Merge pull request #3758 from weseek/imprv/gw6009-check-growi-url

Imprv/gw6009 check growi url

packages/slackbot-proxy/src/controllers/growi-to-slack.ts

@@ -1,6 +1,7 @@
 import {
   Controller, Get, Inject, Req, Res, UseBefore,
 } from '@tsed/common';
+import axios from 'axios';
 
 import { WebAPICallResult } from '@slack/web-api';
 
@@ -98,6 +99,19 @@ export class GrowiToSlackCtrl {
       return res.status(400).send({ message: 'order has expired or does not exist.' });
     }
 
+    // Access the GROWI URL saved in the Order record and check if the GtoP token is valid.
+    try {
+      const url = new URL('/_api/v3/slack-integration/proxied/commands', order.growiUrl);
+      await axios.post(url.toString(), {
+        type: 'url_verification',
+        tokenPtoG: order.growiAccessToken,
+        challenge: 'this_is_my_challenge_token',
+      });
+    }
+    catch (err) {
+      logger.error(err);
+    }
+
     logger.debug('order found', order);
 
     const token = order.installation.data.bot?.token;

src/server/routes/apiv3/slack-integration.js

@@ -83,7 +83,7 @@ module.exports = (crowi) => {
     // eslint-disable-next-line max-len
     // see: https://api.slack.com/apis/connections/events-api#the-events-api__subscribing-to-event-types__events-api-request-urls__request-url-configuration--verification
     if (body.type === 'url_verification') {
-      return body.challenge;
+      return res.send({ challenge: body.challenge });
     }
 
     return handleCommands(req, res);