mleku
a84782bd52
Some checks failed
Go / build (push) Has been cancelled
- Introduced a new policy system for event processing, allowing fine-grained control over event storage and retrieval based on various criteria. - Added support for policy configuration via JSON files, including whitelists, blacklists, and custom scripts. - Implemented a test suite for the policy system, ensuring 100% test coverage of core functionality and edge cases. - Created benchmark tests to evaluate policy performance under various conditions. - Updated event handling to integrate policy checks for both read and write access. - Enhanced documentation with examples and usage instructions for the policy system. - Bumped version to v0.16.0.
92 lines
1.6 KiB
Go
92 lines
1.6 KiB
Go
package acl
|
|
|
|
import (
|
|
"lol.mleku.dev/log"
|
|
"next.orly.dev/app/config"
|
|
"next.orly.dev/pkg/encoders/bech32encoding"
|
|
"next.orly.dev/pkg/encoders/event"
|
|
"next.orly.dev/pkg/utils"
|
|
)
|
|
|
|
type None struct {
|
|
cfg *config.C
|
|
owners [][]byte
|
|
admins [][]byte
|
|
}
|
|
|
|
func (n *None) Configure(cfg ...any) (err error) {
|
|
for _, ca := range cfg {
|
|
switch c := ca.(type) {
|
|
case *config.C:
|
|
n.cfg = c
|
|
}
|
|
}
|
|
if n.cfg == nil {
|
|
return
|
|
}
|
|
|
|
// Load owners
|
|
for _, owner := range n.cfg.Owners {
|
|
if len(owner) == 0 {
|
|
continue
|
|
}
|
|
var pk []byte
|
|
if pk, err = bech32encoding.NpubOrHexToPublicKeyBinary(owner); err != nil {
|
|
continue
|
|
}
|
|
n.owners = append(n.owners, pk)
|
|
}
|
|
|
|
// Load admins
|
|
for _, admin := range n.cfg.Admins {
|
|
if len(admin) == 0 {
|
|
continue
|
|
}
|
|
var pk []byte
|
|
if pk, err = bech32encoding.NpubOrHexToPublicKeyBinary(admin); err != nil {
|
|
continue
|
|
}
|
|
n.admins = append(n.admins, pk)
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
func (n *None) GetAccessLevel(pub []byte, address string) (level string) {
|
|
// Check owners first
|
|
for _, v := range n.owners {
|
|
if utils.FastEqual(v, pub) {
|
|
return "owner"
|
|
}
|
|
}
|
|
|
|
// Check admins
|
|
for _, v := range n.admins {
|
|
if utils.FastEqual(v, pub) {
|
|
return "admin"
|
|
}
|
|
}
|
|
|
|
// Default to write for everyone else
|
|
return "write"
|
|
}
|
|
|
|
func (n None) GetACLInfo() (name, description, documentation string) {
|
|
return "none", "no ACL", "blanket write access for all clients"
|
|
}
|
|
|
|
func (n None) Type() string {
|
|
return "none"
|
|
}
|
|
|
|
func (n None) CheckPolicy(ev *event.E) (allowed bool, err error) {
|
|
return true, nil
|
|
}
|
|
|
|
func (n None) Syncer() {}
|
|
|
|
func init() {
|
|
log.T.F("registering none ACL")
|
|
Registry.Register(new(None))
|
|
}
|