Changeset 11878

Timestamp:

05/25/2022 03:05:50 AM (3 years ago)

Author:

dd32

Message:

Slack: Announce: Properly handle private channels.

Older slack private channels send their channel_name as 'privategroup', but newer slack channels send their actual name.
To resolve this, we'll check the Slack API to verify the channels metadata.

The /here handler was getting caught on this fine detail, and treating some (but not all!) private groups as public channels.
This is what caused a private channel to broadcast to a public channel, and an incorrect fix was tried via r11875.

Reverts [11875].

File:

• sites/trunk/common/includes/slack/announce/lib.php (modified) (4 diffs)

sites/trunk/common/includes/slack/announce/lib.php

@@ -5 +5 @@
 
 require_once __DIR__ . '/config.php';
+
+function api_call( $method, $content = array() ) {
+    $content['token'] = SLACK_TOKEN;
+    $content = http_build_query( $content );
+    $context = stream_context_create( array(
+        'http' => array(
+        'method'  => 'POST',
+        'header'  => 'Content-Type: application/x-www-form-urlencoded' . PHP_EOL,
+        'content' => $content,
+        ),
+    ) );
+
+    $response = file_get_contents( 'https://slack.com/api/' . $method, false, $context );
+    return json_decode( $response, true );
+}
+
+function get_channel_info( $channel_id ) {
+    $channel_info = api_call(
+        'conversations.info',
+        array(
+            'channel' => $channel_id,
+        )
+    );
+
+    return $channel_info['channel'] ?? false;
+}
 
 function get_whitelist_for_channel( $channel ) {
@@ -129 +155 @@
     global $wpdb;
 
-    $channel = $data['channel_name'];
-    $user = false;
+    /* Respond with a 200 ASAP.
+     * The inline API calls might delay this more than 3s, which will cause Slack to error (or retry).
+     * We don't need to respond with the body until later, but the 200 header must make it back within 3s.
+     */
+    http_response_code( 200 );
+    ignore_user_abort( true );
+    flush();
+
+    $channel           = $data['channel_name'];
+    $channel_id        = $data['channel_id'];
+    $user              = false;
     $slack_profiledata = false;
+    $channel_info      = false;
+
+    // Slack sends the channel_name as 'privategroup' for old private channels, but the actual private channel name for newer private channels.
+    if ( 'privategroup' !== $channel ) {
+        $channel_info = get_channel_info( $channel_id );
+
+        if (
+            $channel_info &&
+            ( channel_info['is_private'] || $channel_info['is_group'] || $channel_info['is_mpim'] )
+        ) {
+            $channel = 'privategroup';
+        }
+    }
 
     // Find the user_login for the Slack user_id
@@ -203 +251 @@
 
     // By sending the channel ID, we can post to private groups.
-    $send->send( $data['channel_id'] );
-
-    // If it was broadcast in a private channel, don't try to broadcast to the public parent channel.
-    if ( 'privategroup' === $channel ) {
-        return;
-    }
+    $send->send( $channel_id );
 
     // Broadcast this message as a non-@here to the "parent" channel too.
@@ -227 +270 @@
     $send->set_text( 'In #' . $channel . ': ' . $text );
     $send->send( '#' . $parent_channel );
-
-}
-
+}
+