@live-change/security-service 0.2.38 → 0.2.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@live-change/security-service",
-  "version": "0.2.38",
+  "version": "0.2.41",
   "description": "",
   "main": "index.js",
   "scripts": {
@@ -21,10 +21,10 @@
     "url": "https://www.viamage.com/"
   },
   "dependencies": {
-    "@live-change/framework": "0.6.5",
+    "@live-change/framework": "0.6.8",
     "@live-change/pattern": "0.2.1",
     "@live-change/pattern-db": "^0.2.2",
     "nodemailer": "^6.7.2"
   },
-  "gitHead": "d30c93533192fb0d3b620929c61c5d04568beae0"
+  "gitHead": "d87d9ba56115833967eeff3d9dee5b24e925fd18"
 }

package/secured.js

@@ -1,5 +1,18 @@
 const definition = require('./definition.js')
-const { getClientKeysObject, getClientKeysStrings, multiKeyIndexQuery } = require('./utils.js')
+const { getClientKeysObject, getClientKeysStrings, multiKeyIndexQuery, fastMultiKeyIndexQuery } = require('./utils.js')
+const { Ban } = require('./ban.js')
+
+async function getBans(client, actions) {
+  const keys = []
+  for(const action of actions) {
+    keys.push(...getClientKeysStrings(client, action + ':'))
+  }
+  const bans = fastMultiKeyIndexQuery(keys, 'security_Ban_actionBans', Ban.tableName)
+}
+
+async function sleep(ms) {
+  return new Promise(resolve => setTimeout(resolve, ms))
+}
 
 definition.processor(function(service, app) {
 
@@ -7,28 +20,40 @@ definition.processor(function(service, app) {
     const action = service.actions[actionName]
     if(!action.secured) continue
     const config = action.secured
+    const actions = config.actions || actionName
 
-    console.log("SECURED", service.name, action.name)
+    console.log("SECURED ACTION", service.name, action.name)
 
     const oldExec = action.execute
     action.execute = async (...args) => {
       const [ properties, context, emit ] = args
       const { client } = context
-      oldExec.apply(action, args)
-    }
+      const bans = await getBans(client, actions)
+
+      if(bans.find(ban => ban.type == 'block')) {
+        /// TODO: report security violation if failed
+        throw 'securityBlock'
+      }
+
+      if(bans.find(ban => ban.type == 'delay')) {
+        await sleep(3000)
+      }
+
+      /// TODO: additional delay based on ban type
+
+      /// TODO: report security violation if succeded - another event
+
+      /// TODO: additional validation based on ban type(captcha)
 
-    /// TODO: detect bans, block actions
-    /// TODO: detect associated events
-    /// TODO: report security violation if succeded
-    /// TODO: report security violation if failed - another event
-    /// TODO: additional validation based on ban type(captcha)
-    /// TODO: additional delay based on ban type
+      return oldExec.apply(action, args)
+    }
   }
 
   for(let triggerName in service.actions) {
     const trigger = service.actions[triggerName]
     if(!trigger.secured) continue
     const config = trigger.secured
+    const actions = config.actions || triggerName
 
     console.log("SECURED TRIGGER", service.name, trigger.name)
 
@@ -36,15 +61,27 @@ definition.processor(function(service, app) {
     trigger.execute = async (...args) => {
       const [ properties, context, emit ] = args
       const { client, ...otherProperties } = properties
-      oldExec.apply(trigger, args)
-    }
+      const bans = await getBans(client, actions)
+
+      if(bans.find(ban => ban.type == 'block')) throw 'securityBlock'
+
+      if(bans.find(ban => ban.type == 'block')) {
+        /// TODO: report security violation if failed
+        throw 'securityBlock'
+      }
+
+      if(bans.find(ban => ban.type == 'delay')) {
+        await sleep(3000)
+      }
 
-    /// TODO: detect bans, block triggers
-    /// TODO: detect associated events
-    /// TODO: report security violation if succeded
-    /// TODO: report security violation if failed - another event
-    /// TODO: additional validation based on ban type(captcha)
-    /// TODO: additional delay based on ban type
+      /// TODO: additional delay based on ban type
+
+      /// TODO: report security violation if succeded - another event
+
+      /// TODO: additional validation based on ban type(captcha)
+
+      return oldExec.apply(trigger, args)
+    }
   }
 
 })