mleku
db941a18ea
- Updated policy configuration to include global rules applicable to all events, allowing for site-wide security policies. - Introduced age validation features to prevent replay and clock skew attacks, with configurable maximum age limits for events. - Enhanced example policy and README documentation to reflect new global rules and age validation capabilities. - Added comprehensive tests for global rule checks and age validation scenarios. - Bumped version to v0.16.2.
176 lines
4.7 KiB
JSON
176 lines
4.7 KiB
JSON
{
|
|
"kind": {
|
|
"whitelist": [0, 1, 3, 4, 5, 6, 7, 40, 41, 42, 43, 44, 9735],
|
|
"blacklist": []
|
|
},
|
|
"global": {
|
|
"description": "Global security rules applied to all events",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 100000,
|
|
"content_limit": 50000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 300,
|
|
"privileged": false
|
|
},
|
|
"rules": {
|
|
"0": {
|
|
"description": "Metadata events - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"1": {
|
|
"description": "Text notes - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 32000,
|
|
"content_limit": 10000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"3": {
|
|
"description": "Contact lists - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 50000,
|
|
"content_limit": 20000,
|
|
"max_age_of_event": 2592000,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"4": {
|
|
"description": "Direct messages - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": true
|
|
},
|
|
"5": {
|
|
"description": "Event deletion - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"6": {
|
|
"description": "Reposts - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"7": {
|
|
"description": "Reaction events - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"40": {
|
|
"description": "Channel creation - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"41": {
|
|
"description": "Channel metadata - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"42": {
|
|
"description": "Channel messages - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 32000,
|
|
"content_limit": 10000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"43": {
|
|
"description": "Channel hide message - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"44": {
|
|
"description": "Channel mute user - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"9735": {
|
|
"description": "Zap receipts - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
}
|
|
}
|
|
} |