1 files changed, 261 insertions, 0 deletions
diff --git a/apps/files_sharing/lib/DefaultPublicShareTemplateProvider.php b/apps/files_sharing/lib/DefaultPublicShareTemplateProvider.php
new file mode 100644
index 00000000000..afba45cac4a
--- /dev/null
+++ b/apps/files_sharing/lib/DefaultPublicShareTemplateProvider.php
@@ -0,0 +1,261 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\Files_Sharing;
+
+use OCA\FederatedFileSharing\FederatedShareProvider;
+use OCA\Files_Sharing\AppInfo\Application;
+use OCA\Files_Sharing\Event\BeforeTemplateRenderedEvent;
+use OCA\Viewer\Event\LoadViewer;
+use OCP\Accounts\IAccountManager;
+use OCP\AppFramework\Http\ContentSecurityPolicy;
+use OCP\AppFramework\Http\Template\ExternalShareMenuAction;
+use OCP\AppFramework\Http\Template\LinkMenuAction;
+use OCP\AppFramework\Http\Template\PublicTemplateResponse;
+use OCP\AppFramework\Http\Template\SimpleMenuAction;
+use OCP\AppFramework\Http\TemplateResponse;
+use OCP\AppFramework\Services\IInitialState;
+use OCP\Constants;
+use OCP\Defaults;
+use OCP\EventDispatcher\IEventDispatcher;
+use OCP\Files\File;
+use OCP\IAppConfig;
+use OCP\IConfig;
+use OCP\IL10N;
+use OCP\IPreview;
+use OCP\IRequest;
+use OCP\IURLGenerator;
+use OCP\IUser;
+use OCP\IUserManager;
+use OCP\Share\IPublicShareTemplateProvider;
+use OCP\Share\IShare;
+use OCP\Util;
+
+class DefaultPublicShareTemplateProvider implements IPublicShareTemplateProvider {
+
+	public function __construct(
+		private IUserManager $userManager,
+		private IAccountManager $accountManager,
+		private IPreview $previewManager,
+		protected FederatedShareProvider $federatedShareProvider,
+		private IUrlGenerator $urlGenerator,
+		private IEventDispatcher $eventDispatcher,
+		private IL10N $l10n,
+		private Defaults $defaults,
+		private IConfig $config,
+		private IRequest $request,
+		private IInitialState $initialState,
+		private IAppConfig $appConfig,
+	) {
+	}
+
+	public function shouldRespond(IShare $share): bool {
+		return true;
+	}
+
+	public function renderPage(IShare $share, string $token, string $path): TemplateResponse {
+		$shareNode = $share->getNode();
+		$ownerName = '';
+		$ownerId = '';
+
+		// Only make the share owner public if they allowed to show their name
+		$owner = $this->userManager->get($share->getShareOwner());
+		if ($owner instanceof IUser) {
+			$ownerAccount = $this->accountManager->getAccount($owner);
+
+			$ownerNameProperty = $ownerAccount->getProperty(IAccountManager::PROPERTY_DISPLAYNAME);
+			if ($ownerNameProperty->getScope() === IAccountManager::SCOPE_PUBLISHED) {
+				$ownerId = $owner->getUID();
+				$ownerName = $owner->getDisplayName();
+				$this->initialState->provideInitialState('owner', $ownerId);
+				$this->initialState->provideInitialState('ownerDisplayName', $ownerName);
+			}
+		}
+
+		$view = 'public-share';
+		if ($shareNode instanceof File) {
+			$view = 'public-file-share';
+			$this->initialState->provideInitialState('fileId', $shareNode->getId());
+		} elseif (($share->getPermissions() & Constants::PERMISSION_CREATE)
+			&& !($share->getPermissions() & Constants::PERMISSION_READ)
+		) {
+			// share is a folder with create but no read permissions -> file drop only
+			$view = 'public-file-drop';
+			// Only needed for file drops
+			$this->initialState->provideInitialState(
+				'disclaimer',
+				$this->appConfig->getValueString('core', 'shareapi_public_link_disclaimertext'),
+			);
+			// file drops do not request the root folder so we need to provide label and note if available
+			$this->initialState->provideInitialState('label', $share->getLabel());
+			$this->initialState->provideInitialState('note', $share->getNote());
+		}
+		// Set up initial state
+		$this->initialState->provideInitialState('isPublic', true);
+		$this->initialState->provideInitialState('sharingToken', $token);
+		$this->initialState->provideInitialState('sharePermissions', $share->getPermissions());
+		$this->initialState->provideInitialState('filename', $shareNode->getName());
+		$this->initialState->provideInitialState('view', $view);
+
+		// Load scripts and styles for UI
+		Util::addInitScript('files', 'init');
+		Util::addInitScript(Application::APP_ID, 'init');
+		Util::addInitScript(Application::APP_ID, 'init-public');
+		Util::addScript('files', 'main');
+		Util::addScript(Application::APP_ID, 'public-nickname-handler');
+
+		// Add file-request script if needed
+		$attributes = $share->getAttributes();
+		$isFileRequest = $attributes?->getAttribute('fileRequest', 'enabled') === true;
+		$this->initialState->provideInitialState('isFileRequest', $isFileRequest);
+
+		// Load Viewer scripts
+		if (class_exists(LoadViewer::class)) {
+			$this->eventDispatcher->dispatchTyped(new LoadViewer());
+		}
+
+		// Allow external apps to register their scripts
+		$this->eventDispatcher->dispatchTyped(new BeforeTemplateRenderedEvent($share));
+
+		$this->addMetaHeaders($share);
+
+		// CSP to allow office
+		$csp = new ContentSecurityPolicy();
+		$csp->addAllowedFrameDomain('\'self\'');
+
+		$response = new PublicTemplateResponse(
+			'files',
+			'index',
+		);
+		$response->setContentSecurityPolicy($csp);
+
+		// If the share has a label, use it as the title
+		if ($share->getLabel() !== '') {
+			$response->setHeaderTitle($share->getLabel());
+			$response->setParams(['pageTitle' => $share->getLabel()]);
+		} else {
+			$response->setHeaderTitle($shareNode->getName());
+			$response->setParams(['pageTitle' => $shareNode->getName()]);
+		}
+
+		if ($ownerName !== '') {
+			$response->setHeaderDetails($this->l10n->t('shared by %s', [$ownerName]));
+		}
+
+		// Create the header action menu
+		$headerActions = [];
+		if ($view !== 'public-file-drop' && !$share->getHideDownload()) {
+			// The download URL is used for the "download" header action as well as in some cases for the direct link
+			$downloadUrl = $this->urlGenerator->getAbsoluteURL('/public.php/dav/files/' . $token . '/?accept=zip');
+
+			// If not a file drop, then add the download header action
+			$headerActions[] = new SimpleMenuAction('download', $this->l10n->t('Download'), 'icon-download', $downloadUrl, 0, (string)$shareNode->getSize());
+
+			// If remote sharing is enabled also add the remote share action to the menu
+			if ($this->federatedShareProvider->isOutgoingServer2serverShareEnabled()) {
+				$headerActions[] = new ExternalShareMenuAction(
+					// TRANSLATORS The placeholder refers to the software product name as in 'Add to your Nextcloud'
+					$this->l10n->t('Add to your %s', [$this->defaults->getProductName()]),
+					'icon-external',
+					$ownerId,
+					$ownerName,
+					$shareNode->getName(),
+				);
+			}
+		}
+
+		$shareUrl = $this->urlGenerator->linkToRouteAbsolute('files_sharing.sharecontroller.showShare', ['token' => $token]);
+		// By default use the share link as the direct link
+		$directLink = $shareUrl;
+		// Add the direct link header actions
+		if ($shareNode->getMimePart() === 'image') {
+			// If this is a file and especially an image directly point to the image preview
+			$directLink = $this->urlGenerator->linkToRouteAbsolute('files_sharing.publicpreview.directLink', ['token' => $token]);
+		} elseif (($share->getPermissions() & Constants::PERMISSION_READ) && !$share->getHideDownload()) {
+			// Can read and no download restriction, so just download it
+			$directLink = $downloadUrl ?? $shareUrl;
+		}
+		$headerActions[] = new LinkMenuAction($this->l10n->t('Direct link'), 'icon-public', $directLink);
+		$response->setHeaderActions($headerActions);
+
+		return $response;
+	}
+
+	/**
+	 * Add OpenGraph headers to response for preview
+	 * @param IShare $share The share for which to add the headers
+	 */
+	protected function addMetaHeaders(IShare $share): void {
+		$shareNode = $share->getNode();
+		$token = $share->getToken();
+		$shareUrl = $this->urlGenerator->linkToRouteAbsolute('files_sharing.sharecontroller.showShare', ['token' => $token]);
+
+		// Handle preview generation for OpenGraph
+		$hasImagePreview = false;
+		if ($this->previewManager->isMimeSupported($shareNode->getMimetype())) {
+			// For images we can use direct links
+			if ($shareNode->getMimePart() === 'image') {
+				$hasImagePreview = true;
+				$ogPreview = $this->urlGenerator->linkToRouteAbsolute('files_sharing.publicpreview.directLink', ['token' => $token]);
+				// Whatsapp is kind of picky about their size requirements
+				if ($this->request->isUserAgent(['/^WhatsApp/'])) {
+					$ogPreview = $this->urlGenerator->linkToRouteAbsolute('files_sharing.PublicPreview.getPreview', [
+						'token' => $token,
+						'x' => 256,
+						'y' => 256,
+						'a' => true,
+					]);
+				}
+			} else {
+				// For normal files use preview API
+				$ogPreview = $this->urlGenerator->linkToRouteAbsolute(
+					'files_sharing.PublicPreview.getPreview',
+					[
+						'x' => 256,
+						'y' => 256,
+						'file' => $share->getTarget(),
+						'token' => $token,
+					],
+				);
+			}
+		} else {
+			// No preview supported, so we just add the favicon
+			$ogPreview = $this->urlGenerator->getAbsoluteURL($this->urlGenerator->imagePath('core', 'favicon-fb.png'));
+		}
+
+		$title = $shareNode->getName();
+		$siteName = $this->defaults->getName();
+		$description = $siteName . ($this->defaults->getSlogan() !== '' ? ' - ' . $this->defaults->getSlogan() : '');
+
+		// OpenGraph Support: http://ogp.me/
+		Util::addHeader('meta', ['property' => 'og:title', 'content' => $title]);
+		Util::addHeader('meta', ['property' => 'og:description', 'content' => $description]);
+		Util::addHeader('meta', ['property' => 'og:site_name', 'content' => $siteName]);
+		Util::addHeader('meta', ['property' => 'og:url', 'content' => $shareUrl]);
+		Util::addHeader('meta', ['property' => 'og:type', 'content' => 'website']);
+		Util::addHeader('meta', ['property' => 'og:image', 'content' => $ogPreview]); // recommended to always have the image
+		if ($shareNode->getMimePart() === 'image') {
+			Util::addHeader('meta', ['property' => 'og:image:type', 'content' => $shareNode->getMimeType()]);
+		} elseif ($shareNode->getMimePart() === 'audio') {
+			$audio = $this->urlGenerator->linkToRouteAbsolute('files_sharing.sharecontroller.downloadshare', ['token' => $token]);
+			Util::addHeader('meta', ['property' => 'og:audio', 'content' => $audio]);
+			Util::addHeader('meta', ['property' => 'og:audio:type', 'content' => $shareNode->getMimeType()]);
+		} elseif ($shareNode->getMimePart() === 'video') {
+			$video = $this->urlGenerator->linkToRouteAbsolute('files_sharing.sharecontroller.downloadshare', ['token' => $token]);
+			Util::addHeader('meta', ['property' => 'og:video', 'content' => $video]);
+			Util::addHeader('meta', ['property' => 'og:video:type', 'content' => $shareNode->getMimeType()]);
+		}
+
+
+		// Twitter Support: https://developer.x.com/en/docs/x-for-websites/cards/overview/markup
+		Util::addHeader('meta', ['property' => 'twitter:title', 'content' => $title]);
+		Util::addHeader('meta', ['property' => 'twitter:description', 'content' => $description]);
+		Util::addHeader('meta', ['property' => 'twitter:card', 'content' => $hasImagePreview ? 'summary_large_image' : 'summary']);
+		Util::addHeader('meta', ['property' => 'twitter:image', 'content' => $ogPreview]);
+	}
+}