feat: get block list from database

Author: winverse

packages/velog-server/src/env.ts

@@ -3,6 +3,8 @@ import { existsSync } from 'fs'
 import { z } from 'zod'
 import { fileURLToPath } from 'url'
 import { dirname, join } from 'path'
+import { container } from 'tsyringe'
+import { DbService } from '@lib/db/DbService.js'
 
 type DockerEnv = 'development' | 'stage' | 'production'
 type AppEnvironment = 'development' | 'production'
@@ -88,6 +90,8 @@ const env = z.object({
   graphcdnToken: z.string(),
 })
 
+const { bannedKeywords, bannedAltKeywords } = await readEnvFromDatabase()
+
 export const ENV = env.parse({
   dockerEnv,
   appEnv,
@@ -127,7 +131,17 @@ export const ENV = env.parse({
   discordErrorChannel: process.env.DISCORD_ERROR_CHANNEL,
   discordSpamChannel: process.env.DISCORD_SPAM_CHANNEL,
   turnstileSecretKey: process.env.TURNSTILE_SECRET_KEY,
-  bannedKeywords: process.env.BANNED_KEYWORDS?.split(','),
-  bannedAltKeywords: process.env.BANNED_ALT_KEYWORDS?.split(','),
+  bannedKeywords: bannedKeywords,
+  bannedAltKeywords: bannedAltKeywords,
   graphcdnToken: process.env.GRAPHCDN_TOKEN,
 })
+
+async function readEnvFromDatabase() {
+  const db = container.resolve(DbService)
+  const items = await db.dynamicConfigItem.findMany()
+
+  return {
+    bannedKeywords: items.filter((item) => item.type === 'banned').map((item) => item.value),
+    bannedAltKeywords: items.filter((item) => item.type === 'bannedAlt').map((item) => item.value),
+  }
+}

packages/velog-server/src/services/DynamicConfigService/index.ts

@@ -1,22 +1,25 @@
-import { RedisService } from '@lib/redis/RedisService.js'
+import { DbService } from '@lib/db/DbService.js'
 import { injectable, singleton } from 'tsyringe'
 
 interface Service {
-  checkBlockedUser(username: string): Promise<boolean>
+  isBlockedUser(username: string): Promise<boolean>
 }
 
 @injectable()
 @singleton()
 export class DynamicConfigService implements Service {
-  constructor(private readonly redis: RedisService) {}
-  public async checkBlockedUser(username: string = ''): Promise<boolean> {
+  constructor(private readonly db: DbService) {}
+  public async isBlockedUser(username: string = ''): Promise<boolean> {
     const list = await this.readBlockUserList()
     const isBlocked = list.includes(username)
     return isBlocked
   }
   private async readBlockUserList(): Promise<string[]> {
-    const keyname = this.redis.setName.blockList
-    const list = await this.redis.smembers(keyname)
-    return list
+    const list = await this.db.dynamicConfigItem.findMany({
+      where: {
+        type: 'username',
+      },
+    })
+    return list.map((item) => item.value)
   }
 }

packages/velog-server/src/services/PostApiService/index.ts

@@ -168,7 +168,7 @@ export class PostApiService implements Service {
     const country = geoip.lookup(ip)?.country ?? ''
     const isSpam = this.isIncludeSpamKeyword({ input, user, country })
     const isLimit = await this.isPostLimitReached(signedUserId)
-    const isBlock = await this.dynamicConfigService.checkBlockedUser(user.username)
+    const isBlock = await this.dynamicConfigService.isBlockedUser(user.username)
 
     const checks = [
       { type: 'spam', value: isSpam },