diff --git a/coderd/apidoc/docs.go b/coderd/apidoc/docs.go index 8dbff0fca8274..0ac151673f115 100644 --- a/coderd/apidoc/docs.go +++ b/coderd/apidoc/docs.go @@ -1705,6 +1705,25 @@ const docTemplate = `{ } } }, + "/notifications/inbox/mark-all-as-read": { + "put": { + "security": [ + { + "CoderSessionToken": [] + } + ], + "tags": [ + "Notifications" + ], + "summary": "Mark all unread notifications as read", + "operationId": "mark-all-unread-notifications-as-read", + "responses": { + "204": { + "description": "No Content" + } + } + } + }, "/notifications/inbox/watch": { "get": { "security": [ diff --git a/coderd/apidoc/swagger.json b/coderd/apidoc/swagger.json index 3f58bf0d944fd..059907fad16de 100644 --- a/coderd/apidoc/swagger.json +++ b/coderd/apidoc/swagger.json @@ -1486,6 +1486,23 @@ } } }, + "/notifications/inbox/mark-all-as-read": { + "put": { + "security": [ + { + "CoderSessionToken": [] + } + ], + "tags": ["Notifications"], + "summary": "Mark all unread notifications as read", + "operationId": "mark-all-unread-notifications-as-read", + "responses": { + "204": { + "description": "No Content" + } + } + } + }, "/notifications/inbox/watch": { "get": { "security": [ diff --git a/coderd/coderd.go b/coderd/coderd.go index f5956d7457fe8..296bfa029abe9 100644 --- a/coderd/coderd.go +++ b/coderd/coderd.go @@ -1389,6 +1389,7 @@ func New(options *Options) *API { r.Use(apiKeyMiddleware) r.Route("/inbox", func(r chi.Router) { r.Get("/", api.listInboxNotifications) + r.Put("/mark-all-as-read", api.markAllInboxNotificationsAsRead) r.Get("/watch", api.watchInboxNotifications) r.Put("/{id}/read-status", api.updateInboxNotificationReadStatus) }) diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go index 9c88e986cbffc..5474cd78b0868 100644 --- a/coderd/database/dbauthz/dbauthz.go +++ b/coderd/database/dbauthz/dbauthz.go @@ -3554,6 +3554,16 @@ func (q *querier) ListWorkspaceAgentPortShares(ctx context.Context, workspaceID return q.db.ListWorkspaceAgentPortShares(ctx, workspaceID) } +func (q *querier) MarkAllInboxNotificationsAsRead(ctx context.Context, arg database.MarkAllInboxNotificationsAsReadParams) error { + resource := rbac.ResourceInboxNotification.WithOwner(arg.UserID.String()) + + if err := q.authorizeContext(ctx, policy.ActionUpdate, resource); err != nil { + return err + } + + return q.db.MarkAllInboxNotificationsAsRead(ctx, arg) +} + func (q *querier) OIDCClaimFieldValues(ctx context.Context, args database.OIDCClaimFieldValuesParams) ([]string, error) { resource := rbac.ResourceIdpsyncSettings if args.OrganizationID != uuid.Nil { diff --git a/coderd/database/dbauthz/dbauthz_test.go b/coderd/database/dbauthz/dbauthz_test.go index ec8ced783fa0a..6e6380baffad4 100644 --- a/coderd/database/dbauthz/dbauthz_test.go +++ b/coderd/database/dbauthz/dbauthz_test.go @@ -4640,6 +4640,15 @@ func (s *MethodTestSuite) TestNotifications() { ReadAt: sql.NullTime{Time: readAt, Valid: true}, }).Asserts(rbac.ResourceInboxNotification.WithID(notifID).WithOwner(u.ID.String()), policy.ActionUpdate) })) + + s.Run("MarkAllInboxNotificationsAsRead", s.Subtest(func(db database.Store, check *expects) { + u := dbgen.User(s.T(), db, database.User{}) + + check.Args(database.MarkAllInboxNotificationsAsReadParams{ + UserID: u.ID, + ReadAt: sql.NullTime{Time: dbtestutil.NowInDefaultTimezone(), Valid: true}, + }).Asserts(rbac.ResourceInboxNotification.WithOwner(u.ID.String()), policy.ActionUpdate) + })) } func (s *MethodTestSuite) TestOAuth2ProviderApps() { diff --git a/coderd/database/dbmem/dbmem.go b/coderd/database/dbmem/dbmem.go index 1867c91abf837..5d0d0f4af0820 100644 --- a/coderd/database/dbmem/dbmem.go +++ b/coderd/database/dbmem/dbmem.go @@ -9498,6 +9498,21 @@ func (q *FakeQuerier) ListWorkspaceAgentPortShares(_ context.Context, workspaceI return shares, nil } +func (q *FakeQuerier) MarkAllInboxNotificationsAsRead(_ context.Context, arg database.MarkAllInboxNotificationsAsReadParams) error { + err := validateDatabaseType(arg) + if err != nil { + return err + } + + for idx, notif := range q.inboxNotifications { + if notif.UserID == arg.UserID && !notif.ReadAt.Valid { + q.inboxNotifications[idx].ReadAt = arg.ReadAt + } + } + + return nil +} + // nolint:forcetypeassert func (q *FakeQuerier) OIDCClaimFieldValues(_ context.Context, args database.OIDCClaimFieldValuesParams) ([]string, error) { orgMembers := q.getOrganizationMemberNoLock(args.OrganizationID) diff --git a/coderd/database/dbmetrics/querymetrics.go b/coderd/database/dbmetrics/querymetrics.go index 407d9e48bfcf8..fac76b69c33f5 100644 --- a/coderd/database/dbmetrics/querymetrics.go +++ b/coderd/database/dbmetrics/querymetrics.go @@ -2257,6 +2257,13 @@ func (m queryMetricsStore) ListWorkspaceAgentPortShares(ctx context.Context, wor return r0, r1 } +func (m queryMetricsStore) MarkAllInboxNotificationsAsRead(ctx context.Context, arg database.MarkAllInboxNotificationsAsReadParams) error { + start := time.Now() + r0 := m.s.MarkAllInboxNotificationsAsRead(ctx, arg) + m.queryLatencies.WithLabelValues("MarkAllInboxNotificationsAsRead").Observe(time.Since(start).Seconds()) + return r0 +} + func (m queryMetricsStore) OIDCClaimFieldValues(ctx context.Context, organizationID database.OIDCClaimFieldValuesParams) ([]string, error) { start := time.Now() r0, r1 := m.s.OIDCClaimFieldValues(ctx, organizationID) diff --git a/coderd/database/dbmock/dbmock.go b/coderd/database/dbmock/dbmock.go index fbe4d0745fbb0..89c75aba31748 100644 --- a/coderd/database/dbmock/dbmock.go +++ b/coderd/database/dbmock/dbmock.go @@ -4763,6 +4763,20 @@ func (mr *MockStoreMockRecorder) ListWorkspaceAgentPortShares(ctx, workspaceID a return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "ListWorkspaceAgentPortShares", reflect.TypeOf((*MockStore)(nil).ListWorkspaceAgentPortShares), ctx, workspaceID) } +// MarkAllInboxNotificationsAsRead mocks base method. +func (m *MockStore) MarkAllInboxNotificationsAsRead(ctx context.Context, arg database.MarkAllInboxNotificationsAsReadParams) error { + m.ctrl.T.Helper() + ret := m.ctrl.Call(m, "MarkAllInboxNotificationsAsRead", ctx, arg) + ret0, _ := ret[0].(error) + return ret0 +} + +// MarkAllInboxNotificationsAsRead indicates an expected call of MarkAllInboxNotificationsAsRead. +func (mr *MockStoreMockRecorder) MarkAllInboxNotificationsAsRead(ctx, arg any) *gomock.Call { + mr.mock.ctrl.T.Helper() + return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "MarkAllInboxNotificationsAsRead", reflect.TypeOf((*MockStore)(nil).MarkAllInboxNotificationsAsRead), ctx, arg) +} + // OIDCClaimFieldValues mocks base method. func (m *MockStore) OIDCClaimFieldValues(ctx context.Context, arg database.OIDCClaimFieldValuesParams) ([]string, error) { m.ctrl.T.Helper() diff --git a/coderd/database/querier.go b/coderd/database/querier.go index d72469650f0ea..4301461b9d426 100644 --- a/coderd/database/querier.go +++ b/coderd/database/querier.go @@ -469,6 +469,7 @@ type sqlcQuerier interface { ListProvisionerKeysByOrganization(ctx context.Context, organizationID uuid.UUID) ([]ProvisionerKey, error) ListProvisionerKeysByOrganizationExcludeReserved(ctx context.Context, organizationID uuid.UUID) ([]ProvisionerKey, error) ListWorkspaceAgentPortShares(ctx context.Context, workspaceID uuid.UUID) ([]WorkspaceAgentPortShare, error) + MarkAllInboxNotificationsAsRead(ctx context.Context, arg MarkAllInboxNotificationsAsReadParams) error OIDCClaimFieldValues(ctx context.Context, arg OIDCClaimFieldValuesParams) ([]string, error) // OIDCClaimFields returns a list of distinct keys in the the merged_claims fields. // This query is used to generate the list of available sync fields for idp sync settings. diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go index ff135aaa8f14e..d3235461a9af0 100644 --- a/coderd/database/queries.sql.go +++ b/coderd/database/queries.sql.go @@ -4514,6 +4514,25 @@ func (q *sqlQuerier) InsertInboxNotification(ctx context.Context, arg InsertInbo return i, err } +const markAllInboxNotificationsAsRead = `-- name: MarkAllInboxNotificationsAsRead :exec +UPDATE + inbox_notifications +SET + read_at = $1 +WHERE + user_id = $2 and read_at IS NULL +` + +type MarkAllInboxNotificationsAsReadParams struct { + ReadAt sql.NullTime `db:"read_at" json:"read_at"` + UserID uuid.UUID `db:"user_id" json:"user_id"` +} + +func (q *sqlQuerier) MarkAllInboxNotificationsAsRead(ctx context.Context, arg MarkAllInboxNotificationsAsReadParams) error { + _, err := q.db.ExecContext(ctx, markAllInboxNotificationsAsRead, arg.ReadAt, arg.UserID) + return err +} + const updateInboxNotificationReadStatus = `-- name: UpdateInboxNotificationReadStatus :exec UPDATE inbox_notifications diff --git a/coderd/database/queries/notificationsinbox.sql b/coderd/database/queries/notificationsinbox.sql index 43ab63ae83652..41b48fe3d9505 100644 --- a/coderd/database/queries/notificationsinbox.sql +++ b/coderd/database/queries/notificationsinbox.sql @@ -57,3 +57,11 @@ SET read_at = $1 WHERE id = $2; + +-- name: MarkAllInboxNotificationsAsRead :exec +UPDATE + inbox_notifications +SET + read_at = $1 +WHERE + user_id = $2 and read_at IS NULL; diff --git a/coderd/inboxnotifications.go b/coderd/inboxnotifications.go index 5437165bb71a6..423b1ce0ac034 100644 --- a/coderd/inboxnotifications.go +++ b/coderd/inboxnotifications.go @@ -345,3 +345,31 @@ func (api *API) updateInboxNotificationReadStatus(rw http.ResponseWriter, r *htt UnreadCount: int(unreadCount), }) } + +// markAllInboxNotificationsAsRead marks as read all unread notifications for authenticated user. +// @Summary Mark all unread notifications as read +// @ID mark-all-unread-notifications-as-read +// @Security CoderSessionToken +// @Tags Notifications +// @Success 204 +// @Router /notifications/inbox/mark-all-as-read [put] +func (api *API) markAllInboxNotificationsAsRead(rw http.ResponseWriter, r *http.Request) { + var ( + ctx = r.Context() + apikey = httpmw.APIKey(r) + ) + + err := api.Database.MarkAllInboxNotificationsAsRead(ctx, database.MarkAllInboxNotificationsAsReadParams{ + UserID: apikey.UserID, + ReadAt: sql.NullTime{Time: dbtime.Now(), Valid: true}, + }) + if err != nil { + api.Logger.Error(ctx, "failed to mark all unread notifications as read", slog.Error(err)) + httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{ + Message: "Failed to mark all unread notifications as read.", + }) + return + } + + rw.WriteHeader(http.StatusNoContent) +} diff --git a/coderd/inboxnotifications_test.go b/coderd/inboxnotifications_test.go index 81e119381d281..1e72f2b51789e 100644 --- a/coderd/inboxnotifications_test.go +++ b/coderd/inboxnotifications_test.go @@ -37,6 +37,7 @@ func TestInboxNotification_Watch(t *testing.T) { // I skip these tests specifically on windows as for now they are flaky - only on Windows. // For now the idea is that the runner takes too long to insert the entries, could be worth // investigating a manual Tx. + // see: https://github.com/coder/internal/issues/503 if runtime.GOOS == "windows" { t.Skip("our runners are randomly taking too long to insert entries") } @@ -305,6 +306,7 @@ func TestInboxNotifications_List(t *testing.T) { // I skip these tests specifically on windows as for now they are flaky - only on Windows. // For now the idea is that the runner takes too long to insert the entries, could be worth // investigating a manual Tx. + // see: https://github.com/coder/internal/issues/503 if runtime.GOOS == "windows" { t.Skip("our runners are randomly taking too long to insert entries") } @@ -588,6 +590,7 @@ func TestInboxNotifications_ReadStatus(t *testing.T) { // I skip these tests specifically on windows as for now they are flaky - only on Windows. // For now the idea is that the runner takes too long to insert the entries, could be worth // investigating a manual Tx. + // see: https://github.com/coder/internal/issues/503 if runtime.GOOS == "windows" { t.Skip("our runners are randomly taking too long to insert entries") } @@ -723,3 +726,76 @@ func TestInboxNotifications_ReadStatus(t *testing.T) { require.Empty(t, updatedNotif.Notification) }) } + +func TestInboxNotifications_MarkAllAsRead(t *testing.T) { + t.Parallel() + + // I skip these tests specifically on windows as for now they are flaky - only on Windows. + // For now the idea is that the runner takes too long to insert the entries, could be worth + // investigating a manual Tx. + // see: https://github.com/coder/internal/issues/503 + if runtime.GOOS == "windows" { + t.Skip("our runners are randomly taking too long to insert entries") + } + + t.Run("ok", func(t *testing.T) { + t.Parallel() + client, _, api := coderdtest.NewWithAPI(t, &coderdtest.Options{}) + firstUser := coderdtest.CreateFirstUser(t, client) + client, member := coderdtest.CreateAnotherUser(t, client, firstUser.OrganizationID) + + ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong) + defer cancel() + + notifs, err := client.ListInboxNotifications(ctx, codersdk.ListInboxNotificationsRequest{}) + require.NoError(t, err) + require.NotNil(t, notifs) + require.Equal(t, 0, notifs.UnreadCount) + require.Empty(t, notifs.Notifications) + + for i := range 20 { + dbgen.NotificationInbox(t, api.Database, database.InsertInboxNotificationParams{ + ID: uuid.New(), + UserID: member.ID, + TemplateID: notifications.TemplateWorkspaceOutOfMemory, + Title: fmt.Sprintf("Notification %d", i), + Actions: json.RawMessage("[]"), + Content: fmt.Sprintf("Content of the notif %d", i), + CreatedAt: dbtime.Now(), + }) + } + + notifs, err = client.ListInboxNotifications(ctx, codersdk.ListInboxNotificationsRequest{}) + require.NoError(t, err) + require.NotNil(t, notifs) + require.Equal(t, 20, notifs.UnreadCount) + require.Len(t, notifs.Notifications, 20) + + err = client.MarkAllInboxNotificationsAsRead(ctx) + require.NoError(t, err) + + notifs, err = client.ListInboxNotifications(ctx, codersdk.ListInboxNotificationsRequest{}) + require.NoError(t, err) + require.NotNil(t, notifs) + require.Equal(t, 0, notifs.UnreadCount) + require.Len(t, notifs.Notifications, 20) + + for i := range 10 { + dbgen.NotificationInbox(t, api.Database, database.InsertInboxNotificationParams{ + ID: uuid.New(), + UserID: member.ID, + TemplateID: notifications.TemplateWorkspaceOutOfMemory, + Title: fmt.Sprintf("Notification %d", i), + Actions: json.RawMessage("[]"), + Content: fmt.Sprintf("Content of the notif %d", i), + CreatedAt: dbtime.Now(), + }) + } + + notifs, err = client.ListInboxNotifications(ctx, codersdk.ListInboxNotificationsRequest{}) + require.NoError(t, err) + require.NotNil(t, notifs) + require.Equal(t, 10, notifs.UnreadCount) + require.Len(t, notifs.Notifications, 25) + }) +} diff --git a/codersdk/inboxnotification.go b/codersdk/inboxnotification.go index 845140ea658c7..056584d6cf359 100644 --- a/codersdk/inboxnotification.go +++ b/codersdk/inboxnotification.go @@ -109,3 +109,21 @@ func (c *Client) UpdateInboxNotificationReadStatus(ctx context.Context, notifID var resp UpdateInboxNotificationReadStatusResponse return resp, json.NewDecoder(res.Body).Decode(&resp) } + +func (c *Client) MarkAllInboxNotificationsAsRead(ctx context.Context) error { + res, err := c.Request( + ctx, http.MethodPut, + "/api/v2/notifications/inbox/mark-all-as-read", + nil, + ) + if err != nil { + return err + } + defer res.Body.Close() + + if res.StatusCode != http.StatusNoContent { + return ReadBodyAsError(res) + } + + return nil +} diff --git a/docs/reference/api/notifications.md b/docs/reference/api/notifications.md index 9a181cc1d69c5..67b61bccb6302 100644 --- a/docs/reference/api/notifications.md +++ b/docs/reference/api/notifications.md @@ -106,6 +106,26 @@ curl -X GET http://coder-server:8080/api/v2/notifications/inbox \ To perform this operation, you must be authenticated. [Learn more](authentication.md). +## Mark all unread notifications as read + +### Code samples + +```shell +# Example request using curl +curl -X PUT http://coder-server:8080/api/v2/notifications/inbox/mark-all-as-read \ + -H 'Coder-Session-Token: API_KEY' +``` + +`PUT /notifications/inbox/mark-all-as-read` + +### Responses + +| Status | Meaning | Description | Schema | +|--------|-----------------------------------------------------------------|-------------|--------| +| 204 | [No Content](https://tools.ietf.org/html/rfc7231#section-6.3.5) | No Content | | + +To perform this operation, you must be authenticated. [Learn more](authentication.md). + ## Watch for new inbox notifications ### Code samples