1 import * as express from 'express'
2 import { UserRight, VideoAbuseCreate, VideoAbuseState } from '../../../../shared'
3 import { logger } from '../../../helpers/logger'
4 import { getFormattedObjects } from '../../../helpers/utils'
5 import { sequelizeTypescript } from '../../../initializers'
6 import { sendVideoAbuse } from '../../../lib/activitypub/send'
9 asyncRetryTransactionMiddleware,
15 videoAbuseGetValidator,
16 videoAbuseReportValidator,
17 videoAbusesSortValidator,
18 videoAbuseUpdateValidator
19 } from '../../../middlewares'
20 import { AccountModel } from '../../../models/account/account'
21 import { VideoModel } from '../../../models/video/video'
22 import { VideoAbuseModel } from '../../../models/video/video-abuse'
23 import { auditLoggerFactory, VideoAbuseAuditView } from '../../../helpers/audit-logger'
24 import { UserModel } from '../../../models/account/user'
25 import { Notifier } from '../../../lib/notifier'
27 const auditLogger = auditLoggerFactory('abuse')
28 const abuseVideoRouter = express.Router()
30 abuseVideoRouter.get('/abuse',
32 ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
34 videoAbusesSortValidator,
37 asyncMiddleware(listVideoAbuses)
39 abuseVideoRouter.put('/:videoId/abuse/:id',
41 ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
42 asyncMiddleware(videoAbuseUpdateValidator),
43 asyncRetryTransactionMiddleware(updateVideoAbuse)
45 abuseVideoRouter.post('/:videoId/abuse',
47 asyncMiddleware(videoAbuseReportValidator),
48 asyncRetryTransactionMiddleware(reportVideoAbuse)
50 abuseVideoRouter.delete('/:videoId/abuse/:id',
52 ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
53 asyncMiddleware(videoAbuseGetValidator),
54 asyncRetryTransactionMiddleware(deleteVideoAbuse)
57 // ---------------------------------------------------------------------------
63 // ---------------------------------------------------------------------------
65 async function listVideoAbuses (req: express.Request, res: express.Response) {
66 const resultList = await VideoAbuseModel.listForApi(req.query.start, req.query.count, req.query.sort)
68 return res.json(getFormattedObjects(resultList.data, resultList.total))
71 async function updateVideoAbuse (req: express.Request, res: express.Response) {
72 const videoAbuse: VideoAbuseModel = res.locals.videoAbuse
74 if (req.body.moderationComment !== undefined) videoAbuse.moderationComment = req.body.moderationComment
75 if (req.body.state !== undefined) videoAbuse.state = req.body.state
77 await sequelizeTypescript.transaction(t => {
78 return videoAbuse.save({ transaction: t })
81 // Do not send the delete to other instances, we updated OUR copy of this video abuse
83 return res.type('json').status(204).end()
86 async function deleteVideoAbuse (req: express.Request, res: express.Response) {
87 const videoAbuse: VideoAbuseModel = res.locals.videoAbuse
89 await sequelizeTypescript.transaction(t => {
90 return videoAbuse.destroy({ transaction: t })
93 // Do not send the delete to other instances, we delete OUR copy of this video abuse
95 return res.type('json').status(204).end()
98 async function reportVideoAbuse (req: express.Request, res: express.Response) {
99 const videoInstance = res.locals.video as VideoModel
100 const body: VideoAbuseCreate = req.body
102 const videoAbuse: VideoAbuseModel = await sequelizeTypescript.transaction(async t => {
103 const reporterAccount = await AccountModel.load((res.locals.oauth.token.User as UserModel).Account.id, t)
105 const abuseToCreate = {
106 reporterAccountId: reporterAccount.id,
108 videoId: videoInstance.id,
109 state: VideoAbuseState.PENDING
112 const videoAbuseInstance = await VideoAbuseModel.create(abuseToCreate, { transaction: t })
113 videoAbuseInstance.Video = videoInstance
114 videoAbuseInstance.Account = reporterAccount
116 // We send the video abuse to the origin server
117 if (videoInstance.isOwned() === false) {
118 await sendVideoAbuse(reporterAccount.Actor, videoAbuseInstance, videoInstance)
121 Notifier.Instance.notifyOnNewVideoAbuse(videoAbuseInstance)
123 auditLogger.create(reporterAccount.Actor.getIdentifier(), new VideoAbuseAuditView(videoAbuseInstance.toFormattedJSON()))
125 return videoAbuseInstance
128 logger.info('Abuse report for video %s created.', videoInstance.name)
130 return res.json({ videoAbuse: videoAbuse.toFormattedJSON() }).end()