1 from urllib.parse import parse_qs
2 from slack import WebClient
9 from types import SimpleNamespace
10 from google.auth.transport.requests import Request
11 from googleapiclient.discovery import build
13 import turbot.interaction
16 ssm = boto3.client('ssm')
18 # Note: Late import here to have the environment variable above available
19 from turbot.slack import slack_is_valid_request # noqa
21 if 'SLACK_BOT_TOKEN' in os.environ:
22 slack_bot_token = os.environ['SLACK_BOT_TOKEN']
24 response = ssm.get_parameter(Name='SLACK_BOT_TOKEN', WithDecryption=True)
25 slack_bot_token = response['Parameter']['Value']
26 os.environ['SLACK_BOT_TOKEN'] = slack_bot_token
27 slack_client = WebClient(slack_bot_token)
29 if 'GSHEETS_PICKLE_BASE64' in os.environ:
30 gsheets_pick_base64 = os.environ['GSHEETS_PICKLE_BASE64']
32 response = ssm.get_parameter(Name='GSHEETS_PICKLE_BASE64',
34 gsheets_pickle_base64 = response['Parameter']['Value']
35 os.environ['GSHEETS_PICKLE_BASE64'] = gsheets_pickle_base64
36 gsheets_pickle = base64.b64decode(gsheets_pickle_base64)
37 gsheets_creds = pickle.loads(gsheets_pickle)
40 if gsheets_creds.valid:
41 print("Loaded valid GSheets credentials from SSM")
43 gsheets_creds.refresh(Request())
44 gsheets_pickle = pickle.dumps(gsheets_creds)
45 gsheets_pickle_base64_bytes = base64.b64encode(gsheets_pickle)
46 gsheets_pickle_base64 = gsheets_pickle_base64_bytes.decode('us-ascii')
47 print("Storing refreshed GSheets credentials into SSM")
48 os.environ['GSHEETS_PICKLE_BASE64'] = gsheets_pickle_base64
49 ssm.put_parameter(Name='GSHEETS_PICKLE_BASE64',
51 Value=gsheets_pickle_base64,
53 service = build('sheets',
55 credentials=gsheets_creds,
56 cache_discovery=False)
57 sheets = service.spreadsheets()
58 service = build('drive',
60 credentials=gsheets_creds,
61 cache_discovery=False)
62 files = service.files()
63 permissions = service.permissions()
65 db = boto3.resource('dynamodb')
67 turb = SimpleNamespace()
68 turb.slack_client = slack_client
70 turb.table = db.Table("turbot")
73 turb.permissions = permissions
76 """Generate an error response for a Slack request
78 This will print the error message (so that it appears in CloudWatch
79 logs) and will then return a dictionary suitable for returning
80 as an error response."""
82 print("Error: {}.".format(message))
89 def turbot_lambda(event, context):
90 """Top-level entry point for our lambda function.
92 This can handle either a REST API request from Slack, or an HTTP
93 request for teh Turbot web view
96 # First, determine if we've been invoked by Slack, (by presence of
97 # the X-Slack-Signature header)
98 headers = requests.structures.CaseInsensitiveDict(event['headers'])
100 if 'X-Slack-Signature' in headers:
101 return turbot_slack_handler(event, context)
103 # Otherwise, emit the Turbot web view
104 return turbot_web_view(event, context)
106 def turbot_web_view(event, context):
113 'body': 'Hello, Lambda world.',
115 'Content-Type': 'application/text',
119 def turbot_slack_handler(event, context):
120 """Primary entry point for all Slack-initiated API requests to Turbot
122 This function first verifies that the request actually came from
123 Slack, (by means of the SLACK_SIGNING_SECRET SSM parameter), and
124 refuses to do anything if not.
126 Then this defers to either turbot_event_handler or
127 turbot_slash_command to do any real work.
131 headers = requests.structures.CaseInsensitiveDict(event['headers'])
133 signature = headers['X-Slack-Signature']
134 timestamp = headers['X-Slack-Request-Timestamp']
136 if not slack_is_valid_request(signature, timestamp, event['body']):
137 return error("Invalid Slack signature")
139 # It's a bit cheesy, but we'll just use the content-type header to
140 # determine if we're being called from a Slack event or from a
141 # slash command or other interactivity. (The more typical way to
142 # do this would be to have different URLs for each Slack entry
143 # point, but it's simpler to have our Slack app implemented as a
144 # single AWS Lambda, (which can only have a single entry point).
145 content_type = headers['content-type']
147 if (content_type == "application/json"):
148 return turbot_event_handler(turb, event, context)
149 if (content_type == "application/x-www-form-urlencoded"):
150 return turbot_interactive_or_slash_command(turb, event, context)
151 return error("Unknown content-type: {}".format(content_type))
153 def turbot_event_handler(turb, event, context):
154 """Handler for all subscribed Slack events"""
156 body = json.loads(event['body'])
160 if type == 'url_verification':
161 return url_verification_handler(turb, body)
162 if type == 'event_callback':
163 return event_callback_handler(turb, body)
164 return error("Unknown event type: {}".format(type))
166 def url_verification_handler(turb, body):
168 # First, we have to properly respond to url_verification
169 # challenges or else Slack won't let us configure our URL as an
171 challenge = body['challenge']
178 def event_callback_handler(turb, body):
179 event = body['event']
182 if type in turbot.events.events:
183 return turbot.events.events[type](turb, event)
184 return error("Unknown event type: {}".format(type))
186 def turbot_interactive_or_slash_command(turb, event, context):
187 """Handler for Slack interactive things (buttons, shortcuts, etc.)
188 as well as slash commands.
190 This function simply makes a quick determination of what we're looking
191 at and then defers to either turbot_interactive or turbot_slash_command."""
193 # Both interactives and slash commands have a urlencoded body
194 body = parse_qs(event['body'])
196 # The difference is that an interactive thingy has a 'payload'
197 # while a slash command has a 'command'
198 if 'payload' in body:
199 return turbot_interactive(turb, json.loads(body['payload'][0]))
200 if 'command' in body:
201 return turbot_slash_command(turb, body)
202 return error("Unrecognized event (neither interactive nor slash command)")
204 def turbot_interactive(turb, payload):
205 """Handler for Slack interactive requests
207 These are the things that come from a user interacting with a button
208 a shortcut or some other interactive element that our app has made
209 available to the user."""
211 type = payload['type']
213 if type == 'block_actions':
214 return turbot_block_action(turb, payload)
215 if type == 'view_submission':
216 return turbot.interaction.view_submission(turb, payload)
217 if type == 'shortcut':
218 return turbot_shortcut(turb, payload)
219 return error("Unrecognized interactive type: {}".format(type))
221 def turbot_block_action(turb, payload):
222 """Handler for Slack interactive block actions
224 Specifically, those that have a payload type of 'block_actions'"""
226 actions = payload['actions']
228 if len(actions) != 1:
229 return error("No support for multiple actions ({}) in a single request"
230 .format(len(actions)))
234 atype = action['type']
235 if 'value' in action:
236 avalue = action['value']
241 atype in turbot.interaction.actions
242 and avalue in turbot.interaction.actions[atype]
244 return turbot.interaction.actions[atype][avalue](turb, payload)
245 return error("Unknown action of type/value: {}/{}".format(atype, avalue))
247 def turbot_shortcut(turb, payload):
248 """Handler for Slack shortcuts
250 These are invoked as either global or message shortcuts by a user."""
252 print("In turbot_shortcut, payload is: {}".format(str(payload)))
254 return error("Shortcut interactions not yet implemented")
256 def turbot_slash_command(turb, body):
257 """Implementation for Slack slash commands.
259 This parses the request and arguments and farms out to
260 supporting functions to implement all supported slash commands.
263 command = body['command'][0]
265 args = body['text'][0]
269 if command in turbot.interaction.commands:
270 return turbot.interaction.commands[command](turb, body, args)
272 return error("Command {} not implemented".format(command))