Allow always showing images from trusted senders

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

2 files changed, 113 insertions, 1 deletions

diff --git a/lib/Controller/MessagesController.php b/lib/Controller/MessagesController.php
index c366fcd34..17f8ef578 100755
--- a/lib/Controller/MessagesController.php
+++ b/lib/Controller/MessagesController.php
@@ -34,6 +34,8 @@ use Exception;
 use OC\Security\CSP\ContentSecurityPolicyNonceManager;
 use OCA\Mail\Contracts\IMailManager;
 use OCA\Mail\Contracts\IMailSearch;
+use OCA\Mail\Contracts\ITrustedSenderService;
+use OCA\Mail\Db\Message;
 use OCA\Mail\Exception\ClientException;
 use OCA\Mail\Exception\ServiceException;
 use OCA\Mail\Http\AttachmentDownloadResponse;
@@ -91,6 +93,9 @@ class MessagesController extends Controller {
 	/** @var ContentSecurityPolicyNonceManager */
 	private $nonceManager;
 
+	/** @var ITrustedSenderService */
+	private $trustedSenderService;
+
 	/**
 	 * @param string $appName
 	 * @param IRequest $request
@@ -105,6 +110,7 @@ class MessagesController extends Controller {
 	 * @param IMimeTypeDetector $mimeTypeDetector
 	 * @param IURLGenerator $urlGenerator
 	 * @param ContentSecurityPolicyNonceManager $nonceManager
+	 * @param ITrustedSenderService $trustedSenderService
 	 */
 	public function __construct(string $appName,
 								IRequest $request,
@@ -118,7 +124,8 @@ class MessagesController extends Controller {
 								IL10N $l10n,
 								IMimeTypeDetector $mimeTypeDetector,
 								IURLGenerator $urlGenerator,
-								ContentSecurityPolicyNonceManager $nonceManager) {
+								ContentSecurityPolicyNonceManager $nonceManager,
+								ITrustedSenderService $trustedSenderService) {
 		parent::__construct($appName, $request);
 
 		$this->accountService = $accountService;
@@ -133,6 +140,7 @@ class MessagesController extends Controller {
 		$this->urlGenerator = $urlGenerator;
 		$this->mailManager = $mailManager;
 		$this->nonceManager = $nonceManager;
+		$this->trustedSenderService = $trustedSenderService;
 	}
 
 	/**
@@ -149,6 +157,7 @@ class MessagesController extends Controller {
 	 * @throws ClientException
 	 * @throws ServiceException
 	 */
+
 	public function index(int $mailboxId,
 						  int $cursor = null,
 						  string $filter = null,
@@ -246,10 +255,27 @@ class MessagesController extends Controller {
 		$json['accountId'] = $account->getId();
 		$json['mailboxId'] = $mailbox->getId();
 		$json['databaseId'] = $message->getId();
+		$json['isSenderTrusted'] = $this->isSenderTrusted($message);
 
 		return new JSONResponse($json);
 	}
 
+	private function isSenderTrusted(Message $message): bool {
+		$from = $message->getFrom();
+		$first = $from->first();
+		if ($first === null) {
+			return false;
+		}
+		$email = $first->getEmail();
+		if ($email === null) {
+			return false;
+		}
+		return $this->trustedSenderService->isTrusted(
+			$this->currentUserId,
+			$email
+		);
+	}
+
 	/**
 	 * @NoAdminRequired
 	 * @NoCSRFRequired
diff --git a/lib/Controller/TrustedSendersController.php b/lib/Controller/TrustedSendersController.php
new file mode 100644
index 000000000..014b72586
--- /dev/null
+++ b/lib/Controller/TrustedSendersController.php
@@ -0,0 +1,86 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * @copyright 2020 Christoph Wurst <christoph@winzerhof-wurst.at>
+ *
+ * @author 2020 Christoph Wurst <christoph@winzerhof-wurst.at>
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace OCA\Mail\Controller;
+
+use OCA\Mail\AppInfo\Application;
+use OCA\Mail\Contracts\ITrustedSenderService;
+use OCA\Mail\Http\JsonResponse;
+use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http;
+use OCP\IRequest;
+
+class TrustedSendersController extends Controller {
+
+	/** @var string|null */
+	private $uid;
+
+	/** @var ITrustedSenderService */
+	private $trustedSenderService;
+
+	public function __construct(IRequest $request,
+								?string $UserId,
+								ITrustedSenderService $trustedSenderService) {
+		parent::__construct(Application::APP_ID, $request);
+
+		$this->uid = $UserId;
+		$this->trustedSenderService = $trustedSenderService;
+	}
+
+	/**
+	 * @NoAdminRequired
+	 * @TrapError
+	 *
+	 * @param string $email
+	 *
+	 * @return JsonResponse
+	 */
+	public function setTrusted(string $email): JsonResponse {
+		$this->trustedSenderService->trust(
+			$this->uid,
+			$email
+		);
+
+		return JsonResponse::success(null, Http::STATUS_CREATED);
+	}
+
+	/**
+	 * @NoAdminRequired
+	 * @TrapError
+	 *
+	 * @param string $email
+	 *
+	 * @return JsonResponse
+	 */
+	public function removeTrust(string $email): JsonResponse {
+		$this->trustedSenderService->trust(
+			$this->uid,
+			$email,
+			false
+		);
+
+		return JsonResponse::success(null);
+	}
+}