51 lines
1.9 KiB
Python
51 lines
1.9 KiB
Python
|
import logging
|
|||
|
|
from collections import defaultdict
|
|||
|
|
|
|||
|
|
logger = logging.getLogger(__name__)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class TaobaoSecurity:
|
|||
|
|
def __init__(self):
|
|||
|
|
self._allowlists: dict[str, set[str]] = defaultdict(set)
|
|||
|
|
|
|||
|
|
def load_config(self, account_id: str, account: dict) -> None:
|
|||
|
|
allow_from = account.get("allow_from", [])
|
|||
|
|
self._allowlists[account_id] = {entry.strip().lower() for entry in allow_from if entry and entry.strip()}
|
|||
|
|
|
|||
|
|
async def check_allowlist(self, peer_id: str, channel_type: str, account_id: str | None = None, account: dict | None = None) -> bool:
|
|||
|
|
if account is None:
|
|||
|
|
return True
|
|||
|
|
|
|||
|
|
policy = account.get("dm_policy", "open")
|
|||
|
|
|
|||
|
|
if policy == "disabled":
|
|||
|
|
return False
|
|||
|
|
|
|||
|
|
if policy in ("allowlist", "pairing"):
|
|||
|
|
if account_id:
|
|||
|
|
allow_set = self._allowlists.get(account_id, set())
|
|||
|
|
if not allow_set:
|
|||
|
|
allow_from = account.get("allow_from", [])
|
|||
|
|
allow_set = {entry.strip().lower() for entry in allow_from if entry and entry.strip()}
|
|||
|
|
return peer_id in allow_set
|
|||
|
|
return peer_id in account.get("allow_from", [])
|
|||
|
|
|
|||
|
|
return True
|
|||
|
|
|
|||
|
|
def resolve_dm_policy(self, account_id: str | None = None, account: dict | None = None) -> dict:
|
|||
|
|
if account is None:
|
|||
|
|
return {"mode": "open", "allow_from": []}
|
|||
|
|
return {
|
|||
|
|
"mode": account.get("dm_policy", "open"),
|
|||
|
|
"allow_from": account.get("allow_from", []),
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
def collect_warnings(self, config: dict, account_id: str | None = None, account: dict | None = None) -> list[str]:
|
|||
|
|
warnings = []
|
|||
|
|
acc = account or {}
|
|||
|
|
if acc.get("dm_policy") == "open":
|
|||
|
|
warnings.append("DM 策略为 'open'，任何人可发送消息")
|
|||
|
|
if not acc.get("callback_url"):
|
|||
|
|
warnings.append("未配置 Webhook 回调 URL，无法接收消息")
|
|||
|
|
return warnings
|