feat: global internal link

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Author: ArtificialOwl

appinfo/info.xml

@@ -28,6 +28,7 @@
 	</background-jobs>
 
 	<commands>
+		<command>OCA\GlobalSiteSelector\Command\GlobalScaleDiscovery</command>
 		<command>OCA\GlobalSiteSelector\Command\UsersUpdate</command>
 	</commands>
 </info>

appinfo/routes.php

@@ -9,6 +9,8 @@
 return [
 	'ocs' => [
 		['name' => 'Slave#createAppToken', 'url' => '/v1/createapptoken', 'verb' => 'GET'],
+		['name' => 'Slave#discovery', 'url' => '/discovery', 'verb' => 'GET'],
+		['name' => 'Slave#sharedFile', 'url' => '/sharedfile', 'verb' => 'GET'],
 	],
 	'routes' => [
 		[

lib/AppInfo/Application.php

@@ -15,6 +15,7 @@
 use OCA\GlobalSiteSelector\GlobalSiteSelector;
 use OCA\GlobalSiteSelector\Listeners\AddContentSecurityPolicyListener;
 use OCA\GlobalSiteSelector\Listeners\DeletingUser;
+use OCA\GlobalSiteSelector\Listeners\InternalLinkRequested;
 use OCA\GlobalSiteSelector\Listeners\UserCreated;
 use OCA\GlobalSiteSelector\Listeners\UserDeleted;
 use OCA\GlobalSiteSelector\Listeners\UserLoggedOut;
@@ -27,6 +28,7 @@
 use OCP\AppFramework\Bootstrap\IBootstrap;
 use OCP\AppFramework\Bootstrap\IRegistrationContext;
 use OCP\EventDispatcher\IEventDispatcher;
+use OCP\Files\Events\InternalLinkRequestEvent;
 use OCP\IRequest;
 use OCP\IUser;
 use OCP\IUserManager;
@@ -79,6 +81,7 @@ public function register(IRegistrationContext $context): void {
 		$context->registerEventListener(BeforeUserDeletedEvent::class, DeletingUser::class);
 		$context->registerEventListener(UserDeletedEvent::class, UserDeleted::class);
 		$context->registerEventListener(UserLoggedOutEvent::class, UserLoggedOut::class);
+		$context->registerEventListener(InternalLinkRequestEvent::class, InternalLinkRequested::class);
 
 		// It seems that AccountManager use deprecated dispatcher, let's use a deprecated listener
 		/** @var IEventDispatcher $eventDispatcher */

lib/BackgroundJobs/UpdateLookupServer.php

@@ -6,24 +6,23 @@
  * SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-or-later
  */
-
 namespace OCA\GlobalSiteSelector\BackgroundJobs;
 
 use OCA\GlobalSiteSelector\GlobalSiteSelector;
+use OCA\GlobalSiteSelector\Service\GlobalScaleService;
 use OCA\GlobalSiteSelector\Slave;
 use OCP\AppFramework\Utility\ITimeFactory;
 use OCP\BackgroundJob\IJob;
 use OCP\BackgroundJob\TimedJob;
 use OCP\IConfig;
 
 class UpdateLookupServer extends TimedJob {
-
-
 	public function __construct(
 		ITimeFactory $time,
 		IConfig $config,
-		private GlobalSiteSelector $globalSiteSelector,
-		private Slave $slave,
+		private readonly GlobalScaleService $globalScaleService,
+		private readonly GlobalSiteSelector $globalSiteSelector,
+		private readonly Slave $slave,
 	) {
 		parent::__construct($time);
 
@@ -36,6 +35,7 @@ protected function run($argument) {
 			return;
 		}
 
+		$this->globalScaleService->refreshTokenFromGlobalScale();
 		$this->slave->batchUpdate();
 	}
 }

lib/Command/GlobalScaleDiscovery.php

@@ -0,0 +1,55 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+namespace OCA\GlobalSiteSelector\Command;
+
+use OC\Core\Command\Base;
+use OCA\GlobalSiteSelector\AppInfo\Application;
+use OCA\GlobalSiteSelector\ConfigLexicon;
+use OCA\GlobalSiteSelector\Service\GlobalScaleService;
+use OCP\IAppConfig;
+use Symfony\Component\Console\Input\InputInterface;
+use Symfony\Component\Console\Input\InputOption;
+use Symfony\Component\Console\Output\OutputInterface;
+
+class GlobalScaleDiscovery extends Base {
+	public function __construct(
+		private readonly IAppConfig $appConfig,
+		private readonly GlobalScaleService $globalScaleService,
+	) {
+		parent::__construct();
+	}
+
+
+	/**
+	 *
+	 */
+	protected function configure() {
+		parent::configure();
+		$this->setName('globalsiteselector:discovery')
+			->addOption('current', '', InputOption::VALUE_NONE, 'display current data')
+			->setDescription('run a discovery request over Global Scale to get details about each instances');
+	}
+
+	/**
+	 * @param InputInterface $input
+	 * @param OutputInterface $output
+	 *
+	 * @return int
+	 */
+	protected function execute(InputInterface $input, OutputInterface $output): int {
+		if ($input->getOption('current')) {
+			$output->writeln(json_encode($this->appConfig->getValueArray(Application::APP_ID, ConfigLexicon::GS_TOKENS), JSON_PRETTY_PRINT));
+			return 0;
+		}
+
+		// currently, the only available data is a unique token that helps identify each instance
+		$this->globalScaleService->refreshTokenFromGlobalScale();
+		return 0;
+	}
+}

lib/ConfigLexicon.php

@@ -0,0 +1,41 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+namespace OCA\GlobalSiteSelector;
+
+use OCP\Config\Lexicon\Entry;
+use OCP\Config\Lexicon\IConfigLexicon;
+use OCP\Config\Lexicon\Strictness;
+use OCP\Config\ValueType;
+
+class ConfigLexicon implements IConfigLexicon {
+	public const GS_TOKENS = 'globalScaleTokens';
+	public const LOCAL_TOKEN = 'localToken';
+
+	public function getStrictness(): Strictness {
+		return Strictness::IGNORE;
+	}
+
+	/**
+	 * @inheritDoc
+	 */
+	public function getAppConfigs(): array {
+		return [
+			new Entry(key: self::GS_TOKENS, type: ValueType::ARRAY, defaultRaw: [], definition: 'list of token+host to navigate throw GlobalScale', lazy: true),
+			new Entry(self::LOCAL_TOKEN, ValueType::STRING, '', 'local token to id instance of GlobalScale ', true),
+		];
+	}
+
+	/**
+	 * @inheritDoc
+	 */
+	public function getUserConfigs(): array {
+		return [
+		];
+	}
+}

lib/Controller/SlaveController.php

@@ -10,8 +10,13 @@
 
 use OC\Authentication\Token\IToken;
 use OCA\GlobalSiteSelector\AppInfo\Application;
+use OCA\GlobalSiteSelector\Exceptions\LocalFederatedShareException;
 use OCA\GlobalSiteSelector\Exceptions\MasterUrlException;
+use OCA\GlobalSiteSelector\Exceptions\SharedFileException;
 use OCA\GlobalSiteSelector\GlobalSiteSelector;
+use OCA\GlobalSiteSelector\Model\LocalFile;
+use OCA\GlobalSiteSelector\Service\GlobalScaleService;
+use OCA\GlobalSiteSelector\Service\GlobalShareService;
 use OCA\GlobalSiteSelector\Service\SlaveService;
 use OCA\GlobalSiteSelector\Slave;
 use OCA\GlobalSiteSelector\TokenHandler;
@@ -41,25 +46,74 @@
  * @package OCA\GlobalSiteSelector\Controller
  */
 class SlaveController extends OCSController {
-
 	public function __construct(
 		$appName,
 		IRequest $request,
-		private GlobalSiteSelector $gss,
-		private IUserSession $userSession,
-		private IURLGenerator $urlGenerator,
-		private ICrypto $crypto,
-		private TokenHandler $tokenHandler,
-		private IUserManager $userManager,
-		private UserBackend $userBackend,
-		private ISession $session,
-		private SlaveService $slaveService,
-		private IConfig $config,
-		private LoggerInterface $logger,
+		private readonly GlobalSiteSelector $gss,
+		private readonly IUserSession $userSession,
+		private readonly IURLGenerator $urlGenerator,
+		private readonly ICrypto $crypto,
+		private readonly TokenHandler $tokenHandler,
+		private readonly IUserManager $userManager,
+		private readonly UserBackend $userBackend,
+		private readonly ISession $session,
+		private readonly SlaveService $slaveService,
+		private readonly GlobalScaleService $globalScaleService,
+		private readonly GlobalShareService $globalShareService,
+		private readonly IConfig $config,
+		private readonly LoggerInterface $logger,
 	) {
 		parent::__construct($appName, $request);
 	}
 
+
+	/**
+	 * @PublicPage
+	 * @NoCSRFRequired
+	 */
+	public function discovery(): DataResponse {
+		// public data, reachable from outside.
+		return new DataResponse(['token' => $this->globalScaleService->getLocalToken()]);
+	}
+
+	/**
+     * return sharing details about a file.
+     * request must contain encoded jwt.
+     *
+	 * @PublicPage
+	 * @NoCSRFRequired
+	 */
+	public function sharedFile(?string $jwt): DataResponse {
+		if ($jwt === null) {
+			return new DataResponse(['message' => 'missing jwt'], Http::STATUS_NOT_FOUND);
+		}
+		$key = $this->gss->getJwtKey();
+		$decoded = (array)JWT::decode($jwt, new Key($key, Application::JWT_ALGORITHM));
+		// JWT store data as stdClass, not array
+		$decoded = json_decode(json_encode($decoded), true);
+
+		$this->logger->debug('decoded request', ['data' => $decoded]);
+
+		$fileId = (int)($decoded['fileId'] ?? 0);
+		$shareId = (int)($decoded['shareId'] ?? 0);
+		$instance = $decoded['instance'] ?? '';
+
+		$target = new LocalFile();
+		$target->import($decoded['target'] ?? []);
+
+		try {
+			// the file is local and returns shares related to it
+			return new DataResponse($this->globalShareService->getSharedFiles($fileId, $shareId, $instance, $target));
+		} catch (SharedFileException $e) {
+			// file not found
+			return new DataResponse(['message' => $e->getMessage()], Http::STATUS_NOT_FOUND);
+		} catch (LocalFederatedShareException $e) {
+			// the file is not local and returns the shared folder and the path to the file
+			return new DataResponse($e->getFederatedShare(), Http::STATUS_MOVED_PERMANENTLY);
+		}
+	}
+
+
 	/**
 	 * @PublicPage
 	 * @NoCSRFRequired