1 import * as express from 'express'
2 import { logger } from '@server/helpers/logger'
3 import { createAccountAbuse, createVideoAbuse, createVideoCommentAbuse } from '@server/lib/moderation'
4 import { Notifier } from '@server/lib/notifier'
5 import { AbuseModel } from '@server/models/abuse/abuse'
6 import { AbuseMessageModel } from '@server/models/abuse/abuse-message'
7 import { getServerActor } from '@server/models/application/application'
8 import { abusePredefinedReasonsMap } from '@shared/core-utils/abuse'
9 import { AbuseCreate, AbuseState, UserRight } from '../../../shared'
10 import { getFormattedObjects } from '../../helpers/utils'
11 import { sequelizeTypescript } from '../../initializers/database'
14 abuseListForAdminsValidator,
18 addAbuseMessageValidator,
20 asyncRetryTransactionMiddleware,
22 checkAbuseValidForMessagesValidator,
23 deleteAbuseMessageValidator,
29 } from '../../middlewares'
30 import { AccountModel } from '../../models/account/account'
32 const abuseRouter = express.Router()
36 ensureUserHasRight(UserRight.MANAGE_ABUSES),
41 abuseListForAdminsValidator,
42 asyncMiddleware(listAbusesForAdmins)
44 abuseRouter.put('/:id',
46 ensureUserHasRight(UserRight.MANAGE_ABUSES),
47 asyncMiddleware(abuseUpdateValidator),
48 asyncRetryTransactionMiddleware(updateAbuse)
52 asyncMiddleware(abuseReportValidator),
53 asyncRetryTransactionMiddleware(reportAbuse)
55 abuseRouter.delete('/:id',
57 ensureUserHasRight(UserRight.MANAGE_ABUSES),
58 asyncMiddleware(abuseGetValidator),
59 asyncRetryTransactionMiddleware(deleteAbuse)
62 abuseRouter.get('/:id/messages',
64 asyncMiddleware(getAbuseValidator),
65 checkAbuseValidForMessagesValidator,
66 asyncRetryTransactionMiddleware(listAbuseMessages)
69 abuseRouter.post('/:id/messages',
71 asyncMiddleware(getAbuseValidator),
72 checkAbuseValidForMessagesValidator,
73 addAbuseMessageValidator,
74 asyncRetryTransactionMiddleware(addAbuseMessage)
77 abuseRouter.delete('/:id/messages/:messageId',
79 asyncMiddleware(getAbuseValidator),
80 checkAbuseValidForMessagesValidator,
81 asyncMiddleware(deleteAbuseMessageValidator),
82 asyncRetryTransactionMiddleware(deleteAbuseMessage)
85 // ---------------------------------------------------------------------------
91 // ---------------------------------------------------------------------------
93 async function listAbusesForAdmins (req: express.Request, res: express.Response) {
94 const user = res.locals.oauth.token.user
95 const serverActor = await getServerActor()
97 const resultList = await AbuseModel.listForAdminApi({
98 start: req.query.start,
99 count: req.query.count,
100 sort: req.query.sort,
102 filter: req.query.filter,
103 predefinedReason: req.query.predefinedReason,
104 search: req.query.search,
105 state: req.query.state,
106 videoIs: req.query.videoIs,
107 searchReporter: req.query.searchReporter,
108 searchReportee: req.query.searchReportee,
109 searchVideo: req.query.searchVideo,
110 searchVideoChannel: req.query.searchVideoChannel,
111 serverAccountId: serverActor.Account.id,
116 total: resultList.total,
117 data: resultList.data.map(d => d.toFormattedAdminJSON())
121 async function updateAbuse (req: express.Request, res: express.Response) {
122 const abuse = res.locals.abuse
123 let stateUpdated = false
125 if (req.body.moderationComment !== undefined) abuse.moderationComment = req.body.moderationComment
127 if (req.body.state !== undefined) {
128 abuse.state = req.body.state
132 await sequelizeTypescript.transaction(t => {
133 return abuse.save({ transaction: t })
136 if (stateUpdated === true) {
137 AbuseModel.loadFull(abuse.id)
138 .then(abuseFull => Notifier.Instance.notifyOnAbuseStateChange(abuseFull))
139 .catch(err => logger.error('Cannot notify on abuse state change', { err }))
142 // Do not send the delete to other instances, we updated OUR copy of this abuse
144 return res.sendStatus(204)
147 async function deleteAbuse (req: express.Request, res: express.Response) {
148 const abuse = res.locals.abuse
150 await sequelizeTypescript.transaction(t => {
151 return abuse.destroy({ transaction: t })
154 // Do not send the delete to other instances, we delete OUR copy of this abuse
156 return res.sendStatus(204)
159 async function reportAbuse (req: express.Request, res: express.Response) {
160 const videoInstance = res.locals.videoAll
161 const commentInstance = res.locals.videoCommentFull
162 const accountInstance = res.locals.account
164 const body: AbuseCreate = req.body
166 const { id } = await sequelizeTypescript.transaction(async t => {
167 const reporterAccount = await AccountModel.load(res.locals.oauth.token.User.Account.id, t)
168 const predefinedReasons = body.predefinedReasons?.map(r => abusePredefinedReasonsMap[r])
171 reporterAccountId: reporterAccount.id,
173 state: AbuseState.PENDING,
178 return createVideoAbuse({
183 startAt: body.video.startAt,
184 endAt: body.video.endAt
189 return createVideoCommentAbuse({
198 return createAccountAbuse({
206 return res.json({ abuse: { id } })
209 async function listAbuseMessages (req: express.Request, res: express.Response) {
210 const abuse = res.locals.abuse
212 const resultList = await AbuseMessageModel.listForApi(abuse.id)
214 return res.json(getFormattedObjects(resultList.data, resultList.total))
217 async function addAbuseMessage (req: express.Request, res: express.Response) {
218 const abuse = res.locals.abuse
219 const user = res.locals.oauth.token.user
221 const abuseMessage = await AbuseMessageModel.create({
222 message: req.body.message,
223 byModerator: abuse.reporterAccountId !== user.Account.id,
224 accountId: user.Account.id,
228 AbuseModel.loadFull(abuse.id)
229 .then(abuseFull => Notifier.Instance.notifyOnAbuseMessage(abuseFull, abuseMessage))
230 .catch(err => logger.error('Cannot notify on new abuse message', { err }))
239 async function deleteAbuseMessage (req: express.Request, res: express.Response) {
240 const abuseMessage = res.locals.abuseMessage
242 await sequelizeTypescript.transaction(t => {
243 return abuseMessage.destroy({ transaction: t })
246 return res.sendStatus(204)