Initial commit: CloudOps infrastructure platform

docker-compose/mautic-setup/mautic-backup-files/docroot/app/bundles/ApiBundle/Entity/oAuth2/AccessToken.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace Mautic\ApiBundle\Entity\oAuth2;
+
+use Doctrine\ORM\Mapping as ORM;
+use FOS\OAuthServerBundle\Model\AccessToken as BaseAccessToken;
+use Mautic\CoreBundle\Doctrine\Mapping\ClassMetadataBuilder;
+
+class AccessToken extends BaseAccessToken
+{
+    public static function loadMetadata(ORM\ClassMetadata $metadata): void
+    {
+        $builder = new ClassMetadataBuilder($metadata);
+
+        $builder->setTable('oauth2_accesstokens')
+            ->addIndex(['token'], 'oauth2_access_token_search');
+
+        $builder->createField('id', 'integer')
+            ->makePrimaryKey()
+            ->generatedValue()
+            ->build();
+
+        $builder->createManyToOne('client', 'Client')
+            ->addJoinColumn('client_id', 'id', false, false, 'CASCADE')
+            ->build();
+
+        $builder->createManyToOne('user', \Mautic\UserBundle\Entity\User::class)
+            ->addJoinColumn('user_id', 'id', true, false, 'CASCADE')
+            ->build();
+
+        $builder->createField('token', 'string')
+            ->unique()
+            ->build();
+
+        $builder->createField('expiresAt', 'bigint')
+            ->columnName('expires_at')
+            ->nullable()
+            ->build();
+
+        $builder->createField('scope', 'string')
+            ->nullable()
+            ->build();
+    }
+}

docker-compose/mautic-setup/mautic-backup-files/docroot/app/bundles/ApiBundle/Entity/oAuth2/AuthCode.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace Mautic\ApiBundle\Entity\oAuth2;
+
+use Doctrine\ORM\Mapping as ORM;
+use FOS\OAuthServerBundle\Model\AuthCode as BaseAuthCode;
+use Mautic\CoreBundle\Doctrine\Mapping\ClassMetadataBuilder;
+
+class AuthCode extends BaseAuthCode
+{
+    public static function loadMetadata(ORM\ClassMetadata $metadata): void
+    {
+        $builder = new ClassMetadataBuilder($metadata);
+
+        $builder->setTable('oauth2_authcodes');
+
+        $builder->createField('id', 'integer')
+            ->makePrimaryKey()
+            ->generatedValue()
+            ->build();
+
+        $builder->createManyToOne('client', 'Client')
+            ->addJoinColumn('client_id', 'id', false, false, 'CASCADE')
+            ->build();
+
+        $builder->createManyToOne('user', \Mautic\UserBundle\Entity\User::class)
+            ->addJoinColumn('user_id', 'id', false, false, 'CASCADE')
+            ->build();
+
+        $builder->createField('token', 'string')
+            ->unique()
+            ->build();
+
+        $builder->createField('expiresAt', 'bigint')
+            ->columnName('expires_at')
+            ->nullable()
+            ->build();
+
+        $builder->createField('scope', 'string')
+            ->nullable()
+            ->build();
+
+        $builder->createField('redirectUri', 'text')
+            ->columnName('redirect_uri')
+            ->build();
+    }
+}

docker-compose/mautic-setup/mautic-backup-files/docroot/app/bundles/ApiBundle/Entity/oAuth2/Client.php

@@ -0,0 +1,250 @@
+<?php
+
+namespace Mautic\ApiBundle\Entity\oAuth2;
+
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\ORM\Mapping as ORM;
+use FOS\OAuthServerBundle\Model\Client as BaseClient;
+use Mautic\CoreBundle\Doctrine\Mapping\ClassMetadataBuilder;
+use Mautic\UserBundle\Entity\Role;
+use Mautic\UserBundle\Entity\User;
+use OAuth2\OAuth2;
+use Symfony\Component\Validator\Constraints as Assert;
+use Symfony\Component\Validator\Mapping\ClassMetadata;
+
+class Client extends BaseClient
+{
+    /**
+     * @var int
+     */
+    protected $id;
+
+    /**
+     * @var string
+     */
+    protected $name;
+
+    /**
+     * @var ArrayCollection<int, User>
+     */
+    protected $users;
+
+    /**
+     * @var ArrayCollection
+     */
+    protected $authCodes;
+
+    protected ?string $randomId = null;
+
+    protected ?string $secret = null;
+
+    /**
+     * @var array<string>
+     */
+    protected array $redirectUris = [];
+
+    /**
+     * @var array<string>
+     */
+    protected array $allowedGrantTypes;
+
+    protected ?Role $role;
+
+    public function __construct()
+    {
+        parent::__construct();
+
+        $this->allowedGrantTypes = [
+            OAuth2::GRANT_TYPE_AUTH_CODE,
+            OAuth2::GRANT_TYPE_REFRESH_TOKEN,
+        ];
+
+        $this->users     = new ArrayCollection();
+        $this->authCodes = new ArrayCollection();
+    }
+
+    public static function loadMetadata(ORM\ClassMetadata $metadata): void
+    {
+        $builder = new ClassMetadataBuilder($metadata);
+
+        $builder->setTable('oauth2_clients')
+            ->setCustomRepositoryClass(ClientRepository::class)
+            ->addIndex(['random_id'], 'client_id_search');
+
+        $builder->addIdColumns('name', false);
+
+        $builder->createManyToMany('users', User::class)
+            ->setJoinTable('oauth2_user_client_xref')
+            ->addInverseJoinColumn('user_id', 'id', false, false, 'CASCADE')
+            ->addJoinColumn('client_id', 'id', false, false, 'CASCADE')
+            ->fetchExtraLazy()
+            ->build();
+
+        $builder->createField('randomId', 'string')
+            ->columnName('random_id')
+            ->build();
+
+        $builder->addField('secret', 'string');
+
+        $builder->createField('redirectUris', 'array')
+            ->columnName('redirect_uris')
+            ->build();
+
+        $builder->createField('allowedGrantTypes', 'array')
+            ->columnName('allowed_grant_types')
+            ->build();
+
+        $builder->createManyToOne('role', Role::class)
+            ->addJoinColumn('role_id', 'id', true, false)
+            ->cascadePersist()
+            ->build();
+    }
+
+    public static function loadValidatorMetadata(ClassMetadata $metadata): void
+    {
+        $metadata->addPropertyConstraint('name', new Assert\NotBlank(
+            ['message' => 'mautic.core.name.required']
+        ));
+
+        $metadata->addPropertyConstraint('redirectUris', new Assert\NotBlank(
+            ['message' => 'mautic.api.client.redirecturis.notblank']
+        ));
+    }
+
+    /**
+     * @var array
+     */
+    protected $changes;
+
+    protected function isChanged($prop, $val)
+    {
+        $getter  = 'get'.ucfirst($prop);
+        $current = $this->$getter();
+        if ($current != $val) {
+            $this->changes[$prop] = [$current, $val];
+        }
+    }
+
+    /**
+     * @return array
+     */
+    public function getChanges()
+    {
+        return $this->changes;
+    }
+
+    /**
+     * @return int
+     */
+    public function getId()
+    {
+        return $this->id;
+    }
+
+    /**
+     * @param string $name
+     *
+     * @return Client
+     */
+    public function setName($name)
+    {
+        $this->isChanged('name', $name);
+
+        $this->name = $name;
+
+        return $this;
+    }
+
+    /**
+     * @return string
+     */
+    public function getName()
+    {
+        return $this->name;
+    }
+
+    public function setRedirectUris(array $redirectUris): void
+    {
+        $this->isChanged('redirectUris', $redirectUris);
+
+        $this->redirectUris = $redirectUris;
+    }
+
+    /**
+     * @return Client
+     */
+    public function addAuthCode(AuthCode $authCodes)
+    {
+        $this->authCodes[] = $authCodes;
+
+        return $this;
+    }
+
+    public function removeAuthCode(AuthCode $authCodes): void
+    {
+        $this->authCodes->removeElement($authCodes);
+    }
+
+    /**
+     * @return \Doctrine\Common\Collections\Collection
+     */
+    public function getAuthCodes()
+    {
+        return $this->authCodes;
+    }
+
+    /**
+     * Determines if a client attempting API access is already authorized by the user.
+     *
+     * @return bool
+     */
+    public function isAuthorizedClient(User $user)
+    {
+        $users = $this->getUsers();
+
+        return $users->contains($user);
+    }
+
+    /**
+     * @return Client
+     */
+    public function addUser(User $users)
+    {
+        $this->users[] = $users;
+
+        return $this;
+    }
+
+    public function removeUser(User $users): void
+    {
+        $this->users->removeElement($users);
+    }
+
+    /**
+     * @return \Doctrine\Common\Collections\Collection
+     */
+    public function getUsers()
+    {
+        return $this->users;
+    }
+
+    /**
+     * Add Authorization Grant Type.
+     */
+    public function addGrantType(string $grantType): Client
+    {
+        $this->allowedGrantTypes[] = $grantType;
+
+        return $this;
+    }
+
+    public function getRole(): Role
+    {
+        return $this->role;
+    }
+
+    public function setRole(Role $role): void
+    {
+        $this->role = $role;
+    }
+}

docker-compose/mautic-setup/mautic-backup-files/docroot/app/bundles/ApiBundle/Entity/oAuth2/ClientRepository.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace Mautic\ApiBundle\Entity\oAuth2;
+
+use Mautic\CoreBundle\Entity\CommonRepository;
+use Mautic\UserBundle\Entity\User;
+
+/**
+ * @extends CommonRepository<Client>
+ */
+class ClientRepository extends CommonRepository
+{
+    /**
+     * @return array
+     */
+    public function getUserClients(User $user)
+    {
+        $query = $this->createQueryBuilder($this->getTableAlias());
+
+        $query->join('c.users', 'u')
+            ->where($query->expr()->eq('u.id', ':userId'))
+            ->setParameter('userId', $user->getId());
+
+        return $query->getQuery()->getResult();
+    }
+
+    protected function addCatchAllWhereClause($q, $filter): array
+    {
+        return $this->addStandardCatchAllWhereClause($q, $filter, [
+            'c.name',
+            'c.redirectUris',
+        ]);
+    }
+
+    protected function getDefaultOrder(): array
+    {
+        return [
+            ['c.name', 'ASC'],
+        ];
+    }
+
+    public function getTableAlias(): string
+    {
+        return 'c';
+    }
+}

docker-compose/mautic-setup/mautic-backup-files/docroot/app/bundles/ApiBundle/Entity/oAuth2/RefreshToken.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace Mautic\ApiBundle\Entity\oAuth2;
+
+use Doctrine\ORM\Mapping as ORM;
+use FOS\OAuthServerBundle\Model\RefreshToken as BaseRefreshToken;
+use Mautic\CoreBundle\Doctrine\Mapping\ClassMetadataBuilder;
+
+class RefreshToken extends BaseRefreshToken
+{
+    public static function loadMetadata(ORM\ClassMetadata $metadata): void
+    {
+        $builder = new ClassMetadataBuilder($metadata);
+
+        $builder->setTable('oauth2_refreshtokens')
+            ->addIndex(['token'], 'oauth2_refresh_token_search');
+
+        $builder->createField('id', 'integer')
+            ->makePrimaryKey()
+            ->generatedValue()
+            ->build();
+
+        $builder->createManyToOne('client', 'Client')
+            ->addJoinColumn('client_id', 'id', false, false, 'CASCADE')
+            ->build();
+
+        $builder->createManyToOne('user', \Mautic\UserBundle\Entity\User::class)
+            ->addJoinColumn('user_id', 'id', false, false, 'CASCADE')
+            ->build();
+
+        $builder->createField('token', 'string')
+            ->unique()
+            ->build();
+
+        $builder->createField('expiresAt', 'bigint')
+            ->columnName('expires_at')
+            ->nullable()
+            ->build();
+
+        $builder->createField('scope', 'string')
+            ->nullable()
+            ->build();
+    }
+}