Attachment blob upload (#1229)

* Add Cipher attachment upload endpoints

* Add validation bool to attachment storage data

This bool is used to determine whether or not to renew upload links

* Add model to request a new attachment to be made for later upload

* Add model to respond with created attachment.

The two cipher properties represent the two different
cipher model types that can be returned. Cipher Response from
personal items and mini response from organizations

* Create Azure SAS-authorized upload links for both one-shot and block uploads

* Add service methods to handle delayed upload and file size validation

* Add emergency access method for downloading attachments direct from Azure

* Add new attachment storage methods to other services

* Update service interfaces

* Log event grid exceptions

* Limit Send and Attachment Size to 500MB

* capitalize Key property

* Add key validation to Azure Event Grid endpoint

* Delete blob for unexpected blob creation events

* Set Event Grid key at API startup

* Change renew attachment upload url request path to match Send

* Shore up attachment cleanup method.

As long as we have the required information, we should always delete
attachments from each the Repository, the cipher in memory, and the
file storage service to ensure they're all synched.

src/Api/Utilities/ApiHelpers.cs

@@ -12,6 +12,7 @@ namespace Bit.Api.Utilities
 {
     public static class ApiHelpers
     {
+        public static string EventGridKey { get; set; }
         public async static Task<T> ReadJsonFileFromBody<T>(HttpContext httpContext, IFormFile file, long maxSize = 51200)
         {
             T obj = default(T);
@@ -42,9 +43,16 @@ namespace Bit.Api.Utilities
         /// <param name="eventTypeHandlers">Dictionary of eventType strings and their associated handlers.</param>
         /// <returns>OkObjectResult</returns>
         /// <remarks>Reference https://docs.microsoft.com/en-us/azure/event-grid/receive-events</remarks>
-        public async static Task<OkObjectResult> HandleAzureEvents(HttpRequest request,
+        public async static Task<ObjectResult> HandleAzureEvents(HttpRequest request,
             Dictionary<string, Func<EventGridEvent, Task>> eventTypeHandlers)
         {
+            var queryKey = request.Query["key"];
+
+            if (queryKey != EventGridKey)
+            {
+                return new UnauthorizedObjectResult("Authentication failed. Please use a valid key.");
+            }
+
             var response = string.Empty;
             var requestContent = await new StreamReader(request.Body).ReadToEndAsync();
             if (string.IsNullOrWhiteSpace(requestContent))

src/Api/Utilities/MultipartFormDataHelper.cs

@@ -108,7 +108,7 @@ namespace Bit.Api.Utilities
             }
         }
 
-        public static async Task GetSendFileAsync(this HttpRequest request, Func<Stream, Task> callback)
+        public static async Task GetFileAsync(this HttpRequest request, Func<Stream, Task> callback)
         {
             var boundary = GetBoundary(MediaTypeHeaderValue.Parse(request.ContentType),
                 _defaultFormOptions.MultipartBoundaryLengthLimit);