From f44fbf5b93269bb3573e8a2701e70ab0d7613153 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:21 +0100
Subject: access: the policy enforced

_continuum/access/policy ({"version": 1}) has every node screen every
change it receives, on every path changes come in. A policy a node
doesn't know stops its writes through the API. GET /admin/refused.

Auth plan M6.
---
 src/api/changes.rs | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

(limited to 'src/api/changes.rs')

diff --git a/src/api/changes.rs b/src/api/changes.rs
index c3a847d..13c8dd3 100644
--- a/src/api/changes.rs
+++ b/src/api/changes.rs
@@ -139,3 +139,43 @@ fn changes(
     }
     ChangesReport { changes, more }
 }
+/// A change the policy refused (`access::screen`): its hash, when its writer made it
+/// (by its clock), who made it and for whom, as it says, what it touched, and why.
+#[derive(Serialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct RefusedReport {
+    hash: String,
+    at: i64,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    node: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    user: Option<String>,
+    paths: Vec<String>,
+    why: String,
+}
+
+/// `GET /admin/refused`: the changes this node refused under the swarm's policy
+/// (`_continuum/access/policy`), newest first, the last thousand at most, since it
+/// started or switched epochs.
+pub(crate) async fn get_refused(State(state): State<AppState>) -> Json<Vec<RefusedReport>> {
+    use crate::locks::MutexExt;
+    let screening = state.screening.lock_or_recover();
+    Json(
+        screening
+            .refused()
+            .rev()
+            .map(|refused| RefusedReport {
+                hash: refused.change.hash().to_string(),
+                at: refused.change.timestamp(),
+                node: refused.committer.clone(),
+                user: refused.user.clone(),
+                paths: refused
+                    .paths
+                    .iter()
+                    .map(|path| format!("/{}", path.join("/")))
+                    .collect(),
+                why: refused.why.clone(),
+            })
+            .collect(),
+    )
+}
-- 
cgit v1.3.1