Merge pull request #85 from nextcloud/vue-embedded-component

Use embedded vue component for documenso when possible

Author: janepie

lib/AppInfo/Application.php

@@ -5,12 +5,14 @@
 namespace OCA\Documenso\AppInfo;
 
 use OCA\Documenso\Dashboard\DocumensoWidget;
+use OCA\Documenso\Listener\ContentSecurityPolicyListener;
 use OCA\Files\Event\LoadAdditionalScriptsEvent;
 use OCP\AppFramework\App;
 use OCP\AppFramework\Bootstrap\IBootContext;
 use OCP\AppFramework\Bootstrap\IBootstrap;
 use OCP\AppFramework\Bootstrap\IRegistrationContext;
 use OCP\EventDispatcher\IEventDispatcher;
+use OCP\Security\CSP\AddContentSecurityPolicyEvent;
 use OCP\Util;
 
 class Application extends App implements IBootstrap {
@@ -32,6 +34,7 @@ public function __construct(array $urlParams = []) {
 
 	public function register(IRegistrationContext $context): void {
 		$context->registerDashboardWidget(DocumensoWidget::class);
+		$context->registerEventListener(AddContentSecurityPolicyEvent::class, ContentSecurityPolicyListener::class);
 	}
 
 	public function boot(IBootContext $context): void {

lib/Controller/DocumensoController.php

@@ -78,6 +78,29 @@ public function signStandalone(int $fileId, array $targetEmails = [], array $tar
 		}
 	}
 
+	/**
+	 * @param int $documentId
+	 * @return DataResponse
+	 */
+	#[NoAdminRequired]
+	#[FrontpageRoute(verb: 'POST', url: '/documenso/distribute')]
+	public function distribute(int $documentId): DataResponse {
+		if ($this->userId === null) {
+			return new DataResponse(['error' => 'no user in context'], Http::STATUS_UNAUTHORIZED);
+		}
+		$token = $this->config->getUserValue($this->userId, Application::APP_ID, 'token');
+		$url = $this->config->getUserValue($this->userId, Application::APP_ID, 'url');
+		$isConnected = ($token !== '' && $url !== '');
+		if (!$isConnected) {
+			return new DataResponse(['error' => 'Documenso connected account is not configured'], Http::STATUS_UNAUTHORIZED);
+		}
+		$result = $this->documensoAPIService->distributeDocument($this->userId, $documentId);
+		if (isset($result['error'])) {
+			return new DataResponse($result, Http::STATUS_BAD_REQUEST);
+		}
+		return new DataResponse($result);
+	}
+
 	/**
 	 * Set config values
 	 *

lib/Listener/ContentSecurityPolicyListener.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace OCA\Documenso\Listener;
+
+use OCA\Documenso\AppInfo\Application;
+use OCP\AppFramework\Http\ContentSecurityPolicy;
+use OCP\EventDispatcher\Event;
+use OCP\EventDispatcher\IEventListener;
+use OCP\IConfig;
+use OCP\Security\CSP\AddContentSecurityPolicyEvent;
+
+/**
+ * @implements IEventListener<AddContentSecurityPolicyEvent>
+ */
+class ContentSecurityPolicyListener implements IEventListener {
+
+	public function __construct(
+		private IConfig $config,
+		private ?string $userId,
+	) {
+	}
+
+	/**
+	 * @inheritDoc
+	 */
+	public function handle(Event $event): void {
+		if (!$event instanceof AddContentSecurityPolicyEvent) {
+			return;
+		}
+		if ($this->userId === null) {
+			return;
+		}
+
+		$policy = new ContentSecurityPolicy();
+		$host = $this->config->getUserValue($this->userId, Application::APP_ID, 'url');
+		$policy->addAllowedFrameDomain($host);
+		$event->addPolicy($policy);
+	}
+}

lib/Service/DocumensoAPIService.php

@@ -93,9 +93,11 @@ public function emailSignStandalone(int $fileId, string $ccUserId, array $target
 		if (isset($uploadEndpoint['error'])) {
 			return $uploadEndpoint;
 		};
-
 		$response = $this->uploadFile($file, $uploadEndpoint, $ccUserId);
 		$response['missingMailCount'] = $missingMailCount;
+		$response['embeddingToken'] = $this->requestEmbeddingToken($ccUserId);
+		$response['host'] = $this->config->getUserValue($ccUserId, Application::APP_ID, 'url');
+		$response['documentId'] = $uploadEndpoint['documentId'];
 		return $response;
 	}
 
@@ -154,6 +156,41 @@ public function uploadFile(File $file, array $uploadEndpoint, string $ccUserId):
 		}
 	}
 
+	/**
+	 * Request a presigned embedding token for embedded authoring/signing
+	 * See https://openapi.documenso.com/reference#tag/embedding/post/embedding/create-presign-token
+	 *
+	 * @param string $userId
+	 * @return string|null The presign token on success, null on error
+	 */
+	public function requestEmbeddingToken(string $userId): ?string {
+		$baseUrl = $this->config->getUserValue($userId, Application::APP_ID, 'url');
+		$endPoint = 'api/v2/embedding/create-presign-token';
+		$result = $this->apiRequest($baseUrl, $userId, $endPoint, ['expiresIn' => 60,'scope' => ''], 'POST');
+
+		if (isset($result['error'])) {
+			$this->logger->warning('Failed to create embedding presign token: ' . $result['error'], ['app' => Application::APP_ID]);
+			return null;
+		}
+
+		return isset($result['token']) && is_string($result['token']) ? $result['token'] : null;
+	}
+
+	/**
+	 * Distribute a document via Documenso (send for signing).
+	 * See https://openapi.documenso.com/reference#tag/document/post/document/distribute
+	 *
+	 * @param string $userId
+	 * @param int $documentId
+	 * @return array request result or error
+	 */
+	public function distributeDocument(string $userId, int $documentId): array {
+		$baseUrl = $this->config->getUserValue($userId, Application::APP_ID, 'url');
+		$endPoint = 'api/v2/document/distribute';
+		$body = ['documentId' => $documentId];
+		return $this->apiRequest($baseUrl, $userId, $endPoint, $body, 'POST');
+	}
+
 	/**
 	 * Get a list of all documents from Documenso
 	 * @param string $userId
@@ -175,7 +212,7 @@ public function getDocumentList($userId): array {
 	 * @param string $baseUrl
 	 * @param string $token
 	 * @param string $endPoint
-	 * @param array<string, string|string[]> $params
+	 * @param array<string, string[]|string|int|bool> $params
 	 * @param string $method
 	 * @return array request result
 	 * @throws Exception

package-lock.json

@@ -34,10 +34,11 @@
     "npm": "^11.3.0"
   },
   "dependencies": {
+    "@documenso/embed-vue": "^0.5.0",
     "@nextcloud/auth": "^2.5.1",
     "@nextcloud/axios": "^2.4.0",
     "@nextcloud/dialogs": "^7.2.0",
-    "@nextcloud/files": "^4.0.0-beta.8",
+    "@nextcloud/files": "^4.0.0",
     "@nextcloud/initial-state": "^3.0.0",
     "@nextcloud/l10n": "^3.2.0",
     "@nextcloud/moment": "^1.3.4",