upstream-rocketchat/apps/meteor/server/services/nps/getAndCreateNpsSurvey.ts

import { Banner } from '@rocket.chat/core-services';
import type { IBanner, BannerPlatform } from '@rocket.chat/core-typings';
import { serverFetch as fetch } from '@rocket.chat/server-fetch';
import type * as UiKit from '@rocket.chat/ui-kit';

import { getWorkspaceAccessToken } from '../../lib/cloud';
import { SystemLogger } from '../../lib/logger/system';
import { settings } from '../../settings';

type NpsSurveyData = {
	id: string;
	platform: BannerPlatform[];
	roles: string[];
	survey: UiKit.BannerView;
	createdAt: Date;
	startAt: Date;
	expireAt: Date;
};

export const getAndCreateNpsSurvey = async function getNpsSurvey(npsId: string) {
	const token = await getWorkspaceAccessToken();
	if (!token) {
		return false;
	}

	const npsEnabled = settings.get('NPS_survey_enabled');

	if (!npsEnabled) {
		return false;
	}

	const npsUrl = settings.get('Nps_Url');

	try {
		const result = await fetch(`${npsUrl}/v1/surveys/${npsId}`, {
			headers: {
				Authorization: `Bearer ${token}`,
			},
			// SECURITY: URL can only be configured by users with enough privileges. It's ok to disable this check here.
			ignoreSsrfValidation: true,
		});

		if (!result.ok) {
			SystemLogger.error({ msg: 'invalid response from the nps service:', result });
			return;
		}

		const surveyData = (await result.json()) as NpsSurveyData;

		const banner: IBanner = {
			_id: npsId,
			platform: surveyData.platform,
			createdAt: new Date(surveyData.createdAt),
			expireAt: new Date(surveyData.expireAt),
			startAt: new Date(surveyData.startAt),
			_updatedAt: new Date(), // Needed by the IRocketChatRecord interface
			roles: surveyData.roles,
			createdBy: {
				_id: 'rocket.cat',
				username: 'rocket.cat',
			},
			view: surveyData.survey,
			surface: 'banner',
		};

		await Banner.create(banner);
	} catch (err) {
		SystemLogger.error({ err });
		return false;
	}
};