[PAY-2263] Decode ABI for blocked users and relay if they're deactiva…

…tion requests (#6917)
AudiusProject · Dec 12, 2023 · 7c379ff · 7c379ff
1 parent dc91844
commit 7c379ff
Showing 1 changed file with 21 additions and 5 deletions.
diff --git a/packages/identity-service/src/routes/relay.js b/packages/identity-service/src/routes/relay.js
@@ -62,11 +62,6 @@ module.exports = function (app) {
           const reqIP = getIP(req)
           detectAbuse(user, reqIP) // fired & forgotten
         }
-
-        // Only reject relay for users explicitly blocked from relay
-        if (user.isBlockedFromRelay) {
-          return errorResponseForbidden(`Forbidden ${user.appliedRules}`)
-        }
       }
 
       let txProps
@@ -128,6 +123,27 @@ module.exports = function (app) {
               )
             }
           }
+
+          // Only reject relay for users explicitly blocked from relay and not for deactivations
+          if (blockAbuseOnRelay && user && user.isBlockedFromRelay) {
+            const decodedABI = libs.AudiusABIDecoder.decodeMethod(
+              txProps.contractRegistryKey,
+              txProps.encodedABI
+            )
+            const args = {}
+            for (const p of decodedABI.params) {
+              args[p.name] = p.value
+            }
+            const isDeactivation =
+              !user.is_deactivated &&
+              decodedABI.name === 'manageEntity' &&
+              args._entityType === 'User' &&
+              args._action === 'Update' &&
+              JSON.parse(args._metadata).data.is_deactivated
+            if (!isDeactivation) {
+              return errorResponseForbidden(`Forbidden ${user.appliedRules}`)
+            }
+          }
           receipt = await txRelay.sendTransaction(
             req,
             false, // resetNonce