squidex/backend/extensions/Squidex.Extensions/Actions/Script/ScriptActionHandler.cs

// ==========================================================================
//  Squidex Headless CMS
// ==========================================================================
//  Copyright (c) Squidex UG (haftungsbeschraenkt)
//  All rights reserved. Licensed under the MIT license.
// ==========================================================================

using System.Security.Claims;
using Squidex.Domain.Apps.Core.HandleRules;
using Squidex.Domain.Apps.Core.Rules.EnrichedEvents;
using Squidex.Domain.Apps.Core.Scripting;
using Squidex.Shared;
using Squidex.Shared.Identity;

#pragma warning disable MA0048 // File name must match type name

namespace Squidex.Extensions.Actions.Script;

public sealed class ScriptActionHandler(RuleEventFormatter formatter, IScriptEngine scriptEngine) : RuleActionHandler<ScriptAction, ScriptJob>(formatter)
{
    protected override Task<(string Description, ScriptJob Data)> CreateJobAsync(EnrichedEvent @event, ScriptAction action)
    {
        var job = new ScriptJob { Script = action.Script, Event = @event };

        return Task.FromResult(($"Run a script", job));
    }

    protected override async Task<Result> ExecuteJobAsync(ScriptJob job,
        CancellationToken ct = default)
    {
        // Script vars are just wrappers over dictionaries for better performance.
        var vars = new EventScriptVars
        {
            Event = job.Event,
            AppId = job.Event.AppId.Id,
            AppName = job.Event.AppId.Name,
        };

        if (job.Event is EnrichedUserEventBase)
        {
            vars.User = AllPrinicpal();
        }

        var result = await scriptEngine.ExecuteAsync(vars, job.Script, ct: ct);

        return Result.Success(result.ToString());
    }

    private static ClaimsPrincipal AllPrinicpal()
    {
        var claimsIdentity = new ClaimsIdentity();
        var claimsPrincipal = new ClaimsPrincipal(claimsIdentity);

        claimsIdentity.AddClaim(new Claim(SquidexClaimTypes.Permissions, PermissionIds.All));

        return claimsPrincipal;
    }
}

public sealed class ScriptJob
{
    public EnrichedEvent Event { get; set; }

    public string Script { get; set; }
}