feat: Consolidate antispam checks into a service

Also adds support for the spam checker join rule, and Draupnir callbacks
This commit is contained in:
timedout
2026-01-05 03:36:44 +00:00
committed by Jade Ellis
parent c249dd992e
commit 5ac82f36f3
13 changed files with 355 additions and 136 deletions
+12 -23
View File
@@ -1,11 +1,9 @@
use axum::extract::State;
use axum_client_ip::InsecureClientIp;
use conduwuit::{
Err, Result,
config::Antispam,
debug_error, err, info,
Err, Result, debug_error, err, info,
matrix::{event::gen_event_id_canonical_json, pdu::PduBuilder},
trace,
warn,
};
use futures::FutureExt;
use ruma::{
@@ -15,7 +13,6 @@ use ruma::{
invite_permission_config::FilterLevel,
room::member::{MembershipState, RoomMemberEventContent},
},
meowlnir_antispam::user_may_invite,
};
use service::Services;
@@ -128,24 +125,16 @@ pub(crate) async fn invite_helper(
return Err!(Request(Forbidden("Invites are not allowed on this server.")));
}
trace!("maybe ask meowlnir");
if let Some(Antispam { meowlnir: Some(cfg) }) = &services.config.antispam {
trace!("asking meowlnir");
services
.sending
.send_meowlnir_antispam_request(
cfg,
user_may_invite::v1::Request::new(
cfg.management_room.clone(),
sender_user.to_owned(),
recipient_user.to_owned(),
),
)
.await
.inspect(|_| trace!("meowlnir :D"))
.inspect_err(|e| debug_error!("meowlnir sad: {e}"))?;
} else {
trace!("no meowlnir configured");
if let Err(e) = services
.antispam
.user_may_invite(sender_user.to_owned(), recipient_user.to_owned(), room_id.to_owned())
.await
{
warn!(
"Invite from {} to {} in room {} blocked by antispam: {e:?}",
sender_user, recipient_user, room_id
);
return Err!(Request(Forbidden("Invite blocked by antispam service.")));
}
if !services.globals.user_is_local(recipient_user) {
+21 -18
View File
@@ -3,9 +3,7 @@ use std::{borrow::Borrow, collections::HashMap, iter::once, sync::Arc};
use axum::extract::State;
use axum_client_ip::InsecureClientIp;
use conduwuit::{
Err, Result,
config::Antispam,
debug, debug_info, debug_warn, err, error, info,
Err, Result, debug, debug_info, debug_warn, err, error, info,
matrix::{
StateKey,
event::{gen_event_id, gen_event_id_canonical_json},
@@ -39,7 +37,6 @@ use ruma::{
member::{MembershipState, RoomMemberEventContent},
},
},
meowlnir_antispam::user_may_join_room,
};
use service::{
Services,
@@ -82,6 +79,26 @@ pub(crate) async fn join_room_by_id_route(
)
.await?;
if let Err(e) = services
.antispam
.user_may_join_room(
sender_user.to_owned(),
body.room_id.clone(),
services
.rooms
.state_cache
.is_invited(sender_user, &body.room_id)
.await,
)
.await
{
warn!(
"Antispam prevented user {} from joining room {}: {}",
sender_user, body.room_id, e
);
return Err!(Request(Forbidden("You are not allowed to join this room.")));
}
// There is no body.server_name for /roomId/join
let mut servers: Vec<_> = services
.rooms
@@ -350,20 +367,6 @@ pub async fn join_room_by_id_helper(
.boxed()
.await?;
}
if let Some(Antispam { meowlnir: Some(cfg) }) = &services.config.antispam {
services
.sending
.send_meowlnir_antispam_request(
cfg,
user_may_join_room::v1::Request::new(
cfg.management_room.clone(),
sender_user.to_owned(),
room_id.to_owned(),
),
)
.await?;
}
Ok(join_room_by_id::v3::Response::new(room_id.to_owned()))
}