Method createMagicTokensAlert

admin/server/alerts.go:697–763

(ctx context.Context, projectID, alertName, ownerID string, emails []string, userAttributes map[string]any)

}

func (s *Server) createMagicTokensAlert(ctx context.Context, projectID, alertName, ownerID string, emails []string, userAttributes map[string]any) (map[string]string, error) {
	var createdByUserID *string
	if ownerID != "" {
		createdByUserID = &ownerID
	}
	ttl := 3 * 30 * 24 * time.Hour // approx 3 months
	mgcOpts := &admin.IssueMagicAuthTokenOptions{
		ProjectID:       projectID,
		CreatedByUserID: createdByUserID,
		Resources: []database.ResourceName{{
			Type: runtime.ResourceKindAlert,
			Name: alertName,
		}},
		Internal: true,
		TTL:      &ttl,
	}

	// Use the passed user attributes if available
	if userAttributes != nil {
		mgcOpts.Attributes = userAttributes
	}

	// issue magic tokens for new external emails
	cctx, tx, err := s.admin.DB.NewTx(ctx, false)
	if err != nil {
		return nil, fmt.Errorf("failed to start transaction: %w", err)
	}
	defer func() { _ = tx.Rollback() }()

	emailTokens := make(map[string]string)
	for _, email := range emails {
		// If no user attributes were passed, create basic attributes for the email
		if userAttributes == nil {
			mgcOpts.Attributes = map[string]interface{}{
				"name":   "",
				"email":  email,
				"domain": email[strings.LastIndex(email, "@")+1:],
				"groups": []string{},
				"admin":  false,
			}
		}

		tkn, err := s.admin.IssueMagicAuthToken(cctx, mgcOpts)
		if err != nil {
			return nil, fmt.Errorf("failed to issue magic auth token for email %s: %w", email, err)
		}

		emailTokens[email] = tkn.Token().String()

		_, err = s.admin.DB.InsertNotificationToken(cctx, &database.InsertNotificationTokenOptions{
			ResourceKind:     runtime.ResourceKindAlert,
			ResourceName:     alertName,
			RecipientEmail:   email,
			MagicAuthTokenID: tkn.Token().ID.String(),
		})
		if err != nil {
			return nil, fmt.Errorf("failed to insert alert token for email %s: %w", email, err)
		}