Send a notification warning affected users that identities are changing.

See explanation here: sandstorm-io/sandstorm-website#289

We send a bell notification to all users who have multiple identities where the display names of those identities are not all the same. We also show a warning on the accounts page for these users.

We specifically look for users with varying names on the assumption that if all the names are the same, then the user really only has one identity anyway, and the coming changes will be a strict improvement for them. I didn't feel it was necessary to compare profile pictures, handles, or preferred pronouns because if the display name is the same, it seems unlikely that the profiles vary significantly in these other factors.

Author: kentonv

shell/client/accounts/account-settings.html

@@ -28,6 +28,11 @@ <h1>Account</h1>
 
     <h3 class="title-bar">Linked identities</h3>
 
+    {{#if affectedByIdentityRefactor}}
+    <p class="alert-identity-refactor">We're changing the way identities work. Your account may be affected.
+        <a href="https://sandstorm.io/news/2017-05-08-refactoring-identities">Learn more &raquo;</a></p>
+    {{/if}}
+
     {{#with actionCompleted}}
       {{#if success}}
         {{#focusingSuccessBox}}

shell/client/accounts/account-settings.js

@@ -184,6 +184,24 @@ Template.sandstormAccountSettings.helpers({
   showDeleteButton: function () {
     return !Template.instance().data._db.isUserInOrganization(Meteor.user());
   },
+
+  affectedByIdentityRefactor: function () {
+    let previousName = null;
+    let needsNotification = false;
+
+    SandstormDb.getUserIdentityIds(Meteor.user())
+      .map((id) => Meteor.users.findOne({ _id: id }))
+      .filter((identity) => !!identity)
+      .forEach((identity) => {
+        const name = identity.profile && identity.profile.name;
+        if (!name || (previousName && previousName !== name)) {
+          needsNotification = true;
+        }
+        previousName = name;
+      });
+
+    return needsNotification;
+  },
 });
 
 GENDERS = { male: "male", female: "female", neutral: "neutral", robot: "robot" };

shell/client/notifications-client.js

@@ -162,6 +162,11 @@ Template.notificationItem.helpers({
     const data = Template.currentData();
     return !!data.ongoing;
   },
+
+  isIdentityChanges() {
+    const data = Template.currentData();
+    return !!data.identityChanges;
+  },
 });
 
 Template.appUpdateNotificationItem.helpers({
@@ -249,6 +254,12 @@ Template.referralNotificationItem.events({
   },
 });
 
+Template.identityChangesNotificationItem.events({
+  "click .notification-item"(evt) {
+    Meteor.call("dismissNotification", this._id);
+  },
+});
+
 Template.adminNotificationItem.helpers({
   isType(type) {
     return this.admin.type === type;

shell/client/notifications.html

@@ -116,6 +116,22 @@
   {{/linkTo}}
 </template>
 
+<template name="identityChangesNotificationItem">
+  <a href="https://sandstorm.io/news/2017-05-08-refactoring-identities" class="notification-item"
+     target="_blank">
+    <div class="notification-icon">
+      <img src="/sandstorm-gradient-logo.svg">
+    </div>
+
+    We're changing the way identities work in Sandstorm. Your account may be affected. Click here
+    to learn more.
+
+    <div class="notification-footer">
+      <span title="{{timestamp}}" class="notification-timestamp">{{dateString timestamp}}</span>
+    </div>
+  </a>
+</template>
+
 <template name="grainActivityNotificationItem">
   <a class="notification-item" href="{{notificationUrl}}">
     <div class="notification-icon">
@@ -157,11 +173,15 @@
   {{else}}
   {{#if isOngoing }}
     {{> backgroundedGrainNotificationItem . }}
+  {{else}}
+  {{#if isIdentityChanges }}
+    {{> identityChangesNotificationItem . }}
   {{else}}
     {{> grainActivityNotificationItem . }}
   {{/if}}
   {{/if}}
   {{/if}}
   {{/if}}
   {{/if}}
+  {{/if}}
 </template>

shell/client/styles/_account.scss

@@ -492,6 +492,11 @@ body>.main-content>.account {
     padding: 5px;
   }
 
+  p.alert-identity-refactor {
+    color: red;
+    padding-left: 5px;
+  }
+
   .identities-and-editor {
     @media #{$not-mobile-only} {
       width: 660px;

shell/imports/server/migrations.js

@@ -787,6 +787,48 @@ function setIpBlacklist(db, backend) {
   }
 }
 
+function notifyIdentityChanges(db, backend) {
+  // Notify users who might be affected by the identity model changes.
+  //
+  // Two types of users are affected:
+  // - Users who have multiple identities with differing names.
+  // - Users who have identities that are shared with other users.
+  //
+  // However, the second group seems like it must be a subset of the first group. So we only check
+  // for the first.
+
+  const names = {};
+  Meteor.users.find({ "profile.name": { $exists: true } }, { fields: { "profile.name": 1 } })
+      .forEach(user => {
+    names[user._id] = user.profile.name;
+  });
+
+  Meteor.users.find({ loginIdentities: { $exists: true } },
+                    { fields: { loginIdentities: 1, nonloginIdentities: 1 } }).forEach(user => {
+    let previousName = null;
+    let needsNotification = false;
+    SandstormDb.getUserIdentityIds( user).forEach(identityId => {
+      const name = names[identityId];
+      if (!name || (previousName && previousName !== name)) {
+        needsNotification = true;
+      }
+      previousName = name;
+    });
+
+    if (needsNotification) {
+      db.collections.notifications.upsert({
+        userId: user._id,
+        identityChanges: true,
+      }, {
+        userId: user._id,
+        identityChanges: true,
+        timestamp: new Date(),
+        isUnread: true,
+      });
+    }
+  });
+}
+
 // This must come after all the functions named within are defined.
 // Only append to this list!  Do not modify or remove list entries;
 // doing so is likely change the meaning and semantics of user databases.
@@ -824,6 +866,7 @@ const MIGRATIONS = [
   addMembraneRequirementsToIdentities,
   addEncryptionToFrontendRefIpNetwork,
   setIpBlacklist,
+  notifyIdentityChanges,
 ];
 
 const NEW_SERVER_STARTUP = [

shell/packages/sandstorm-db/db.js

@@ -637,6 +637,8 @@ Notifications = new Mongo.Collection("notifications", collectionOptions);
 //   mailingListBonus: Like `referral`, but notify the user about the mailing list bonus. This is
 //                 a one-time notification only to Oasis users who existed when the bonus program
 //                 was implemented.
+//   identityChanges: If this boolean field is true, this notification should show a warning about
+//                 upcoming changes to the identity model.
 
 ActivitySubscriptions = new Mongo.Collection("activitySubscriptions", collectionOptions);
 // Activity events to which a user is subscribed.

shell/server/notifications-server.js

@@ -240,6 +240,13 @@ Meteor.methods({
       isUnread: true,
     });
 
+    Notifications.insert({
+      userId: this.userId,
+      identityChanges: true,
+      timestamp: new Date(),
+      isUnread: true,
+    });
+
     if (global.BlackrockPayments) {
       Notifications.insert({
         userId: this.userId,