} => Timestamp formatted as YYYY-MM-DDTHH:MM:SS.ZZZ. + {{`{{.DateTime}}`}} => Timestamp formatted as YYYY-MM-DDTHH:MM:SS.ZZZ.
- {{`{{Year}}`}} => Event year formatted as four digits. + {{`{{.Year}}`}} => Event year formatted as four digits.
- {{`{{Month}}`}} => Event month formatted as two digits. + {{`{{.Month}}`}} => Event month formatted as two digits.
- {{`{{Day}}`}} => Event day formatted as two digits. + {{`{{.Day}}`}} => Event day formatted as two digits.
- {{`{{Hour}}`}} => Event hour formatted as two digits. + {{`{{.Hour}}`}} => Event hour formatted as two digits.
- {{`{{Minute}}`}} => Event minute formatted as two digits. + {{`{{.Minute}}`}} => Event minute formatted as two digits.
- {{`{{Email}}`}} => For filesystem events, this is the email associated with the user performing the action. For the provider events, this is the email associated with the affected user or admin. Blank in all other cases. + {{`{{.Email}}`}} => For filesystem events, this is the email associated with the user performing the action. For the provider events, this is the email associated with the affected user or admin. Blank in all other cases.
- {{`{{ObjectData}}`}} => Provider object data serialized as JSON with sensitive fields removed. + {{`{{.ObjectData}}`}} => Provider object data serialized as JSON with sensitive fields removed.
- {{`{{ObjectDataString}}`}} => Provider object data as JSON escaped string with sensitive fields removed. + {{`{{.ObjectDataString}}`}} => Provider object data as JSON escaped string with sensitive fields removed.
- {{`{{RetentionReports}}`}} => Data retention reports as zip compressed CSV files. Supported as email attachment, file path for multipart HTTP request and as single parameter for HTTP requests body. + {{`{{.RetentionReports}}`}} => Data retention reports as zip compressed CSV files. Supported as email attachment, file path for multipart HTTP request and as single parameter for HTTP requests body.
- {{`{{IDPField
- {{`{{Metadata}}`}} => Cloud storage metadata for the downloaded file serialized as JSON. + {{`{{.Metadata}}`}} => Cloud storage metadata for the downloaded file serialized as JSON.
- {{`{{MetadataString}}`}} => Cloud storage metadata for the downloaded file as JSON escaped string. + {{`{{.MetadataString}}`}} => Cloud storage metadata for the downloaded file as JSON escaped string.
- {{`{{UID}}`}} => Unique ID. + {{`{{.UID}}`}} => Unique ID.