1
0
mirror of https://github.com/spacebarchat/server.git synced 2024-09-21 02:01:33 +02:00

make templates configurable + authorization

This commit is contained in:
uurgothat 2021-10-24 19:49:32 +03:00
parent 537da73d38
commit d6cadb02f4
3 changed files with 15 additions and 38 deletions

View File

@ -11,6 +11,7 @@ export const NO_AUTHORIZATION_ROUTES = [
"/experiments", "/experiments",
"/-/readyz", "/-/readyz",
"/-/healthz", "/-/healthz",
"/guilds/templates",
/\/guilds\/\d+\/widget\.(json|png)/ /\/guilds\/\d+\/widget\.(json|png)/
]; ];

View File

@ -1,68 +1,46 @@
import { Request, Response, Router } from "express"; import { Request, Response, Router } from "express";
const router: Router = Router(); const router: Router = Router();
import { Template, Guild, Role, Snowflake, Config, User, Member } from "@fosscord/util"; import { Template, Guild, Role, Snowflake, Config, User, Member } from "@fosscord/util";
const { enabled, allowTemplateCreation, allowDiscordTemplates, allowRaws } = Config.get().templates;
import { route } from "@fosscord/api"; import { route } from "@fosscord/api";
import { DiscordApiErrors } from "@fosscord/util"; import { DiscordApiErrors } from "@fosscord/util";
import fetch from "node-fetch"; import fetch from "node-fetch";
const { enabled, allowTemplateCreation, allowDiscordTemplates, allowOtherInstancesTemplates, allowExternalRaws } = Config.get().templates;
export interface GuildTemplateCreateSchema { export interface GuildTemplateCreateSchema {
name: string; name: string;
avatar?: string | null; avatar?: string | null;
} }
router.get("/:code", route({}), async (req: Request, res: Response) => { router.get("/:code", route({}), async (req: Request, res: Response) => {
if (enabled == false) return res.json({ code: 403, message: "Templates are disabled on this instance." }).sendStatus(403); if (!enabled) res.json({ code: 403, message: "Template creation & usage is disabled on this instance." }).sendStatus(403);
const { code } = req.params; const { code } = req.params;
if (code.startsWith("discord:")) { if (code.startsWith("discord:")) {
if (allowDiscordTemplates == false) if (!allowDiscordTemplates) return res.json({ code: 403, message: "Discord templates cannot be used on this instance." }).sendStatus(403);
return res.json({ code: 403, message: "Discord templates are disabled on this instance." }).sendStatus(403);
const discordTemplateID = code.split("discord:", 2)[1]; const discordTemplateID = code.split("discord:", 2)[1];
const discordTemplateData = await fetch(`https://discord.com/api/v9/guilds/templates/${discordTemplateID}`, { const discordTemplateData = await fetch(`https://discord.com/api/v9/guilds/templates/${discordTemplateID}`, {
method: "get", method: "get",
headers: { "Content-Type": "application/json" } headers: { "Content-Type": "application/json" }
}); });
return res.json(await discordTemplateData.json());
}
res.json(await discordTemplateData.json());
};
if (code.startsWith("fosscord:")) {
if (allowOtherInstancesTemplates == false)
return res.json({ code: 403, message: "Other instance templates are disabled on this instance." }).sendStatus(403);
//TODO: TBD when federation came out
res.json({}).sendStatus(200);
};
//TODO: Validation
if (code.startsWith("external:")) { if (code.startsWith("external:")) {
if (allowExternalRaws == false) if (!allowRaws) return res.json({ code: 403, message: "Importing raws is disabled on this instance." }).sendStatus(403);
return res.json({ code: 403, message: "Importing templates from raws is disabled on this instance." }).sendStatus(403);
const url = code.split("external:", 2)[1];
const rawTemplateData = return res.json(code.split("external:", 2)[1]);
(await fetch(`${url}`, { }
method: "get",
headers: { "Content-Type": "application/json" }
})) || null;
res.json(
rawTemplateData !== null
? await rawTemplateData.json()
: { code: 500, message: "An error occurred while trying to fetch the raw." }
);
};
const template = await Template.findOneOrFail({ code: code }); const template = await Template.findOneOrFail({ code: code });
res.json(template); res.json(template);
}); });
router.post("/:code", route({ body: "GuildTemplateCreateSchema" }), async (req: Request, res: Response) => { router.post("/:code", route({ body: "GuildTemplateCreateSchema" }), async (req: Request, res: Response) => {
if (enabled == false) return res.json({ code: 403, message: "Templates are disabled on this instance." }).sendStatus(403); if (!enabled) return res.json({ code: 403, message: "Template creation & usage is disabled on this instance." }).sendStatus(403);
if (allowTemplateCreation == false) if (!allowTemplateCreation) return res.json({ code: 403, message: "Template creation is disabled on this instance." }).sendStatus(403);
return res.json({ code: 403, message: "Template creation is disabled on this instance." }).sendStatus(403);
const { code } = req.params; const { code } = req.params;
const body = req.body as GuildTemplateCreateSchema; const body = req.body as GuildTemplateCreateSchema;

View File

@ -164,8 +164,7 @@ export interface ConfigValue {
enabled: Boolean; enabled: Boolean;
allowTemplateCreation: Boolean; allowTemplateCreation: Boolean;
allowDiscordTemplates: Boolean; allowDiscordTemplates: Boolean;
allowOtherInstancesTemplates: Boolean; allowRaws: Boolean;
allowExternalRaws: Boolean
} }
} }
@ -332,7 +331,6 @@ export const DefaultConfigOptions: ConfigValue = {
enabled: true, enabled: true,
allowTemplateCreation: true, allowTemplateCreation: true,
allowDiscordTemplates: true, allowDiscordTemplates: true,
allowOtherInstancesTemplates: false, //Incomple allowRaws: false
allowExternalRaws: false
} }
}; };