public LiveExtensionsTest(DbUnitTestSearchFixture fixture)
{
this.fixture = fixture;
userStatuses = GetService <IUserStatusTracker>(); //DON'T use the fixture! want NEW service every time!
searcher = fixture.GetGenericSearcher();
fixture.ResetDatabase();
}
public LiveController(BaseControllerServices services, ILiveEventQueue eventQueue, IUserStatusTracker userStatuses,
IPermissionService permissionService, IHostApplicationLifetime appLifetime, LiveControllerConfig config,
Func <WebSocketAcceptContext> contextGenerator) : base(services)
{
this.eventQueue = eventQueue;
this.userStatuses = userStatuses;
this.permissionService = permissionService;
this.appLifetime = appLifetime;
this.config = config;
this.acceptContextGenerator = contextGenerator;
}
/// <summary>
/// Get all statuses the given user is allowed to retrieve.
/// </summary>
/// <param name="uid"></param>
/// <returns></returns>
public static async Task <UserlistResult> GetUserStatusesAsync(this IUserStatusTracker userStatuses,
IGenericSearch searcher, long uid, string contentFields = "*", string userFields = "*", params long[] contentIds)
{
//Always allow 0 in there FYI
var allStatuses = await userStatuses.GetUserStatusesAsync(contentIds);
var allIds = allStatuses.Keys.ToList();
//Search content AS THE USER so they only get the content they're allowed to get. Hopefully
//there will never be an instance where there are over a thousand contents currently being watched
var allSearch = await searcher.Search(new SearchRequests()
{
requests = new List <SearchRequest>()
{
new SearchRequest()
{
type = "content",
fields = contentFields,
query = "id in @ids"
},
new SearchRequest()
{
type = "user",
fields = userFields,
query = "id in @content.createUserId or id in @userIds"
}
},
values = new Dictionary <string, object>()
{
{ "ids", allIds },
{ "userIds", allStatuses.SelectMany(x => x.Value.Keys) }
}
}, uid);
//Remove the statuses they can't see, meaning anything that's NOT in the allSearch set
foreach (var id in allIds.Where(x => x != 0).Except(allSearch.objects["content"].Select(x => (long)x["id"])))
{
allStatuses.Remove(id);
}
//Don't leak information: remove users that aren't referenced
var allUsers = allStatuses.SelectMany(x => x.Value.Keys).Union(allSearch.objects["content"].Select(x => (long)x["createUserId"]));
allSearch.objects["user"] = allSearch.objects["user"].Where(x => allUsers.Contains((long)x["id"]));
return(new UserlistResult()
{
statuses = allStatuses,
objects = allSearch.objects
});
}
