Skip to content

Commit e4ab476

Browse files
author
sachin-maheshwari
authored
Merge pull request #309 from topcoder-platform/dev
Prod-689 : block user
2 parents a91b194 + cfe4931 commit e4ab476

File tree

4 files changed

+233
-2
lines changed

4 files changed

+233
-2
lines changed

‎.github/workflows/codeql-analysis.yml

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,70 @@
1+
# For most projects, this workflow file will not need changing; you simply need
2+
# to commit it to your repository.
3+
#
4+
# You may wish to alter this file to override the set of languages analyzed,
5+
# or to provide custom queries or build logic.
6+
#
7+
# ******** NOTE ********
8+
# We have attempted to detect the languages in your repository. Please check
9+
# the `language` matrix defined below to confirm you have the correct set of
10+
# supported CodeQL languages.
11+
#
12+
name: "CodeQL"
13+
14+
on:
15+
push:
16+
branches: [ dev ]
17+
pull_request:
18+
# The branches below must be a subset of the branches above
19+
branches: [ dev ]
20+
schedule:
21+
- cron: '32 7 * * 6'
22+
23+
jobs:
24+
analyze:
25+
name: Analyze
26+
runs-on: ubuntu-latest
27+
permissions:
28+
actions: read
29+
contents: read
30+
security-events: write
31+
32+
strategy:
33+
fail-fast: false
34+
matrix:
35+
language: [ 'javascript' ]
36+
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37+
# Learn more about CodeQL language support at https://git.io/codeql-language-support
38+
39+
steps:
40+
- name: Checkout repository
41+
uses: actions/checkout@v3
42+
43+
# Initializes the CodeQL tools for scanning.
44+
- name: Initialize CodeQL
45+
uses: github/codeql-action/init@v1
46+
with:
47+
languages: ${{ matrix.language }}
48+
# If you wish to specify custom queries, you can do so here or in a config file.
49+
# By default, queries listed here will override any specified in a config file.
50+
# Prefix the list here with "+" to use these queries and those in the config file.
51+
# queries: ./path/to/local/query, your-org/your-repo/queries@main
52+
53+
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
54+
# If this step fails, then you should remove it and run the build manually (see below)
55+
- name: Autobuild
56+
uses: github/codeql-action/autobuild@v1
57+
58+
# ℹ️ Command-line programs to run using the OS shell.
59+
# 📚 https://git.io/JvXDl
60+
61+
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
62+
# and modify them (or add more) to build your code if your project
63+
# uses a compiled language
64+
65+
#- run: |
66+
# make bootstrap
67+
# make release
68+
69+
- name: Perform CodeQL Analysis
70+
uses: github/codeql-action/analyze@v1

‎web-assets/auth0/dev-tenant/rules/blockUser.js

Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,81 @@
1+
function (user, context, callback) {
2+
if (context.clientID === configuration.CLIENT_ACCOUNTS_LOGIN) {
3+
console.log("rule:block-user:enter");
4+
5+
if (context.redirect) {
6+
console.log("rule:block-user:exiting due to context being a redirect");
7+
return callback(null, user, context);
8+
}
9+
10+
const FORBIDDEN_COUNTRIES_CODES = [
11+
"IRN",
12+
"PRK",
13+
"CUB",
14+
"SDN",
15+
"SSD", // (south sudan)
16+
"SYR",
17+
"BLR",
18+
"RUS",
19+
];
20+
21+
const handle = context.idToken[global.AUTH0_CLAIM_NAMESPACE + "handle"];
22+
if (!handle) {
23+
console.log("rule:block-user: exiting due to handle being null.");
24+
return callback(null, user, context);
25+
}
26+
27+
global.AUTH0_CLAIM_NAMESPACE = "https://" + configuration.DOMAIN + "/";
28+
const axios = require("[email protected]");
29+
const options = {
30+
method: "GET",
31+
url: `https://api.${configuration.DOMAIN}/v5/members/${handle}`,
32+
};
33+
34+
// Fetch v5 mmber Api.
35+
axios(options)
36+
.then((result) => {
37+
try {
38+
const data = result.data;
39+
40+
const { homeCountryCode, competitionCountryCode } = data;
41+
console.log(
42+
"rule:block-user: set block user ",
43+
homeCountryCode,
44+
competitionCountryCode
45+
);
46+
const blockIP =
47+
FORBIDDEN_COUNTRIES_CODES.includes(homeCountryCode) ||
48+
FORBIDDEN_COUNTRIES_CODES.includes(competitionCountryCode)
49+
? true
50+
: false;
51+
console.log(
52+
"rule:block-user: blocking user IP ? ..............",
53+
blockIP
54+
);
55+
context.idToken[global.AUTH0_CLAIM_NAMESPACE + "blockIP"] = blockIP;
56+
57+
if (blockIP) {
58+
context.idToken[global.AUTH0_CLAIM_NAMESPACE + "tcsso"] =
59+
"123|block";
60+
}
61+
62+
return callback(null, user, context);
63+
} catch (e) {
64+
console.log(
65+
"rule:block-user:error in member api response handling: ",
66+
e
67+
);
68+
return callback(null, user, context);
69+
}
70+
})
71+
.catch((requestError) => {
72+
console.log(
73+
"rule:block-user:failed to fetch member api, error: ",
74+
requestError.response.status
75+
);
76+
return callback(null, user, context);
77+
});
78+
} else {
79+
return callback(null, user, context);
80+
}
81+
}

‎web-assets/auth0/prod-tenant/database/create.js

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,6 @@
5959
"afterActivationURL": encodeURIComponent(afterActivationURL)
6060
}
6161
};
62-
console.log("SignUp....", user, data);
6362
request.post({
6463
url: "https://api."+configuration.DOMAIN+"/v3/users",
6564
json: data
@@ -100,4 +99,4 @@
10099
callback(null);
101100
}); //end post request
102101
//callback(null);
103-
}
102+
}

‎web-assets/auth0/prod-tenant/rules/blockUser.js

Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,81 @@
1+
function (user, context, callback) {
2+
if (context.clientID === configuration.CLIENT_ACCOUNTS_LOGIN) {
3+
console.log("rule:block-user:enter");
4+
5+
if (context.redirect) {
6+
console.log("rule:block-user:exiting due to context being a redirect");
7+
return callback(null, user, context);
8+
}
9+
10+
const FORBIDDEN_COUNTRIES_CODES = [
11+
"IRN",
12+
"PRK",
13+
"CUB",
14+
"SDN",
15+
"SSD", // (south sudan)
16+
"SYR",
17+
"BLR",
18+
"RUS",
19+
];
20+
21+
const handle = context.idToken[global.AUTH0_CLAIM_NAMESPACE + "handle"];
22+
if (!handle) {
23+
console.log("rule:block-user: exiting due to handle being null.");
24+
return callback(null, user, context);
25+
}
26+
27+
global.AUTH0_CLAIM_NAMESPACE = "https://" + configuration.DOMAIN + "/";
28+
const axios = require("[email protected]");
29+
const options = {
30+
method: "GET",
31+
url: `https://api.${configuration.DOMAIN}/v5/members/${handle}`,
32+
};
33+
34+
// Fetch v5 mmber Api.
35+
axios(options)
36+
.then((result) => {
37+
try {
38+
const data = result.data;
39+
40+
const { homeCountryCode, competitionCountryCode } = data;
41+
console.log(
42+
"rule:block-user: set block user ",
43+
homeCountryCode,
44+
competitionCountryCode
45+
);
46+
const blockIP =
47+
FORBIDDEN_COUNTRIES_CODES.includes(homeCountryCode) ||
48+
FORBIDDEN_COUNTRIES_CODES.includes(competitionCountryCode)
49+
? true
50+
: false;
51+
console.log(
52+
"rule:block-user: blocking user IP ? ..............",
53+
blockIP
54+
);
55+
context.idToken[global.AUTH0_CLAIM_NAMESPACE + "blockIP"] = blockIP;
56+
57+
if (blockIP) {
58+
context.idToken[global.AUTH0_CLAIM_NAMESPACE + "tcsso"] =
59+
"123|block";
60+
}
61+
62+
return callback(null, user, context);
63+
} catch (e) {
64+
console.log(
65+
"rule:block-user:error in member api response handling: ",
66+
e
67+
);
68+
return callback(null, user, context);
69+
}
70+
})
71+
.catch((requestError) => {
72+
console.log(
73+
"rule:block-user:failed to fetch member api, error: ",
74+
requestError.response.status
75+
);
76+
return callback(null, user, context);
77+
});
78+
} else {
79+
return callback(null, user, context);
80+
}
81+
}

0 commit comments

Comments
 (0)