2017-06-05 21:53:49 +02:00
|
|
|
import * as express from 'express'
|
2018-08-10 16:54:01 +02:00
|
|
|
import { UserRight, VideoAbuseCreate, VideoAbuseState } from '../../../../shared'
|
2017-12-28 11:16:08 +01:00
|
|
|
import { logger } from '../../../helpers/logger'
|
|
|
|
import { getFormattedObjects } from '../../../helpers/utils'
|
2017-12-12 17:53:50 +01:00
|
|
|
import { sequelizeTypescript } from '../../../initializers'
|
2017-05-15 22:22:03 +02:00
|
|
|
import {
|
2018-06-13 14:27:40 +02:00
|
|
|
asyncMiddleware,
|
|
|
|
asyncRetryTransactionMiddleware,
|
|
|
|
authenticate,
|
|
|
|
ensureUserHasRight,
|
|
|
|
paginationValidator,
|
|
|
|
setDefaultPagination,
|
|
|
|
setDefaultSort,
|
2018-08-10 16:54:01 +02:00
|
|
|
videoAbuseGetValidator,
|
2018-06-13 14:27:40 +02:00
|
|
|
videoAbuseReportValidator,
|
2018-08-10 16:54:01 +02:00
|
|
|
videoAbusesSortValidator,
|
|
|
|
videoAbuseUpdateValidator
|
2017-05-15 22:22:03 +02:00
|
|
|
} from '../../../middlewares'
|
2017-12-12 17:53:50 +01:00
|
|
|
import { AccountModel } from '../../../models/account/account'
|
|
|
|
import { VideoModel } from '../../../models/video/video'
|
|
|
|
import { VideoAbuseModel } from '../../../models/video/video-abuse'
|
2018-07-31 14:04:26 +02:00
|
|
|
import { auditLoggerFactory, VideoAbuseAuditView } from '../../../helpers/audit-logger'
|
2018-09-20 10:13:13 +02:00
|
|
|
import { UserModel } from '../../../models/account/user'
|
2018-12-26 10:36:24 +01:00
|
|
|
import { Notifier } from '../../../lib/notifier'
|
2019-01-15 14:52:33 +01:00
|
|
|
import { sendVideoAbuse } from '../../../lib/activitypub/send/send-flag'
|
2017-05-15 22:22:03 +02:00
|
|
|
|
2018-07-31 14:04:26 +02:00
|
|
|
const auditLogger = auditLoggerFactory('abuse')
|
2017-05-15 22:22:03 +02:00
|
|
|
const abuseVideoRouter = express.Router()
|
|
|
|
|
|
|
|
abuseVideoRouter.get('/abuse',
|
|
|
|
authenticate,
|
2017-10-27 16:55:03 +02:00
|
|
|
ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
|
2017-05-15 22:22:03 +02:00
|
|
|
paginationValidator,
|
|
|
|
videoAbusesSortValidator,
|
2018-01-17 10:50:33 +01:00
|
|
|
setDefaultSort,
|
2018-01-18 10:53:54 +01:00
|
|
|
setDefaultPagination,
|
2017-10-25 11:55:06 +02:00
|
|
|
asyncMiddleware(listVideoAbuses)
|
2017-05-05 16:53:35 +02:00
|
|
|
)
|
2018-08-10 16:54:01 +02:00
|
|
|
abuseVideoRouter.put('/:videoId/abuse/:id',
|
|
|
|
authenticate,
|
|
|
|
ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
|
|
|
|
asyncMiddleware(videoAbuseUpdateValidator),
|
|
|
|
asyncRetryTransactionMiddleware(updateVideoAbuse)
|
|
|
|
)
|
|
|
|
abuseVideoRouter.post('/:videoId/abuse',
|
2017-05-15 22:22:03 +02:00
|
|
|
authenticate,
|
2017-11-27 17:30:46 +01:00
|
|
|
asyncMiddleware(videoAbuseReportValidator),
|
2018-06-13 14:27:40 +02:00
|
|
|
asyncRetryTransactionMiddleware(reportVideoAbuse)
|
2017-05-05 16:53:35 +02:00
|
|
|
)
|
2018-08-10 16:54:01 +02:00
|
|
|
abuseVideoRouter.delete('/:videoId/abuse/:id',
|
|
|
|
authenticate,
|
|
|
|
ensureUserHasRight(UserRight.MANAGE_VIDEO_ABUSES),
|
|
|
|
asyncMiddleware(videoAbuseGetValidator),
|
|
|
|
asyncRetryTransactionMiddleware(deleteVideoAbuse)
|
|
|
|
)
|
2017-05-05 16:53:35 +02:00
|
|
|
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
2017-05-15 22:22:03 +02:00
|
|
|
export {
|
|
|
|
abuseVideoRouter
|
|
|
|
}
|
2017-05-05 16:53:35 +02:00
|
|
|
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
2018-08-10 16:54:01 +02:00
|
|
|
async function listVideoAbuses (req: express.Request, res: express.Response) {
|
2017-12-12 17:53:50 +01:00
|
|
|
const resultList = await VideoAbuseModel.listForApi(req.query.start, req.query.count, req.query.sort)
|
2017-10-25 11:55:06 +02:00
|
|
|
|
|
|
|
return res.json(getFormattedObjects(resultList.data, resultList.total))
|
2017-05-05 16:53:35 +02:00
|
|
|
}
|
|
|
|
|
2018-08-10 16:54:01 +02:00
|
|
|
async function updateVideoAbuse (req: express.Request, res: express.Response) {
|
|
|
|
const videoAbuse: VideoAbuseModel = res.locals.videoAbuse
|
|
|
|
|
|
|
|
if (req.body.moderationComment !== undefined) videoAbuse.moderationComment = req.body.moderationComment
|
|
|
|
if (req.body.state !== undefined) videoAbuse.state = req.body.state
|
|
|
|
|
|
|
|
await sequelizeTypescript.transaction(t => {
|
|
|
|
return videoAbuse.save({ transaction: t })
|
|
|
|
})
|
|
|
|
|
|
|
|
// Do not send the delete to other instances, we updated OUR copy of this video abuse
|
|
|
|
|
|
|
|
return res.type('json').status(204).end()
|
|
|
|
}
|
|
|
|
|
|
|
|
async function deleteVideoAbuse (req: express.Request, res: express.Response) {
|
|
|
|
const videoAbuse: VideoAbuseModel = res.locals.videoAbuse
|
|
|
|
|
|
|
|
await sequelizeTypescript.transaction(t => {
|
|
|
|
return videoAbuse.destroy({ transaction: t })
|
|
|
|
})
|
|
|
|
|
|
|
|
// Do not send the delete to other instances, we delete OUR copy of this video abuse
|
|
|
|
|
|
|
|
return res.type('json').status(204).end()
|
|
|
|
}
|
|
|
|
|
2017-10-25 11:55:06 +02:00
|
|
|
async function reportVideoAbuse (req: express.Request, res: express.Response) {
|
2017-12-12 17:53:50 +01:00
|
|
|
const videoInstance = res.locals.video as VideoModel
|
2017-07-10 19:43:21 +02:00
|
|
|
const body: VideoAbuseCreate = req.body
|
2017-05-05 16:53:35 +02:00
|
|
|
|
2018-08-10 16:54:01 +02:00
|
|
|
const videoAbuse: VideoAbuseModel = await sequelizeTypescript.transaction(async t => {
|
2018-09-20 10:13:13 +02:00
|
|
|
const reporterAccount = await AccountModel.load((res.locals.oauth.token.User as UserModel).Account.id, t)
|
|
|
|
|
|
|
|
const abuseToCreate = {
|
|
|
|
reporterAccountId: reporterAccount.id,
|
|
|
|
reason: body.reason,
|
|
|
|
videoId: videoInstance.id,
|
|
|
|
state: VideoAbuseState.PENDING
|
|
|
|
}
|
|
|
|
|
2017-12-12 17:53:50 +01:00
|
|
|
const videoAbuseInstance = await VideoAbuseModel.create(abuseToCreate, { transaction: t })
|
2017-11-16 17:04:19 +01:00
|
|
|
videoAbuseInstance.Video = videoInstance
|
2018-07-31 14:04:26 +02:00
|
|
|
videoAbuseInstance.Account = reporterAccount
|
2017-11-15 15:12:23 +01:00
|
|
|
|
|
|
|
// We send the video abuse to the origin server
|
2017-10-25 11:55:06 +02:00
|
|
|
if (videoInstance.isOwned() === false) {
|
2018-09-11 16:27:07 +02:00
|
|
|
await sendVideoAbuse(reporterAccount.Actor, videoAbuseInstance, videoInstance)
|
2017-10-25 11:55:06 +02:00
|
|
|
}
|
|
|
|
|
2018-12-26 10:36:24 +01:00
|
|
|
Notifier.Instance.notifyOnNewVideoAbuse(videoAbuseInstance)
|
|
|
|
|
2018-07-31 14:04:26 +02:00
|
|
|
auditLogger.create(reporterAccount.Actor.getIdentifier(), new VideoAbuseAuditView(videoAbuseInstance.toFormattedJSON()))
|
2018-08-10 16:54:01 +02:00
|
|
|
|
|
|
|
return videoAbuseInstance
|
2018-07-31 14:04:26 +02:00
|
|
|
})
|
2018-06-13 14:27:40 +02:00
|
|
|
|
2018-08-10 16:54:01 +02:00
|
|
|
logger.info('Abuse report for video %s created.', videoInstance.name)
|
2018-09-20 10:13:13 +02:00
|
|
|
|
|
|
|
return res.json({ videoAbuse: videoAbuse.toFormattedJSON() }).end()
|
2017-05-05 16:53:35 +02:00
|
|
|
}
|