mirror of
				https://github.com/TitanEmbeds/Titan.git
				synced 2025-11-04 07:47:10 +01:00 
			
		
		
		
	Merge userbookkeeping file with utils
This commit is contained in:
		@@ -1,8 +1,7 @@
 | 
				
			|||||||
from titanembeds.database import db, Guilds, UnauthenticatedUsers, UnauthenticatedBans, AuthenticatedUsers, KeyValueProperties, GuildMembers, Messages, get_channel_messages, list_all_guild_members, get_guild_member, get_administrators_list
 | 
					from titanembeds.database import db, Guilds, UnauthenticatedUsers, UnauthenticatedBans, AuthenticatedUsers, KeyValueProperties, GuildMembers, Messages, get_channel_messages, list_all_guild_members, get_guild_member, get_administrators_list
 | 
				
			||||||
from titanembeds.decorators import valid_session_required, discord_users_only
 | 
					from titanembeds.decorators import valid_session_required, discord_users_only
 | 
				
			||||||
from titanembeds.utils import check_guild_existance, guild_accepts_visitors, guild_query_unauth_users_bool, get_client_ipaddr, discord_api, rate_limiter, channel_ratelimit_key, guild_ratelimit_key
 | 
					from titanembeds.utils import check_guild_existance, guild_accepts_visitors, guild_query_unauth_users_bool, get_client_ipaddr, discord_api, rate_limiter, channel_ratelimit_key, guild_ratelimit_key, user_unauthenticated, checkUserRevoke, checkUserBanned, update_user_status, check_user_in_guild, get_guild_channels, guild_webhooks_enabled
 | 
				
			||||||
from titanembeds.oauth import user_has_permission, generate_avatar_url, check_user_can_administrate_guild
 | 
					from titanembeds.oauth import user_has_permission, generate_avatar_url, check_user_can_administrate_guild
 | 
				
			||||||
from titanembeds.userbookkeeping import user_unauthenticated, checkUserRevoke, checkUserBanned, update_user_status, check_user_in_guild, get_guild_channels, guild_webhooks_enabled
 | 
					 | 
				
			||||||
from flask import Blueprint, abort, jsonify, session, request, url_for
 | 
					from flask import Blueprint, abort, jsonify, session, request, url_for
 | 
				
			||||||
from flask_socketio import emit
 | 
					from flask_socketio import emit
 | 
				
			||||||
from sqlalchemy import and_
 | 
					from sqlalchemy import and_
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -1,5 +1,4 @@
 | 
				
			|||||||
from titanembeds.utils import socketio, guild_accepts_visitors, get_client_ipaddr, discord_api
 | 
					from titanembeds.utils import socketio, guild_accepts_visitors, get_client_ipaddr, discord_api, check_user_in_guild, get_guild_channels, update_user_status, guild_webhooks_enabled
 | 
				
			||||||
from titanembeds.userbookkeeping import check_user_in_guild, get_guild_channels, update_user_status, guild_webhooks_enabled
 | 
					 | 
				
			||||||
from titanembeds.database import db, GuildMembers, get_guild_member, Guilds
 | 
					from titanembeds.database import db, GuildMembers, get_guild_member, Guilds
 | 
				
			||||||
from flask_socketio import Namespace, emit, disconnect, join_room, leave_room
 | 
					from flask_socketio import Namespace, emit, disconnect, join_room, leave_room
 | 
				
			||||||
import functools
 | 
					import functools
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -1,218 +0,0 @@
 | 
				
			|||||||
from titanembeds.database import db, Guilds, UnauthenticatedUsers, UnauthenticatedBans, AuthenticatedUsers, GuildMembers, get_guild_member
 | 
					 | 
				
			||||||
from titanembeds.utils import guild_accepts_visitors, guild_query_unauth_users_bool, get_client_ipaddr
 | 
					 | 
				
			||||||
from titanembeds.oauth import check_user_can_administrate_guild, user_has_permission
 | 
					 | 
				
			||||||
from config import config
 | 
					 | 
				
			||||||
from flask import session
 | 
					 | 
				
			||||||
from sqlalchemy import and_
 | 
					 | 
				
			||||||
import json
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def user_unauthenticated():
 | 
					 | 
				
			||||||
    if 'unauthenticated' in session:
 | 
					 | 
				
			||||||
        return session['unauthenticated']
 | 
					 | 
				
			||||||
    return True
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def checkUserRevoke(guild_id, user_key=None):
 | 
					 | 
				
			||||||
    revoked = True #guilty until proven not revoked
 | 
					 | 
				
			||||||
    if user_unauthenticated():
 | 
					 | 
				
			||||||
        dbUser = db.session.query(UnauthenticatedUsers).filter(UnauthenticatedUsers.guild_id == guild_id, UnauthenticatedUsers.user_key == user_key).first()
 | 
					 | 
				
			||||||
        revoked = dbUser.isRevoked()
 | 
					 | 
				
			||||||
    else:
 | 
					 | 
				
			||||||
        banned = checkUserBanned(guild_id)
 | 
					 | 
				
			||||||
        if banned:
 | 
					 | 
				
			||||||
            return revoked
 | 
					 | 
				
			||||||
        dbUser = GuildMembers.query.filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == session["user_id"]).first()
 | 
					 | 
				
			||||||
        revoked = not dbUser or not dbUser.active
 | 
					 | 
				
			||||||
    return revoked
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def checkUserBanned(guild_id, ip_address=None):
 | 
					 | 
				
			||||||
    banned = True
 | 
					 | 
				
			||||||
    if user_unauthenticated():
 | 
					 | 
				
			||||||
        dbUser = UnauthenticatedBans.query.filter(and_(UnauthenticatedBans.guild_id == guild_id, UnauthenticatedBans.ip_address == ip_address)).all()
 | 
					 | 
				
			||||||
        if not dbUser:
 | 
					 | 
				
			||||||
            banned = False
 | 
					 | 
				
			||||||
        else:
 | 
					 | 
				
			||||||
            for usr in dbUser:
 | 
					 | 
				
			||||||
                if usr.lifter_id is not None:
 | 
					 | 
				
			||||||
                    banned = False
 | 
					 | 
				
			||||||
    else:
 | 
					 | 
				
			||||||
        banned = False
 | 
					 | 
				
			||||||
        dbUser = GuildMembers.query.filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == session["user_id"]).first()
 | 
					 | 
				
			||||||
        if not dbUser:
 | 
					 | 
				
			||||||
            banned = False
 | 
					 | 
				
			||||||
        else:
 | 
					 | 
				
			||||||
            banned = dbUser.banned
 | 
					 | 
				
			||||||
    return banned
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def update_user_status(guild_id, username, user_key=None):
 | 
					 | 
				
			||||||
    if user_unauthenticated():
 | 
					 | 
				
			||||||
        ip_address = get_client_ipaddr()
 | 
					 | 
				
			||||||
        status = {
 | 
					 | 
				
			||||||
            'authenticated': False,
 | 
					 | 
				
			||||||
            'avatar': None,
 | 
					 | 
				
			||||||
            'manage_embed': False,
 | 
					 | 
				
			||||||
            'ip_address': ip_address,
 | 
					 | 
				
			||||||
            'username': username,
 | 
					 | 
				
			||||||
            'nickname': None,
 | 
					 | 
				
			||||||
            'user_key': user_key,
 | 
					 | 
				
			||||||
            'guild_id': guild_id,
 | 
					 | 
				
			||||||
            'user_id': session['user_id'],
 | 
					 | 
				
			||||||
            'banned': checkUserBanned(guild_id, ip_address),
 | 
					 | 
				
			||||||
            'revoked': checkUserRevoke(guild_id, user_key),
 | 
					 | 
				
			||||||
        }
 | 
					 | 
				
			||||||
        if status['banned'] or status['revoked']:
 | 
					 | 
				
			||||||
            session['user_keys'].pop(guild_id, None)
 | 
					 | 
				
			||||||
            return status
 | 
					 | 
				
			||||||
        dbUser = UnauthenticatedUsers.query.filter(and_(UnauthenticatedUsers.guild_id == guild_id, UnauthenticatedUsers.user_key == user_key)).first()
 | 
					 | 
				
			||||||
        dbUser.bumpTimestamp()
 | 
					 | 
				
			||||||
        if dbUser.username != username or dbUser.ip_address != ip_address:
 | 
					 | 
				
			||||||
            dbUser.username = username
 | 
					 | 
				
			||||||
            dbUser.ip_address = ip_address
 | 
					 | 
				
			||||||
            db.session.commit()
 | 
					 | 
				
			||||||
    else:
 | 
					 | 
				
			||||||
        status = {
 | 
					 | 
				
			||||||
            'authenticated': True,
 | 
					 | 
				
			||||||
            'avatar': session["avatar"],
 | 
					 | 
				
			||||||
            'manage_embed': check_user_can_administrate_guild(guild_id),
 | 
					 | 
				
			||||||
            'username': username,
 | 
					 | 
				
			||||||
            'nickname': None,
 | 
					 | 
				
			||||||
            'discriminator': session['discriminator'],
 | 
					 | 
				
			||||||
            'guild_id': guild_id,
 | 
					 | 
				
			||||||
            'user_id': session['user_id'],
 | 
					 | 
				
			||||||
            'banned': checkUserBanned(guild_id),
 | 
					 | 
				
			||||||
            'revoked': checkUserRevoke(guild_id)
 | 
					 | 
				
			||||||
        }
 | 
					 | 
				
			||||||
        if status['banned'] or status['revoked']:
 | 
					 | 
				
			||||||
            return status
 | 
					 | 
				
			||||||
        dbMember = get_guild_member(guild_id, status["user_id"])
 | 
					 | 
				
			||||||
        if dbMember:
 | 
					 | 
				
			||||||
            status["nickname"] = dbMember.nickname
 | 
					 | 
				
			||||||
        dbUser = db.session.query(AuthenticatedUsers).filter(and_(AuthenticatedUsers.guild_id == guild_id, AuthenticatedUsers.client_id == status['user_id'])).first()
 | 
					 | 
				
			||||||
        dbUser.bumpTimestamp()
 | 
					 | 
				
			||||||
    return status
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def check_user_in_guild(guild_id):
 | 
					 | 
				
			||||||
    if user_unauthenticated():
 | 
					 | 
				
			||||||
        return guild_id in session.get("user_keys", {})
 | 
					 | 
				
			||||||
    else:
 | 
					 | 
				
			||||||
        dbUser = db.session.query(AuthenticatedUsers).filter(and_(AuthenticatedUsers.guild_id == guild_id, AuthenticatedUsers.client_id == session['user_id'])).first()
 | 
					 | 
				
			||||||
        return dbUser is not None and not checkUserRevoke(guild_id)
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def get_member_roles(guild_id, user_id):
 | 
					 | 
				
			||||||
    q = db.session.query(GuildMembers).filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == user_id).first()
 | 
					 | 
				
			||||||
    return json.loads(q.roles)
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def get_guild_channels(guild_id, force_everyone=False):
 | 
					 | 
				
			||||||
    if user_unauthenticated() or force_everyone:
 | 
					 | 
				
			||||||
        member_roles = [guild_id] #equivilant to @everyone role
 | 
					 | 
				
			||||||
    else:
 | 
					 | 
				
			||||||
        member_roles = get_member_roles(guild_id, session['user_id'])
 | 
					 | 
				
			||||||
        if guild_id not in member_roles:
 | 
					 | 
				
			||||||
            member_roles.append(guild_id)
 | 
					 | 
				
			||||||
    bot_member_roles = get_member_roles(guild_id, config["client-id"])
 | 
					 | 
				
			||||||
    if guild_id not in bot_member_roles:
 | 
					 | 
				
			||||||
        bot_member_roles.append(guild_id)
 | 
					 | 
				
			||||||
    dbguild = db.session.query(Guilds).filter(Guilds.guild_id == guild_id).first()
 | 
					 | 
				
			||||||
    guild_channels = json.loads(dbguild.channels)
 | 
					 | 
				
			||||||
    guild_roles = json.loads(dbguild.roles)
 | 
					 | 
				
			||||||
    guild_owner = str(dbguild.owner_id)
 | 
					 | 
				
			||||||
    result_channels = []
 | 
					 | 
				
			||||||
    for channel in guild_channels:
 | 
					 | 
				
			||||||
        if channel['type'] in ["text", "category"]:
 | 
					 | 
				
			||||||
            result = get_channel_permission(channel, guild_id, guild_owner, guild_roles, member_roles, session.get("user_id"), force_everyone)
 | 
					 | 
				
			||||||
            bot_result = get_channel_permission(channel, guild_id, guild_owner, guild_roles, bot_member_roles, config["client-id"], False)
 | 
					 | 
				
			||||||
            if not bot_result["read"]:
 | 
					 | 
				
			||||||
                result["read"] = False
 | 
					 | 
				
			||||||
            if not bot_result["write"]:
 | 
					 | 
				
			||||||
                result["write"] = False
 | 
					 | 
				
			||||||
            if not bot_result["mention_everyone"]:
 | 
					 | 
				
			||||||
                result["mention_everyone"] = False
 | 
					 | 
				
			||||||
            result_channels.append(result)
 | 
					 | 
				
			||||||
    return sorted(result_channels, key=lambda k: k['channel']['position'])
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def get_channel_permission(channel, guild_id, guild_owner, guild_roles, member_roles, user_id=None, force_everyone=False):
 | 
					 | 
				
			||||||
    result = {"channel": channel, "read": False, "write": False, "mention_everyone": False}
 | 
					 | 
				
			||||||
    if not user_id:
 | 
					 | 
				
			||||||
        user_id = session.get("user_id")
 | 
					 | 
				
			||||||
    if guild_owner == user_id:
 | 
					 | 
				
			||||||
        result["read"] = True
 | 
					 | 
				
			||||||
        result["write"] = True
 | 
					 | 
				
			||||||
        result["mention_everyone"] = True
 | 
					 | 
				
			||||||
        return result
 | 
					 | 
				
			||||||
    channel_perm = 0
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # @everyone
 | 
					 | 
				
			||||||
    for role in guild_roles:
 | 
					 | 
				
			||||||
        if role["id"] == guild_id:
 | 
					 | 
				
			||||||
            channel_perm |= role["permissions"]
 | 
					 | 
				
			||||||
            continue
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # User Guild Roles
 | 
					 | 
				
			||||||
    for m_role in member_roles:
 | 
					 | 
				
			||||||
        for g_role in guild_roles:
 | 
					 | 
				
			||||||
            if g_role["id"] == m_role:
 | 
					 | 
				
			||||||
                channel_perm |= g_role["permissions"]
 | 
					 | 
				
			||||||
                continue
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # If has server administrator permission
 | 
					 | 
				
			||||||
    if user_has_permission(channel_perm, 3):
 | 
					 | 
				
			||||||
        result["read"] = True
 | 
					 | 
				
			||||||
        result["write"] = True
 | 
					 | 
				
			||||||
        result["mention_everyone"] = True
 | 
					 | 
				
			||||||
        return result
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    denies = 0
 | 
					 | 
				
			||||||
    allows = 0
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # channel specific
 | 
					 | 
				
			||||||
    for overwrite in channel["permission_overwrites"]:
 | 
					 | 
				
			||||||
        if overwrite["type"] == "role" and overwrite["id"] in member_roles:
 | 
					 | 
				
			||||||
            denies |= overwrite["deny"]
 | 
					 | 
				
			||||||
            allows |= overwrite["allow"]
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    channel_perm = (channel_perm & ~denies) | allows
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # member specific
 | 
					 | 
				
			||||||
    for overwrite in channel["permission_overwrites"]:
 | 
					 | 
				
			||||||
        if overwrite["type"] == "member" and overwrite["id"] == session.get("user_id"):
 | 
					 | 
				
			||||||
            channel_perm = (channel_perm & ~overwrite['deny']) | overwrite['allow']
 | 
					 | 
				
			||||||
            break
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    result["read"] = user_has_permission(channel_perm, 10)
 | 
					 | 
				
			||||||
    result["write"] = user_has_permission(channel_perm, 11)
 | 
					 | 
				
			||||||
    result["mention_everyone"] = user_has_permission(channel_perm, 17)
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # If default channel, you can read
 | 
					 | 
				
			||||||
    if channel["id"] == guild_id:
 | 
					 | 
				
			||||||
        result["read"] = True
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
    # If you cant read channel, you cant write in it
 | 
					 | 
				
			||||||
    if not user_has_permission(channel_perm, 10):
 | 
					 | 
				
			||||||
        result["read"] = False
 | 
					 | 
				
			||||||
        result["write"] = False
 | 
					 | 
				
			||||||
        result["mention_everyone"] = False
 | 
					 | 
				
			||||||
    return result
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
def bot_can_create_webhooks(guild):
 | 
					 | 
				
			||||||
    perm = 0
 | 
					 | 
				
			||||||
    guild_roles = json.loads(guild.roles)
 | 
					 | 
				
			||||||
    # @everyone
 | 
					 | 
				
			||||||
    for role in guild_roles:
 | 
					 | 
				
			||||||
        if role["id"] == guild.guild_id:
 | 
					 | 
				
			||||||
            perm |= role["permissions"]
 | 
					 | 
				
			||||||
            continue
 | 
					 | 
				
			||||||
    member_roles = get_member_roles(guild.guild_id, config["client-id"])
 | 
					 | 
				
			||||||
    # User Guild Roles
 | 
					 | 
				
			||||||
    for m_role in member_roles:
 | 
					 | 
				
			||||||
        for g_role in guild_roles:
 | 
					 | 
				
			||||||
            if g_role["id"] == m_role:
 | 
					 | 
				
			||||||
                perm |= g_role["permissions"]
 | 
					 | 
				
			||||||
                continue
 | 
					 | 
				
			||||||
    if user_has_permission(perm, 3): # Admin perms override yes
 | 
					 | 
				
			||||||
        return True
 | 
					 | 
				
			||||||
    return user_has_permission(perm, 29)
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
def guild_webhooks_enabled(guild_id):
 | 
					 | 
				
			||||||
    dbguild = db.session.query(Guilds).filter(Guilds.guild_id == guild_id).first()
 | 
					 | 
				
			||||||
    if not dbguild.webhook_messages:
 | 
					 | 
				
			||||||
        return False
 | 
					 | 
				
			||||||
    return bot_can_create_webhooks(dbguild)
 | 
					 | 
				
			||||||
@@ -1,12 +1,14 @@
 | 
				
			|||||||
from titanembeds.database import db, Guilds
 | 
					from titanembeds.database import db, Guilds, UnauthenticatedUsers, UnauthenticatedBans, AuthenticatedUsers, GuildMembers, get_guild_member
 | 
				
			||||||
from flask import request, session
 | 
					from flask import request, session
 | 
				
			||||||
from flask_limiter import Limiter
 | 
					from flask_limiter import Limiter
 | 
				
			||||||
from flask_socketio import SocketIO
 | 
					from flask_socketio import SocketIO
 | 
				
			||||||
from config import config
 | 
					from config import config
 | 
				
			||||||
 | 
					from sqlalchemy import and_
 | 
				
			||||||
import random
 | 
					import random
 | 
				
			||||||
import string
 | 
					import string
 | 
				
			||||||
import hashlib
 | 
					import hashlib
 | 
				
			||||||
import time
 | 
					import time
 | 
				
			||||||
 | 
					import json
 | 
				
			||||||
 | 
					
 | 
				
			||||||
from titanembeds.discordrest import DiscordREST
 | 
					from titanembeds.discordrest import DiscordREST
 | 
				
			||||||
 | 
					
 | 
				
			||||||
@@ -72,5 +74,218 @@ def guild_query_unauth_users_bool(guild_id):
 | 
				
			|||||||
    dbGuild = db.session.query(Guilds).filter(Guilds.guild_id==guild_id).first()
 | 
					    dbGuild = db.session.query(Guilds).filter(Guilds.guild_id==guild_id).first()
 | 
				
			||||||
    return dbGuild.unauth_users
 | 
					    return dbGuild.unauth_users
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def user_unauthenticated():
 | 
				
			||||||
 | 
					    if 'unauthenticated' in session:
 | 
				
			||||||
 | 
					        return session['unauthenticated']
 | 
				
			||||||
 | 
					    return True
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def checkUserRevoke(guild_id, user_key=None):
 | 
				
			||||||
 | 
					    revoked = True #guilty until proven not revoked
 | 
				
			||||||
 | 
					    if user_unauthenticated():
 | 
				
			||||||
 | 
					        dbUser = db.session.query(UnauthenticatedUsers).filter(UnauthenticatedUsers.guild_id == guild_id, UnauthenticatedUsers.user_key == user_key).first()
 | 
				
			||||||
 | 
					        revoked = dbUser.isRevoked()
 | 
				
			||||||
 | 
					    else:
 | 
				
			||||||
 | 
					        banned = checkUserBanned(guild_id)
 | 
				
			||||||
 | 
					        if banned:
 | 
				
			||||||
 | 
					            return revoked
 | 
				
			||||||
 | 
					        dbUser = GuildMembers.query.filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == session["user_id"]).first()
 | 
				
			||||||
 | 
					        revoked = not dbUser or not dbUser.active
 | 
				
			||||||
 | 
					    return revoked
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def checkUserBanned(guild_id, ip_address=None):
 | 
				
			||||||
 | 
					    banned = True
 | 
				
			||||||
 | 
					    if user_unauthenticated():
 | 
				
			||||||
 | 
					        dbUser = UnauthenticatedBans.query.filter(and_(UnauthenticatedBans.guild_id == guild_id, UnauthenticatedBans.ip_address == ip_address)).all()
 | 
				
			||||||
 | 
					        if not dbUser:
 | 
				
			||||||
 | 
					            banned = False
 | 
				
			||||||
 | 
					        else:
 | 
				
			||||||
 | 
					            for usr in dbUser:
 | 
				
			||||||
 | 
					                if usr.lifter_id is not None:
 | 
				
			||||||
 | 
					                    banned = False
 | 
				
			||||||
 | 
					    else:
 | 
				
			||||||
 | 
					        banned = False
 | 
				
			||||||
 | 
					        dbUser = GuildMembers.query.filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == session["user_id"]).first()
 | 
				
			||||||
 | 
					        if not dbUser:
 | 
				
			||||||
 | 
					            banned = False
 | 
				
			||||||
 | 
					        else:
 | 
				
			||||||
 | 
					            banned = dbUser.banned
 | 
				
			||||||
 | 
					    return banned
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					from titanembeds.oauth import check_user_can_administrate_guild, user_has_permission
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def update_user_status(guild_id, username, user_key=None):
 | 
				
			||||||
 | 
					    if user_unauthenticated():
 | 
				
			||||||
 | 
					        ip_address = get_client_ipaddr()
 | 
				
			||||||
 | 
					        status = {
 | 
				
			||||||
 | 
					            'authenticated': False,
 | 
				
			||||||
 | 
					            'avatar': None,
 | 
				
			||||||
 | 
					            'manage_embed': False,
 | 
				
			||||||
 | 
					            'ip_address': ip_address,
 | 
				
			||||||
 | 
					            'username': username,
 | 
				
			||||||
 | 
					            'nickname': None,
 | 
				
			||||||
 | 
					            'user_key': user_key,
 | 
				
			||||||
 | 
					            'guild_id': guild_id,
 | 
				
			||||||
 | 
					            'user_id': session['user_id'],
 | 
				
			||||||
 | 
					            'banned': checkUserBanned(guild_id, ip_address),
 | 
				
			||||||
 | 
					            'revoked': checkUserRevoke(guild_id, user_key),
 | 
				
			||||||
 | 
					        }
 | 
				
			||||||
 | 
					        if status['banned'] or status['revoked']:
 | 
				
			||||||
 | 
					            session['user_keys'].pop(guild_id, None)
 | 
				
			||||||
 | 
					            return status
 | 
				
			||||||
 | 
					        dbUser = UnauthenticatedUsers.query.filter(and_(UnauthenticatedUsers.guild_id == guild_id, UnauthenticatedUsers.user_key == user_key)).first()
 | 
				
			||||||
 | 
					        dbUser.bumpTimestamp()
 | 
				
			||||||
 | 
					        if dbUser.username != username or dbUser.ip_address != ip_address:
 | 
				
			||||||
 | 
					            dbUser.username = username
 | 
				
			||||||
 | 
					            dbUser.ip_address = ip_address
 | 
				
			||||||
 | 
					            db.session.commit()
 | 
				
			||||||
 | 
					    else:
 | 
				
			||||||
 | 
					        status = {
 | 
				
			||||||
 | 
					            'authenticated': True,
 | 
				
			||||||
 | 
					            'avatar': session["avatar"],
 | 
				
			||||||
 | 
					            'manage_embed': check_user_can_administrate_guild(guild_id),
 | 
				
			||||||
 | 
					            'username': username,
 | 
				
			||||||
 | 
					            'nickname': None,
 | 
				
			||||||
 | 
					            'discriminator': session['discriminator'],
 | 
				
			||||||
 | 
					            'guild_id': guild_id,
 | 
				
			||||||
 | 
					            'user_id': session['user_id'],
 | 
				
			||||||
 | 
					            'banned': checkUserBanned(guild_id),
 | 
				
			||||||
 | 
					            'revoked': checkUserRevoke(guild_id)
 | 
				
			||||||
 | 
					        }
 | 
				
			||||||
 | 
					        if status['banned'] or status['revoked']:
 | 
				
			||||||
 | 
					            return status
 | 
				
			||||||
 | 
					        dbMember = get_guild_member(guild_id, status["user_id"])
 | 
				
			||||||
 | 
					        if dbMember:
 | 
				
			||||||
 | 
					            status["nickname"] = dbMember.nickname
 | 
				
			||||||
 | 
					        dbUser = db.session.query(AuthenticatedUsers).filter(and_(AuthenticatedUsers.guild_id == guild_id, AuthenticatedUsers.client_id == status['user_id'])).first()
 | 
				
			||||||
 | 
					        dbUser.bumpTimestamp()
 | 
				
			||||||
 | 
					    return status
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def check_user_in_guild(guild_id):
 | 
				
			||||||
 | 
					    if user_unauthenticated():
 | 
				
			||||||
 | 
					        return guild_id in session.get("user_keys", {})
 | 
				
			||||||
 | 
					    else:
 | 
				
			||||||
 | 
					        dbUser = db.session.query(AuthenticatedUsers).filter(and_(AuthenticatedUsers.guild_id == guild_id, AuthenticatedUsers.client_id == session['user_id'])).first()
 | 
				
			||||||
 | 
					        return dbUser is not None and not checkUserRevoke(guild_id)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def get_member_roles(guild_id, user_id):
 | 
				
			||||||
 | 
					    q = db.session.query(GuildMembers).filter(GuildMembers.guild_id == guild_id).filter(GuildMembers.user_id == user_id).first()
 | 
				
			||||||
 | 
					    return json.loads(q.roles)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def get_guild_channels(guild_id, force_everyone=False):
 | 
				
			||||||
 | 
					    if user_unauthenticated() or force_everyone:
 | 
				
			||||||
 | 
					        member_roles = [guild_id] #equivilant to @everyone role
 | 
				
			||||||
 | 
					    else:
 | 
				
			||||||
 | 
					        member_roles = get_member_roles(guild_id, session['user_id'])
 | 
				
			||||||
 | 
					        if guild_id not in member_roles:
 | 
				
			||||||
 | 
					            member_roles.append(guild_id)
 | 
				
			||||||
 | 
					    bot_member_roles = get_member_roles(guild_id, config["client-id"])
 | 
				
			||||||
 | 
					    if guild_id not in bot_member_roles:
 | 
				
			||||||
 | 
					        bot_member_roles.append(guild_id)
 | 
				
			||||||
 | 
					    dbguild = db.session.query(Guilds).filter(Guilds.guild_id == guild_id).first()
 | 
				
			||||||
 | 
					    guild_channels = json.loads(dbguild.channels)
 | 
				
			||||||
 | 
					    guild_roles = json.loads(dbguild.roles)
 | 
				
			||||||
 | 
					    guild_owner = str(dbguild.owner_id)
 | 
				
			||||||
 | 
					    result_channels = []
 | 
				
			||||||
 | 
					    for channel in guild_channels:
 | 
				
			||||||
 | 
					        if channel['type'] in ["text", "category"]:
 | 
				
			||||||
 | 
					            result = get_channel_permission(channel, guild_id, guild_owner, guild_roles, member_roles, session.get("user_id"), force_everyone)
 | 
				
			||||||
 | 
					            bot_result = get_channel_permission(channel, guild_id, guild_owner, guild_roles, bot_member_roles, config["client-id"], False)
 | 
				
			||||||
 | 
					            if not bot_result["read"]:
 | 
				
			||||||
 | 
					                result["read"] = False
 | 
				
			||||||
 | 
					            if not bot_result["write"]:
 | 
				
			||||||
 | 
					                result["write"] = False
 | 
				
			||||||
 | 
					            if not bot_result["mention_everyone"]:
 | 
				
			||||||
 | 
					                result["mention_everyone"] = False
 | 
				
			||||||
 | 
					            result_channels.append(result)
 | 
				
			||||||
 | 
					    return sorted(result_channels, key=lambda k: k['channel']['position'])
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def get_channel_permission(channel, guild_id, guild_owner, guild_roles, member_roles, user_id=None, force_everyone=False):
 | 
				
			||||||
 | 
					    result = {"channel": channel, "read": False, "write": False, "mention_everyone": False}
 | 
				
			||||||
 | 
					    if not user_id:
 | 
				
			||||||
 | 
					        user_id = session.get("user_id")
 | 
				
			||||||
 | 
					    if guild_owner == user_id:
 | 
				
			||||||
 | 
					        result["read"] = True
 | 
				
			||||||
 | 
					        result["write"] = True
 | 
				
			||||||
 | 
					        result["mention_everyone"] = True
 | 
				
			||||||
 | 
					        return result
 | 
				
			||||||
 | 
					    channel_perm = 0
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # @everyone
 | 
				
			||||||
 | 
					    for role in guild_roles:
 | 
				
			||||||
 | 
					        if role["id"] == guild_id:
 | 
				
			||||||
 | 
					            channel_perm |= role["permissions"]
 | 
				
			||||||
 | 
					            continue
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # User Guild Roles
 | 
				
			||||||
 | 
					    for m_role in member_roles:
 | 
				
			||||||
 | 
					        for g_role in guild_roles:
 | 
				
			||||||
 | 
					            if g_role["id"] == m_role:
 | 
				
			||||||
 | 
					                channel_perm |= g_role["permissions"]
 | 
				
			||||||
 | 
					                continue
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # If has server administrator permission
 | 
				
			||||||
 | 
					    if user_has_permission(channel_perm, 3):
 | 
				
			||||||
 | 
					        result["read"] = True
 | 
				
			||||||
 | 
					        result["write"] = True
 | 
				
			||||||
 | 
					        result["mention_everyone"] = True
 | 
				
			||||||
 | 
					        return result
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    denies = 0
 | 
				
			||||||
 | 
					    allows = 0
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # channel specific
 | 
				
			||||||
 | 
					    for overwrite in channel["permission_overwrites"]:
 | 
				
			||||||
 | 
					        if overwrite["type"] == "role" and overwrite["id"] in member_roles:
 | 
				
			||||||
 | 
					            denies |= overwrite["deny"]
 | 
				
			||||||
 | 
					            allows |= overwrite["allow"]
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    channel_perm = (channel_perm & ~denies) | allows
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # member specific
 | 
				
			||||||
 | 
					    for overwrite in channel["permission_overwrites"]:
 | 
				
			||||||
 | 
					        if overwrite["type"] == "member" and overwrite["id"] == session.get("user_id"):
 | 
				
			||||||
 | 
					            channel_perm = (channel_perm & ~overwrite['deny']) | overwrite['allow']
 | 
				
			||||||
 | 
					            break
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    result["read"] = user_has_permission(channel_perm, 10)
 | 
				
			||||||
 | 
					    result["write"] = user_has_permission(channel_perm, 11)
 | 
				
			||||||
 | 
					    result["mention_everyone"] = user_has_permission(channel_perm, 17)
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # If default channel, you can read
 | 
				
			||||||
 | 
					    if channel["id"] == guild_id:
 | 
				
			||||||
 | 
					        result["read"] = True
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					    # If you cant read channel, you cant write in it
 | 
				
			||||||
 | 
					    if not user_has_permission(channel_perm, 10):
 | 
				
			||||||
 | 
					        result["read"] = False
 | 
				
			||||||
 | 
					        result["write"] = False
 | 
				
			||||||
 | 
					        result["mention_everyone"] = False
 | 
				
			||||||
 | 
					    return result
 | 
				
			||||||
 | 
					    
 | 
				
			||||||
 | 
					def bot_can_create_webhooks(guild):
 | 
				
			||||||
 | 
					    perm = 0
 | 
				
			||||||
 | 
					    guild_roles = json.loads(guild.roles)
 | 
				
			||||||
 | 
					    # @everyone
 | 
				
			||||||
 | 
					    for role in guild_roles:
 | 
				
			||||||
 | 
					        if role["id"] == guild.guild_id:
 | 
				
			||||||
 | 
					            perm |= role["permissions"]
 | 
				
			||||||
 | 
					            continue
 | 
				
			||||||
 | 
					    member_roles = get_member_roles(guild.guild_id, config["client-id"])
 | 
				
			||||||
 | 
					    # User Guild Roles
 | 
				
			||||||
 | 
					    for m_role in member_roles:
 | 
				
			||||||
 | 
					        for g_role in guild_roles:
 | 
				
			||||||
 | 
					            if g_role["id"] == m_role:
 | 
				
			||||||
 | 
					                perm |= g_role["permissions"]
 | 
				
			||||||
 | 
					                continue
 | 
				
			||||||
 | 
					    if user_has_permission(perm, 3): # Admin perms override yes
 | 
				
			||||||
 | 
					        return True
 | 
				
			||||||
 | 
					    return user_has_permission(perm, 29)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					def guild_webhooks_enabled(guild_id):
 | 
				
			||||||
 | 
					    dbguild = db.session.query(Guilds).filter(Guilds.guild_id == guild_id).first()
 | 
				
			||||||
 | 
					    if not dbguild.webhook_messages:
 | 
				
			||||||
 | 
					        return False
 | 
				
			||||||
 | 
					    return bot_can_create_webhooks(dbguild)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
rate_limiter = Limiter(key_func=get_client_ipaddr) # Default limit by ip address
 | 
					rate_limiter = Limiter(key_func=get_client_ipaddr) # Default limit by ip address
 | 
				
			||||||
socketio = SocketIO()
 | 
					socketio = SocketIO()
 | 
				
			||||||
		Reference in New Issue
	
	Block a user