V15: Notification Hub

Directory.Build.props

@@ -25,8 +25,8 @@
       TODO: Fix and remove overrides:
       [NU5104] Warning As Error: A stable release of a package should not have a prerelease dependency. Either modify the version spec of dependency
     -->
-    <NoWarn>$(NoWarn),NU5104</NoWarn>
-    <WarningsNotAsErrors>$(WarningsNotAsErrors),NU5104</WarningsNotAsErrors>
+    <NoWarn>$(NoWarn),NU5104,SA1309</NoWarn>
+    <WarningsNotAsErrors>$(WarningsNotAsErrors),NU5104,SA1600</WarningsNotAsErrors>
   </PropertyGroup>
 
   <!-- SourceLink -->

src/Umbraco.Cms.Api.Management/DependencyInjection/ServerEventExtensions.cs

@@ -0,0 +1,105 @@
+using System.Text.Json.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Umbraco.Cms.Api.Management.ServerEvents;
+using Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+using Umbraco.Cms.Core.DependencyInjection;
+using Umbraco.Cms.Core.Notifications;
+using Umbraco.Cms.Core.ServerEvents;
+
+namespace Umbraco.Cms.Api.Management.DependencyInjection;
+
+internal static class ServerEventExtensions
+{
+    internal static IUmbracoBuilder AddServerEvents(this IUmbracoBuilder builder)
+    {
+        builder.Services.AddSingleton<IUserConnectionManager, UserConnectionManager>();
+        builder.Services.AddSingleton<IServerEventRouter, ServerEventRouter>();
+        builder.Services.AddSingleton<IServerEventUserManager, ServerEventUserManager>();
+        builder.AddNotificationAsyncHandler<UserSavedNotification, UserConnectionRefresher>();
+
+        builder
+            .AddEvents()
+            .AddAuthorizers();
+
+        return builder;
+    }
+
+    private static IUmbracoBuilder AddEvents(this IUmbracoBuilder builder)
+    {
+        builder.AddNotificationAsyncHandler<ContentSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<ContentTypeSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MediaSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MediaTypeSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberTypeSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberGroupSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DataTypeSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<LanguageSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<ScriptSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<StylesheetSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<TemplateSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DictionaryItemSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DomainSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<PartialViewSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<PublicAccessEntrySavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<RelationSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<RelationTypeSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<UserGroupSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<UserSavedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<WebhookSavedNotification, ServerEventSender>();
+
+        builder.AddNotificationAsyncHandler<ContentDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<ContentTypeDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MediaDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MediaTypeDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberTypeDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MemberGroupDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DataTypeDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<LanguageDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<ScriptDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<StylesheetDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<TemplateDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DictionaryItemDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<DomainDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<PartialViewDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<PublicAccessEntryDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<RelationDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<RelationTypeDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<UserGroupDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<UserDeletedNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<WebhookDeletedNotification, ServerEventSender>();
+
+        builder.AddNotificationAsyncHandler<ContentMovedToRecycleBinNotification, ServerEventSender>();
+        builder.AddNotificationAsyncHandler<MediaMovedToRecycleBinNotification, ServerEventSender>();
+
+        return builder;
+    }
+
+    private static IUmbracoBuilder AddAuthorizers(this IUmbracoBuilder builder)
+    {
+        builder.EventSourceAuthorizers()
+            .Append<DocumentEventAuthorizer>()
+            .Append<DocumentTypeEventAuthorizer>()
+            .Append<MediaEventAuthorizer>()
+            .Append<MediaTypeEventAuthorizer>()
+            .Append<MemberEventAuthorizer>()
+            .Append<MemberGroupEventAuthorizer>()
+            .Append<MemberTypeEventAuthorizer>()
+            .Append<DataTypeEventAuthorizer>()
+            .Append<LanguageEventAuthorizer>()
+            .Append<ScriptEventAuthorizer>()
+            .Append<StylesheetEventAuthorizer>()
+            .Append<TemplateEventAuthorizer>()
+            .Append<DictionaryItemEventAuthorizer>()
+            .Append<DomainEventAuthorizer>()
+            .Append<PartialViewEventAuthorizer>()
+            .Append<PublicAccessEntryEventAuthorizer>()
+            .Append<RelationEventAuthorizer>()
+            .Append<RelationTypeEventAuthorizer>()
+            .Append<UserGroupEventAuthorizer>()
+            .Append<UserEventAuthorizer>()
+            .Append<WebhookEventAuthorizer>();
+        return builder;
+    }
+}

src/Umbraco.Cms.Api.Management/DependencyInjection/UmbracoBuilderExtensions.cs

@@ -66,6 +66,7 @@
                 .AddCorsPolicy()
                 .AddWebhooks()
                 .AddPreview()
+                .AddServerEvents()
                 .AddPasswordConfiguration()
                 .AddSupplemenataryLocalizedTextFileSources()
                 .AddUserData()

src/Umbraco.Cms.Api.Management/Factories/DataTypePresentationFactory.cs

@@ -44,14 +44,16 @@ public async Task<Attempt<IDataType, DataTypeOperationStatus>> CreateAsync(Creat
             return Attempt.FailWithStatus<IDataType, DataTypeOperationStatus>(parentAttempt.Status, new DataType(new VoidEditor(_dataValueEditorFactory), _configurationEditorJsonSerializer));
         }
 
+        var createDate = DateTime.Now;
         var dataType = new DataType(editor, _configurationEditorJsonSerializer)
         {
             Name = requestModel.Name,
             EditorUiAlias = requestModel.EditorUiAlias,
             DatabaseType = GetEditorValueStorageType(editor),
             ConfigurationData = MapConfigurationData(requestModel, editor),
             ParentId = parentAttempt.Result,
-            CreateDate = DateTime.Now,
+            CreateDate = createDate,
+            UpdateDate = createDate,
         };
 
         if (requestModel.Id.HasValue)

src/Umbraco.Cms.Api.Management/Routing/BackOfficeAreaRoutes.cs

@@ -3,6 +3,7 @@
 using Microsoft.AspNetCore.Routing;
 using Microsoft.Extensions.Options;
 using Umbraco.Cms.Api.Management.Controllers.Security;
+using Umbraco.Cms.Api.Management.ServerEvents;
 using Umbraco.Cms.Core;
 using Umbraco.Cms.Core.Configuration.Models;
 using Umbraco.Cms.Core.Hosting;
@@ -54,6 +55,7 @@ public void CreateRoutes(IEndpointRouteBuilder endpoints)
             case RuntimeLevel.Run:
                 MapMinimalBackOffice(endpoints);
                 endpoints.MapHub<BackofficeHub>(_umbracoPathSegment + Constants.Web.BackofficeSignalRHub);
+                endpoints.MapHub<ServerEventHub>(_umbracoPathSegment + Constants.Web.ServerEventSignalRHub);
                 break;
             case RuntimeLevel.BootFailed:
             case RuntimeLevel.Unknown:

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/DataTypeEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class DataTypeEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public DataTypeEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.DataType];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDataTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/DictionaryItemEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class DictionaryItemEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public DictionaryItemEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.DictionaryItem];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDictionary;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/DocumentEventAuthorizer.cs

@@ -0,0 +1,17 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class DocumentEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public DocumentEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Document];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDocuments;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/DocumentTypeEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class DocumentTypeEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public DocumentTypeEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.DocumentType];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDocumentTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/DomainEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class DomainEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public DomainEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Domain];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDocuments;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/LanguageEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class LanguageEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public LanguageEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Language];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessLanguages;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/MediaEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class MediaEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public MediaEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Media];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessMediaOrMediaTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/MediaTypeEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class MediaTypeEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public MediaTypeEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.MediaType];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessMediaTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/MemberEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class MemberEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public MemberEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Member];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessMembersOrMemberTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/MemberGroupEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class MemberGroupEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public MemberGroupEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.MemberGroup];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessMemberGroups;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/MemberTypeEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class MemberTypeEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public MemberTypeEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.MemberType];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessMemberTypes;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/PartialViewEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class PartialViewEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public PartialViewEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.PartialView];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessPartialViews;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/PublicAccessEntryEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class PublicAccessEntryEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public PublicAccessEntryEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.PublicAccessEntry];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDocuments;
+}

src/Umbraco.Cms.Api.Management/ServerEvents/Authorizers/RelationEventAuthorizer.cs

@@ -0,0 +1,16 @@
+using Microsoft.AspNetCore.Authorization;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Web.Common.Authorization;
+
+namespace Umbraco.Cms.Api.Management.ServerEvents.Authorizers;
+
+public class RelationEventAuthorizer : EventSourcePolicyAuthorizer
+{
+    public RelationEventAuthorizer(IAuthorizationService authorizationService) : base(authorizationService)
+    {
+    }
+
+    public override IEnumerable<string> AuthorizedEventSources => [Constants.ServerEvents.EventSource.Relation];
+
+    protected override string Policy => AuthorizationPolicies.TreeAccessDocuments;
+}