upstream-rocketchat/apps/meteor/server/lib/cloud/connectWorkspace.ts

import { serverFetch as fetch } from '@rocket.chat/server-fetch';

import { getRedirectUri } from './getRedirectUri';
import { assertNotOfflineLicense } from './offlineLicense';
import { saveRegistrationData } from './saveRegistrationData';
import { CloudWorkspaceConnectionError } from '../../../lib/errors/CloudWorkspaceConnectionError';
import { settings } from '../../settings';
import { SystemLogger } from '../logger/system';

const fetchRegistrationDataPayload = async ({
	token,
	body,
}: {
	token: string;
	body: {
		email: string;
		client_name: string;
		redirect_uris: string[];
	};
}) => {
	const cloudUrl = settings.get<string>('Cloud_Url');
	const response = await fetch(`${cloudUrl}/api/oauth/clients`, {
		method: 'POST',
		headers: {
			Authorization: `Bearer ${token}`,
		},
		body,
		// SECURITY: the URL is a default hardcoded value or an envvar/setting set by an admin. It's safe to disable this check.
		ignoreSsrfValidation: true,
	});

	if (!response.ok) {
		try {
			const { error } = await response.json();
			throw new CloudWorkspaceConnectionError(`Failed to connect to Rocket.Chat Cloud: ${error}`);
		} catch (error) {
			throw new CloudWorkspaceConnectionError(`Failed to connect to Rocket.Chat Cloud: ${response.statusText}`);
		}
	}

	const payload = await response.json();

	if (!payload) {
		return undefined;
	}

	return payload;
};

export async function connectWorkspace(token: string) {
	assertNotOfflineLicense();

	if (!token) {
		throw new CloudWorkspaceConnectionError('Invalid registration token');
	}

	try {
		const redirectUri = getRedirectUri();

		const body = {
			email: settings.get<string>('Organization_Email'),
			client_name: settings.get<string>('Site_Name'),
			redirect_uris: [redirectUri],
		};

		const payload = await fetchRegistrationDataPayload({ token, body });

		if (!payload) {
			return false;
		}

		await saveRegistrationData(payload);

		return true;
	} catch (err) {
		SystemLogger.error({
			msg: 'Failed to Connect with Rocket.Chat Cloud',
			url: '/api/oauth/clients',
			err,
		});

		return false;
	}
}