116 lines
3.8 KiB
PHP
116 lines
3.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Actions\SocialAccount;
|
|
|
|
use App\Enums\SocialAccount\Platform;
|
|
use App\Enums\SocialAccount\Status;
|
|
use App\Events\TelegramChannelConnected;
|
|
use App\Features\SocialAccountLimit;
|
|
use App\Models\SocialAccount;
|
|
use App\Models\Workspace;
|
|
use App\Services\Social\Telegram\TelegramApi;
|
|
use Illuminate\Support\Facades\Cache;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Laravel\Pennant\Feature;
|
|
use Throwable;
|
|
|
|
class ConnectTelegramChannel
|
|
{
|
|
/**
|
|
* Link a Telegram chat to a workspace for a one-off connect nonce.
|
|
*
|
|
* @param array<string, mixed> $chat The `chat` object from the Bot API update.
|
|
* @return SocialAccount|null The linked account, or null when blocked (account
|
|
* limit reached or the code was already consumed).
|
|
*/
|
|
public static function execute(Workspace $workspace, array $chat, string $nonce): ?SocialAccount
|
|
{
|
|
$chatId = (string) data_get($chat, 'id');
|
|
$username = data_get($chat, 'username');
|
|
|
|
// Block only brand-new accounts against the plan limit, never reconnects.
|
|
$isNewAccount = ! $workspace->socialAccounts()
|
|
->where('platform', Platform::Telegram->value)
|
|
->where('platform_user_id', $chatId)
|
|
->exists();
|
|
|
|
if ($isNewAccount && self::workspaceAtAccountLimit($workspace)) {
|
|
return null;
|
|
}
|
|
|
|
// Consume the code once so a leaked code can't be replayed to link another chat.
|
|
if (! Cache::add("telegram:connect:{$nonce}", true, now()->addMinutes(15))) {
|
|
return null;
|
|
}
|
|
|
|
$account = $workspace->socialAccounts()->updateOrCreate(
|
|
[
|
|
'platform' => Platform::Telegram->value,
|
|
'platform_user_id' => $chatId,
|
|
],
|
|
[
|
|
'username' => $username,
|
|
'display_name' => data_get($chat, 'title') ?? $username ?? "Telegram {$chatId}",
|
|
'avatar_url' => self::fetchChannelAvatar($chatId),
|
|
'access_token' => '',
|
|
'refresh_token' => '',
|
|
'token_expires_at' => null,
|
|
'scopes' => [],
|
|
'status' => Status::Connected,
|
|
'error_message' => null,
|
|
'disconnected_at' => null,
|
|
'meta' => [
|
|
'chat_id' => $chatId,
|
|
'username' => $username,
|
|
'type' => data_get($chat, 'type'),
|
|
'connect_nonce' => $nonce,
|
|
],
|
|
],
|
|
);
|
|
|
|
TelegramChannelConnected::dispatch($workspace->id, $nonce);
|
|
|
|
return $account;
|
|
}
|
|
|
|
/**
|
|
* Download the channel's photo via the Bot API and store it, returning the path.
|
|
*/
|
|
private static function fetchChannelAvatar(string $chatId): ?string
|
|
{
|
|
if (TelegramApi::token() === '') {
|
|
return null;
|
|
}
|
|
|
|
try {
|
|
$fileId = data_get(Http::get(TelegramApi::endpoint('getChat'), ['chat_id' => $chatId])->json(), 'result.photo.big_file_id');
|
|
|
|
if (! is_string($fileId)) {
|
|
return null;
|
|
}
|
|
|
|
$filePath = data_get(Http::get(TelegramApi::endpoint('getFile'), ['file_id' => $fileId])->json(), 'result.file_path');
|
|
|
|
if (! is_string($filePath)) {
|
|
return null;
|
|
}
|
|
|
|
return uploadFromUrl(TelegramApi::fileUrl($filePath));
|
|
} catch (Throwable) {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
private static function workspaceAtAccountLimit(Workspace $workspace): bool
|
|
{
|
|
if (config('trypost.self_hosted')) {
|
|
return false;
|
|
}
|
|
|
|
$limit = Feature::for($workspace->account)->value(SocialAccountLimit::class);
|
|
|
|
return $workspace->socialAccounts()->count() >= $limit;
|
|
}
|
|
}
|