63 lines
2.3 KiB
Python
63 lines
2.3 KiB
Python
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import logging
|
||
|
|
|
||
|
|
logger = logging.getLogger(__name__)
|
||
|
|
|
||
|
|
|
||
|
|
class RingCentralSecurityAdapter:
|
||
|
|
def resolve_dm_policy(self) -> dict:
|
||
|
|
return {"mode": "pairing", "allow_from": []}
|
||
|
|
|
||
|
|
def check_allowlist(self, sender_id: str, account) -> bool:
|
||
|
|
if not account:
|
||
|
|
return True
|
||
|
|
allow_from = account.dm_allow_from if hasattr(account, "dm_allow_from") else []
|
||
|
|
if not allow_from:
|
||
|
|
return True
|
||
|
|
return sender_id in allow_from
|
||
|
|
|
||
|
|
def evaluate(self, chat_type: str, sender_id: str, text: str, account) -> tuple[bool, str]:
|
||
|
|
if chat_type == "direct":
|
||
|
|
if not account:
|
||
|
|
return True, "ok"
|
||
|
|
if not getattr(account, "dm_enabled", True):
|
||
|
|
return False, "dm_disabled"
|
||
|
|
dm_policy = getattr(account, "dm_policy", "pairing")
|
||
|
|
if dm_policy == "disabled":
|
||
|
|
return False, "dm_disabled"
|
||
|
|
if dm_policy == "allowlist" and not self.check_allowlist(sender_id, account):
|
||
|
|
return False, "sender_not_in_allowlist"
|
||
|
|
if dm_policy == "pairing":
|
||
|
|
return True, "pairing_check"
|
||
|
|
|
||
|
|
elif chat_type in ("group", "team"):
|
||
|
|
if not account:
|
||
|
|
return True, "ok"
|
||
|
|
group_policy = getattr(account, "group_policy", "allowlist")
|
||
|
|
if group_policy == "disabled":
|
||
|
|
return False, "group_disabled"
|
||
|
|
if getattr(account, "require_mention", True) and "@!" not in text:
|
||
|
|
return False, "mention_required"
|
||
|
|
|
||
|
|
return True, "ok"
|
||
|
|
|
||
|
|
def collect_warnings(self, config: dict, account_id: str | None = None) -> list[str]:
|
||
|
|
warnings = []
|
||
|
|
rc_config = config.get("channels", {}).get("ringcentral", {})
|
||
|
|
|
||
|
|
group_policy = rc_config.get("group_policy", "allowlist")
|
||
|
|
if group_policy == "open":
|
||
|
|
warnings.append(
|
||
|
|
"Group policy is 'open' - any RingCentral group can trigger the bot. "
|
||
|
|
"Consider using 'allowlist' for production."
|
||
|
|
)
|
||
|
|
|
||
|
|
dm_policy = rc_config.get("dm_policy", "pairing")
|
||
|
|
if dm_policy == "open":
|
||
|
|
warnings.append(
|
||
|
|
"DM policy is 'open' - anyone can DM the bot. Consider using 'pairing' or 'allowlist' for production."
|
||
|
|
)
|
||
|
|
|
||
|
|
return warnings
|