github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-09 18:44:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: enforce strict allowlist across pairing stores (#23017)

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-22 00:00:23 +01:00
committed by GitHub
parent 617e38cec0
commit 0bd9f0d4ac
31 changed files with 162 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/channels/allow-from.test.ts
View File

@@ -10,6 +10,26 @@ describe("mergeAllowFromSources", () => {
}),
).toEqual(["line:user:abc", "123", "telegram:456"]);
});
it("excludes pairing-store entries when dmPolicy is allowlist", () => {
expect(
mergeAllowFromSources({
allowFrom: ["+1111"],
storeAllowFrom: ["+2222", "+3333"],
dmPolicy: "allowlist",
}),
).toEqual(["+1111"]);
});
it("keeps pairing-store entries for non-allowlist policies", () => {
expect(
mergeAllowFromSources({
allowFrom: ["+1111"],
storeAllowFrom: ["+2222"],
dmPolicy: "pairing",
}),
).toEqual(["+1111", "+2222"]);
});
});
describe("firstDefined", () => {

4
src/channels/allow-from.ts
View File

@@ -1,8 +1,10 @@
export function mergeAllowFromSources(params: {
allowFrom?: Array<string | number>;
storeAllowFrom?: string[];
dmPolicy?: string;
}): string[] {
return [...(params.allowFrom ?? []), ...(params.storeAllowFrom ?? [])]
const storeEntries = params.dmPolicy === "allowlist" ? [] : (params.storeAllowFrom ?? []);
return [...(params.allowFrom ?? []), ...storeEntries]
.map((value) => String(value).trim())
.filter(Boolean);
}