use access tokens per workspace

Author: oliviasculley

app-modules/slack-events-bot/composer.json

@@ -6,7 +6,8 @@
     "version": "1.0",
     "autoload": {
         "psr-4": {
-            "HackGreenville\\SlackEventsBot\\": "src/"
+            "HackGreenville\\SlackEventsBot\\": "src/",
+            "HackGreenville\\SlackEventsBot\\Database\\Factories\\": "./database/factories/"
         }
     },
     "autoload-dev": {

app-modules/slack-events-bot/database/factories/SlackChannelFactory.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace HackGreenville\SlackEventsBot\Database\Factories;
+
+use HackGreenville\SlackEventsBot\Models\SlackChannel;
+use HackGreenville\SlackEventsBot\Models\SlackWorkspace;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+class SlackChannelFactory extends Factory
+{
+    protected $model = SlackChannel::class;
+
+    public function definition(): array
+    {
+        return [
+            'slack_channel_id' => $this->faker->unique()->regexify('[C][A-Z0-9]{10}'),
+            'slack_workspace_id' => SlackWorkspace::factory(),
+        ];
+    }
+}

app-modules/slack-events-bot/database/factories/SlackMessageFactory.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace HackGreenville\SlackEventsBot\Database\Factories;
+
+use HackGreenville\SlackEventsBot\Models\SlackChannel;
+use HackGreenville\SlackEventsBot\Models\SlackMessage;
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Illuminate\Support\Carbon;
+
+class SlackMessageFactory extends Factory
+{
+    protected $model = SlackMessage::class;
+
+    public function definition(): array
+    {
+        return [
+            'week' => Carbon::now()->startOfWeek(),
+            'message' => $this->faker->sentence,
+            'message_timestamp' => now()->timestamp . '.' . $this->faker->randomNumber(6, true),
+            'sequence_position' => $this->faker->numberBetween(0, 10),
+            'channel_id' => SlackChannel::factory(),
+        ];
+    }
+}

app-modules/slack-events-bot/database/factories/SlackWorkspaceFactory.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace HackGreenville\SlackEventsBot\Database\Factories;
+
+use HackGreenville\SlackEventsBot\Models\SlackWorkspace;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+class SlackWorkspaceFactory extends Factory
+{
+    /**
+     * The name of the factory's corresponding model.
+     *
+     * @var string
+     */
+    protected $model = SlackWorkspace::class;
+
+    /**
+     * Define the model's default state.
+     *
+     * @return array
+     */
+    public function definition(): array
+    {
+        return [
+            'team_id' => $this->faker->unique()->regexify('[T][A-Z0-9]{10}'),
+            'team_name' => $this->faker->company,
+            'access_token' => $this->faker->sha256,
+            'bot_user_id' => $this->faker->unique()->regexify('[U][A-Z0-9]{10}'),
+        ];
+    }
+}

app-modules/slack-events-bot/database/migrations/2025_07_08_232704_add_slack_workspace_id_to_slack_channels_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::table('slack_channels', function (Blueprint $table) {
+            $table->string('slack_workspace_id')->nullable()->after('channel_id');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::table('slack_channels', function (Blueprint $table) {
+            $table->dropColumn('slack_workspace_id');
+        });
+    }
+};

app-modules/slack-events-bot/database/migrations/2025_07_08_233636_add_domain_to_slack_workspaces_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::table('slack_workspaces', function (Blueprint $table) {
+            $table->string('domain')->nullable();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::table('slack_workspaces', function (Blueprint $table) {
+            $table->dropColumn('domain');
+        });
+    }
+};

app-modules/slack-events-bot/routes/web.php

@@ -3,7 +3,5 @@
 use HackGreenville\SlackEventsBot\Http\Controllers\SlackController;
 use Illuminate\Support\Facades\Route;
 
-Route::prefix('slack')->group(function () {
-    Route::get('/install', [SlackController::class, 'install'])->name('slack.install');
-    Route::get('/auth', [SlackController::class, 'auth'])->name('slack.auth');
-});
+Route::get('/install', [SlackController::class, 'install'])->name('install');
+Route::get('/auth', [SlackController::class, 'auth'])->name('auth');

app-modules/slack-events-bot/src/Http/Controllers/SlackController.php

@@ -122,26 +122,27 @@ private function handleSlashCommand(array $payload): Response
         $command = $payload['command'];
         $userId = $payload['user_id'];
         $channelId = $payload['channel_id'];
+        $teamId = $payload['team_id'];
         $teamDomain = $payload['team_domain'] ?? null;
 
         $originalCommand = $command;
 
         // Normalize dev commands to match production commands
-        if (app()->isLocal() && str_starts_with($command, '/dev_')) {
+        if (true || app()->isLocal() && str_starts_with($command, '/dev_')) {
             $command = str_replace('/dev_', '/', $command);
             Log::info('Normalized dev command', ['original' => $originalCommand, 'normalized' => $command]);
         }
 
         switch ($command) {
             case '/add_channel':
                 Log::info('Executing /add_channel command', ['user_id' => $userId, 'channel_id' => $channelId]);
-                if ( ! $this->authService->isAdmin($userId)) {
+                if ( ! $this->authService->isAdmin($userId, $teamId)) {
                     Log::warning('/add_channel failed: user is not an admin', ['user_id' => $userId]);
                     return response('You must be a workspace admin in order to run `/add_channel`');
                 }
 
                 try {
-                    $this->databaseService->addChannel($channelId);
+                    $this->databaseService->addChannel($channelId, $teamId);
                     Log::info('Successfully added channel', ['channel_id' => $channelId]);
                     return response('Added channel to slack events bot 👍');
                 } catch (Exception $e) {
@@ -154,7 +155,7 @@ private function handleSlashCommand(array $payload): Response
 
             case '/remove_channel':
                 Log::info('Executing /remove_channel command', ['user_id' => $userId, 'channel_id' => $channelId]);
-                if ( ! $this->authService->isAdmin($userId)) {
+                if ( ! $this->authService->isAdmin($userId, $teamId)) {
                     Log::warning('/remove_channel failed: user is not an admin', ['user_id' => $userId]);
                     return response('You must be a workspace admin in order to run `/remove_channel`');
                 }
@@ -174,7 +175,7 @@ private function handleSlashCommand(array $payload): Response
             case '/check_api':
                 Log::info('Executing /check_api command', ['user_id' => $userId, 'team_domain' => $teamDomain]);
                 // Check cooldown
-                if ( ! app()->isLocal() && $teamDomain) {
+                if (false && ! app()->isLocal() && $teamDomain) {
                     $expiryTime = $this->databaseService->getCooldownExpiryTime($teamDomain, 'check_api');
 
                     if ($expiryTime && $expiryTime->isFuture()) {

app-modules/slack-events-bot/src/Models/SlackChannel.php

@@ -2,17 +2,33 @@
 
 namespace HackGreenville\SlackEventsBot\Models;
 
+use HackGreenville\SlackEventsBot\Database\Factories\SlackChannelFactory;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
 class SlackChannel extends Model
 {
+    use HasFactory;
+
     protected $fillable = [
         'slack_channel_id',
+        'slack_workspace_id',
     ];
 
     public function messages(): HasMany
     {
         return $this->hasMany(SlackMessage::class, 'channel_id');
     }
+
+    public function workspace(): BelongsTo
+    {
+        return $this->belongsTo(SlackWorkspace::class, 'slack_workspace_id');
+    }
+
+    protected static function newFactory()
+    {
+        return SlackChannelFactory::new();
+    }
 }

app-modules/slack-events-bot/src/Models/SlackMessage.php

@@ -2,11 +2,15 @@
 
 namespace HackGreenville\SlackEventsBot\Models;
 
+use HackGreenville\SlackEventsBot\Database\Factories\SlackMessageFactory;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
 class SlackMessage extends Model
 {
+    use HasFactory;
+
     protected $fillable = [
         'week',
         'message_timestamp',
@@ -23,4 +27,9 @@ public function channel(): BelongsTo
     {
         return $this->belongsTo(SlackChannel::class, 'channel_id');
     }
+
+    protected static function newFactory()
+    {
+        return SlackMessageFactory::new();
+    }
 }