feat(cloudron): add tirreno package artifacts

- Add CloudronStack/output/CloudronPackages-Artifacts/tirreno/ directory and its contents - Includes package manifest, Dockerfile, source code, documentation, and build artifacts - Add tirreno-1761840148.tar.gz as a build artifact - Add tirreno-cloudron-package-1761841304.tar.gz as the Cloudron package - Include all necessary files for the tirreno Cloudron package This adds the complete tirreno Cloudron package artifacts to the repository.
2025-10-30 11:43:06 -05:00
parent 0ce353ea9d
commit 91d52d2de5
1692 changed files with 202851 additions and 0 deletions
--- a/CloudronStack/output/CloudronPackages-Artifacts/tirreno/app/Crons/BlacklistQueueHandler.php
+++ b/CloudronStack/output/CloudronPackages-Artifacts/tirreno/app/Crons/BlacklistQueueHandler.php
@@ -0,0 +1,111 @@
+<?php
+
+/**
+ * Tirreno ~ Open source user analytics
+ * Copyright (c) Tirreno Technologies Sàrl (https://www.tirreno.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) Tirreno Technologies Sàrl (https://www.tirreno.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.tirreno.com Tirreno(tm)
+ */
+
+namespace Crons;
+
+class BlacklistQueueHandler extends AbstractQueueCron {
+    public function __construct() {
+        parent::__construct();
+
+        $actionType = new \Type\QueueAccountOperationActionType(\Type\QueueAccountOperationActionType::BLACKLIST);
+        $this->accountOpQueueModel = new \Models\Queue\AccountOperationQueue($actionType);
+    }
+
+    public function processQueue(): void {
+        if ($this->accountOpQueueModel->isExecuting() && !$this->accountOpQueueModel->unclog()) {
+            $this->log('Blacklist queue is already being executed by another cron job.');
+
+            return;
+        }
+
+        $this->processItems($this->accountOpQueueModel);
+    }
+
+    protected function processItem(array $item): void {
+        $fraud = true;
+
+        $dataController = new \Controllers\Admin\User\Data();
+        $items = $dataController->setFraudFlag(
+            $item['event_account'],
+            $fraud,
+            $item['key'],
+        );
+
+        $model = new \Models\User();
+        $username = $model->getUser($item['event_account'], $item['key'])['userid'] ?? '';
+
+        $logger = new \Log('blacklist.log');
+        $logger->write('[BlacklistQueue] ' . $username . ' added to blacklist.');
+
+        $model = new \Models\ApiKeys();
+        $model->getKeyById($item['key']);
+
+        if (!$model->skip_blacklist_sync && $model->token) {
+            $user = new \Models\User();
+            $userEmail = $user->getUser($item['event_account'], $item['key'])['email'] ?? null;
+
+            if ($userEmail !== null) {
+                $hashes = $this->getHashes($items, $userEmail);
+                $errorMessage = $this->sendBlacklistReportPostRequest($hashes, $model->token);
+                if (strlen($errorMessage) > 0) {
+                    // Log error to database
+                    \Utils\Logger::log('Fraud enrichment API curl error', $errorMessage);
+                    $this->log('Fraud enrichment API curl error logged to database.');
+                }
+            }
+        }
+    }
+
+    /**
+     * @param array<array{type: string, value: string}> $items
+     */
+    private function getHashes(array $items, string $userEmail): array {
+        $userHash = hash('sha256', $userEmail);
+
+        return array_map(function ($item) use ($userHash) {
+            return [
+                'type'  => $item['type'],
+                'value' => hash('sha256', $item['value']),
+                'id'    => $userHash,
+            ];
+        }, $items);
+    }
+
+    /**
+     * @param array<array{type: string, value: string}> $hashes
+     */
+    private function sendBlacklistReportPostRequest(array $hashes, string $enrichmentKey): string {
+        $postFields = [
+            'data' => $hashes,
+        ];
+        $options = [
+            'method' => 'POST',
+            'header' => [
+                'Content-Type: application/json',
+                'Authorization: Bearer ' . $enrichmentKey,
+                'User-Agent: ' . $this->f3->get('USER_AGENT'),
+            ],
+            'content' => \json_encode($postFields),
+        ];
+
+        /** @var array{request: array<string>, body: string, headers: array<string>, engine: string, cached: bool, error: string} $result */
+        $result = \Web::instance()->request(
+            url: \Utils\Variables::getEnrichtmentApi() . '/global_alert_report',
+            options: $options,
+        );
+
+        return $result['error'];
+    }
+}