29053227110

Committed 09 Jul 2026 10:00PM UTC coverage: 55.077%. First build

Build # 29053227110

Build Type

Pull #7887

github

Committed by

web-flow

Commit Message

Merge e1981442c into e4d7ad4bb

Pull Request Pull Request #7887: fix(crl): improve CRL generation performance and reliability

Coverage Stats

38 of 81 new or added lines in 5 files covered. (46.91%)

13142 of 23861 relevant lines covered (55.08%)

7.41 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

46.1

/lib/Controller/PageController.php

<?php

declare(strict_types=1);
/**
 * SPDX-FileCopyrightText: 2020-2024 LibreCode coop and contributors
 * SPDX-License-Identifier: AGPL-3.0-or-later
 */

namespace OCA\Libresign\Controller;

use OCA\Libresign\AppInfo\Application;
use OCA\Libresign\Db\FileMapper;
use OCA\Libresign\Db\SignRequestMapper;
use OCA\Libresign\Exception\LibresignException;
use OCA\Libresign\Handler\CertificateEngine\CertificateEngineFactory;
use OCA\Libresign\Helper\JSActions;
use OCA\Libresign\Helper\ValidateHelper;
use OCA\Libresign\Middleware\Attribute\PrivateValidation;
use OCA\Libresign\Middleware\Attribute\RequireSetupOk;
use OCA\Libresign\Middleware\Attribute\RequireSignRequestUuid;
use OCA\Libresign\Service\AccountService;
use OCA\Libresign\Service\File\FileListService;
use OCA\Libresign\Service\FileService;
use OCA\Libresign\Service\IdentifyMethod\SignatureMethod\TokenService;
use OCA\Libresign\Service\IdentifyMethodService;
use OCA\Libresign\Service\Policy\PolicyAuthorizationService;
use OCA\Libresign\Service\Policy\PolicyService;
use OCA\Libresign\Service\RequestSignatureService;
use OCA\Libresign\Service\SessionService;
use OCA\Libresign\Service\SignerElementsService;
use OCA\Libresign\Service\SignFileService;
use OCA\Viewer\Event\LoadViewer;
use OCP\AppFramework\Db\DoesNotExistException;
use OCP\AppFramework\Http;
use OCP\AppFramework\Http\Attribute\AnonRateLimit;
use OCP\AppFramework\Http\Attribute\FrontpageRoute;
use OCP\AppFramework\Http\Attribute\NoAdminRequired;
use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
use OCP\AppFramework\Http\Attribute\OpenAPI;
use OCP\AppFramework\Http\Attribute\PublicPage;
use OCP\AppFramework\Http\ContentSecurityPolicy;
use OCP\AppFramework\Http\DataResponse;
use OCP\AppFramework\Http\FileDisplayResponse;
use OCP\AppFramework\Http\RedirectResponse;
use OCP\AppFramework\Http\TemplateResponse;
use OCP\AppFramework\Services\IInitialState;
use OCP\EventDispatcher\IEventDispatcher;
use OCP\IAppConfig;
use OCP\IL10N;
use OCP\IRequest;
use OCP\IURLGenerator;
use OCP\IUserSession;
use OCP\Util;
use Psr\Log\LoggerInterface;

#[OpenAPI(scope: OpenAPI::SCOPE_IGNORE)]
class PageController extends AEnvironmentPageAwareController {
        public function __construct(
                IRequest $request,
                protected IUserSession $userSession,
                private SessionService $sessionService,
                private IInitialState $initialState,
                private AccountService $accountService,
                private CertificateEngineFactory $certificateEngineFactory,
                protected SignFileService $signFileService,
                protected RequestSignatureService $requestSignatureService,
                private PolicyService $policyService,
                private PolicyAuthorizationService $policyAuthorizationService,
                private SignerElementsService $signerElementsService,
                protected IL10N $l10n,
                private IdentifyMethodService $identifyMethodService,
                private IAppConfig $appConfig,
                private FileService $fileService,
                private FileListService $fileListService,
                private FileMapper $fileMapper,
                private SignRequestMapper $signRequestMapper,
                private LoggerInterface $logger,
                private ValidateHelper $validateHelper,
                private IEventDispatcher $eventDispatcher,
                private IURLGenerator $urlGenerator,
        ) {
                parent::__construct(
                        request: $request,
                        signFileService: $signFileService,
                        l10n: $l10n,
                        userSession: $userSession,
                );
        }

        /**
         * Index page
         *
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk(template: 'main')]
        #[FrontpageRoute(verb: 'GET', url: '/')]
        public function index(): TemplateResponse {
                $this->initialState->provideInitialState('config', $this->accountService->getConfig($this->userSession->getUser()));
                $this->initialState->provideInitialState('filters', $this->accountService->getConfigFilters($this->userSession->getUser()));
                $this->initialState->provideInitialState('sorting', $this->accountService->getConfigSorting($this->userSession->getUser()));
                $this->initialState->provideInitialState('certificate_engine', $this->accountService->getCertificateEngineName());

                try {
                        $this->validateHelper->canRequestSign($this->userSession->getUser());
                        $this->initialState->provideInitialState('can_request_sign', true);
                } catch (LibresignException) {
                        $this->initialState->provideInitialState('can_request_sign', false);
                }

                $this->provideSignerSignatues();
                $this->initialState->provideInitialState('effective_policies', [
                        'policies' => $this->policyService->resolveKnownPolicyStates(),
                ]);

                Util::addScript(Application::APP_ID, 'libresign-main');
                Util::addStyle(Application::APP_ID, 'libresign-main');

                if (class_exists(LoadViewer::class)) {
                        $this->eventDispatcher->dispatchTyped(new LoadViewer());
                }

                $response = new TemplateResponse(Application::APP_ID, 'main');

                $policy = new ContentSecurityPolicy();
                $policy->addAllowedFrameDomain('\'self\'');
                $policy->addAllowedWorkerSrcDomain("'self'");
                $response->setContentSecurityPolicy($policy);

                return $response;
        }

        /**
         * Index page to authenticated users
         *
         * This router is used to be possible render pages with /f/, is a
         * workaround at frontend side to identify pages with authenticated accounts
         *
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk(template: 'main')]
        #[FrontpageRoute(verb: 'GET', url: '/f/')]
        public function indexF(): TemplateResponse {
                return $this->index();
        }

        /**
         * Incomplete page
         *
         * @return TemplateResponse|RedirectResponse
         *
         * 200: OK
         * 303: Redirected when setup is already complete
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[FrontpageRoute(verb: 'GET', url: '/f/incomplete')]
        public function incomplete(): TemplateResponse|RedirectResponse {
                if ($this->isSetupComplete()) {
                        return new RedirectResponse(
                                $this->urlGenerator->linkToRouteAbsolute('libresign.page.indexF'),
                        );
                }

                return $this->renderIncompletePage();
        }

        /**
         * Incomplete page in full screen
         *
         * @return TemplateResponse|RedirectResponse
         *
         * 200: OK
         * 303: Redirected when setup is already complete
         */
        #[PublicPage]
        #[NoCSRFRequired]
        #[FrontpageRoute(verb: 'GET', url: '/p/incomplete')]
        public function incompleteP(): TemplateResponse|RedirectResponse {
                if ($this->isSetupComplete()) {
                        return new RedirectResponse(
                                $this->urlGenerator->linkToRouteAbsolute('libresign.page.index'),
                        );
                }

                return $this->renderIncompletePage(publicPage: true);
        }

        private function renderIncompletePage(bool $publicPage = false): TemplateResponse {
                Util::addScript(Application::APP_ID, 'libresign-main');
                Util::addStyle(Application::APP_ID, 'libresign-main');

                if ($publicPage) {
                        return new TemplateResponse(Application::APP_ID, 'main', [], TemplateResponse::RENDER_AS_BASE);
                }

                return new TemplateResponse(Application::APP_ID, 'main');
        }

        private function isSetupComplete(): bool {
                return $this->certificateEngineFactory->getEngine()->isSetupOk();
        }

        /**
         * Main page to authenticated signer with a path
         *
         * The path is used only by frontend
         *
         * @param string $path The path that was sent from frontend
         * @return TemplateResponse<Http::STATUS_OK, array{}>|RedirectResponse<Http::STATUS_SEE_OTHER, array{}>
         *
         * 200: OK
         * 303: Redirected when the current actor cannot access the requested internal page
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk(template: 'main')]
        #[FrontpageRoute(verb: 'GET', url: '/f/{path}', requirements: ['path' => '.+'])]
        public function indexFPath(string $path): TemplateResponse|RedirectResponse {
                if ($this->isPoliciesWorkbenchPath($path) && !$this->canAccessPoliciesWorkbench()) {
                        return new RedirectResponse(
                                $this->urlGenerator->linkToRouteAbsolute('libresign.page.indexF'),
                        );
                }

                if (preg_match('/validation\/(?<uuid>[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})$/', $path, $matches)) {
                        $signRequest = null;

                        try {
                                $this->fileService->setFileByUuid($matches['uuid']);
                        } catch (LibresignException) {
                                try {
                                        $this->fileService->setFileBySignerUuid($matches['uuid']);
                                        $signRequest = $this->signRequestMapper->getBySignerUuidAndUserId($matches['uuid']);
                                } catch (LibresignException) {
                                        throw new LibresignException(json_encode([
                                                'action' => JSActions::ACTION_DO_NOTHING,
                                                'errors' => [['message' => $this->l10n->t('Invalid UUID')]],
                                        ]), Http::STATUS_NOT_FOUND);
                                }
                        }

                        if ($signRequest) {
                                $this->fileService->setSignRequest($signRequest);
                        }

                        $this->provideDeferredValidationFileInfo($matches['uuid']);
                } elseif (preg_match('/sign\/(?<uuid>[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})/', $path, $matches)) {
                        try {
                                $signRequest = $this->signFileService->getSignRequestByUuid($matches['uuid']);
                                if ($signRequest->getStatusEnum() === \OCA\Libresign\Enum\SignRequestStatus::SIGNED) {
                                        $file = $this->signFileService->getFile($signRequest->getFileId());
                                        $redirectUrl = $this->urlGenerator->linkToRouteAbsolute('libresign.page.indexFPath', [
                                                'path' => 'validation/' . $file->getUuid(),
                                        ]);
                                        throw new LibresignException(json_encode([
                                                'action' => JSActions::ACTION_REDIRECT,
                                                'redirect' => $redirectUrl,
                                        ]), Http::STATUS_SEE_OTHER);
                                }
                                $file = $this->fileService
                                        ->setFile($this->signFileService->getFile($signRequest->getFileId()))
                                        ->setSignRequest($signRequest)
                                        ->setMe($this->userSession->getUser())
                                        ->showSettings()
                                        ->toArray();
                                $this->initialState->provideInitialState('needIdentificationDocuments', $file['settings']['needIdentificationDocuments'] ?? false);
                                $this->initialState->provideInitialState('identificationDocumentsWaitingApproval', $file['settings']['identificationDocumentsWaitingApproval'] ?? false);
                        } catch (LibresignException $e) {
                                throw $e;
                        } catch (\Throwable) {
                                throw new LibresignException(json_encode([
                                        'action' => JSActions::ACTION_DO_NOTHING,
                                        'errors' => [['message' => $this->l10n->t('Invalid UUID')]],
                                ]), Http::STATUS_NOT_FOUND);
                        }
                }
                return $this->index();
        }

        private function canAccessPoliciesWorkbench(): bool {
                $user = $this->userSession->getUser();
                if ($user === null) {
                        return false;
                }

                return $this->policyAuthorizationService->canUserManageGroupPolicies($user);
        }

        private function isPoliciesWorkbenchPath(string $path): bool {
                return preg_match('/^policies(?:\/|$)/', $path) === 1;
        }

        /**
         * Sign page to authenticated signer
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[PrivateValidation(allowValidSignRequestUuid: false)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[RequireSignRequestUuid(redirectIfSignedToValidation: true, allowIdDocs: true)]
        #[FrontpageRoute(verb: 'GET', url: '/f/sign/{uuid}')]
        public function signF(string $uuid): TemplateResponse {
                $this->initialState->provideInitialState('action', JSActions::ACTION_SIGN_INTERNAL);
                return $this->index();
        }

        /**
         * Sign page to authenticated signer with the path of file
         *
         * The path is used only by frontend
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[RequireSignRequestUuid(redirectIfSignedToValidation: true, allowIdDocs: true)]
        #[FrontpageRoute(verb: 'GET', url: '/f/sign/{uuid}/{path}', requirements: ['path' => '.+'])]
        public function signFPath(string $uuid): TemplateResponse {
                $this->initialState->provideInitialState('action', JSActions::ACTION_SIGN_INTERNAL);
                return $this->index();
        }

        /**
         * Sign page to unauthenticated signer
         *
         * The path is used only by frontend
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[PrivateValidation(allowValidSignRequestUuid: true)]
        #[RequireSignRequestUuid(redirectIfSignedToValidation: true, allowIdDocs: true)]
        #[FrontpageRoute(verb: 'GET', url: '/p/sign/{uuid}/{path}', requirements: ['path' => '.+'])]
        public function signPPath(string $uuid): TemplateResponse {
                return $this->sign($uuid);
        }

        /**
         * Sign page to unauthenticated signer
         *
         * The path is used only by frontend
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[PrivateValidation(allowValidSignRequestUuid: true)]
        #[RequireSignRequestUuid(redirectIfSignedToValidation: true, allowIdDocs: true)]
        #[FrontpageRoute(verb: 'GET', url: '/p/sign/{uuid}')]
        public function sign(string $uuid): TemplateResponse {
                $this->initialState->provideInitialState('action', JSActions::ACTION_SIGN);
                $config = $this->accountService->getConfig($this->userSession->getUser());
                $this->initialState->provideInitialState('filename', $this->getFileEntity()->getName());
                $file = $this->fileService
                        ->setFile($this->getFileEntity())
                        ->setSignRequest($this->getSignRequestEntity())
                        ->setHost($this->request->getServerHost())
                        ->setMe($this->userSession->getUser())
                        ->setSignerIdentified()
                        ->setIdentifyMethodId($this->sessionService->getIdentifyMethodId())
                        ->showVisibleElements()
                        ->showSigners()
                        ->showSettings()
                        ->toArray();
                $this->initialState->provideInitialState('config', array_merge($config, [
                        'identificationDocumentsFlow' => $file['settings']['needIdentificationDocuments'] ?? false,
                ]));
                $this->initialState->provideInitialState('id', $file['id']);
                $this->initialState->provideInitialState('nodeId', $file['nodeId']);
                $this->initialState->provideInitialState('needIdentificationDocuments', $file['settings']['needIdentificationDocuments'] ?? false);
                $this->initialState->provideInitialState('identificationDocumentsWaitingApproval', $file['settings']['identificationDocumentsWaitingApproval'] ?? false);
                $this->initialState->provideInitialState('status', $file['status']);
                $this->initialState->provideInitialState('statusText', $file['statusText']);
                $this->initialState->provideInitialState('signers', $file['signers']);
                $this->initialState->provideInitialState('visibleElements', $file['visibleElements'] ?? []);
                $this->initialState->provideInitialState('sign_request_uuid', $uuid);
                $this->provideSignerSignatues();
                $this->initialState->provideInitialState('token_length', TokenService::TOKEN_LENGTH);
                $this->initialState->provideInitialState('description', $this->getSignRequestEntity()->getDescription() ?? '');
                if ($this->getFileEntity()->getNodeType() === 'envelope') {
                        $this->initialState->provideInitialState('pdfs', []);
                        $this->initialState->provideInitialState('envelopeFiles', $this->getEnvelopeChildFiles());
                } else {
                        $this->initialState->provideInitialState('pdfs', $this->getPdfUrls());
                        $this->initialState->provideInitialState('envelopeFiles', []);
                }
                $this->initialState->provideInitialState('nodeId', $this->getFileEntity()->getNodeId());
                $this->initialState->provideInitialState('nodeType', $this->getFileEntity()->getNodeType());

                Util::addScript(Application::APP_ID, 'libresign-external');
                Util::addStyle(Application::APP_ID, 'libresign-external');
                if (class_exists(LoadViewer::class)) {
                        $this->eventDispatcher->dispatchTyped(new LoadViewer());
                }
                $response = new TemplateResponse(Application::APP_ID, 'external', [], TemplateResponse::RENDER_AS_BASE);

                $policy = new ContentSecurityPolicy();
                $policy->addAllowedWorkerSrcDomain("'self'");
                $response->setContentSecurityPolicy($policy);

                return $response;
        }

        private function provideSignerSignatues(): void {
                $signatures = [];
                if ($this->userSession->getUser()) {
                        $signatures = $this->signerElementsService->getUserElements($this->userSession->getUser()->getUID());
                } else {
                        $signatures = $this->signerElementsService->getElementsFromSessionAsArray();
                }
                $this->initialState->provideInitialState('user_signatures', $signatures);
        }

        /**
         * @return string[] Array of PDF URLs
         */
        private function getPdfUrls(): array {
                return $this->signFileService->getPdfUrlsForSigning(
                        $this->getFileEntity(),
                        $this->getSignRequestEntity()
                );
        }

        private function getEnvelopeChildFiles(): array {
                $parentFileId = $this->getFileEntity()->getId();
                $currentSignRequest = $this->getSignRequestEntity();
                $childFiles = $this->fileMapper->getChildrenFiles($parentFileId);
                $childSignRequests = $this->signRequestMapper->getByEnvelopeChildrenAndIdentifyMethod(
                        $parentFileId,
                        $currentSignRequest->getId()
                );

                $signRequestsByFileId = [];
                foreach ($childSignRequests as $childSignRequest) {
                        $signRequestsByFileId[$childSignRequest->getFileId()] = true;
                }

                foreach ($childFiles as $childFile) {
                        if (!isset($signRequestsByFileId[$childFile->getId()])) {
                                $this->logger->warning('Missing sign request for envelope child file', [
                                        'parentFileId' => $parentFileId,
                                        'childFileId' => $childFile->getId(),
                                        'signRequestId' => $currentSignRequest->getId(),
                                ]);
                        }
                }

                return $this->fileListService->formatEnvelopeChildFilesForSignRequest(
                        $childFiles,
                        $childSignRequests,
                        $currentSignRequest,
                );
        }

        /**
         * Use UUID of file to get PDF
         *
         * @param string $uuid File uuid
         * @return FileDisplayResponse<Http::STATUS_OK, array{Content-Type: string}>|DataResponse<Http::STATUS_NOT_FOUND, array<empty>, array{}>
         *
         * 200: OK
         * 401: Validation page not accessible if unauthenticated
         * 404: File not found
         */
        #[PrivateValidation(allowValidSignRequestUuid: false)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[AnonRateLimit(limit: 300, period: 60)]
        #[FrontpageRoute(verb: 'GET', url: '/p/pdf/{uuid}')]
        public function getPdf($uuid) {
                try {
                        $file = $this->accountService->getPdfByUuid($uuid);
                } catch (DoesNotExistException) {
                        return new DataResponse([], Http::STATUS_NOT_FOUND);
                }

                return new FileDisplayResponse($file, Http::STATUS_OK, ['Content-Type' => $file->getMimeType()]);
        }

        /**
         * Use UUID of user to get PDF
         *
         * @param string $uuid Sign request uuid
         * @return FileDisplayResponse<Http::STATUS_OK, array{Content-Type: string}>
         *
         * 200: OK
         * 401: Validation page not accessible if unauthenticated without a valid sign request UUID
         */
        #[PrivateValidation(allowValidSignRequestUuid: true)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSignRequestUuid(allowIdDocs: true)]
        #[PublicPage]
        #[RequireSetupOk]
        #[AnonRateLimit(limit: 300, period: 60)]
        #[FrontpageRoute(verb: 'GET', url: '/pdf/{uuid}')]
        public function getPdfFile($uuid): FileDisplayResponse {
                $files = $this->getNextcloudFiles();
                if (empty($files)) {
                        throw new LibresignException(json_encode([
                                'action' => JSActions::ACTION_DO_NOTHING,
                                'errors' => [['message' => $this->l10n->t('File not found')]],
                        ]), Http::STATUS_NOT_FOUND);
                }
                $file = current($files);
                return new FileDisplayResponse($file, Http::STATUS_OK, ['Content-Type' => $file->getMimeType()]);
        }

        /**
         * Show validation page
         *
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         * 401: Validation page not accessible if unauthenticated
         */
        #[PrivateValidation(allowValidSignRequestUuid: false)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk(template: 'validation')]
        #[PublicPage]
        #[AnonRateLimit(limit: 30, period: 60)]
        #[FrontpageRoute(verb: 'GET', url: '/p/validation')]
        public function validation(): TemplateResponse {
                if ($this->getFileEntity()) {
                        $this->initialState->provideInitialState('config',
                                $this->accountService->getConfig($this->userSession->getUser())
                        );
                        $this->initialState->provideInitialState('file', [
                                'uuid' => $this->getFileEntity()?->getUuid(),
                                'description' => $this->getSignRequestEntity()?->getDescription(),
                        ]);
                        $this->initialState->provideInitialState('filename', $this->getFileEntity()?->getName());
                        $this->initialState->provideInitialState('pdfs', $this->getPdfUrls());
                        $this->initialState->provideInitialState('signer',
                                $this->signFileService->getSignerData(
                                        $this->userSession->getUser(),
                                        $this->getSignRequestEntity(),
                                )
                        );
                }

                Util::addScript(Application::APP_ID, 'libresign-validation');
                Util::addStyle(Application::APP_ID, 'libresign-validation');
                $response = new TemplateResponse(Application::APP_ID, 'validation', [], TemplateResponse::RENDER_AS_BASE);

                return $response;
        }

        /**
         * Show validation page
         *
         * The path is used only by frontend
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         * 303: Redirected to validation page
         * 401: Validation page not accessible if unauthenticated
         */
        #[PrivateValidation(allowValidSignRequestUuid: false)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk]
        #[PublicPage]
        #[AnonRateLimit(limit: 30, period: 60)]
        #[FrontpageRoute(verb: 'GET', url: '/validation/{uuid}')]
        public function validationFileWithShortUrl(): TemplateResponse {
                return $this->validationFilePublic($this->request->getParam('uuid'));
        }

        /**
         * Show validation page
         *
         * @param string $uuid Sign request uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         */
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[RequireSetupOk(template: 'main')]
        #[PublicPage]
        #[RequireSignRequestUuid]
        #[FrontpageRoute(verb: 'GET', url: '/reset-password')]
        public function resetPassword(): TemplateResponse {
                $this->initialState->provideInitialState('config',
                        $this->accountService->getConfig($this->userSession->getUser())
                );

                Util::addScript(Application::APP_ID, 'libresign-main');
                Util::addStyle(Application::APP_ID, 'libresign-main');
                $response = new TemplateResponse(Application::APP_ID, 'reset_password');

                return $response;
        }

        /**
         * Public page to show validation for a specific file UUID
         *
         * @param string $uuid File uuid
         * @return TemplateResponse<Http::STATUS_OK, array{}>
         *
         * 200: OK
         * 401: Validation page not accessible if unauthenticated
         */
        #[PrivateValidation(allowValidSignRequestUuid: false)]
        #[NoAdminRequired]
        #[NoCSRFRequired]
        #[PublicPage]
        #[AnonRateLimit(limit: 30, period: 60)]
        #[FrontpageRoute(verb: 'GET', url: '/p/validation/{uuid}')]
        public function validationFilePublic(string $uuid): TemplateResponse {
                $signRequest = null;
                try {
                        $this->signFileService->getFileByUuid($uuid);
                        $this->fileService->setFileByUuid($uuid);
                } catch (DoesNotExistException) {
                        try {
                                $signRequest = $this->signFileService->getSignRequestByUuid($uuid);
                                $libresignFile = $this->signFileService->getFile($signRequest->getFileId());
                                $this->fileService->setFile($libresignFile);
                        } catch (DoesNotExistException) {
                                $this->initialState->provideInitialState('action', JSActions::ACTION_DO_NOTHING);
                                $this->initialState->provideInitialState('errors', [['message' => $this->l10n->t('Invalid UUID')]]);
                        }
                }
                if ($this->userSession->isLoggedIn()) {
                        $this->initialState->provideInitialState('config',
                                $this->accountService->getConfig($this->userSession->getUser())
                        );
                        $this->fileService->setMe($this->userSession->getUser());
                } else {
                        $this->initialState->provideInitialState('config',
                                $this->accountService->getConfig()
                        );
                }

                if ($signRequest) {
                        $this->fileService->setSignRequest($signRequest);
                }

                $fileInfo = $this->fileService
                        ->setIdentifyMethodId($this->sessionService->getIdentifyMethodId())
                        ->setHost($this->request->getServerHost())
                        ->showVisibleElements()
                        ->showSigners()
                        ->showSettings()
                        ->showMessages()
                        ->showValidateFile()
                        ->toArray();

                $requesterUserId = null;
                $requestedBy = $fileInfo['requested_by'] ?? null;
                if (is_array($requestedBy) && is_string($requestedBy['userId'] ?? null)) {
                        $requestedByUserId = trim($requestedBy['userId']);
                        $requesterUserId = $requestedByUserId !== '' ? $requestedByUserId : null;
                }

                $this->initialState->provideInitialState('effective_policies', [
                        'policies' => $requesterUserId !== null
                                ? $this->policyService->resolveKnownPolicyStatesForUserIdWithoutUserScope($requesterUserId)
                                : $this->policyService->resolveKnownPolicyStates(),
                ]);

                $this->initialState->provideInitialState('file_info', $fileInfo);

                Util::addScript(Application::APP_ID, 'libresign-validation');
                if (class_exists(LoadViewer::class)) {
                        $this->eventDispatcher->dispatchTyped(new LoadViewer());
                }
                $response = new TemplateResponse(Application::APP_ID, 'validation', [], TemplateResponse::RENDER_AS_BASE);

                return $response;
        }

        /**
         * Provide a lightweight placeholder for file_info initial state.
         *
         * The validation page SPA fetches fresh data via the validate API on mount,
         * so the heavy server-side preload is redundant. This method provides only
         * the UUID so the frontend can issue its API call with the correct identifier.
         */
        private function provideDeferredValidationFileInfo(string $uuid): void {
                $this->initialState->provideInitialState('file_info', [
                        'uuid' => $uuid,
                        'name' => '',
                        'files' => [],
                        'filesCount' => 0,
                        'signers' => [],
                        'messages' => [],
                ]);
        }
}

LibreSign / libresign / 29053227110

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous