# Webhook URL Configuration
webhooks.list=wb_project1,wb_project2

wb_project1.url=https://<codebeamer server>/<webhook URI for SCM Repository>
wb_project1.secret=<secret>
wb_project1.projectPath=/test1/project1.pj

wb_project2.url=https:////<codebeamer server>/<webhook URI for SCM Repository>
wb_project2.secret=<secret>
wb_project2.projectPath=/test1/project2.pj

#Configure the Codebeamer API endpoint that would be invoked to get json response containing tracker item details 

webhook.itemvalidation.url=<protocol>://<hostname>:<port>/api/v3/items

#configure the timeout for item validation endpoint in ms. Default is 25 seconds.
webhook.itemvalidation.timeout=0

#configure the auth scheme for item validation.
webhook.itemvalidation.authscheme=oauth

#Configure OAuth details for a user, such as a service principal, that has access to the Codebeamer API and to Codebeamer projects that have RV&S SCM repositories created.
webhook.itemvalidation.oauth.clientid=
#Ensure to use an appropriate encryption technique to Encrypt clientsecret
webhook.itemvalidation.oauth.clientsecret=
webhook.itemvalidation.oauth.scope=
webhook.itemvalidation.oauth.tokenurl=

Server.submitChangePackage.post
Server.rejectChangePackage.post
Server.closeChangePackage.post
Server.commitChangePackage.post
Server.discardChangePackageEntry.post
Server.reopenChangePackage.post
Project.newVariant.post
Project.deleteVariant.post
Project.deactivateVariant.post
Project.activateVariant.post
Project.checkpoint.post

function print(s){
     webhookBean.logDebugMessage(s);
}

// Aborts script execution
{
      environment.abortScript(msg,true);
}
#The function validateJsonResponse processes the JSON response from Codebeamer API endpoint and use it for validations.
#The below example demonstrates retrieving “assignedTo” field from response and comparing it with change package creator user from webhookBean”
#Update the function to add additional rules such as checking the “State” or other fields based on business requirements

function validateJsonResponse(jsonResponseObj) {
     var JSONObject = Packages.org.json.JSONObject;

     var body = jsonResponseObj;

     // Parse JSON
     var root = new JSONObject(body);

     print("Payload root keys: " + root.keySet());

var assignedTo;
if (root.has("assignedTo")) {
       assignedTo = root.getJSONArray("assignedTo");
} else {
       abortScript("No user(s) assigned.");
}
if(!assignedTo || assignedTo == null){
      abortScript("No user(s) assigned.");
}
  var currentUser = webhookBean.getUserName();
  var isAssigned = false;

  for (var i = 0; i < assignedTo.length(); i++) {
      var name = assignedTo.getJSONObject(i).getString("name");
      if (name.equalsIgnoreCase(currentUser)) {
          isAssigned = true;
          break;
         }
     }
if(!isAssigned){
      abortScript("Change Package creator and assigned user not matched.");
} else {
      print("Assigned user validated successfully");
   }
}

// OAuth token generation 

function getOAuthAccessToken() { 

   try { 
// Get OAuth configuration from webhook-config.properties 
//Define a property and provide the client id for token generation. 
     var oauthClientId = webhookBean.getOauthClientId(); 
//Define a property and provide the client secret for token generation. 
     var oauthClientSecret = webhookBean.getOauthClientSecret(); 
//Define a property and provide the scope for token generation. 
     var oauthScope = webhookBean.getOauthScope(); 
//Define a property and provide the token URL for token generation. 
     var oauthTokenUrl = webhookBean.getOauthClientTokenUrl(); 
       if (oauthClientId == null || oauthClientSecret == null || oauthScope == null || oauthTokenUrl == null) { 
          abortScript("OAuth configuration not found. Please set OAuthClientId, OAuthClientSecret, OAuthScope, and OAuthTokenUrl in webhook-config.properties"); 

       } 

//Ensure to use an appropriate decryption technique to retrieve oauthClientSecret received from getOauthClientSecret() 
       oauthClientSecret = new java.lang.String(java.util.Base64.getDecoder().decode(oauthClientSecret)); 

//Generate OAuth access token 
      var oauthAccessToken = environment.getAccessToken(oauthClientId, oauthClientSecret, oauthScope, oauthTokenUrl); 

      if (oauthAccessToken == null || oauthAccessToken.length() == 0) { 
          abortScript("Failed to generate OAuth access token"); 
      }

     print("getOAuthAccessToken : Token generated Successfully"); 
       return "Bearer " + oauthAccessToken; 
  } catch (e) { 
       abortScript("Error generating OAuth token"); 
  } 
}