From 6e4aa12f8e9222047129db297c7e0f4a575b23b9 Mon Sep 17 00:00:00 2001
From: Alexander Ebert <ebert@woltlab.com>
Date: Wed, 6 Sep 2017 11:39:28 +0200
Subject: [PATCH] Limit desktop notifications to a single domain for
 multi-domain environments

Closes #2411
---
 com.woltlab.wcf/option.xml                    |  8 +++-
 .../templates/headIncludeJavaScript.tpl       |  2 +-
 com.woltlab.wcf/templates/login.tpl           |  2 +-
 constants.php                                 |  1 +
 ...otificationApplicationSelectOptionType.tpl | 19 +++++++++
 .../files/acp/templates/rescueMode.tpl        |  2 +-
 .../install/files/lib/system/WCF.class.php    | 24 +++++++++++
 .../application/ApplicationHandler.class.php  | 28 +++++++++++++
 ...ationApplicationSelectOptionType.class.php | 40 +++++++++++++++++++
 .../OptionACPSearchResultProvider.class.php   |  7 ++++
 wcfsetup/install/lang/de.xml                  |  2 +
 wcfsetup/install/lang/en.xml                  |  2 +
 12 files changed, 133 insertions(+), 4 deletions(-)
 create mode 100644 wcfsetup/install/files/acp/templates/desktopNotificationApplicationSelectOptionType.tpl
 create mode 100644 wcfsetup/install/files/lib/system/option/DesktopNotificationApplicationSelectOptionType.class.php

diff --git a/com.woltlab.wcf/option.xml b/com.woltlab.wcf/option.xml
index 325202450a..5568748776 100644
--- a/com.woltlab.wcf/option.xml
+++ b/com.woltlab.wcf/option.xml
@@ -499,12 +499,18 @@
 				<categoryname>general.page</categoryname>
 				<optiontype>boolean</optiontype>
 				<defaultvalue>1</defaultvalue>
-				<enableoptions>enable_desktop_notifications</enableoptions>
+				<enableoptions>enable_desktop_notifications,desktop_notification_package_id</enableoptions>
 			</option>
 			<option name="enable_desktop_notifications">
 				<categoryname>general.page</categoryname>
 				<optiontype>boolean</optiontype>
 				<defaultvalue>1</defaultvalue>
+				<enableoptions>desktop_notification_package_id</enableoptions>
+			</option>
+			<option name="desktop_notification_package_id">
+				<categoryname>general.page</categoryname>
+				<optiontype>desktopNotificationApplicationSelect</optiontype>
+				<defaultvalue>1</defaultvalue>
 			</option>
 			<option name="head_code">
 				<categoryname>general.page</categoryname>
diff --git a/com.woltlab.wcf/templates/headIncludeJavaScript.tpl b/com.woltlab.wcf/templates/headIncludeJavaScript.tpl
index 1fca4b96b2..553f36eafd 100644
--- a/com.woltlab.wcf/templates/headIncludeJavaScript.tpl
+++ b/com.woltlab.wcf/templates/headIncludeJavaScript.tpl
@@ -212,7 +212,7 @@ requirejs.config({
 			{if ENABLE_POLLING && $__wcf->user->userID}
 				require(['WoltLabSuite/Core/Notification/Handler'], function(NotificationHandler) {
 					NotificationHandler.setup({
-						enableNotifications: {if ENABLE_DESKTOP_NOTIFICATIONS}true{else}false{/if},
+						enableNotifications: {if $__wcf->useDesktopNotifications()}true{else}false{/if},
 						icon: '{$__wcf->getStyleHandler()->getStyle()->getFaviconAppleTouchIcon()}',
 						sessionKeepAlive: {@$__sessionKeepAlive}
 					});
diff --git a/com.woltlab.wcf/templates/login.tpl b/com.woltlab.wcf/templates/login.tpl
index b82690cfc6..4b31acac7f 100644
--- a/com.woltlab.wcf/templates/login.tpl
+++ b/com.woltlab.wcf/templates/login.tpl
@@ -8,7 +8,7 @@
 	{include file='formError'}
 {/if}
 
-<div id="loginForm" class="loginForm{if REGISTER_DISABLED} loginFormLoginOnly{/if}">
+<div id="loginForm" class="section loginForm{if REGISTER_DISABLED} loginFormLoginOnly{/if}">
 	<form method="post" action="{@$loginController}">
 		<section class="section loginFormLogin">
 			<h2 class="sectionTitle">{lang}wcf.user.login.login{/lang}</h2>
diff --git a/constants.php b/constants.php
index dac81c311b..5e5ef776bf 100644
--- a/constants.php
+++ b/constants.php
@@ -229,3 +229,4 @@ define('SITEMAP_INDEX_TIME_FRAME', 365);
 define('MODULE_TROPHY', 1);
 define('ENABLE_DEVELOPER_TOOLS', 0);
 define('FORCE_LOGIN', 0);
+define('DESKTOP_NOTIFICATION_PACKAGE_ID', 1);
diff --git a/wcfsetup/install/files/acp/templates/desktopNotificationApplicationSelectOptionType.tpl b/wcfsetup/install/files/acp/templates/desktopNotificationApplicationSelectOptionType.tpl
new file mode 100644
index 0000000000..9aeef098be
--- /dev/null
+++ b/wcfsetup/install/files/acp/templates/desktopNotificationApplicationSelectOptionType.tpl
@@ -0,0 +1,19 @@
+{if $isMultiDomainSetup}
+	<select name="values[{$option->optionName}]" id="{$option->optionName}">
+		{foreach from=$applications item=application}
+			<option value="{@$application->packageID}"{if $application->packageID == $value} selected{/if}>{$application->getPackage()}</option>
+		{/foreach}
+	</select>
+{else}
+	{* TODO: hide *}
+	<input type="hidden" name="values[{$option->optionName}]" value="1">
+	<script>
+		(function() {
+			{* pretend that this option does not exist *}
+			var container = elBySel('.{$option->optionName}Input');
+			container.style.setProperty('margin', '0', 'important');
+			container.style.setProperty('max-height', '0', 'important');
+			container.style.setProperty('overflow', 'hidden', 'important');
+		})();
+	</script>
+{/if}
diff --git a/wcfsetup/install/files/acp/templates/rescueMode.tpl b/wcfsetup/install/files/acp/templates/rescueMode.tpl
index 541526d350..c1eee62c66 100644
--- a/wcfsetup/install/files/acp/templates/rescueMode.tpl
+++ b/wcfsetup/install/files/acp/templates/rescueMode.tpl
@@ -12,7 +12,7 @@
 <body id="tpl{$templateName|ucfirst}" data-template="{$templateName}" data-application="{$templateNameApplication}" class="wcfAcp">
 <a id="top"></a>
 
-<div id="pageContainer" class="pageContainer">
+<div id="pageContainer" class="pageContainer acpPageHiddenMenu">
 	<div class="pageHeaderContainer">
 		<header id="pageHeaderFacade" class="pageHeaderFacade">
 			<div class="layoutBoundary">
diff --git a/wcfsetup/install/files/lib/system/WCF.class.php b/wcfsetup/install/files/lib/system/WCF.class.php
index 2d25440016..6733947b35 100644
--- a/wcfsetup/install/files/lib/system/WCF.class.php
+++ b/wcfsetup/install/files/lib/system/WCF.class.php
@@ -1004,6 +1004,30 @@ class WCF {
 		return self::getPath() . $favicon;
 	}
 	
+	/**
+	 * Returns true if the desktop notifications should be enabled.
+	 * 
+	 * @return      boolean
+	 */
+	public function useDesktopNotifications() {
+		if (!ENABLE_DESKTOP_NOTIFICATIONS) {
+			return false;
+		}
+		else if (ApplicationHandler::getInstance()->isMultiDomainSetup()) {
+			$application = ApplicationHandler::getInstance()->getApplicationByID(DESKTOP_NOTIFICATION_PACKAGE_ID);
+			// mismatch, default to Core
+			if ($application === null) $application = ApplicationHandler::getInstance()->getApplicationByID(1);
+			
+			$currentApplication = ApplicationHandler::getInstance()->getActiveApplication();
+			if ($currentApplication->domainName != $application->domainName) {
+				// different domain
+				return false;
+			}
+		}
+		
+		return true;
+	}
+	
 	/**
 	 * Returns true if currently active request represents the landing page.
 	 * 
diff --git a/wcfsetup/install/files/lib/system/application/ApplicationHandler.class.php b/wcfsetup/install/files/lib/system/application/ApplicationHandler.class.php
index 5ad414e490..2c9e5a548e 100644
--- a/wcfsetup/install/files/lib/system/application/ApplicationHandler.class.php
+++ b/wcfsetup/install/files/lib/system/application/ApplicationHandler.class.php
@@ -24,6 +24,12 @@ class ApplicationHandler extends SingletonFactory {
 	 */
 	protected $cache;
 	
+	/**
+	 * true for multi-domain setups
+	 * @var boolean
+	 */
+	protected $isMultiDomain;
+	
 	/**
 	 * list of page URLs
 	 * @var	string[]
@@ -200,6 +206,28 @@ class ApplicationHandler extends SingletonFactory {
 		return false;
 	}
 	
+	/**
+	 * Returns true if this is a multi-domain setup.
+	 * 
+	 * @return      boolean
+	 * @since       3.1
+	 */
+	public function isMultiDomainSetup() {
+		if ($this->isMultiDomain === null) {
+			$this->isMultiDomain = false;
+			
+			$domainName = $this->getApplicationByID(1)->domainName;
+			foreach ($this->getApplications() as $application) {
+				if ($application->domainName !== $domainName) {
+					$this->isMultiDomain = true;
+					break;
+				}
+			}
+		}
+		
+		return $this->isMultiDomain;
+	}
+	
 	/**
 	 * Rebuilds cookie domain/path for all applications.
 	 */
diff --git a/wcfsetup/install/files/lib/system/option/DesktopNotificationApplicationSelectOptionType.class.php b/wcfsetup/install/files/lib/system/option/DesktopNotificationApplicationSelectOptionType.class.php
new file mode 100644
index 0000000000..305f119d9b
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/option/DesktopNotificationApplicationSelectOptionType.class.php
@@ -0,0 +1,40 @@
+<?php
+namespace wcf\system\option;
+use wcf\data\option\Option;
+use wcf\system\application\ApplicationHandler;
+use wcf\system\exception\UserInputException;
+use wcf\system\WCF;
+
+/**
+ * Option type implementation for the desktop notification application selection. This
+ * option is intentionally designed to be invisible at most times.
+ * 
+ * @author	Alexander Ebert
+ * @copyright	2001-2017 WoltLab GmbH
+ * @license	GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @package	WoltLabSuite\Core\System\Option
+ */
+class DesktopNotificationApplicationSelectOptionType extends AbstractOptionType {
+	/**
+	 * @inheritDoc
+	 */
+	public function getFormElement(Option $option, $value) {
+		return WCF::getTPL()->fetch('desktopNotificationApplicationSelectOptionType', 'wcf', [
+			'applications' => ApplicationHandler::getInstance()->getApplications(),
+			'isMultiDomainSetup' => ApplicationHandler::getInstance()->isMultiDomainSetup(),
+			'option' => $option,
+			'value' => $value
+		]);
+	}
+	
+	/**
+	 * @inheritDoc
+	 */
+	public function validate(Option $option, $newValue) {
+		if (ApplicationHandler::getInstance()->isMultiDomainSetup()) {
+			if (ApplicationHandler::getInstance()->getApplicationByID($newValue) === null) {
+				throw new UserInputException($option->optionName, 'validationFailed');
+			}
+		}
+	}
+}
diff --git a/wcfsetup/install/files/lib/system/search/acp/OptionACPSearchResultProvider.class.php b/wcfsetup/install/files/lib/system/search/acp/OptionACPSearchResultProvider.class.php
index 26e885b19d..337939b85f 100644
--- a/wcfsetup/install/files/lib/system/search/acp/OptionACPSearchResultProvider.class.php
+++ b/wcfsetup/install/files/lib/system/search/acp/OptionACPSearchResultProvider.class.php
@@ -2,6 +2,7 @@
 namespace wcf\system\search\acp;
 use wcf\data\option\category\OptionCategoryList;
 use wcf\data\option\Option;
+use wcf\system\application\ApplicationHandler;
 use wcf\system\cache\builder\OptionCacheBuilder;
 use wcf\system\database\util\PreparedStatementConditionBuilder;
 use wcf\system\request\LinkHandler;
@@ -72,6 +73,7 @@ class OptionACPSearchResultProvider extends AbstractCategorizedACPSearchResultPr
 		
 		$optionCategories = OptionCacheBuilder::getInstance()->getData([], 'categories');
 		
+		/** @var Option $option */
 		while ($option = $statement->fetchObject(Option::class)) {
 			// category is not accessible
 			if (!$this->isValid($option->categoryName)) {
@@ -83,6 +85,11 @@ class OptionACPSearchResultProvider extends AbstractCategorizedACPSearchResultPr
 				continue;
 			}
 			
+			// hide special option for multi-domain setups if not applicable
+			if ($option->optionName === 'desktop_notification_package_id' && !ApplicationHandler::getInstance()->isMultiDomainSetup()) {
+				continue;
+			}
+			
 			$link = LinkHandler::getInstance()->getLink('Option', [
 				'id' => $this->getCategoryID($this->getTopCategory($option->categoryName)->parentCategoryName)
 			], 'optionName='.$option->optionName.'#category_'.$this->getCategoryName($option->categoryName));
diff --git a/wcfsetup/install/lang/de.xml b/wcfsetup/install/lang/de.xml
index 76a68eb3cf..29139b93e6 100644
--- a/wcfsetup/install/lang/de.xml
+++ b/wcfsetup/install/lang/de.xml
@@ -1412,6 +1412,8 @@ Als Benachrichtigungs-URL in der Konfiguration der sofortigen Zahlungsbestätigu
 		<item name="wcf.acp.option.enable_developer_tools.description"><![CDATA[Aktiviert spezielle Werkzeuge die für die Plugin-Entwicklung verwendet werden. Diese Option sollte im Live-Betrieb abgeschaltet werden.]]></item>
 		<item name="wcf.acp.option.force_login"><![CDATA[Anmeldung erzwingen]]></item>
 		<item name="wcf.acp.option.force_login.description"><![CDATA[Besucher werden aufgefordert sich anzumelden, um auf die Inhalte zugreifen zu können.]]></item>
+		<item name="wcf.acp.option.desktop_notification_package_id"><![CDATA[Primäre Domain für Desktop-Benachrichtigungen]]></item>
+		<item name="wcf.acp.option.desktop_notification_package_id.description"><![CDATA[Desktop-Benachrichtigungen werden nur für die ausgewählte App aktiviert, einschließlich aller anderen Apps die auf der identischen Domain laufen.]]></item>
 	</category>
 	
 	<category name="wcf.acp.customOption">
diff --git a/wcfsetup/install/lang/en.xml b/wcfsetup/install/lang/en.xml
index 9b8397b703..9c928baccb 100644
--- a/wcfsetup/install/lang/en.xml
+++ b/wcfsetup/install/lang/en.xml
@@ -1406,6 +1406,8 @@ When prompted for the notification URL for the instant payment notifications, pl
 		<item name="wcf.acp.option.enable_developer_tools.description"><![CDATA[Enables a set of specialized tools that are used for plugin development. Should always be disabled in production environments.]]></item>
 		<item name="wcf.acp.option.force_login"><![CDATA[Force login]]></item>
 		<item name="wcf.acp.option.force_login.description"><![CDATA[Visitors are required to log-in themselves to access the page.]]></item>
+		<item name="wcf.acp.option.desktop_notification_package_id"><![CDATA[Primary Domain for Desktop Notifications]]></item>
+		<item name="wcf.acp.option.desktop_notification_package_id.description"><![CDATA[Desktop Notifications will be enabled for the selected app only, including all other apps that use the exact same domain.]]></item>
 	</category>
 	
 	<category name="wcf.acp.customOption">
-- 
2.20.1