Suggest Features
+
+
Suggest Features
-
{% for suggestion in suggestions %}
-
-
-
- {{ suggestion.title }} -
-- Description: {{ suggestion.description }} -
-- User:{{ suggestion.user }} -
-{{ suggestion.suggestion_id }}
-- - - - +- +
{% endfor %}{{ suggestion.title }}
+++ +{{ suggestion.description }}
+{{ suggestion.suggestion_id }}
-Suggest us Features
- - +
Suggest us Features
setvote(); }; - function setvote(){ + function setvote() { document.querySelectorAll('p[id^="suggestion-id-"]').forEach(function(element) { const id = element.id.split('---')[1]; const upvoteBtn = document.getElementById(`upvote---${id}`); const downvoteBtn = document.getElementById(`downvote---${id}`); + fetch('/suggestion/set-vote-status/', { - method:'POST', - headers:{ - 'Content-Type' : 'application/json', + method: 'POST', + headers: { + 'Content-Type': 'application/json', 'X-CSRFToken': getCookie('csrftoken'), }, - body : JSON.stringify({id:id}), + body: JSON.stringify({id: id}), }) - .then(response=>response.json()) - .then(data=>{ - if(data.up_vote){ + .then(response => response.json()) + .then(data => { + if(data.up_vote) { upvoteBtn.classList.add('active'); - } - else if(data.down_vote){ + } else if(data.down_vote) { downvoteBtn.classList.add('active'); } - }); + }) + .catch(error => console.error('Error:', error)); }); } - function upvote(event) { - const button = event.target; - const id = button.id.split('---')[1]; - - const upvoteBtn = document.getElementById(`upvote---${id}`); - const downvoteBtn = document.getElementById(`downvote---${id}`); - const upvotesLabel = document.getElementById(`up_vote-${id}`); - const downvotesLabel = document.getElementById(`down_vote-${id}`); - - if (!upvoteBtn || !downvoteBtn || !upvotesLabel || !downvotesLabel) { - console.error('Element not found for id:', id); - return; - } - - let Up_Vote; - let Down_Vote; - - if (upvoteBtn.classList.contains('active')) { - upvotesLabel.innerHTML = parseInt(upvotesLabel.innerHTML) - 1; - upvoteBtn.classList.remove('active'); - Up_Vote=false; - } - else { - upvotesLabel.innerHTML = parseInt(upvotesLabel.innerHTML) + 1; - upvoteBtn.classList.add('active'); - Up_Vote = true; - - if (downvoteBtn.classList.contains('active')) { - downvoteBtn.classList.remove('active'); - downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) - 1; - Down_Vote = false; - } - } - fetch('/suggestion/vote/', { - method: 'POST', - headers: { - 'Content-Type': 'application/json', - 'X-CSRFToken': getCookie('csrftoken'), - }, - body: JSON.stringify({ suggestion_id: id, up_vote: Up_Vote, down_vote: Down_Vote }), - }) - .then(response => response.json()) - .then(data => { - console.log('Vote saved:', data.votes); - }) - .catch(error => { - console.error('Error:', error); - }); + handleVote(event, true); } function downvote(event) { - const button = event.target; - const id = button.id.split('---')[1]; + handleVote(event, false); + } + function handleVote(event, isUpvote) { + const button = event.target.closest('button'); + const id = button.id.split('---')[1]; + const upvoteBtn = document.getElementById(`upvote---${id}`); const downvoteBtn = document.getElementById(`downvote---${id}`); const upvotesLabel = document.getElementById(`up_vote-${id}`); @@ -252,23 +287,36 @@Suggest us Features
return; } - let Up_Vote; - let Down_Vote; + let upVote = false; + let downVote = false; - if (downvoteBtn.classList.contains('active')) { - downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) - 1; - downvoteBtn.classList.remove('active'); - Down_Vote = false; - } - else { - downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) + 1; - downvoteBtn.classList.add('active'); - Down_Vote = true; - + if (isUpvote) { if (upvoteBtn.classList.contains('active')) { - upvoteBtn.classList.remove('active'); upvotesLabel.innerHTML = parseInt(upvotesLabel.innerHTML) - 1; - Up_Vote = false; + upvoteBtn.classList.remove('active'); + } else { + upvotesLabel.innerHTML = parseInt(upvotesLabel.innerHTML) + 1; + upvoteBtn.classList.add('active'); + upVote = true; + + if (downvoteBtn.classList.contains('active')) { + downvoteBtn.classList.remove('active'); + downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) - 1; + } + } + } else { + if (downvoteBtn.classList.contains('active')) { + downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) - 1; + downvoteBtn.classList.remove('active'); + } else { + downvotesLabel.innerHTML = parseInt(downvotesLabel.innerHTML) + 1; + downvoteBtn.classList.add('active'); + downVote = true; + + if (upvoteBtn.classList.contains('active')) { + upvoteBtn.classList.remove('active'); + upvotesLabel.innerHTML = parseInt(upvotesLabel.innerHTML) - 1; + } } } @@ -276,35 +324,25 @@Suggest us Features
method: 'POST', headers: { 'Content-Type': 'application/json', - 'X-CSRFToken': getCookie('csrftoken'), // Fetch CSRF token from cookies + 'X-CSRFToken': getCookie('csrftoken'), }, - body: JSON.stringify({ suggestion_id: id, up_vote: Up_Vote, down_vote: Down_Vote }), + body: JSON.stringify({ + suggestion_id: id, + up_vote: upVote, + down_vote: downVote + }), }) .then(response => response.json()) - .then(data => { - console.log('Vote saved:', data.votes); - }) - .catch(error => { - console.error('Error:', error); - }); + .then(data => console.log('Vote saved:', data.votes)) + .catch(error => console.error('Error:', error)); } function getCookie(name) { - let cookieValue = null; - if (document.cookie && document.cookie !== '') { - const cookies = document.cookie.split(';'); - for (let i = 0; i < cookies.length; i++) { - const cookie = cookies[i].trim(); - if (cookie.startsWith(name + '=')) { - cookieValue = decodeURIComponent(cookie.substring(name.length + 1)); - break; - } - } - } - return cookieValue; + const value = `; ${document.cookie}`; + const parts = value.split(`; ${name}=`); + if (parts.length === 2) return parts.pop().split(';').shift(); } - function Savefeature() { const form = document.getElementById("suggestionForm"); const formData = new FormData(form); @@ -312,7 +350,7 @@Suggest us Features
const description = formData.get('description'); if (!title) { - alert('Please fill all the required fields.'); + alert('Please enter a title for your suggestion.'); return; } @@ -322,19 +360,21 @@Suggest us Features
'X-CSRFToken': formData.get('csrfmiddlewaretoken'), 'Content-Type': 'application/json' }, - body: JSON.stringify({title: title,description: description}), + body: JSON.stringify({ + title: title, + description: description + }), }) .then(response => response.json()) .then(data => { if (data.status === 'success') { form.reset(); + location.reload(); } else { - alert('Error: Please fill all the fields.'); + alert('Error: Please fill all required fields.'); } }) - .catch((error) => { - console.error('Error:', error); - }); + .catch(error => console.error('Error:', error)); } {% endblock content %} diff --git a/website/templates/includes/header.html b/website/templates/includes/header.html index 86e57dcd1..5752c4012 100644 --- a/website/templates/includes/header.html +++ b/website/templates/includes/header.html @@ -149,9 +149,11 @@ action="{% url 'search' %}" method="get"> +
@@ -159,7 +161,7 @@
@@ -177,11 +179,31 @@
class="filter-option flex items-center px-3 py-2 hover:bg-gray-100 text-sm">
{% trans "Projects" %}
+
+ {% trans "Repos" %}
+
{% trans "Users" %}
+
+ {% trans "Issues" %}
+
+
+ {% trans "Domains" %}
+
+
+ {% trans "Labels" %}
+
@@ -345,9 +367,37 @@
Chat with BLT Bot
+{% endblock %} +{% block extra_js %} + +{% endblock %} diff --git a/website/templates/search.html b/website/templates/search.html index be1851f28..9b3169e5a 100644 --- a/website/templates/search.html +++ b/website/templates/search.html @@ -19,15 +19,36 @@ {% load humanize %} {% block content %} -
+
- - {% if type %} - - {% endif %}
{% if query %}
-
- Search Results for"{{ query }}" + Search Results for {{ query }}
- - {% if type %} - - {% endif %}
+
{% if issues %}
-
- {% for activity in issues %}
- {% include "_activity.html" %}
- {% endfor %}
+
+
- {% elif domains %}
-
+
+
+
+
+ Issues
+
+ {% for activity in issues %}
+ {% include "_activity.html" %}
+ {% endfor %}
+
+
-
- {% for domain in domains %}
-
+ {% endif %}
+ {% if domains %}
+
+
+
- {% elif users %}
-
+
+
Domains
+
+ {% for domain in domains %}
+
- {% endfor %}
+
+
+ {% endfor %}
+ {% if domain.logo %}
+ 
+ {% else %}
+
+
+ N/A
+
+ {% endif %}
+
+
+ + {{ domain.name }} +
+ {% if domain.hostname_domain %}{{ domain.hostname_domain }}
{% endif %} +
+ {% if domain.webshot %}
+
+ 
+
+ {% endif %}
+
+
+
+ {% if domain.managers.exists %}
+
+
+ Clicks: {{ domain.clicks|default:"0" }}
+
+
+
+ Open Issues: {{ domain.open_issues.count }}
+
+
+
+ Closed Issues: {{ domain.closed_issues.count }}
+
+
+ Managers:
+
+ {% endif %}
+
+ {% for manager in domain.managers.all %}
+
+ {{ manager.get_full_name|default:manager.username }}
+
+ {% endfor %}
+
+
+ {% if domain.twitter %}
+
+
+ Twitter
+
+ {% endif %}
+ {% if domain.facebook %}
+
+
+ Facebook
+
+ {% endif %}
+ {% if domain.github %}
+
+
+ GitHub
+
+ {% endif %}
+
+ {% if domain.tags.exists %}
+
+ {% for tag in domain.tags.all %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+ {% endif %}
+ {% if domain.top_tester %}
+
+
+ Top Tester: {{ domain.top_tester.get_full_name|default:domain.top_tester.username }}
+
+ {% endif %}
+
+
+
+ Domain Color:
+
+
+
-
+
+ {% endif %}
+ {% if users %}
+
+
+
Users
+
{% for user in users %}
-
+ {% endif %}
+ {% if organizations %}
+
-
+
- {% if user.user.userprofile.avatar %}
- 
- {% elif user.user.socialaccount_set.all.0.get_avatar_url %}
- 
+
+
+ {% if user.user.userprofile.user_avatar %}
+ 
+ {% elif user.user.socialaccount_set.all.0.get_avatar_url %}
+
+ {% else %}
+ 
+ {% endif %}
+
+ {% endfor %}
+
+ {% endif %}
+
+
+ + {{ user.user.username }} + {{ user.get_title_display }} +
+
+
+ + + Role: + {{ user.role|default:"Not specified" }} +
++ + Points: + {{ user.total_score }} +
+ {% if user.team %} ++ + Team: + {{ user.team }} +
+ {% endif %} +
+ {% if user.linkedin_url %}
+
+
+ LinkedIn
+
+ {% endif %}
+ {% if user.github_url %}
+
+
+ GitHub
+
+ {% endif %}
+ {% if user.website_url %}
+
+
+ Website
+
+ {% endif %}
+
+
+ {% for badge in user.badges %}
+
+
+ 
+ {{ badge.badge.title }}
+
+ {% endfor %}
+
+ {% for tag in user.tags.all %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+
+
+ {% endif %}
+ {% if projects %}
+
+
+ Organizations
+
+ {% for organization in organizations %}
+
+
+
+ {% endfor %}
+
+ {% if organization.logo %}
+ 
+ {% else %}
+
+
+ No Logo
+
+ {% endif %}
+
+
+ + {{ organization.name }} +
+ {% if organization.description %} +{{ organization.description|truncatechars:150 }}
+ {% endif %} +
+ {% if organization.email %}
+
+
+ {{ organization.email }}
+
+ {% endif %}
+ {% if organization.url %}
+
+
+ {{ organization.url }}
+
+ {% endif %}
+ {% if organization.twitter %}
+
+
+
+ {% endif %}
+ {% if organization.facebook %}
+
+
+
+ {% endif %}
+
+
+
+ {% if organization.tags.all %}
+
+ Type: {{ organization.get_type_display }}
+
+
+ Team Points: {{ organization.team_points }}
+
+
+
+ + {% if organization.is_active %} + Active + {% else %} + Inactive + {% endif %} +
+
+ {% for tag in organization.tags.all %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+ {% endif %}
+
+
+
+ {% endif %}
+ {% if tags %}
+ Projects
+
+ {% for project in projects %}
+
+
+
+
+ {% if project.logo %}
+
{% else %}
-
+
-
+
+ No Logo
+
{% endif %}
- {{ user.user.username }}
+
+
+ {{ project.name }} +
+ {% if project.description %} +{{ project.description|truncatechars:150 }}
+ {% endif %} +
+ {% if project.url %}
+
+
+ {{ project.url }}
+
+ {% endif %}
+ {% if project.twitter %}
+
+
+
+ {% endif %}
+ {% if project.facebook %}
+
+
+
+ {% endif %}
+
+
-
- {% if user.total_score is None %}
- 0 Point
+
+ {% endfor %}
+
+ {% if project.organization %}
+ {% if project.organization.logo %}
+
+ {% endif %}
+
+ + Organization: + {{ project.organization.name }} +
+ {% else %} ++ Organization: Not Assigned +
+ {% endif %} +
+
+ {% if project.tags.all %}
+
+ Visits: {{ project.project_visit_count }}
+
+
+ Created: {{ project.created|date:"F j, Y" }}
+
+
+ Modified: {{ project.modified|date:"F j, Y" }}
+
+
+ {% for tag in project.tags.all %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+ {% endif %}
+
+
+ {% endif %}
+ {% if repos %}
+
+
+ Tags
+
+
+ {% if matching_organizations %}
+ + Tags +
+
+ {% for tag in tags %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+
+
+ {% endif %}
+ {% if matching_domains %}
+ + Matching Organizations +
+
+ {% for org in matching_organizations %}
+
+
+ {% if org.logo %}
+ 
+ {% endif %}
+ {{ org.name }}
+
+ {% endfor %}
+
+
+ {% endif %}
+ {% if matching_issues %}
+ + Matching Domains +
+
+ {% for domain in matching_domains %}
+
+
+ {% if domain.logo %}
+
+ {% endif %}
+ {{ domain.name }}
+
+ {% endfor %}
+
+
+ {% endif %}
+ {% if matching_user_profiles %}
+ + Matching Issues +
+
+ {% for issue in matching_issues %}
+
+
+ {% if issue.logo %}
+ 
+ {% endif %}
+ {{ issue.description }}
+
+ {% endfor %}
+
+
+ {% endif %}
+ {% if matching_repos %}
+ + Matching User Profiles +
+
+ {% for profile in matching_user_profiles %}
+
+ {% endfor %}
+
+ 
+ {% endif %}
+
+
+ {% endif %}
+ + Matching Repositories +
+
+ {% for repo in matching_repos %}
+
+
+ {{ repo.name }}
+
+ {% endfor %}
+
+
+ {% endif %}
{% endif %}
{% endblock content %}
diff --git a/website/test_slack.py b/website/test_slack.py
index 5b4dfe8c1..acc577a1d 100644
--- a/website/test_slack.py
+++ b/website/test_slack.py
@@ -1,89 +1,126 @@
+import json
from unittest.mock import MagicMock, patch
from django.test import TestCase
-from website.views.slack_handlers import (
- _handle_contribute_message,
- _handle_team_join,
- extract_text_from_blocks,
- handle_message,
-)
+from website.models import Integration, Organization, SlackIntegration
+from website.views.slack_handlers import slack_commands, slack_events
-class SlackFunctionTests(TestCase):
+class SlackHandlerTests(TestCase):
def setUp(self):
- self.mock_client = MagicMock()
-
- def test_extract_text_from_blocks(self):
- """Test extracting text from Slack block format"""
- # Test rich text blocks
- blocks = [
- {
- "type": "rich_text",
- "elements": [
- {
- "type": "rich_text_section",
- "elements": [{"type": "text", "text": "I want to contribute"}],
- }
- ],
- }
- ]
-
- self.assertEqual(extract_text_from_blocks(blocks), "I want to contribute")
-
- # Test empty blocks
- self.assertEqual(extract_text_from_blocks([]), "")
-
- # Test invalid blocks
- self.assertEqual(extract_text_from_blocks(None), "")
-
- @patch("website.views.slack_handlers.client")
- def test_handle_contribute_message(self, mock_client):
- """Test contribute message handler"""
- message = {
- "user": "U123",
- "channel": "C123",
- "text": "How do I contribute?",
- "subtype": None,
+ # Create test organization and integration
+ self.organization = Organization.objects.create(name="Test Org", url="https://test.org")
+ self.integration = Integration.objects.create(organization=self.organization, service_name="slack")
+ self.slack_integration = SlackIntegration.objects.create(
+ integration=self.integration,
+ bot_access_token="xoxb-test-token",
+ workspace_name="T070JPE5BQQ", # Test workspace ID
+ welcome_message="Welcome {user} to our workspace!",
+ )
+
+ @patch("website.views.slack_handlers.verify_slack_signature", return_value=True)
+ @patch("website.views.slack_handlers.WebClient")
+ def test_team_join_with_custom_message(self, mock_webclient, mock_verify):
+ # Mock the Slack client
+ mock_client = MagicMock()
+ mock_webclient.return_value = mock_client
+ mock_client.conversations_open.return_value = {"ok": True, "channel": {"id": "D123"}}
+ mock_client.chat_postMessage.return_value = {"ok": True}
+
+ # Create test event data
+ event_data = {
+ "token": "test-token",
+ "team_id": "T070JPE5BQQ",
+ "event": {"type": "team_join", "user": {"id": "U123"}},
+ "type": "event_callback",
}
- _handle_contribute_message(message)
+ # Create test request
+ request = MagicMock()
+ request.body = json.dumps(event_data).encode()
+ request.method = "POST"
+ request.headers = {
+ "X-Slack-Request-Timestamp": "1234567890",
+ "X-Slack-Signature": "v0=test",
+ }
- mock_client.chat_postMessage.assert_called_once()
+ # Call the event handler
+ response = slack_events(request)
- # Test message without contribute keyword
- message["text"] = "Hello world"
- mock_client.chat_postMessage.reset_mock()
- _handle_contribute_message(message)
- mock_client.chat_postMessage.assert_not_called()
+ # Verify DM was opened
+ mock_client.conversations_open.assert_called_once_with(users=["U123"])
- @patch("website.views.slack_handlers.client")
- def test_handle_team_join(self, mock_client):
- """Test team join handler"""
+ # Verify welcome message was sent with custom message
+ mock_client.chat_postMessage.assert_called_once()
+ call_args = mock_client.chat_postMessage.call_args[1]
+ self.assertEqual(call_args["text"], "Welcome {user} to our workspace!")
+
+ @patch("website.views.slack_handlers.verify_slack_signature", return_value=True)
+ @patch("website.views.slack_handlers.WebClient")
+ def test_team_join_owasp_workspace(self, mock_webclient, mock_verify):
+ # Mock the Slack client
+ mock_client = MagicMock()
+ mock_webclient.return_value = mock_client
mock_client.conversations_open.return_value = {"ok": True, "channel": {"id": "D123"}}
+ mock_client.chat_postMessage.return_value = {"ok": True}
+
+ # Create test event data for OWASP workspace
+ event_data = {
+ "token": "test-token",
+ "team_id": "T04T40NHX", # OWASP workspace ID
+ "event": {"type": "team_join", "user": {"id": "U123"}},
+ "type": "event_callback",
+ }
- _handle_team_join("U123")
+ # Create test request
+ request = MagicMock()
+ request.body = json.dumps(event_data).encode()
+ request.method = "POST"
+ request.headers = {
+ "X-Slack-Request-Timestamp": "1234567890",
+ "X-Slack-Signature": "v0=test",
+ }
- # Should send welcome message in joins channel
- mock_client.chat_postMessage.assert_called()
+ # Call the event handler
+ response = slack_events(request)
- # Should try to open DM
+ # Verify DM was opened
mock_client.conversations_open.assert_called_once_with(users=["U123"])
- @patch("website.views.slack_handlers.client")
- def test_handle_message(self, mock_client):
- """Test main message handler"""
- # Mock bot user ID
- mock_client.auth_test.return_value = {"user_id": "BOT123"}
+ # Verify default OWASP welcome message was sent
+ mock_client.chat_postMessage.assert_called_once()
+ call_args = mock_client.chat_postMessage.call_args[1]
+ self.assertIn("Welcome to the OWASP Slack Community", call_args["text"])
+
+ @patch("website.views.slack_handlers.verify_slack_signature", return_value=True)
+ @patch("website.views.slack_handlers.WebClient")
+ def test_slack_command_contrib(self, mock_webclient, mock_verify):
+ # Mock the Slack client
+ mock_client = MagicMock()
+ mock_webclient.return_value = mock_client
+ mock_client.conversations_open.return_value = {"ok": True, "channel": {"id": "D123"}}
+ mock_client.chat_postMessage.return_value = {"ok": True}
+
+ # Create test request
+ request = MagicMock()
+ request.method = "POST"
+ request.POST = {
+ "command": "/contrib",
+ "user_id": "U123",
+ "team_id": "T070JPE5BQQ",
+ "team_domain": "test",
+ }
+ request.headers = {
+ "X-Slack-Request-Timestamp": "1234567890",
+ "X-Slack-Signature": "v0=test",
+ }
- # Test normal user message
- payload = {"user": "U123", "text": "contribute", "channel": "C123"}
+ response = slack_commands(request)
- handle_message(payload)
- mock_client.chat_postMessage.assert_called()
+ # Verify DM was opened
+ mock_client.conversations_open.assert_called_once_with(users=["U123"])
- # Test bot message (should be ignored)
- payload["user"] = "BOT123"
- mock_client.chat_postMessage.reset_mock()
- handle_message(payload)
- mock_client.chat_postMessage.assert_not_called()
+ # Verify contribute message was sent
+ mock_client.chat_postMessage.assert_called_once()
+ self.assertEqual(response.status_code, 200)
diff --git a/website/views/company.py b/website/views/company.py
index 71122a552..a26639ccd 100644
--- a/website/views/company.py
+++ b/website/views/company.py
@@ -147,9 +147,7 @@ def post(self, request, *args, **kwargs):
organization_url = data.get("organization_url", "")
if user_domain in restricted_domain:
- messages.error(
- request, "Login with organization email in order to create the organization."
- )
+ messages.error(request, "Login with organization email in order to create the organization.")
return redirect("/")
if organization_name == "" or Organization.objects.filter(name=organization_name).exists():
@@ -165,9 +163,7 @@ def post(self, request, *args, **kwargs):
organization_logo_file = organization_logo.name.split(".")[0]
extension = organization_logo.name.split(".")[-1]
organization_logo.name = f"{organization_logo_file[:99]}_{uuid.uuid4()}.{extension}"
- logo_path = default_storage.save(
- f"organization_logos/{organization_logo.name}", organization_logo
- )
+ logo_path = default_storage.save(f"organization_logos/{organization_logo.name}", organization_logo)
else:
logo_path = None
@@ -213,20 +209,16 @@ class OrganizationDashboardAnalyticsView(View):
months = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"]
def get_general_info(self, organization):
- total_organization_bugs = Issue.objects.filter(
- domain__organization__id=organization
- ).count()
+ total_organization_bugs = Issue.objects.filter(domain__organization__id=organization).count()
total_bug_hunts = Hunt.objects.filter(domain__organization__id=organization).count()
total_domains = Domain.objects.filter(organization__id=organization).count()
# Step 1: Retrieve all hunt IDs associated with the specified organization
- hunt_ids = Hunt.objects.filter(domain__organization__id=organization).values_list(
- "id", flat=True
- )
+ hunt_ids = Hunt.objects.filter(domain__organization__id=organization).values_list("id", flat=True)
# Step 2: Sum the rewarded values from issues that have a hunt_id in the hunt_ids list
- total_money_distributed = Issue.objects.filter(hunt_id__in=hunt_ids).aggregate(
- total_money=Sum("rewarded")
- )["total_money"]
+ total_money_distributed = Issue.objects.filter(hunt_id__in=hunt_ids).aggregate(total_money=Sum("rewarded"))[
+ "total_money"
+ ]
total_money_distributed = 0 if total_money_distributed is None else total_money_distributed
return {
@@ -238,9 +230,7 @@ def get_general_info(self, organization):
def get_bug_report_type_piechart_data(self, organization):
bug_report_type = (
- Issue.objects.values("label")
- .filter(domain__organization__id=organization)
- .annotate(count=Count("label"))
+ Issue.objects.values("label").filter(domain__organization__id=organization).annotate(count=Count("label"))
)
bug_report_type_labels = []
bug_report_type_data = []
@@ -258,9 +248,7 @@ def get_bug_report_type_piechart_data(self, organization):
def get_reports_on_domain_piechart_data(self, organization):
report_piechart = (
- Issue.objects.values("url")
- .filter(domain__organization__id=organization)
- .annotate(count=Count("url"))
+ Issue.objects.values("url").filter(domain__organization__id=organization).annotate(count=Count("url"))
)
report_labels = []
@@ -352,23 +340,17 @@ def bug_rate_increase_descrease_weekly(self, organization, is_accepted_bugs=Fals
if prev_week_issue_count == 0:
percent_increase = this_week_issue_count * 100
else:
- percent_increase = (
- (this_week_issue_count - prev_week_issue_count) / prev_week_issue_count
- ) * 100
+ percent_increase = ((this_week_issue_count - prev_week_issue_count) / prev_week_issue_count) * 100
return {
"percent_increase": percent_increase,
- "is_increasing": True
- if (this_week_issue_count - prev_week_issue_count) >= 0
- else False,
+ "is_increasing": True if (this_week_issue_count - prev_week_issue_count) >= 0 else False,
"this_week_issue_count": this_week_issue_count,
}
def get_spent_on_bugtypes(self, organization):
spent_on_bugtypes = (
- Issue.objects.values("label")
- .filter(domain__organization__id=organization)
- .annotate(spent=Sum("rewarded"))
+ Issue.objects.values("label").filter(domain__organization__id=organization).annotate(spent=Sum("rewarded"))
)
labels = list(self.labels.values())
data = [0 for label in labels] # make all labels spent 0 / init with 0
@@ -397,13 +379,9 @@ def get(self, request, id, *args, **kwargs):
"total_info": self.get_general_info(id),
"bug_report_type_piechart_data": self.get_bug_report_type_piechart_data(id),
"reports_on_domain_piechart_data": self.get_reports_on_domain_piechart_data(id),
- "get_current_year_monthly_reported_bar_data": self.get_current_year_monthly_reported_bar_data(
- id
- ),
+ "get_current_year_monthly_reported_bar_data": self.get_current_year_monthly_reported_bar_data(id),
"bug_rate_increase_descrease_weekly": self.bug_rate_increase_descrease_weekly(id),
- "accepted_bug_rate_increase_descrease_weekly": self.bug_rate_increase_descrease_weekly(
- id, True
- ),
+ "accepted_bug_rate_increase_descrease_weekly": self.bug_rate_increase_descrease_weekly(id, True),
"spent_on_bugtypes": self.get_spent_on_bugtypes(id),
}
self.get_spent_on_bugtypes(id)
@@ -493,9 +471,7 @@ def get(self, request, id, *args, **kwargs):
}
if sort_field in sort_mapping:
- daily_status_reports = daily_status_reports.order_by(
- f"{sort_prefix}{sort_mapping[sort_field]}"
- )
+ daily_status_reports = daily_status_reports.order_by(f"{sort_prefix}{sort_mapping[sort_field]}")
context = {
"organization": id,
@@ -539,11 +515,7 @@ def get(self, request, id, *args, **kwargs):
class OrganizationDashboardManageDomainsView(View):
@validate_organization_user
def get(self, request, id, *args, **kwargs):
- domains = (
- Domain.objects.values("id", "name", "url", "logo")
- .filter(organization__id=id)
- .order_by("modified")
- )
+ domains = Domain.objects.values("id", "name", "url", "logo").filter(organization__id=id).order_by("modified")
organizations = (
Organization.objects.values("name", "id")
@@ -630,9 +602,7 @@ def post(self, request, id, *args, **kwargs):
managers_list = request.POST.getlist("user")
organization_obj = Organization.objects.get(id=id)
- domain_exist = Domain.objects.filter(
- Q(name=domain_data["name"]) | Q(url=domain_data["url"])
- ).exists()
+ domain_exist = Domain.objects.filter(Q(name=domain_data["name"]) | Q(url=domain_data["url"])).exists()
if domain_exist:
messages.error(request, "Domain name or url already exist.")
@@ -663,9 +633,7 @@ def post(self, request, id, *args, **kwargs):
for domain_manager_email in managers_list:
manager_email_domain = domain_manager_email.split("@")[-1]
if not domain.endswith(f".{manager_email_domain}") and domain != manager_email_domain:
- messages.error(
- request, f"Manager: {domain_manager_email} does not match domain email."
- )
+ messages.error(request, f"Manager: {domain_manager_email} does not match domain email.")
return redirect("add_domain", id=id)
if request.FILES.get("logo"):
@@ -692,10 +660,7 @@ def post(self, request, id, *args, **kwargs):
messages.error(request, "Facebook url should contain facebook.com")
return redirect("add_domain", id=id)
if domain_data["twitter"]:
- if (
- "twitter.com" not in domain_data["twitter"]
- and "x.com" not in domain_data["twitter"]
- ):
+ if "twitter.com" not in domain_data["twitter"] and "x.com" not in domain_data["twitter"]:
messages.error(request, "Twitter url should contain twitter.com or x.com")
return redirect("add_domain", id=id)
if domain_data["github"] and "github.com" not in domain_data["github"]:
@@ -779,13 +744,8 @@ def put(self, request, id, *args, **kwargs):
for domain_manager_email in managers_list:
manager_email_domain = domain_manager_email.split("@")[-1]
- if (
- not domain_name.endswith(f".{manager_email_domain}")
- and domain_name != manager_email_domain
- ):
- messages.error(
- request, f"Manager: {domain_manager_email} does not match domain email."
- )
+ if not domain_name.endswith(f".{manager_email_domain}") and domain_name != manager_email_domain:
+ messages.error(request, f"Manager: {domain_manager_email} does not match domain email.")
return redirect("edit_domain", id=id, domain_id=domain_id)
if request.FILES.get("logo"):
@@ -808,10 +768,7 @@ def put(self, request, id, *args, **kwargs):
messages.error(request, "Facebook url should contain facebook.com")
return redirect("edit_domain", id=id, domain_id=domain_id)
if domain_data["twitter"]:
- if (
- "twitter.com" not in domain_data["twitter"]
- and "x.com" not in domain_data["twitter"]
- ):
+ if "twitter.com" not in domain_data["twitter"] and "x.com" not in domain_data["twitter"]:
messages.error(request, "Twitter url should contain twitter.com or x.com")
return redirect("edit_domain", id=id, domain_id=domain_id)
if domain_data["github"] and "github.com" not in domain_data["github"]:
@@ -870,12 +827,13 @@ def get(self, request, id, *args, **kwargs):
"slack_integration": slack_integration,
"channels": channels_list,
"hours": hours,
+ "welcome_message": slack_integration.welcome_message,
},
)
# Redirect to Slack OAuth flow if no integration exists
- client_id = os.getenv("SLACK_CLIENT_ID")
- scopes = "channels:read,chat:write,groups:read,channels:join"
+ client_id = os.getenv("SLACK_ID_CLIENT")
+ scopes = "channels:read,chat:write,groups:read,channels:join,im:write,users:read,team:read,commands"
host = request.get_host()
scheme = request.META.get("HTTP_X_FORWARDED_PROTO", request.scheme)
redirect_uri = f"{scheme}://{host}/oauth/slack/callback"
@@ -921,6 +879,7 @@ def post(self, request, id, *args, **kwargs):
"default_channel": request.POST.get("target_channel"),
"daily_sizzle_timelogs_status": request.POST.get("daily_sizzle_timelogs_status"),
"daily_sizzle_timelogs_hour": request.POST.get("daily_sizzle_timelogs_hour"),
+ "welcome_message": request.POST.get("welcome_message"), # Add this
}
slack_integration = (
SlackIntegration.objects.filter(
@@ -934,12 +893,12 @@ def post(self, request, id, *args, **kwargs):
if slack_integration:
app = App(token=slack_integration.bot_access_token)
if slack_data["default_channel"]:
- slack_integration.default_channel_id = self.get_channel_id(
- app, slack_data["default_channel"]
- )
+ slack_integration.default_channel_id = self.get_channel_id(app, slack_data["default_channel"])
slack_integration.default_channel_name = slack_data["default_channel"]
slack_integration.daily_updates = bool(slack_data["daily_sizzle_timelogs_status"])
slack_integration.daily_update_time = slack_data["daily_sizzle_timelogs_hour"]
+ # Add welcome message
+ slack_integration.welcome_message = slack_data["welcome_message"]
slack_integration.save()
return redirect("organization_manage_integrations", id=id)
@@ -995,8 +954,8 @@ def get(self, request, *args, **kwargs):
organization_id = int(organization_id) # Safely cast to int after validation
- # Exchange code for token
- access_token = self.exchange_code_for_token(code, request)
+ # Exchange code for token and get team info
+ token_data = self.exchange_code_for_token(code, request)
integration = Integration.objects.create(
organization_id=organization_id,
@@ -1004,7 +963,8 @@ def get(self, request, *args, **kwargs):
)
SlackIntegration.objects.create(
integration=integration,
- bot_access_token=access_token,
+ bot_access_token=token_data["access_token"],
+ workspace_name=token_data["team"]["id"],
)
dashboard_url = reverse("organization_manage_integrations", args=[organization_id])
@@ -1016,11 +976,13 @@ def get(self, request, *args, **kwargs):
def exchange_code_for_token(self, code, request):
"""Exchanges OAuth code for Slack access token."""
- client_id = os.getenv("SLACK_CLIENT_ID")
- client_secret = os.getenv("SLACK_CLIENT_SECRET")
+ client_id = os.getenv("SLACK_ID_CLIENT")
+ client_secret = os.getenv("SLACK_SECRET_CLIENT")
host = request.get_host()
scheme = request.META.get("HTTP_X_FORWARDED_PROTO", request.scheme)
- redirect_uri = f"{scheme}://{host}/oauth/slack/callback"
+ redirect_uri = os.environ.get(
+ "OAUTH_REDIRECT_URL", f"{request.scheme}://{request.get_host()}/oauth/slack/callback"
+ )
url = "https://slack.com/api/oauth.v2.access"
data = {
@@ -1034,7 +996,7 @@ def exchange_code_for_token(self, code, request):
token_data = response.json()
if token_data.get("ok"):
- return token_data["access_token"]
+ return token_data # Return the full token data instead of just the access token
else:
raise Exception(f"Error exchanging code for token: {token_data.get('error')}")
@@ -1081,18 +1043,16 @@ def get(self, request, pk, *args, **kwargs):
if not domain:
raise Http404("Domain not found")
- total_money_distributed = Issue.objects.filter(domain__id=domain["id"]).aggregate(
- total_money=Sum("rewarded")
- )["total_money"]
+ total_money_distributed = Issue.objects.filter(domain__id=domain["id"]).aggregate(total_money=Sum("rewarded"))[
+ "total_money"
+ ]
total_money_distributed = 0 if total_money_distributed is None else total_money_distributed
# Query the database for the exact domain
total_bug_reported = Issue.objects.filter(domain__id=domain["id"]).count()
total_bug_accepted = Issue.objects.filter(domain__id=domain["id"], verified=True).count()
- is_domain_manager = Domain.objects.filter(
- Q(id=domain["id"]) & Q(managers__in=[request.user])
- ).exists()
+ is_domain_manager = Domain.objects.filter(Q(id=domain["id"]) & Q(managers__in=[request.user])).exists()
if is_domain_manager:
latest_issues = (
Issue.objects.values(
@@ -1158,18 +1118,16 @@ def get(self, request, pk, *args, **kwargs):
first_bug = Issue.objects.filter(domain__id=domain["id"]).order_by("created").first()
last_bug = Issue.objects.filter(domain__id=domain["id"]).order_by("-created").first()
- ongoing_bughunts = Hunt.objects.filter(domain__id=domain["id"]).annotate(
- total_prize=Sum("huntprize__value")
- )[:3]
+ ongoing_bughunts = Hunt.objects.filter(domain__id=domain["id"]).annotate(total_prize=Sum("huntprize__value"))[
+ :3
+ ]
context = {
**domain,
"total_money_distributed": total_money_distributed,
"total_bug_reported": total_bug_reported,
"total_bug_accepted": total_bug_accepted,
"latest_issues": cleaned_issues,
- "monthly_activity_chart": json.dumps(
- self.get_current_year_monthly_reported_bar_data(domain["id"])
- ),
+ "monthly_activity_chart": json.dumps(self.get_current_year_monthly_reported_bar_data(domain["id"])),
"top_testers": top_testers,
"first_bug": first_bug,
"last_bug": last_bug,
@@ -1361,9 +1319,7 @@ def get(self, request, pk, *args, **kwargs):
# bughunt prizes
rewards = HuntPrize.objects.filter(hunt_id=hunt_obj.id)
- winners_count = {
- reward.id: Winner.objects.filter(prize_id=reward.id).count() for reward in rewards
- }
+ winners_count = {reward.id: Winner.objects.filter(prize_id=reward.id).count() for reward in rewards}
# check winner have for this bughunt
winners = Winner.objects.filter(hunt_id=hunt_obj.id).select_related("prize")
@@ -1615,12 +1571,8 @@ def edit_prize(request, prize_id, organization_id):
data = json.loads(request.body)
prize.name = data.get("prize_name", prize.name)
prize.value = data.get("cash_value", prize.value)
- prize.no_of_eligible_projects = data.get(
- "number_of_winning_projects", prize.no_of_eligible_projects
- )
- prize.valid_submissions_eligible = data.get(
- "every_valid_submissions", prize.valid_submissions_eligible
- )
+ prize.no_of_eligible_projects = data.get("number_of_winning_projects", prize.no_of_eligible_projects)
+ prize.valid_submissions_eligible = data.get("every_valid_submissions", prize.valid_submissions_eligible)
prize.description = data.get("prize_description", prize.description)
prize.save()
@@ -1635,9 +1587,7 @@ def accept_bug(request, issue_id, reward_id=None):
issue.verified = True
issue.rewarded = 0
issue.save()
- Winner(
- hunt_id=issue.hunt.id, prize_id=None, winner_id=issue.user.id, prize_amount=0
- ).save()
+ Winner(hunt_id=issue.hunt.id, prize_id=None, winner_id=issue.user.id, prize_amount=0).save()
else:
reward = get_object_or_404(HuntPrize, id=reward_id)
issue.verified = True
diff --git a/website/views/core.py b/website/views/core.py
index 02f8db300..b35558586 100644
--- a/website/views/core.py
+++ b/website/views/core.py
@@ -37,18 +37,18 @@
Badge,
Domain,
Issue,
+ Organization,
PRAnalysisReport,
+ Project,
+ Repo,
Suggestion,
SuggestionVotes,
+ Tag,
+ UserBadge,
UserProfile,
Wallet,
)
-from website.utils import (
- analyze_pr_content,
- fetch_github_data,
- safe_redirect_allowed,
- save_analysis_report,
-)
+from website.utils import analyze_pr_content, fetch_github_data, safe_redirect_allowed, save_analysis_report
# from website.bot import conversation_chain, is_api_key_valid, load_vector_store
@@ -244,10 +244,7 @@ def check_status(request):
# Database connection check
if CHECK_DATABASE:
print("Getting database connection count...")
- if (
- settings.DATABASES.get("default", {}).get("ENGINE")
- == "django.db.backends.postgresql"
- ):
+ if settings.DATABASES.get("default", {}).get("ENGINE") == "django.db.backends.postgresql":
with connection.cursor() as cursor:
cursor.execute("SELECT COUNT(*) FROM pg_stat_activity WHERE state = 'active'")
status_data["db_connection_count"] = cursor.fetchone()[0]
@@ -300,24 +297,13 @@ def find_key(request, token):
def search(request, template="search.html"):
query = request.GET.get("query")
- stype = request.GET.get("type")
+ stype = request.GET.get("type", "organizations")
context = None
if query is None:
return render(request, template)
query = query.strip()
- if query[:6] == "issue:":
- stype = "issue"
- query = query[6:]
- elif query[:7] == "domain:":
- stype = "domain"
- query = query[7:]
- elif query[:5] == "user:":
- stype = "user"
- query = query[5:]
- elif query[:6] == "label:":
- stype = "label"
- query = query[6:]
- if stype == "issue" or stype is None:
+
+ if stype == "issues":
context = {
"query": query,
"type": stype,
@@ -325,21 +311,26 @@ def search(request, template="search.html"):
Q(is_hidden=True) & ~Q(user_id=request.user.id)
)[0:20],
}
- elif stype == "domain":
+ elif stype == "domains":
context = {
"query": query,
"type": stype,
"domains": Domain.objects.filter(Q(url__icontains=query), hunt=None)[0:20],
}
- elif stype == "user":
+ elif stype == "users":
+ users = (
+ UserProfile.objects.filter(Q(user__username__icontains=query))
+ .annotate(total_score=Sum("user__points__score"))
+ .order_by("-total_score")[0:20]
+ )
+ for userprofile in users:
+ userprofile.badges = UserBadge.objects.filter(user=userprofile.user)
context = {
"query": query,
"type": stype,
- "users": UserProfile.objects.filter(Q(user__username__icontains=query))
- .annotate(total_score=Sum("user__points__score"))
- .order_by("-total_score")[0:20],
+ "users": users,
}
- elif stype == "label":
+ elif stype == "labels":
context = {
"query": query,
"type": stype,
@@ -347,7 +338,57 @@ def search(request, template="search.html"):
Q(is_hidden=True) & ~Q(user_id=request.user.id)
)[0:20],
}
+ elif stype == "organizations":
+ organizations = Organization.objects.filter(name__icontains=query)
+ for org in organizations:
+ d = Domain.objects.filter(organization=org).first()
+ if d:
+ org.absolute_url = d.get_absolute_url()
+ context = {
+ "query": query,
+ "type": stype,
+ "organizations": Organization.objects.filter(name__icontains=query),
+ }
+ elif stype == "projects":
+ context = {
+ "query": query,
+ "type": stype,
+ "projects": Project.objects.filter(Q(name__icontains=query) | Q(description__icontains=query)),
+ }
+ elif stype == "repos":
+ context = {
+ "query": query,
+ "type": stype,
+ "repos": Repo.objects.filter(Q(name__icontains=query) | Q(description__icontains=query)),
+ }
+ elif stype == "tags":
+ tags = Tag.objects.filter(name__icontains=query)
+ matching_organizations = Organization.objects.filter(tags__in=tags).distinct()
+ matching_domains = Domain.objects.filter(tags__in=tags).distinct()
+ matching_issues = Issue.objects.filter(tags__in=tags).distinct()
+ matching_user_profiles = UserProfile.objects.filter(tags__in=tags).distinct()
+ matching_repos = Repo.objects.filter(tags__in=tags).distinct()
+ for org in matching_organizations:
+ d = Domain.objects.filter(organization=org).first()
+ if d:
+ org.absolute_url = d.get_absolute_url()
+ context = {
+ "query": query,
+ "type": stype,
+ "tags": tags,
+ "matching_organizations": matching_organizations,
+ "matching_domains": matching_domains,
+ "matching_issues": matching_issues,
+ "matching_user_profiles": matching_user_profiles,
+ "matching_repos": matching_repos,
+ }
+ elif stype == "languages":
+ context = {
+ "query": query,
+ "type": stype,
+ "repos": Repo.objects.filter(primary_language__icontains=query),
+ }
if request.user.is_authenticated:
context["wallet"] = Wallet.objects.get(user=request.user)
return render(request, template, context)
@@ -474,15 +515,11 @@ def vote_suggestions(request):
voted = SuggestionVotes.objects.filter(user=user, suggestion=suggestion).delete()
if up_vote:
- voted = SuggestionVotes.objects.create(
- user=user, suggestion=suggestion, up_vote=True, down_vote=False
- )
+ voted = SuggestionVotes.objects.create(user=user, suggestion=suggestion, up_vote=True, down_vote=False)
suggestion.up_votes += 1
if down_vote:
- voted = SuggestionVotes.objects.create(
- user=user, suggestion=suggestion, down_vote=True, up_vote=False
- )
+ voted = SuggestionVotes.objects.create(user=user, suggestion=suggestion, down_vote=True, up_vote=False)
suggestion.down_votes += 1
suggestion.save()
@@ -508,12 +545,8 @@ def set_vote_status(request):
except Suggestion.DoesNotExist:
return JsonResponse({"success": False, "error": "Suggestion not found"}, status=404)
- up_vote = SuggestionVotes.objects.filter(
- suggestion=suggestion, user=user, up_vote=True
- ).exists()
- down_vote = SuggestionVotes.objects.filter(
- suggestion=suggestion, user=user, down_vote=True
- ).exists()
+ up_vote = SuggestionVotes.objects.filter(suggestion=suggestion, user=user, up_vote=True).exists()
+ down_vote = SuggestionVotes.objects.filter(suggestion=suggestion, user=user, down_vote=True).exists()
response = {"up_vote": up_vote, "down_vote": down_vote}
return JsonResponse(response)
@@ -521,14 +554,13 @@ def set_vote_status(request):
return JsonResponse({"success": False, "error": "Invalid request method"}, status=400)
-@login_required
def add_suggestions(request):
if request.method == "POST":
- user = request.user
+ user = request.user if request.user.is_authenticated else None
data = json.loads(request.body)
title = data.get("title")
description = data.get("description", "")
- if title and description and user:
+ if title and description:
suggestion = Suggestion(user=user, title=title, description=description)
suggestion.save()
messages.success(request, "Suggestion added successfully.")
@@ -536,6 +568,8 @@ def add_suggestions(request):
else:
messages.error(request, "Please fill all the fields.")
return JsonResponse({"status": "error"}, status=400)
+ else:
+ return JsonResponse({"status": "error", "message": "Method not allowed"}, status=405)
class GoogleLogin(SocialLoginView):
@@ -601,9 +635,7 @@ def dispatch(self, request, *args, **kwargs):
def post(self, request, *args, **kwargs):
data = request.FILES.get("image")
- result = default_storage.save(
- "uploads/" + self.kwargs["hash"] + ".png", ContentFile(data.read())
- )
+ result = default_storage.save("uploads/" + self.kwargs["hash"] + ".png", ContentFile(data.read()))
return JsonResponse({"status": result})
@@ -799,12 +831,7 @@ def submit_roadmap_pr(request):
if "error" in pr_data or "error" in roadmap_data:
return JsonResponse(
- {
- "error": (
- f"Failed to fetch PR or roadmap data: "
- f"{pr_data.get('error', 'Unknown error')}"
- )
- },
+ {"error": (f"Failed to fetch PR or roadmap data: " f"{pr_data.get('error', 'Unknown error')}")},
status=500,
)
diff --git a/website/views/slack_handlers.py b/website/views/slack_handlers.py
index 70f125e59..1f182e842 100644
--- a/website/views/slack_handlers.py
+++ b/website/views/slack_handlers.py
@@ -4,20 +4,20 @@
import os
import time
+from django.db.models import Count
from django.http import HttpResponse, JsonResponse
from django.views.decorators.csrf import csrf_exempt
-from dotenv import load_dotenv
from slack import WebClient
from slack_sdk.errors import SlackApiError
-load_dotenv()
+from website.models import Domain, Hunt, Issue, Project, SlackIntegration, User
-DEPLOYS_CHANNEL_NAME = "#project-blt-lettuce-deploys"
-JOINS_CHANNEL_ID = "C076DAG65AT"
-CONTRIBUTE_ID = "C077QBBLY1Z"
+if os.getenv("ENV") != "production":
+ from dotenv import load_dotenv
-SLACK_TOKEN = os.getenv("SLACK_TOKEN")
-SIGNING_SECRET = os.getenv("SIGNING_SECRET")
+ load_dotenv()
+SLACK_TOKEN = os.environ.get("SLACK_BOT_TOKEN")
+SIGNING_SECRET = os.environ.get("SLACK_SIGNING_SECRET")
client = WebClient(token=SLACK_TOKEN)
@@ -25,17 +25,31 @@ def verify_slack_signature(request):
timestamp = request.headers.get("X-Slack-Request-Timestamp", "")
signature = request.headers.get("X-Slack-Signature", "")
- # Verify timestamp to prevent replay attacks
- if abs(time.time() - float(timestamp)) > 60 * 5:
+ # Check if required headers are present
+ if not timestamp or not signature:
return False
- sig_basestring = f"v0:{timestamp}:{request.body.decode()}"
- my_signature = (
- "v0="
- + hmac.new(SIGNING_SECRET.encode(), sig_basestring.encode(), hashlib.sha256).hexdigest()
- )
+ try:
+ # Verify timestamp to prevent replay attacks
+ current_time = time.time()
+ request_time = float(timestamp)
+ time_diff = abs(current_time - request_time)
+
+ if time_diff > 60 * 5:
+ return False
+
+ # Create the signature base string
+ sig_basestring = f"v0:{timestamp}:{request.body.decode()}"
+
+ # Calculate our signature
+ my_signature = "v0=" + hmac.new(SIGNING_SECRET.encode(), sig_basestring.encode(), hashlib.sha256).hexdigest()
- return hmac.compare_digest(my_signature, signature)
+ # Compare signatures
+ is_valid = hmac.compare_digest(my_signature, signature)
+ return is_valid
+
+ except (ValueError, TypeError) as e:
+ return False
@csrf_exempt
@@ -48,6 +62,11 @@ def slack_events(request):
data = json.loads(request.body)
+ # Check if this is a retry event
+ is_retry = request.headers.get("X-Slack-Retry-Num")
+ if is_retry:
+ return HttpResponse(status=200)
+
if "challenge" in data:
return JsonResponse({"challenge": data["challenge"]})
@@ -62,131 +81,282 @@ def slack_events(request):
user_id = event.get("user")
if user_id:
- _handle_team_join(user_id)
-
- elif event_type == "message":
- handle_message(event)
+ _handle_team_join(user_id, request)
return HttpResponse(status=200)
return HttpResponse(status=405)
-def extract_text_from_blocks(blocks):
- """Extracts message text from Slack's 'blocks' format"""
- if not blocks:
- return ""
-
- text_parts = []
- for block in blocks:
- if block.get("type") == "rich_text":
- for element in block.get("elements", []):
- if element.get("type") == "rich_text_section":
- for item in element.get("elements", []):
- if item.get("type") == "text":
- text_parts.append(item.get("text", ""))
+def _handle_team_join(user_id, request):
+ try:
+ event_data = json.loads(request.body)
+ team_id = event_data["team_id"]
+ try:
+ slack_integration = SlackIntegration.objects.get(workspace_name=team_id)
- return " ".join(text_parts).strip()
+ # If integration exists and has welcome message
+ if slack_integration.welcome_message:
+ welcome_message = slack_integration.welcome_message
+ workspace_client = WebClient(token=slack_integration.bot_access_token)
+ else:
+ # If no welcome message but it's OWASP workspace
+ if team_id == "T04T40NHX":
+ workspace_client = WebClient(token=SLACK_TOKEN)
+ welcome_message = (
+ f":tada: *Welcome to the OWASP Slack Community, <@{user_id}>!* :tada:\n\n"
+ "We're thrilled to have you here! Whether you're new to OWASP or a long-time contributor, "
+ "this Slack workspace is the perfect place to connect, collaborate, and stay informed about all things OWASP.\n\n"
+ ":small_blue_diamond: *Get Involved:*\n"
+ "• Check out the *#contribute* channel to find ways to get involved with OWASP projects and initiatives.\n"
+ "• Explore individual project channels, which are named *#project-name*, to dive into specific projects that interest you.\n"
+ "• Join our chapter channels, named *#chapter-name*, to connect with local OWASP members in your area.\n\n"
+ ":small_blue_diamond: *Stay Updated:*\n"
+ "• Visit *#newsroom* for the latest updates and announcements.\n"
+ "• Follow *#external-activities* for news about OWASP's engagement with the wider security community.\n\n"
+ ":small_blue_diamond: *Connect and Learn:*\n"
+ "• *#jobs*: Looking for new opportunities? Check out the latest job postings here.\n"
+ "• *#leaders*: Connect with OWASP leaders and stay informed about leadership activities.\n"
+ "• *#project-committee*: Engage with the committee overseeing OWASP projects.\n"
+ "• *#gsoc*: Stay updated on Google Summer of Code initiatives.\n"
+ "• *#github-admins*: Get support and discuss issues related to OWASP's GitHub repositories.\n"
+ "• *#learning*: Share and find resources to expand your knowledge in the field of application security.\n\n"
+ "We're excited to see the amazing contributions you'll make. If you have any questions or need assistance, don't hesitate to ask. "
+ "Let's work together to make software security visible and improve the security of the software we all rely on.\n\n"
+ "Welcome aboard! :rocket:"
+ )
+ else:
+ workspace_client = WebClient(token=slack_integration.bot_access_token)
+ welcome_message = (
+ f"Welcome <@{user_id}>! 👋\n\n"
+ "Your workspace admin hasn't set up a custom welcome message yet. "
+ "They can configure this in the organization's integration settings."
+ )
+
+ except SlackIntegration.DoesNotExist:
+ # If no integration exists but it's OWASP workspace
+ if team_id == "T04T40NHX":
+ workspace_client = WebClient(token=SLACK_TOKEN)
+ # Use the default OWASP welcome message
+ welcome_message = (
+ f":tada: *Welcome to the OWASP Slack Community, <@{user_id}>!* :tada:\n\n"
+ "We're thrilled to have you here! Whether you're new to OWASP or a long-time contributor, "
+ "this Slack workspace is the perfect place to connect, collaborate, and stay informed about all things OWASP.\n\n"
+ ":small_blue_diamond: *Get Involved:*\n"
+ "• Check out the *#contribute* channel to find ways to get involved with OWASP projects and initiatives.\n"
+ "• Explore individual project channels, which are named *#project-name*, to dive into specific projects that interest you.\n"
+ "• Join our chapter channels, named *#chapter-name*, to connect with local OWASP members in your area.\n\n"
+ ":small_blue_diamond: *Stay Updated:*\n"
+ "• Visit *#newsroom* for the latest updates and announcements.\n"
+ "• Follow *#external-activities* for news about OWASP's engagement with the wider security community.\n\n"
+ ":small_blue_diamond: *Connect and Learn:*\n"
+ "• *#jobs*: Looking for new opportunities? Check out the latest job postings here.\n"
+ "• *#leaders*: Connect with OWASP leaders and stay informed about leadership activities.\n"
+ "• *#project-committee*: Engage with the committee overseeing OWASP projects.\n"
+ "• *#gsoc*: Stay updated on Google Summer of Code initiatives.\n"
+ "• *#github-admins*: Get support and discuss issues related to OWASP's GitHub repositories.\n"
+ "• *#learning*: Share and find resources to expand your knowledge in the field of application security.\n\n"
+ "We're excited to see the amazing contributions you'll make. If you have any questions or need assistance, don't hesitate to ask. "
+ "Let's work together to make software security visible and improve the security of the software we all rely on.\n\n"
+ "Welcome aboard! :rocket:"
+ )
+ else:
+ return
+ # Add delay to ensure user is fully joined
+ time.sleep(2) # Wait 2 seconds before sending message
-def _handle_contribute_message(message):
- text = message.get("text", "").lower()
- user = message.get("user")
- channel = message.get("channel")
+ # Try to open DM first
+ try:
+ dm_response = workspace_client.conversations_open(users=[user_id])
+ if not dm_response["ok"]:
+ return
- if message.get("subtype") is None and any(
- keyword in text for keyword in ["contribute", "contributing", "contributes"]
- ):
- response = client.chat_postMessage(
- channel=channel,
- text=f"Hello <@{user}>! Please check <#{CONTRIBUTE_ID}> for contributing guidelines today!",
- )
+ dm_channel = dm_response["channel"]["id"]
+ welcome_blocks = [{"type": "section", "text": {"type": "mrkdwn", "text": welcome_message}}]
-def _handle_team_join(user_id):
- # Send message to joins channel
- join_response = client.chat_postMessage(
- channel=JOINS_CHANNEL_ID, text=f"Welcome <@{user_id}> to the team! 🎉"
- )
+ # Send message using appropriate client
+ welcome_response = workspace_client.chat_postMessage(
+ channel=dm_channel, text=welcome_message, blocks=welcome_blocks
+ )
- try:
- # Try to open DM first
- dm_response = client.conversations_open(users=[user_id])
- if not dm_response["ok"]:
+ except SlackApiError as e:
return
- dm_channel = dm_response["channel"]["id"]
-
- # Define welcome message
- welcome_message = (
- f":tada: *Welcome to the OWASP Slack Community, <@{user_id}>!* :tada:\n\n"
- "We're thrilled to have you here! Whether you're new to OWASP or a long-time contributor, "
- "this Slack workspace is the perfect place to connect, collaborate, and stay informed about all things OWASP.\n\n"
- ":small_blue_diamond: *Get Involved:*\n"
- "• Check out the *#contribute* channel to find ways to get involved with OWASP projects and initiatives.\n"
- "• Explore individual project channels, which are named *#project-name*, to dive into specific projects that interest you.\n"
- "• Join our chapter channels, named *#chapter-name*, to connect with local OWASP members in your area.\n\n"
- ":small_blue_diamond: *Stay Updated:*\n"
- "• Visit *#newsroom* for the latest updates and announcements.\n"
- "• Follow *#external-activities* for news about OWASP's engagement with the wider security community.\n\n"
- ":small_blue_diamond: *Connect and Learn:*\n"
- "• *#jobs*: Looking for new opportunities? Check out the latest job postings here.\n"
- "• *#leaders*: Connect with OWASP leaders and stay informed about leadership activities.\n"
- "• *#project-committee*: Engage with the committee overseeing OWASP projects.\n"
- "• *#gsoc*: Stay updated on Google Summer of Code initiatives.\n"
- "• *#github-admins*: Get support and discuss issues related to OWASP's GitHub repositories.\n"
- "• *#learning*: Share and find resources to expand your knowledge in the field of application security.\n\n"
- "We're excited to see the amazing contributions you'll make. If you have any questions or need assistance, don't hesitate to ask. "
- "Let's work together to make software security visible and improve the security of the software we all rely on.\n\n"
- "Welcome aboard! :rocket:"
- )
-
- welcome_blocks = [{"type": "section", "text": {"type": "mrkdwn", "text": welcome_message}}]
-
- welcome_response = client.chat_postMessage(
- channel=dm_channel, text=welcome_message, blocks=welcome_blocks
- )
-
except SlackApiError as e:
- return HttpResponse(status=500)
-
-
-def handle_message(payload):
- # Get bot user ID
- response = client.auth_test()
- bot_user_id = response["user_id"]
-
- # Skip if message is from the bot
- if payload.get("user") == bot_user_id:
return
- # Get message content from both text and blocks
- text = payload.get("text", "")
- blocks_text = extract_text_from_blocks(payload.get("blocks", []))
-
- # Use text from blocks if direct text is empty
- message_text = text or blocks_text
-
- # Create message object with the extracted text
- message = {
- "user": payload.get("user"),
- "channel": payload.get("channel"),
- "text": message_text,
- "subtype": payload.get("subtype"),
- "channel_type": payload.get("channel_type"),
- }
- _handle_contribute_message(message)
- _handle_direct_message(message, bot_user_id)
+@csrf_exempt
+def slack_commands(request):
+ """Handle Slack slash commands"""
+ if request.method == "POST":
+ # Verify the request is from Slack
+ is_valid = verify_slack_signature(request)
+ if not is_valid:
+ return HttpResponse(status=403)
-def _handle_direct_message(message, bot_user_id):
- if message.get("channel_type") == "im":
- user = message["user"]
- text = message.get("text", "")
+ command = request.POST.get("command")
+ user_id = request.POST.get("user_id")
+ team_id = request.POST.get("team_id")
+ team_domain = request.POST.get("team_domain") # Get the team domain
+
+ if command == "/stats":
+ # Get project counts by status
+ project_stats = Project.objects.values("status").annotate(count=Count("id"))
+ stats_by_status = {stat["status"]: stat["count"] for stat in project_stats}
+
+ # Get other key metrics
+ total_issues = Issue.objects.count()
+ total_users = User.objects.count()
+ total_domains = Domain.objects.count()
+ total_hunts = Hunt.objects.count()
+
+ # Format stats sections with line breaks for readability
+ stats_sections = [
+ "*Project Statistics:*\n",
+ "• Flagship Projects: " f"{stats_by_status.get('flagship', 0)}",
+ "• Production Projects: " f"{stats_by_status.get('production', 0)}",
+ "• Incubator Projects: " f"{stats_by_status.get('incubator', 0)}",
+ "• Lab Projects: " f"{stats_by_status.get('lab', 0)}",
+ "• New Projects: " f"{stats_by_status.get('new', 0)}",
+ "• Active Projects: " f"{stats_by_status.get('active', 0)}",
+ "• Inactive Projects: " f"{stats_by_status.get('inactive', 0)}",
+ "\n*Overall Platform Statistics:*\n",
+ f"• Total Issues: {total_issues}",
+ f"• Total Users: {total_users}",
+ f"• Total Domains: {total_domains}",
+ f"• Total Hunts: {total_hunts}",
+ ]
+
+ stats_message = "\n".join(stats_sections)
+
+ try:
+ # Post message to Slack
+ client = WebClient(token=workspace_client.bot_token)
+ client.chat_postMessage(channel=request.POST.get("channel_id"), text=stats_message)
+ return JsonResponse({"response_type": "in_channel"})
+ except SlackApiError:
+ return JsonResponse({"error": "Error posting message"}, status=500)
+
+ elif command == "/contrib":
+ try:
+ # First try to get custom integration
+ try:
+ slack_integration = SlackIntegration.objects.get(workspace_name=team_id)
+ workspace_client = WebClient(token=slack_integration.bot_access_token)
+ except SlackIntegration.DoesNotExist:
+ # If no custom integration and it's OWASP workspace, use default token
+ if team_domain == "owasp":
+ workspace_client = WebClient(token=SLACK_TOKEN)
+ else:
+ return JsonResponse(
+ {
+ "response_type": "ephemeral",
+ "text": "This workspace is not properly configured. Please contact the workspace admin.",
+ }
+ )
+
+ contribute_message = [
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": ":rocket: *Contributing to OWASP Projects*\n\n"
+ " 🔹 *Join the OWASP Slack Channel:* Find guidance and check pinned posts for projects seeking contributors.\n"
+ " 🔹 *Explore OWASP Projects Page:* Identify projects that align with your skills and interests.",
+ },
+ },
+ {"type": "divider"},
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": ":loudspeaker: *Engaging on Slack*\n\n"
+ " Many projects have dedicated project channels for collaboration.\n\n"
+ " 🔍 *Find and Join a Project Channel:*",
+ },
+ },
+ {
+ "type": "actions",
+ "elements": [
+ {
+ "type": "channels_select",
+ "placeholder": {
+ "type": "plain_text",
+ "text": "🔍 Search and Select a Project Channel",
+ "emoji": True,
+ },
+ "action_id": "select_project_channel",
+ }
+ ],
+ },
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": " 🛠 *GSOC Projects:* View this year's participating GSOC projects https://owasp.org/www-community/initiatives/gsoc/gsoc2025ideas",
+ },
+ },
+ {"type": "divider"},
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": ":busts_in_silhouette: *Identifying Key People and Activity*\n\n"
+ " • Visit the *OWASP Projects* page to find project leaders and contributors.\n"
+ " • Review *GitHub commit history* for active developers.\n"
+ " • Check *Slack activity* for updates on project progress.",
+ },
+ },
+ {"type": "divider"},
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": ":pushpin: *Communication Guidelines*\n\n"
+ " ✅ *Check pinned messages* in project channels for updates.\n"
+ " ✅ *Ask questions* in relevant project channels.\n"
+ " ✅ *Introduce yourself* while keeping personal details private.",
+ },
+ },
+ {"type": "divider"},
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": ":hammer_and_wrench: *How to Contribute*\n\n"
+ " 1️⃣ *Select a project* and review its contribution guidelines.\n"
+ " 2️⃣ *Work on an open GitHub issue* or propose a new one.\n"
+ " 3️⃣ *Coordinate with project leaders* to prevent overlaps.\n"
+ " 4️⃣ *Submit a pull request* and keep the team informed.\n\n"
+ " 💡 *Focus on clear communication and teamwork!* 🚀",
+ },
+ },
+ ]
+
+ # Open DM channel first
+ dm_response = workspace_client.conversations_open(users=[user_id])
+ if not dm_response["ok"]:
+ return HttpResponse(status=500)
+
+ dm_channel = dm_response["channel"]["id"]
+
+ # Send message to DM channel
+ message_response = workspace_client.chat_postMessage(
+ channel=dm_channel, blocks=contribute_message, mrkdwn=True
+ )
+
+ # Send ephemeral message in the channel where command was used
+ return JsonResponse(
+ {
+ "response_type": "ephemeral",
+ "text": "I've sent you a DM with information about contributing! 🚀",
+ }
+ )
+
+ except SlackApiError as e:
+ return HttpResponse(status=500)
- try:
- if message.get("user") != bot_user_id:
- client.chat_postMessage(channel=JOINS_CHANNEL_ID, text=f"<@{user}> said {text}")
- client.chat_postMessage(channel=user, text=f"Hello <@{user}>, you said: {text}")
- except SlackApiError as e:
- return HttpResponse(status=500)
+ return HttpResponse(status=405)
diff --git a/website/views/slackbot.py b/website/views/slackbot.py
new file mode 100644
index 000000000..ea52dc124
--- /dev/null
+++ b/website/views/slackbot.py
@@ -0,0 +1,394 @@
+import logging
+import math
+import os
+import re
+import time
+
+import requests
+from django.http import HttpResponse, JsonResponse
+from django.views.decorators.csrf import csrf_exempt
+from slack_bolt import App
+from slack_bolt.adapter.django import SlackRequestHandler
+
+if os.getenv("ENV") != "production":
+ from dotenv import load_dotenv
+
+ load_dotenv()
+
+logging.basicConfig(level=logging.DEBUG)
+logger = logging.getLogger(__name__)
+
+SLACK_BOT_TOKEN = os.environ.get("SLACK_BOT_TOKEN")
+SLACK_SIGNING_SECRET = os.environ.get("SLACK_SIGNING_SECRET")
+
+if not SLACK_BOT_TOKEN or not SLACK_SIGNING_SECRET:
+ logger.warning("Slack environment not set. Slack integration disabled.")
+ app = None
+ handler = None
+else:
+ app = App(token=SLACK_BOT_TOKEN, signing_secret=SLACK_SIGNING_SECRET)
+ handler = SlackRequestHandler(app)
+
+pagination_data = {}
+
+repo_cache = {"timestamp": 0, "data": []}
+CACHE_DURATION = 3600
+
+
+def get_all_owasp_repos():
+ """Fetch ALL repos from the OWASP org by paginating through the results."""
+ current_time = time.time()
+ if repo_cache["data"] and (current_time - repo_cache["timestamp"] < CACHE_DURATION):
+ logger.debug("Using cached OWASP repositories.")
+ return repo_cache["data"]
+
+ all_repos = []
+ page = 1
+ while True:
+ resp = requests.get(
+ f"https://api.github.com/orgs/OWASP/repos?page={page}&per_page=100",
+ headers={"Accept": "application/vnd.github.mercy-preview+json"},
+ )
+ if resp.status_code != 200:
+ logger.error(f"Failed to fetch repos (page {page}): {resp.text}")
+ break
+
+ page_data = resp.json()
+ if not page_data:
+ break # no more repositories
+ all_repos.extend(page_data)
+ page += 1
+
+ repo_cache["data"] = all_repos
+ repo_cache["timestamp"] = current_time
+ logger.debug("Fetched and cached OWASP repositories.")
+
+ return all_repos
+
+
+if app:
+
+ @app.command("/discover")
+ def handle_discover_command(ack, client, command):
+ try:
+ ack()
+
+ # Extract the search term from the command text
+ search_term = command.get("text", "").strip()
+
+ # If search term exists then search for OWASP projects
+ if search_term:
+ repos = get_all_owasp_repos()
+ if not repos:
+ send_dm(client, command["user_id"], "Failed to fetch OWASP repositories.")
+ return
+
+ matched = []
+ url_pattern = re.compile(r"https?://\S+")
+
+ for idx, repo in enumerate(repos, start=1):
+ name_desc = (repo["name"] + " " + (repo["description"] or "")).lower()
+ lang = (repo["language"] or "").lower()
+ topics = [t.lower() for t in repo.get("topics", [])]
+
+ if search_term.lower() in name_desc or search_term.lower() in lang or search_term.lower() in topics:
+ desc = repo["description"] or "No description provided."
+
+ found_urls = url_pattern.findall(desc)
+ if found_urls:
+ link = found_urls[0]
+ link_label = "Website"
+ else:
+ link = f"https://owasp.org/www-project-{repo['name'].lower()}"
+ link_label = "Wiki"
+
+ matched.append(
+ {
+ "owner_repo": repo["full_name"],
+ "name": repo["name"],
+ "description": desc,
+ "link_label": link_label,
+ "link": link,
+ "html_url": repo["html_url"],
+ }
+ )
+
+ if not matched:
+ send_dm(
+ client,
+ command["user_id"],
+ f"No OWASP projects found matching '{search_term}'.",
+ )
+ return
+
+ pagination_data[command["user_id"]] = {
+ "matched": matched,
+ "current_page": 0,
+ "page_size": 8,
+ }
+
+ send_paged_results(client, command["user_id"], search_term)
+
+ else:
+ try:
+ client.conversations_join(channel=command["channel_id"])
+ except Exception as channel_error:
+ logger.debug(f"Could not join channel: {channel_error}")
+ pass
+
+ try:
+ gh_response = requests.get("https://api.github.com/orgs/OWASP-BLT/repos")
+ if gh_response.status_code == 200:
+ repos = gh_response.json()
+ if not repos:
+ send_dm(client, command["user_id"], "No repositories found for OWASP-BLT.")
+ else:
+ repo_list = []
+ for idx, repo in enumerate(repos, start=1):
+ desc = repo["description"] if repo["description"] else "No description provided."
+ repo_list.append(f"{idx}. <{repo['html_url']}|{repo['name']}> - {desc}")
+
+ blocks = [
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": "Here are the OWASP BLT project repositories:\n" + "\n".join(repo_list),
+ },
+ },
+ {
+ "type": "actions",
+ "elements": [
+ {
+ "type": "static_select",
+ "placeholder": {
+ "type": "plain_text",
+ "text": "Select a repository to view issues",
+ },
+ "options": [
+ {
+ "text": {
+ "type": "plain_text",
+ "text": f"{repo['name']}",
+ },
+ "value": f"OWASP-BLT/{repo['name']}",
+ }
+ for repo in repos
+ ],
+ "action_id": "select_repository",
+ }
+ ],
+ },
+ ]
+
+ send_dm(
+ client,
+ command["user_id"],
+ "Please select a repository to view its latest issues:",
+ blocks,
+ )
+ else:
+ send_dm(
+ client,
+ command["user_id"],
+ "Failed to fetch repositories from OWASP-BLT.",
+ )
+
+ except Exception as e:
+ logger.error(f"Error processing repositories: {e}")
+ send_dm(
+ client,
+ command["user_id"],
+ "An error occurred while processing your request.",
+ )
+
+ except Exception as e:
+ logger.error(f"Error handling /discover command: {e}")
+
+ app.action("select_repository")
+
+ def handle_repository_selection(ack, body, client):
+ try:
+ ack()
+ user_id = body["user"]["id"]
+ selected_repo = body["actions"][0]["selected_option"]["value"]
+ logger.debug(f"User {user_id} selected repository: {selected_repo}")
+
+ # Fetch latest issues from the selected GitHub repository
+ issues_response = requests.get(f"https://api.github.com/repos/{selected_repo}/issues")
+ if issues_response.status_code == 200:
+ issues = issues_response.json()
+ issues = [issue for issue in issues if "pull_request" not in issue]
+ if not issues:
+ send_dm(client, user_id, "No issues found for this repository.")
+ else:
+ issues_list = [
+ f"- <{issue['html_url']}|{issue['title']}> (#{issue['number']})" for issue in issues[:5]
+ ]
+ issues_text = "Here are the latest issues:\n" + "\n".join(issues_list)
+ send_dm(client, user_id, issues_text)
+
+ else:
+ send_dm(client, user_id, "Failed to fetch issues for the selected repository.")
+
+ except Exception as e:
+ logger.error(f"Error handling repository selection: {e}")
+
+ @app.action("pagination_prev")
+ def handle_pagination_prev(ack, body, client):
+ """Handles the 'Previous' pagination button."""
+ try:
+ ack()
+ user_id = body["user"]["id"]
+ search_term = body.get("state", {}).get("values", {}).get("search_term", "Topic")
+
+ if user_id not in pagination_data:
+ send_dm(client, user_id, "No pagination data found.")
+ return
+
+ data = pagination_data[user_id]
+ data["current_page"] = max(0, data["current_page"] - 1)
+
+ send_paged_results(client, user_id, search_term)
+
+ except Exception as e:
+ logger.error(f"Error handling pagination action: {e}")
+
+ @app.action("pagination_next")
+ def handle_pagination_next(ack, body, client):
+ """Handles the 'Next' pagination button"""
+ try:
+ ack()
+ user_id = body["user"]["id"]
+ search_term = body.get("state", {}).get("values", {}).get("search_term", "Topic")
+
+ if user_id not in pagination_data:
+ send_dm(client, user_id, "No pagination data found.")
+ return
+
+ data = pagination_data[user_id]
+ data["current_page"] += 1
+
+ total_pages = math.ceil(len(data["matched"]) / data["page_size"])
+
+ data["current_page"] = min(data["current_page"], total_pages - 1)
+ send_paged_results(client, user_id, search_term)
+
+ except Exception as e:
+ logger.error(f"Error handling pagination action: {e}")
+
+ def send_paged_results(client, user_id, search_term):
+ """Sends the current page of matched projects to the user with next/prev buttons if needed."""
+ data = pagination_data[user_id]
+ matched = data["matched"]
+ page_size = data["page_size"]
+ total_pages = math.ceil(len(matched) / page_size)
+ current_page = data["current_page"]
+
+ start_idx = current_page * page_size
+ end_idx = start_idx + page_size
+ chunk = matched[start_idx:end_idx]
+
+ text_chunk = "\n".join(
+ [
+ f"{idx + start_idx + 1}. <{project['html_url']}|{project['name']}> - {project['description']}\n {project['link_label']}: <{project['link']}|Link>"
+ for idx, project in enumerate(chunk)
+ ]
+ )
+
+ blocks = [
+ {
+ "type": "section",
+ "text": {
+ "type": "mrkdwn",
+ "text": (
+ f"Here are the OWASP Projects matching *{search_term}* "
+ f"(page {current_page + 1}/{total_pages}):\n{text_chunk}"
+ ),
+ },
+ },
+ {"type": "actions", "elements": []},
+ ]
+
+ # Add Prev button if not on the first page already
+ if current_page > 0:
+ blocks[1]["elements"].append(
+ {
+ "type": "button",
+ "text": {"type": "plain_text", "text": "Previous"},
+ "value": "PREV",
+ "action_id": "pagination_prev",
+ }
+ )
+
+ # Next button if not on last page already
+ if current_page < (total_pages - 1):
+ blocks[1]["elements"].append(
+ {
+ "type": "button",
+ "text": {"type": "plain_text", "text": "Next"},
+ "value": "NEXT",
+ "action_id": "pagination_next",
+ }
+ )
+
+ options = [
+ {
+ "text": {"type": "plain_text", "text": project["name"]},
+ "value": project["owner_repo"],
+ }
+ for project in chunk
+ ]
+
+ # Also keep the static_select for issues
+ if options:
+ blocks[1]["elements"].append(
+ {
+ "type": "static_select",
+ "placeholder": {
+ "type": "plain_text",
+ "text": "Select a repository to view its latest issues",
+ },
+ "options": options,
+ "action_id": "select_repository",
+ }
+ )
+ send_dm(client, user_id, f"Found {len(matched)} matching OWASP projects.", blocks)
+
+ def send_dm(client, user_id, text, blocks=None):
+ """Utility function to open a DM channel with user and send them a message."""
+ try:
+ dm_response = client.conversations_open(users=[user_id])
+ if not dm_response["ok"]:
+ logger.error(f"Failed to open DM channel: {dm_response['error']}")
+ return
+
+ dm_channel_id = dm_response["channel"]["id"]
+ message_response = client.chat_postMessage(
+ channel=dm_channel_id,
+ text=text,
+ blocks=blocks,
+ mrkdwn=True,
+ unfurl_links=False,
+ unfurl_media=False,
+ )
+ if not message_response["ok"]:
+ logger.error(f"Failed to send DM: {message_response.get('error', 'Unknown error')}")
+ return
+
+ logger.debug(f"Successfully sent DM to user {user_id} in channel {dm_channel_id}")
+
+ except Exception as e:
+ logger.error(f"Error sending DM to user {user_id}: {e}")
+
+
+@csrf_exempt
+def slack_commands(request):
+ logger.debug(f"Received Slack command with content type: {request.content_type}")
+ if not handler:
+ return JsonResponse({"error": "Slack integration is disabled."}, status=400)
+ if request.method == "POST":
+ if request.content_type != "application/x-www-form-urlencoded":
+ return JsonResponse({"error": "Invalid content type"}, status=415)
+ return HttpResponse(handler.handle(request))
+ return JsonResponse({"error": "Method not allowed"}, status=405)
+
- {% else %}
- Repositories
+
+ {% for repo in repos %}
+
+
{% endfor %}
+ {% if repo.logo_url %}
+ 
{% else %}
- {{ user.total_score|floatformat:0 }} Points
+
+
+ No Logo
+
{% endif %}
+
+
+ + {{ repo.name }} +
+ {% if repo.description %}{{ repo.description|truncatechars:150 }}
{% endif %} +
+ {% if repo.primary_language %}
+ {{ repo.primary_language }}
+ {% endif %}
+ {% if repo.stars %}
+
+
+ {{ repo.stars }}
+
+ {% endif %}
+ {% if repo.forks %}
+
+
+ {{ repo.forks }}
+
+ {% endif %}
+ {% if repo.open_issues %}
+
+
+ {{ repo.open_issues }}
+
+ {% endif %}
+
+
+
- View Profile
+ {% if repo.tags.all %}
+
+
+ Last Updated:
+ {{ repo.last_updated|date:"d M Y, H:i" }}
+
+
+
+ License:
+ {{ repo.license }}
+
+
+
+ Visits:
+ {{ repo.repo_visit_count }}
+
+ {% for tag in repo.tags.all %}
+
+ {{ tag.name }}
+
+ {% endfor %}
+
+ {% endif %}
-
+ {% endif %}
+ {% if not issues and not domains and not users and not organizations and not projects and not tags and not repos %}
+ Nothing Found!
+
+
+
+
- {% endif %}
- Nothing Found!