office365_view.py

# File: office365_view.py
#
# Copyright (c) 2017-2024 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software distributed under
# the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
# either express or implied. See the License for the specific language governing permissions
# and limitations under the License.
def get_ctx_result(provides, result):
    """Function that parses data.

    :param result: result
    :param provides: action name
    :return: response data
    """

    file_attachment = []
    item_attachment = []
    reference_attachment = []
    other_attachment = []

    ctx_result = {}

    param = result.get_param()
    summary = result.get_summary()
    data = result.get_data()

    ctx_result["param"] = param

    if summary:
        ctx_result["summary"] = summary
    ctx_result["action"] = provides
    if not data:
        ctx_result["data"] = {}
        return ctx_result

    if provides == "get email":
        for result in data:
            attachments = result.get("attachments", [])

            if not attachments:
                break

            for attachment in attachments:
                attachment_type = attachment.get("attachmentType", "")
                if attachment_type == "#microsoft.graph.fileAttachment":
                    file_attachment.append(attachment)
                elif attachment_type == "#microsoft.graph.itemAttachment":
                    item_attachment.append(attachment)
                elif attachment_type == "#microsoft.graph.referenceAttachment":
                    reference_attachment.append(attachment)
                else:
                    other_attachment.append(attachment)

            attachment_data = {
                "file_attachment": file_attachment,
                "item_attachment": item_attachment,
                "reference_attachment": reference_attachment,
                "other_attachment": other_attachment,
            }

            result.update({"attachment_data": attachment_data})

    ctx_result["data"] = data

    return ctx_result


def display_view(provides, all_app_runs, context):
    """Function that displays view.

    :param provides: action name
    :param context: context
    :param all_app_runs: all app runs
    :return: html page
    """

    context["results"] = results = []
    for summary, action_results in all_app_runs:
        for result in action_results:

            ctx_result = get_ctx_result(provides, result)
            if not ctx_result:
                continue
            results.append(ctx_result)

    if provides == "list events":
        return_page = "office365_list_events.html"

    if provides == "get email":
        return_page = "office365_get_email.html"

    if provides == "run query":
        return_page = "office365_run_query.html"

    if provides == "get rule":
        return_page = "office365_get_rule.html"

    if provides == "list rules":
        return_page = "office365_list_rules.html"

    if provides == "resolve name":
        return_page = "office365_resolve_name.html"

    return return_page