continuwuity/src/service/moderation.rs

use std::sync::Arc;

use conduwuit::Result;
use ruma::ServerName;

use crate::{Dep, config};

pub struct Service {
	services: Services,
}

struct Services {
	// pub server: Arc<Server>,
	pub config: Dep<config::Service>,
}

impl crate::Service for Service {
	fn build(args: crate::Args<'_>) -> Result<Arc<Self>> {
		Ok(Arc::new(Self {
			services: Services {
				// server: args.server.clone(),
				config: args.depend::<config::Service>("config"),
			},
		}))
	}

	fn name(&self) -> &str { crate::service::make_name(std::module_path!()) }
}

impl Service {
	/// Returns true if the remote server is *ignored*. Ignored server names are
	/// still permitted in federation, but should not have their events sent to
	/// local users.
	#[must_use]
	pub fn is_remote_server_ignored(&self, server_name: &ServerName) -> bool {
		// We must never block federating with ourselves
		if server_name == self.services.config.server_name {
			return false;
		}

		self.services
			.config
			.ignore_messages_from_server_names
			.is_match(server_name.host())
	}

	/// Returns true if the remote server is *forbidden*. Forbidden server names
	/// must be blocked in federation in both directions - no inbound nor
	/// outbound requests from the remote are permitted.
	#[must_use]
	pub fn is_remote_server_forbidden(&self, server_name: &ServerName) -> bool {
		// We must never block federating with ourselves
		if server_name == self.services.config.server_name {
			return false;
		}

		// Check if server is explicitly allowed
		if self
			.services
			.config
			.allowed_remote_server_names
			.is_match(server_name.host())
		{
			return false;
		}

		// Check if server is explicitly forbidden
		self.services
			.config
			.forbidden_remote_server_names
			.is_match(server_name.host())
	}

	/// Returns true if the remote server is *forbidden*, or if it is only
	/// forbidden from having its room directory checked. Does not prevent the
	/// remote from reading our room directory.
	#[must_use]
	pub fn is_remote_server_room_directory_forbidden(&self, server_name: &ServerName) -> bool {
		// Forbidden if NOT (allowed is empty OR allowed contains server OR is self)
		// OR forbidden contains server
		self.is_remote_server_forbidden(server_name)
			|| self
				.services
				.config
				.forbidden_remote_room_directory_server_names
				.is_match(server_name.host())
	}

	/// Returns true if the remote server is *forbidden*, or if it is only
	/// forbidden from serving media to us (i.e. we aren't allowed to download
	/// media from the remote). Does not prevent the remote downloading media
	/// from us.
	#[must_use]
	pub fn is_remote_server_media_downloads_forbidden(&self, server_name: &ServerName) -> bool {
		// Forbidden if NOT (allowed is empty OR allowed contains server OR is self)
		// OR forbidden contains server
		self.is_remote_server_forbidden(server_name)
			|| self
				.services
				.config
				.prevent_media_downloads_from
				.is_match(server_name.host())
	}
}