Kris
d5e36d33b7
新增 Zalo OA、Zoom Chat、Zulip 三个渠道扩展。 Zalo OA 渠道扩展主要模块：sidecar_client, config, gateway, outbound, streaming, pairing, security, auth, dedupe, directory, monitor, status, session, reactions, tools Zoom Chat 渠道扩展主要模块：config, gateway, webhook, outbound, streaming, pairing, security, crypto, dedupe, actions, media, mentions, monitor, status, session, reactions, threading Zulip 渠道扩展主要模块：client, config, gateway, outbound, streaming, pairing, security, monitor, status
56 lines
1.8 KiB
Python
56 lines
1.8 KiB
Python
from __future__ import annotations
|
||
|
||
import logging
|
||
|
||
logger = logging.getLogger(__name__)
|
||
|
||
|
||
class ZulipSecurity:
|
||
def resolve_dm_policy(self, account: dict) -> dict:
|
||
policy = account.get("dm_policy", "pairing")
|
||
return {"mode": policy, "allow_from": account.get("allow_from", [])}
|
||
|
||
def is_stream_allowed(self, stream_name: str, stream_allowlist: list[str]) -> bool:
|
||
if not stream_allowlist:
|
||
return True
|
||
return stream_name in stream_allowlist
|
||
|
||
def check_dm_access(
|
||
self,
|
||
sender_email: str,
|
||
account: dict,
|
||
) -> tuple[bool, str]:
|
||
policy = account.get("dm_policy", "pairing")
|
||
allow_from = account.get("allow_from", [])
|
||
|
||
if policy == "open":
|
||
return True, "ok"
|
||
if policy == "disabled":
|
||
return False, "dm_disabled"
|
||
if policy == "allowlist":
|
||
normalized = [e.strip().lower() for e in allow_from]
|
||
if sender_email.lower() in normalized or "*" in normalized:
|
||
return True, "ok"
|
||
return False, "dm_not_allowed"
|
||
if policy == "pairing":
|
||
normalized = [e.strip().lower() for e in allow_from]
|
||
if sender_email.lower() in normalized or "*" in normalized:
|
||
return True, "ok"
|
||
return False, "pairing_required"
|
||
|
||
return False, "unknown_policy"
|
||
|
||
def collect_warnings(
|
||
self,
|
||
config: dict,
|
||
account_id: str | None = None,
|
||
account: dict | None = None,
|
||
) -> list[str]:
|
||
warnings = []
|
||
if account:
|
||
if not account.get("stream_allowlist"):
|
||
warnings.append("stream_allowlist 为空，Bot 将响应所有 Stream")
|
||
if account.get("dm_policy") == "open":
|
||
warnings.append("DM 策略设为 open，任何用户均可发起私聊")
|
||
return warnings
|