feat: integrate Bugtracker module, UpdateService enhancements & Token hierarchy

2026-08-06 12:45:58 +02:00
parent 70b35f7b8b
commit d71f90cdfc
28 changed files with 3494 additions and 32 deletions
@@ -0,0 +1,9 @@
+# Bugtracker Protected Management API (.htaccess Security Layer)
+# Allows authenticated API token requests or session-authenticated admin users
+
+Satisfy Any
+Allow from all
+
+<IfModule mod_authz_core.c>
+    Require all granted
+</IfModule>
@@ -0,0 +1,193 @@
+<?php
+
+declare(strict_types=1);
+
+require_once __DIR__ . '/../../../../../src/Core/Auth.php';
+require_once __DIR__ . '/../../../../../src/Core/Db.php';
+require_once __DIR__ . '/../../../../../src/Core/TokenManager.php';
+require_once __DIR__ . '/../../../../../src/Modules/Bugtracker/BugRepo.php';
+
+use Deploymentcenter\Core\Auth;
+use Deploymentcenter\Core\Db;
+use Deploymentcenter\Core\TokenManager;
+use Deploymentcenter\Modules\Bugtracker\BugRepo;
+
+header('Content-Type: application/json; charset=utf-8');
+
+try {
+    $config = require __DIR__ . '/../../../../../config/config.php';
+    $db = Db::connect($config['db']);
+
+    // Authenticate Request (Session OR Token)
+    $isAuthenticated = false;
+    $authorName = 'admin';
+
+    if (Auth::isLoggedIn()) {
+        $isAuthenticated = true;
+        $authorName = $_SESSION['dc_username'] ?? 'admin';
+    } else {
+        $headers = getallheaders();
+        $token = $headers['X-Agent-Token'] ?? $headers['x-agent-token'] ?? null;
+        if (!$token && !empty($headers['Authorization'])) {
+            if (preg_match('/Bearer\s+(.+)/i', $headers['Authorization'], $matches)) {
+                $token = trim($matches[1]);
+            }
+        }
+
+        if ($token) {
+            $tokenMgr = new TokenManager($db);
+            $tokenInfo = $tokenMgr->validateToken($token, 'bugtracker:manage');
+            if ($tokenInfo) {
+                $isAuthenticated = true;
+                $authorName = 'agent:' . ($tokenInfo['name'] ?? $tokenInfo['token_id']);
+            }
+        }
+    }
+
+    if (!$isAuthenticated) {
+        http_response_code(401);
+        echo json_encode(['status' => 'error', 'message' => 'Unauthorized: Valid Session or Bearer Token with scope bugtracker:manage required']);
+        exit;
+    }
+
+    $repo = new BugRepo($db);
+
+    $uri = $_SERVER['REQUEST_URI'];
+    $method = $_SERVER['REQUEST_METHOD'];
+
+    $rawInput = file_get_contents('php://input');
+    $input = json_decode($rawInput, true) ?: $_POST;
+
+    // Parse sub-route if any
+    $path = parse_url($uri, PHP_URL_PATH);
+    $action = $_GET['action'] ?? null;
+
+    // Handle Item Detail/Comment/Resolve via ID in URL or query params
+    $itemId = isset($_GET['id']) ? (int)$_GET['id'] : 0;
+    if (!$itemId && preg_match('/\/manage\/items\/(\d+)/', $path, $m)) {
+        $itemId = (int)$m[1];
+    }
+
+    // Sub-actions
+    if ($action === 'stats' || str_ends_with($path, '/stats')) {
+        echo json_encode(['status' => 'success', 'stats' => $repo->getStats()], JSON_PRETTY_PRINT);
+        exit;
+    }
+
+    if ($action === 'resolve' || str_contains($path, '/resolve')) {
+        if ($method !== 'POST') {
+            http_response_code(405);
+            echo json_encode(['status' => 'error', 'message' => 'POST required for resolve']);
+            exit;
+        }
+
+        if (!$itemId) {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Missing item ID']);
+            exit;
+        }
+
+        $build = !empty($input['resolved_in_build']) ? trim($input['resolved_in_build']) : 'v1.0.0';
+        $notes = !empty($input['resolution_notes']) ? trim($input['resolution_notes']) : null;
+        $author = !empty($input['author']) ? trim($input['author']) : $authorName;
+
+        $ok = $repo->resolveItem($itemId, $build, $notes, $author);
+        if ($ok) {
+            echo json_encode(['status' => 'success', 'message' => "Item #{$itemId} resolved in build {$build}"]);
+        } else {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Failed to resolve item']);
+        }
+        exit;
+    }
+
+    if ($action === 'comment' || str_contains($path, '/comments')) {
+        if ($method !== 'POST') {
+            http_response_code(405);
+            echo json_encode(['status' => 'error', 'message' => 'POST required for comment']);
+            exit;
+        }
+
+        if (!$itemId) {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Missing item ID']);
+            exit;
+        }
+
+        $comment = !empty($input['comment']) ? trim($input['comment']) : '';
+        if (empty($comment)) {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Comment cannot be empty']);
+            exit;
+        }
+
+        $author = !empty($input['author']) ? trim($input['author']) : $authorName;
+        $actionTaken = !empty($input['action_taken']) ? trim($input['action_taken']) : 'commented';
+        $meta = isset($input['meta']) && is_array($input['meta']) ? $input['meta'] : null;
+
+        $comm = $repo->addComment($itemId, $author, $comment, $actionTaken, $meta);
+        echo json_encode(['status' => 'success', 'comment' => $comm]);
+        exit;
+    }
+
+    if ($action === 'status' || str_contains($path, '/status')) {
+        if ($method !== 'POST') {
+            http_response_code(405);
+            echo json_encode(['status' => 'error', 'message' => 'POST required for status change']);
+            exit;
+        }
+
+        if (!$itemId) {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Missing item ID']);
+            exit;
+        }
+
+        $status = !empty($input['status']) ? trim($input['status']) : 'open';
+        $notes = !empty($input['notes']) ? trim($input['notes']) : null;
+        $author = !empty($input['author']) ? trim($input['author']) : $authorName;
+
+        $ok = $repo->updateStatus($itemId, $status, $notes, $author);
+        if ($ok) {
+            echo json_encode(['status' => 'success', 'message' => "Status for #{$itemId} updated to {$status}"]);
+        } else {
+            http_response_code(400);
+            echo json_encode(['status' => 'error', 'message' => 'Invalid status']);
+        }
+        exit;
+    }
+
+    // Detail View of a single item
+    if ($itemId > 0 && $method === 'GET') {
+        $details = $repo->getItemDetails($itemId);
+        if (!$details) {
+            http_response_code(404);
+            echo json_encode(['status' => 'error', 'message' => 'Item not found']);
+            exit;
+        }
+        echo json_encode(['status' => 'success', 'item' => $details], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    // Default: List Items
+    $filters = [
+        'project_slug' => $_GET['project_slug'] ?? $_GET['project'] ?? 'all',
+        'environment'  => $_GET['environment'] ?? $_GET['env'] ?? 'all',
+        'type'         => $_GET['type'] ?? 'all',
+        'status'       => $_GET['status'] ?? 'all',
+        'severity'     => $_GET['severity'] ?? 'all',
+        'search'       => $_GET['search'] ?? $_GET['q'] ?? '',
+    ];
+
+    $items = $repo->getItems($filters);
+    echo json_encode([
+        'status'  => 'success',
+        'count'   => count($items),
+        'filters' => $filters,
+        'items'   => $items,
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
+
+} catch (Throwable $t) {
+    http_response_code(500);
+    echo json_encode(['status' => 'error', 'message' => 'Manage API Error: ' . $t->getMessage()]);
+}
@@ -0,0 +1,82 @@
+<?php
+
+declare(strict_types=1);
+
+require_once __DIR__ . '/../../../../src/Core/Db.php';
+require_once __DIR__ . '/../../../../src/Core/TokenManager.php';
+require_once __DIR__ . '/../../../../src/Modules/Bugtracker/BugRepo.php';
+
+use Deploymentcenter\Core\Db;
+use Deploymentcenter\Core\TokenManager;
+use Deploymentcenter\Modules\Bugtracker\BugRepo;
+
+header('Content-Type: application/json; charset=utf-8');
+
+// Allow CORS for public ingest
+header('Access-Control-Allow-Origin: *');
+header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Agent-Token');
+header('Access-Control-Allow-Methods: POST, OPTIONS');
+
+if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+    http_response_code(200);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    http_response_code(405);
+    echo json_encode(['status' => 'error', 'message' => 'Method Not Allowed']);
+    exit;
+}
+
+$rawInput = file_get_contents('php://input');
+$data = json_decode($rawInput, true) ?: $_POST;
+
+if (empty($data)) {
+    http_response_code(400);
+    echo json_encode(['status' => 'error', 'message' => 'Empty request body or invalid JSON']);
+    exit;
+}
+
+try {
+    $config = require __DIR__ . '/../../../../config/config.php';
+    $db = Db::connect($config['db']);
+
+    // Optional Token Verification (if provided)
+    $headers = getallheaders();
+    $token = $headers['X-Agent-Token'] ?? $headers['x-agent-token'] ?? null;
+    if (!$token && !empty($headers['Authorization'])) {
+        if (preg_match('/Bearer\s+(.+)/i', $headers['Authorization'], $matches)) {
+            $token = trim($matches[1]);
+        }
+    }
+
+    if ($token) {
+        $tokenMgr = new TokenManager($db);
+        $valid = $tokenMgr->validateToken($token, 'bugtracker:report', $data['environment'] ?? null);
+        if (!$valid) {
+            http_response_code(401);
+            echo json_encode(['status' => 'error', 'message' => 'Invalid, revoked or unauthorized Token for bugtracker:report']);
+            exit;
+        }
+    }
+
+    $repo = new BugRepo($db);
+    $result = $repo->reportItem($data);
+
+    echo json_encode([
+        'status'           => 'success',
+        'item_id'          => $result['id'],
+        'is_new'           => $result['is_new'],
+        'occurrence_count' => $result['occurrence_count'],
+        'error_hash'       => $result['error_hash'],
+        'type'             => $result['type'],
+        'environment'      => $result['environment'],
+        'message'          => $result['is_new'] 
+            ? ($result['type'] === 'bug' ? 'New bug reported successfully.' : 'New feature request submitted.') 
+            : 'Recurring bug count updated.',
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
+
+} catch (Throwable $t) {
+    http_response_code(500);
+    echo json_encode(['status' => 'error', 'message' => 'Failed to log report: ' . $t->getMessage()]);
+}