mleku
4 months ago
10 changed files with 293 additions and 17 deletions
@ -0,0 +1,59 @@
@@ -0,0 +1,59 @@
|
||||
package acl |
||||
|
||||
import ( |
||||
"interfaces.orly/acl" |
||||
"utils.orly/atomic" |
||||
) |
||||
|
||||
var Registry = &S{} |
||||
|
||||
type S struct { |
||||
ACL []acl.I |
||||
Active atomic.String |
||||
} |
||||
|
||||
type A struct{ S } |
||||
|
||||
func (s *S) Register(i acl.I) { |
||||
(*s).ACL = append((*s).ACL, i) |
||||
} |
||||
|
||||
func (s *S) Configure(cfg ...any) (err error) { |
||||
for _, i := range s.ACL { |
||||
if i.Type() == s.Active.Load() { |
||||
err = i.Configure(cfg...) |
||||
return |
||||
} |
||||
} |
||||
return err |
||||
} |
||||
|
||||
func (s *S) GetAccessLevel(pub []byte) (level string) { |
||||
for _, i := range s.ACL { |
||||
if i.Type() == s.Active.Load() { |
||||
level = i.GetAccessLevel(pub) |
||||
break |
||||
} |
||||
} |
||||
return |
||||
} |
||||
|
||||
func (s *S) GetACLInfo() (name, description, documentation string) { |
||||
for _, i := range s.ACL { |
||||
if i.Type() == s.Active.Load() { |
||||
name, description, documentation = i.GetACLInfo() |
||||
break |
||||
} |
||||
} |
||||
return |
||||
} |
||||
|
||||
func (s *S) Type() (typ string) { |
||||
for _, i := range s.ACL { |
||||
if i.Type() == s.Active.Load() { |
||||
typ = i.Type() |
||||
break |
||||
} |
||||
} |
||||
return |
||||
} |
||||
@ -0,0 +1,127 @@
@@ -0,0 +1,127 @@
|
||||
package acl |
||||
|
||||
import ( |
||||
"reflect" |
||||
"sync" |
||||
|
||||
database "database.orly" |
||||
"database.orly/indexes/types" |
||||
"encoders.orly/bech32encoding" |
||||
"encoders.orly/event" |
||||
"encoders.orly/filter" |
||||
"encoders.orly/hex" |
||||
"encoders.orly/kind" |
||||
"encoders.orly/tag" |
||||
"lol.mleku.dev/chk" |
||||
"lol.mleku.dev/errorf" |
||||
"lol.mleku.dev/log" |
||||
"next.orly.dev/app/config" |
||||
utils "utils.orly" |
||||
) |
||||
|
||||
type Follows struct { |
||||
cfg *config.C |
||||
*database.D |
||||
followsMx sync.RWMutex |
||||
admins [][]byte |
||||
follows [][]byte |
||||
} |
||||
|
||||
func (f *Follows) Configure(cfg ...any) (err error) { |
||||
log.I.F("configuring follows ACL") |
||||
for _, ca := range cfg { |
||||
switch c := ca.(type) { |
||||
case *config.C: |
||||
log.D.F("setting ACL config: %v", c) |
||||
f.cfg = c |
||||
case *database.D: |
||||
log.D.F("setting ACL database: %s", c.Path()) |
||||
f.D = c |
||||
default: |
||||
err = errorf.E("invalid type: %T", reflect.TypeOf(ca)) |
||||
} |
||||
} |
||||
if f.cfg == nil || f.D == nil { |
||||
err = errorf.E("both config and database must be set") |
||||
return |
||||
} |
||||
// find admin follow lists
|
||||
f.followsMx.Lock() |
||||
defer f.followsMx.Unlock() |
||||
log.I.F("finding admins") |
||||
f.follows, f.admins = nil, nil |
||||
for _, admin := range f.cfg.Admins { |
||||
log.I.F("%s", admin) |
||||
var adm []byte |
||||
if adm, err = bech32encoding.NpubOrHexToPublicKeyBinary(admin); chk.E(err) { |
||||
continue |
||||
} |
||||
log.I.F("admin: %0x", adm) |
||||
f.admins = append(f.admins, adm) |
||||
fl := &filter.F{ |
||||
Authors: tag.NewFromAny(adm), |
||||
Kinds: kind.NewS(kind.New(kind.FollowList.K)), |
||||
} |
||||
var idxs []database.Range |
||||
if idxs, err = database.GetIndexesFromFilter(fl); chk.E(err) { |
||||
return |
||||
} |
||||
var sers types.Uint40s |
||||
for _, idx := range idxs { |
||||
var s types.Uint40s |
||||
if s, err = f.D.GetSerialsByRange(idx); chk.E(err) { |
||||
continue |
||||
} |
||||
sers = append(sers, s...) |
||||
} |
||||
if len(sers) > 0 { |
||||
for _, s := range sers { |
||||
var ev *event.E |
||||
if ev, err = f.D.FetchEventBySerial(s); chk.E(err) { |
||||
continue |
||||
} |
||||
log.I.F("admin follow list:\n%s", ev.Serialize()) |
||||
for _, v := range ev.Tags.GetAll([]byte("p")) { |
||||
log.I.F("adding follow: %s", v.Value()) |
||||
var a []byte |
||||
if a, err = hex.Dec(string(v.Value())); chk.E(err) { |
||||
continue |
||||
} |
||||
f.follows = append(f.follows, a) |
||||
} |
||||
} |
||||
} |
||||
} |
||||
return |
||||
} |
||||
|
||||
func (f *Follows) GetAccessLevel(pub []byte) (level string) { |
||||
if f.cfg == nil { |
||||
return "write" |
||||
} |
||||
f.followsMx.RLock() |
||||
defer f.followsMx.RUnlock() |
||||
for _, v := range f.admins { |
||||
if utils.FastEqual(v, pub) { |
||||
return "admin" |
||||
} |
||||
} |
||||
for _, v := range f.follows { |
||||
if utils.FastEqual(v, pub) { |
||||
return "write" |
||||
} |
||||
} |
||||
return "read" |
||||
} |
||||
|
||||
func (f *Follows) GetACLInfo() (name, description, documentation string) { |
||||
return "follows", "whitelist follows of admins", |
||||
`This ACL mode searches for follow lists of admins and grants all followers write access` |
||||
} |
||||
|
||||
func (f *Follows) Type() string { return "follows" } |
||||
|
||||
func init() { |
||||
log.T.F("registering follows ACL") |
||||
Registry.Register(new(Follows)) |
||||
} |
||||
Loading…
Reference in new issue