Added notifications about new comment in vulnerability (#2846)

* Added notifications about new comment in vulnerability

Author: Cheshiriks

save-backend/src/main/kotlin/com/saveourtool/save/backend/event/CommentListener.kt

@@ -0,0 +1,68 @@
+package com.saveourtool.save.backend.event
+
+import com.saveourtool.save.backend.service.NotificationService
+import com.saveourtool.save.cosv.repository.LnkVulnerabilityMetadataUserRepository
+import com.saveourtool.save.cosv.service.VulnerabilityMetadataService
+import com.saveourtool.save.entities.Notification
+import com.saveourtool.save.entities.User
+import com.saveourtool.save.evententities.CommentEvent
+import com.saveourtool.save.utils.orNotFound
+import org.springframework.context.event.EventListener
+import org.springframework.stereotype.Component
+
+/**
+ * A comment listener for sending notifications.
+ */
+@Component
+class CommentListener(
+    private val notificationService: NotificationService,
+    private val vulnerabilityMetadataService: VulnerabilityMetadataService,
+    private val lnkVulnerabilityMetadataUserRepository: LnkVulnerabilityMetadataUserRepository,
+) {
+    /**
+     * @param commentEvent new commentEvent
+     */
+    @EventListener
+    fun createComment(commentEvent: CommentEvent) {
+        val sectionType = commentEvent.comment.section.substringAfter("/")
+            .substringBefore("/")
+        val id = commentEvent.comment.section.substringAfterLast("/")
+
+        when (sectionType) {
+            VULN -> createVulnerabilityComment(id, commentEvent.comment.user)
+        }
+    }
+
+    private fun createVulnerabilityComment(identifier: String, commentOwner: User) {
+        val vulnerability = vulnerabilityMetadataService.findByIdentifier(identifier).orNotFound { "Vulnerability with id: $identifier not found" }
+
+        val recipients = lnkVulnerabilityMetadataUserRepository.findByVulnerabilityMetadataId(vulnerability.requiredId())
+            .map { it.user }
+            .plus(vulnerability.user)
+            .minus(
+                commentOwner
+            )
+
+        val message = messageNewVulnComment(commentOwner, identifier)
+        val notifications = recipients.map { user ->
+            Notification(
+                message = message,
+                user = user,
+            )
+        }
+        notificationService.saveAll(notifications)
+    }
+
+    companion object {
+        private const val VULN = "vuln"
+
+        /**
+         * @param user
+         * @param identifier
+         * @return message
+         */
+        fun messageNewVulnComment(user: User, identifier: String) = """
+            User: ${user.name} added new comment in $identifier vulnerability.
+        """.trimIndent()
+    }
+}

save-backend/src/main/kotlin/com/saveourtool/save/backend/security/VulnerabilityPermissionEvaluator.kt

@@ -51,7 +51,7 @@ class VulnerabilityPermissionEvaluator(
      * @return check permission
      */
     fun hasFullPermission(vulnerability: VulnerabilityMetadataDto, authentication: Authentication): Boolean {
-        val linkUsers = vulnerabilityService.getUsers(vulnerability.identifier).map { it.name }
+        val linkUsers = vulnerabilityService.findUsersByVulnerabilityId(vulnerability.identifier).map { it.name }
         return vulnerability.user.name == authentication.name || authentication.name in linkUsers
     }
 }

save-backend/src/main/kotlin/com/saveourtool/save/backend/service/CommentService.kt

@@ -5,8 +5,10 @@ import com.saveourtool.save.backend.repository.CommentRepository
 import com.saveourtool.save.backend.repository.UserRepository
 import com.saveourtool.save.entities.Comment
 import com.saveourtool.save.entities.CommentDto
+import com.saveourtool.save.evententities.CommentEvent
 import com.saveourtool.save.utils.getByIdOrNotFound
 
+import org.springframework.context.ApplicationEventPublisher
 import org.springframework.security.core.Authentication
 import org.springframework.stereotype.Service
 import org.springframework.transaction.annotation.Transactional
@@ -21,6 +23,7 @@ import kotlinx.datetime.toJavaLocalDateTime
 class CommentService(
     private val commentRepository: CommentRepository,
     private val userRepository: UserRepository,
+    private val applicationEventPublisher: ApplicationEventPublisher,
 ) {
     /**
      * @param comment comment of user
@@ -36,6 +39,9 @@ class CommentService(
             comment.section,
             user,
         )
+
+        applicationEventPublisher.publishEvent(CommentEvent(newComment))
+
         commentRepository.save(newComment)
     }
 

save-backend/src/main/kotlin/com/saveourtool/save/backend/service/vulnerability/VulnerabilityService.kt

@@ -406,17 +406,6 @@ class VulnerabilityService(
         }.map { it.identifier }
     }
 
-    /**
-     * @param identifier vulnerability identifier
-     * @return list users
-     */
-    fun getUsers(identifier: String) = vulnerabilityMetadataRepository.findByIdentifier(identifier)
-        .orNotFound { "Not found metadata for vulnerability $identifier" }
-        .let { metadata ->
-            lnkVulnerabilityMetadataUserRepository.findByVulnerabilityMetadataId(metadata.requiredId())
-                .map { it.user.toUserInfo() }
-        }
-
     /**
      * @param name name of project
      * @param identifier vulnerability identifier

save-cloud-common/src/jvmMain/kotlin/com/saveourtool/save/evententities/CommentEvent.kt

@@ -0,0 +1,10 @@
+package com.saveourtool.save.evententities
+
+import com.saveourtool.save.entities.Comment
+
+/**
+ * @property comment
+ **/
+data class CommentEvent(
+    var comment: Comment
+)