From 1703f85cd9ad9eb83bc0fe943b71f42a4c1e0fef Mon Sep 17 00:00:00 2001
From: iglocska <andras.iklody@gmail.com>
Date: Fri, 13 Nov 2020 12:56:02 +0100
Subject: [PATCH] chg: [automation] page updated to accomodate new authkey
 system

- since the API keys can no longer be retrieved, point the user to where they can manage their keys
---
 app/View/Events/automation.ctp | 40 +++++++++++++++++++++++-----------
 1 file changed, 27 insertions(+), 13 deletions(-)

diff --git a/app/View/Events/automation.ctp b/app/View/Events/automation.ctp
index c1b81f9f3..bbc438653 100644
--- a/app/View/Events/automation.ctp
+++ b/app/View/Events/automation.ctp
@@ -1,3 +1,6 @@
+<?php
+    $api_key = empty(Configure::read('Security.advanced_authkeys')) ? $me['authkey'] : 'YOUR_API_KEY';
+?>
 <div class="event index">
     <h2><?php echo __('Automation');?></h2>
     <p><?php echo __('Automation functionality is designed to automatically feed other tools and systems with the data in your MISP repository.
@@ -8,15 +11,26 @@
     </p>
     <span>
         <?php
-            echo __(
-                'Your current key is: <code>%s</code>. You can %s this key.',
-                $me['authkey'],
-                $this->Form->postLink(
-                    __('reset'),
-                    array('controller' => 'users', 'action' => 'resetauthkey', 'me'),
-                    array('div' => false)
-                )
-            );
+            if (empty(Configure::read('Security.advanced_authkeys'))) {
+                echo __(
+                    'Your current key is: <code>%s</code>. You can %s this key.',
+                    $me['authkey'],
+                    $this->Form->postLink(
+                        __('reset'),
+                        array('controller' => 'users', 'action' => 'resetauthkey', 'me'),
+                        array('div' => false)
+                    )
+                );
+            } else {
+                echo __(
+                    'You can view and manage your API keys under your profile, found %s',
+                    sprintf(
+                        '<a href="%s/users/view/me">%s</a>',
+                        $baseurl,
+                        __('here')
+                    )
+                );
+            }
         ?>
     </span>
     <?php
@@ -73,7 +87,7 @@
         $headers = array(
             'Accept: application/json',
             'Content-type: application/json',
-            'Authorization: ' . $me['authkey']
+            'Authorization: ' . $api_key
         );
         $headers = implode("\n", $headers);
         $body = json_encode(
@@ -130,7 +144,7 @@
     <p>JSON:</p>
     <pre><?php
         echo 'Headers' . PHP_EOL;
-        echo 'Authorization: ' . h($me['authkey']) . PHP_EOL;
+        echo 'Authorization: ' . h($api_key) . PHP_EOL;
         echo 'Accept: application/json' . PHP_EOL;
         echo 'Content-type: application/json';
     ?></pre>
@@ -138,7 +152,7 @@
     <p>XML:</p>
     <pre><?php
         echo 'Headers' . PHP_EOL;
-        echo 'Authorization: ' . h($me['authkey']) . PHP_EOL;
+        echo 'Authorization: ' . h($api_key) . PHP_EOL;
         echo 'Accept: application/json' . PHP_EOL;
         echo 'Content-type: application/json';
     ?></pre>
@@ -303,7 +317,7 @@
     <b>URL</b>: <?php echo $baseurl.'/events/index'; ?><br />
     <b>Headers</b>:<br />
     <pre><?php
-        echo 'Authorization: ' . $me['authkey'] . PHP_EOL;
+        echo 'Authorization: ' . $api_key . PHP_EOL;
         echo 'Accept: application/json' . PHP_EOL;
         echo 'Content-type: application/json';
     ?></pre>