1550 platform api receive [WIP]

application/classes/Controller/Api/Apikeys.php

@@ -0,0 +1,18 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi API Keys Controller
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application\Controllers
+ * @copyright  2013 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+class Controller_Api_ApiKeys extends Ushahidi_Rest {
+
+	protected function _scope()
+	{
+		return 'apikeys';
+	}
+}

application/classes/Controller/Api/Webhooks/Posts.php

@@ -0,0 +1,67 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi API External Webhook Posts Controller
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application\Controllers
+ * @copyright  2013 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+use Ushahidi\Core\Tool\Signer;
+
+class Controller_Api_Webhooks_Posts extends Controller_Api_Posts {
+
+	protected function _is_auth_required()
+	{
+		return false;
+	}
+
+	public function checkApiKey($data)
+	{
+		if (isset($data['api_key'])) {
+			// Get api key and compare
+
+			return service('repository.apikey')->apiKeyExists($data['api_key']);
+		}
+
+		return false;
+	}
+
+	public function checkSignature($data)
+	{
+		$signature = $this->request->headers('X-Platform-Signature');
+
+		if (isset($data['webhook_uuid']) && $signature) {
+
+			// Get webhook and validate signature
+			$webhook = service('repository.webhook')->getByUUID($data['webhook_uuid']);
+			$signer = new Signer($webhook->shared_secret);
+			$fullURL = $this->request->url();
+
+			return $signer->validate($signature, $fullURL, $data);
+		}
+		return false;
+	}
+
+	public function before()
+	{
+		parent::before();
+
+		$post = $this->_request_payload;
+
+		if (!$this->checkApiKey($post) || !$this->checkSignature($post))
+		{
+			throw HTTP_Exception::factory(403, 'Forbidden');
+		}
+	}
+
+	public function action_put_index()
+	{
+		$this->_usecase = service('factory.usecase')
+			->get($this->_resource(), 'webhook-update')
+			->setIdentifiers($this->_identifiers())
+			->setPayload($this->_payload());
+	}
+}

application/classes/Ushahidi/Core.php

@@ -230,6 +230,7 @@ public static function init()
 		$di->params['Ushahidi\Factory\ValidatorFactory']['map']['posts'] = [
 			'create' => $di->lazyNew('Ushahidi_Validator_Post_Create'),
 			'update' => $di->lazyNew('Ushahidi_Validator_Post_Create'),
+			'webhook-update' => $di->lazyNew('Ushahidi_Validator_Post_Create'),
 			'import' => $di->lazyNew('Ushahidi_Validator_Post_Import'),
 		];
 		$di->params['Ushahidi\Factory\ValidatorFactory']['map']['tags'] = [
@@ -259,6 +260,10 @@ public static function init()
 			'create' => $di->lazyNew('Ushahidi_Validator_Notification_Create'),
 			'update' => $di->lazyNew('Ushahidi_Validator_Notification_Update'),
 		];
+		$di->params['Ushahidi\Factory\ValidatorFactory']['map']['apikeys'] = [
+			'create' => $di->lazyNew('Ushahidi_Validator_ApiKey_Create'),
+			'update' => $di->lazyNew('Ushahidi_Validator_ApiKey_Update'),
+		];
 		$di->params['Ushahidi\Factory\ValidatorFactory']['map']['webhooks'] = [
 			'create' => $di->lazyNew('Ushahidi_Validator_Webhook_Create'),
 			'update' => $di->lazyNew('Ushahidi_Validator_Webhook_Update'),
@@ -309,7 +314,8 @@ public static function init()
 			'savedsearches_posts'  => $di->lazyNew('Ushahidi_Formatter_Post'),
 			'users'                => $di->lazyNew('Ushahidi_Formatter_User'),
 			'notifications'        => $di->lazyNew('Ushahidi_Formatter_Notification'),
-			'webhooks'              => $di->lazyNew('Ushahidi_Formatter_Webhook'),
+			'webhooks'             => $di->lazyNew('Ushahidi_Formatter_Webhook'),
+			'apikeys'              => $di->lazyNew('Ushahidi_Formatter_Apikey'),
 			'contacts'             => $di->lazyNew('Ushahidi_Formatter_Contact'),
 			'csv'                  => $di->lazyNew('Ushahidi_Formatter_CSV'),
 			'roles'                => $di->lazyNew('Ushahidi_Formatter_Role'),
@@ -336,6 +342,7 @@ public static function init()
 			'set_post',
 			'notification',
 			'webhook',
+			'apikey',
 			'contact',
 			'role',
 			'permission',
@@ -446,6 +453,7 @@ public static function init()
 		$di->set('repository.role', $di->lazyNew('Ushahidi_Repository_Role'));
 		$di->set('repository.notification', $di->lazyNew('Ushahidi_Repository_Notification'));
 		$di->set('repository.webhook', $di->lazyNew('Ushahidi_Repository_Webhook'));
+		$di->set('repository.apikey', $di->lazyNew('Ushahidi_Repository_ApiKey'));
 		$di->set('repository.csv', $di->lazyNew('Ushahidi_Repository_CSV'));
 		$di->set('repository.notification.queue', $di->lazyNew('Ushahidi_Repository_Notification_Queue'));
 		$di->set('repository.webhook.job', $di->lazyNew('Ushahidi_Repository_Webhook_Job'));
@@ -572,7 +580,8 @@ public static function init()
 			'user_repo' => $di->lazyGet('repository.user'),
 			'collection_repo' => $di->lazyGet('repository.set'),
 			'savedsearch_repo' => $di->lazyGet('repository.savedsearch'),
-		];$di->params['Ushahidi_Validator_Webhook_Update'] = [
+		];
+		$di->params['Ushahidi_Validator_Webhook_Update'] = [
 			'user_repo' => $di->lazyGet('repository.user'),
 		];
 		$di->params['Ushahidi_Validator_SavedSearch_Create'] = [

application/classes/Ushahidi/Formatter/Apikey.php

@@ -0,0 +1,17 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi API Formatter for Api Keys
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application
+ * @copyright  2014 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+use Ushahidi\Core\Traits\FormatterAuthorizerMetadata;
+
+class Ushahidi_Formatter_Apikey extends Ushahidi_Formatter_API
+{
+	use FormatterAuthorizerMetadata;
+}

application/classes/Ushahidi/Listener/PostListener.php

@@ -33,11 +33,13 @@ public function setWebhookRepo(WebhookRepository $webhook_repo)
 		$this->webhook_repo = $webhook_repo;
 	}
 
-  public function handle(EventInterface $event, $post_id = null, $event_type = null)
+  public function handle(EventInterface $event, $post_id = null, $event_type = null, $source_field = null, $destination_field = null)
   {
 		$state = [
 			'post_id' => $post_id,
-			'event_type' => $event_type
+			'event_type' => $event_type,
+			'source_field' => $source_field,
+			'destination_field' => $destination_field
 		];
 
 		$entity = $this->repo->getEntity();

application/classes/Ushahidi/Repository/ApiKey.php

@@ -0,0 +1,88 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi ApiKey Repository
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application
+ * @copyright  2014 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+use Ushahidi\Core\Entity;
+use Ushahidi\Core\SearchData;
+use Ushahidi\Core\Entity\ApiKey;
+use Ushahidi\Core\Entity\ApiKeyRepository;
+use Ushahidi\Core\Traits\AdminAccess;
+
+use Ramsey\Uuid\Uuid;
+use Ramsey\Uuid\Exception\UnsatisfiedDependencyException;
+
+class Ushahidi_Repository_ApiKey extends Ushahidi_Repository implements ApiKeyRepository
+{
+	use AdminAccess;
+
+	protected function getTable()
+	{
+		return 'apikeys';
+	}
+
+	public function getEntity(Array $data = null)
+	{
+		return new ApiKey($data);
+	}
+
+	// Ushahidi_Repository
+	public function setSearchConditions(SearchData $search)
+	{
+		$query = $this->search_query;
+
+		return $query;
+	}
+
+	// CreateRepository
+	public function create(Entity $entity)
+	{
+
+		$record = $entity->asArray();
+		try {
+			$uuid = Uuid::uuid4();
+			$record['api_key'] = $uuid->toString();
+		} catch (UnsatisfiedDependencyException $e) {
+			Kohana::$log->add(Log::ERROR, $e->getMessage());
+		}
+
+		$state = [
+			'created' => time(),
+		];
+
+		return $this->executeInsert($this->removeNullValues($record));
+	}
+
+	// UpdateRepository
+	public function update(Entity $entity)
+	{
+
+		$record = $entity->asArray();
+		$record['updated'] = time();
+		try {
+			$uuid = Uuid::uuid4();
+			$record['api_key'] = $uuid->toString();
+		} catch (UnsatisfiedDependencyException $e) {
+			Kohana::$log->add(Log::ERROR, $e->getMessage());
+		}
+
+		return $this->executeUpdate(['id' => $entity->id], $record);
+	}
+
+	public function apiKeyExists($api_key)
+	{
+		return (bool) $this->selectCount(compact('api_key'));
+	}
+
+	public function getSearchFields()
+	{
+		return [
+		];
+	}
+}

application/classes/Ushahidi/Repository/Webhook.php

@@ -16,6 +16,9 @@
 use Ushahidi\Core\Traits\UserContext;
 use Ushahidi\Core\Traits\AdminAccess;
 
+use Ramsey\Uuid\Uuid;
+use Ramsey\Uuid\Exception\UnsatisfiedDependencyException;
+
 class Ushahidi_Repository_Webhook extends Ushahidi_Repository implements WebhookRepository
 {
 	use UserContext;
@@ -68,6 +71,11 @@ public function getByEventType($event_type= null)
 		return $this->getEntity($this->selectOne(compact('event_type')));
 	}
 
+	public function getByUUID($webhook_uuid= null)
+	{
+		return $this->getEntity($this->selectOne(compact('webhook_uuid')));
+	}
+
 	// CreateRepository
 	public function create(Entity $entity)
 	{
@@ -79,8 +87,16 @@ public function create(Entity $entity)
 			return $id;
 		}
 
+		try {
+			$uuid = Uuid::uuid4();
+			$uuid = $uuid->toString();
+		} catch (UnsatisfiedDependencyException $e) {
+			Kohana::$log->add(Log::ERROR, $e->getMessage());
+		}
+
 		$state = [
 			'user_id' => $entity->user_id,
+			'webhook_uuid' => $uuid,
 			'created' => time(),
 		];
 

application/classes/Ushahidi/Validator/ApiKey/Create.php

@@ -0,0 +1,15 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi ApiKey Validator
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application
+ * @copyright  2014 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+class Ushahidi_Validator_ApiKey_Create extends Ushahidi_Validator_ApiKey_Update
+{
+
+}

application/classes/Ushahidi/Validator/ApiKey/Update.php

@@ -0,0 +1,24 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+
+/**
+ * Ushahidi ApiKey Validator
+ *
+ * @author     Ushahidi Team <team@ushahidi.com>
+ * @package    Ushahidi\Application
+ * @copyright  2014 Ushahidi
+ * @license    https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License Version 3 (AGPL3)
+ */
+
+use Ushahidi\Core\Tool\Validator;
+
+class Ushahidi_Validator_ApiKey_Update extends Validator
+{
+	protected $default_error_source = 'apikey';
+
+	protected function getRules()
+	{
+		return [
+
+		];
+	}
+}

application/routes/default.php

@@ -267,6 +267,18 @@
 		'directory'  => 'Api'
 	));
 
+	/**
+	 * Dataproviders API Route
+	 */
+	Route::set('inbound-webhook-api', $apiBase . 'webhooks/<controller>/(<id>)',
+		array(
+			'id' => '\d+'
+		))
+		->defaults(array(
+			'action'     => 'index',
+			'directory'  => 'Api/Webhooks/'
+		));
+
 /**
  * Migration migrate Route
  */