pavel444-byte
9c314ecb4e
All checks were successful
Deploy MineGeo to Dokploy / deploy (push) Successful in 12m17s
127 lines
11 KiB
PL/PgSQL
127 lines
11 KiB
PL/PgSQL
-- Event-scoped moderation and chat are private to the trusted server.
|
|
create table public.tournament_moderators (
|
|
tournament_id uuid not null references public.tournaments(id) on delete cascade,
|
|
account_id uuid not null references public.profiles(id) on delete cascade,
|
|
primary key(tournament_id,account_id)
|
|
);
|
|
create table public.tournament_bans (
|
|
tournament_id uuid not null references public.tournaments(id) on delete cascade,
|
|
account_id uuid not null references public.profiles(id) on delete cascade,
|
|
primary key(tournament_id,account_id)
|
|
);
|
|
create table public.tournament_tags (
|
|
tournament_id uuid not null references public.tournaments(id) on delete cascade,
|
|
account_id uuid not null references public.profiles(id) on delete cascade,
|
|
tag text not null check(length(tag) between 1 and 32 and tag=btrim(tag) and tag !~ '[[:cntrl:]]' and tag !~ U&'[\0080-\009F\202A-\202E\2066-\2069]'),
|
|
primary key(tournament_id,account_id)
|
|
);
|
|
alter table public.tournaments add column chat_slow_seconds integer not null default 0 check(chat_slow_seconds between 0 and 300);
|
|
create table public.tournament_messages (
|
|
id bigint generated always as identity primary key,
|
|
tournament_id uuid not null references public.tournaments(id) on delete cascade,
|
|
account_id uuid not null references public.profiles(id) on delete cascade,
|
|
client_id uuid not null, body text not null check(length(btrim(body)) between 1 and 500
|
|
and body !~ '[[:cntrl:]]' and body !~ U&'[\0080-\009F\202A-\202E\2066-\2069]'),
|
|
created_at timestamptz not null default clock_timestamp(),
|
|
unique(tournament_id,account_id,client_id)
|
|
);
|
|
create index tournament_messages_history on public.tournament_messages(tournament_id,id desc);
|
|
create index tournament_messages_rate on public.tournament_messages(tournament_id,account_id,created_at desc);
|
|
alter table public.tournament_moderators enable row level security;
|
|
alter table public.tournament_bans enable row level security;
|
|
alter table public.tournament_tags enable row level security;
|
|
alter table public.tournament_messages enable row level security;
|
|
revoke all on public.tournament_moderators,public.tournament_bans,public.tournament_tags,public.tournament_messages from public,anon,authenticated;
|
|
revoke all on sequence public.tournament_messages_id_seq from public,anon,authenticated;
|
|
grant all on public.tournament_moderators,public.tournament_bans,public.tournament_tags,public.tournament_messages to service_role;
|
|
grant usage,select on sequence public.tournament_messages_id_seq to service_role;
|
|
|
|
create function public.guard_tournament_ban() returns trigger language plpgsql security invoker set search_path='' as $$
|
|
begin
|
|
if exists(select 1 from public.tournament_bans where tournament_id=new.tournament_id and account_id=new.account_id) then
|
|
raise exception 'You are banned from this tournament';
|
|
end if;
|
|
return new;
|
|
end; $$;
|
|
create trigger guard_tournament_ban before insert on public.tournament_members for each row execute function public.guard_tournament_ban();
|
|
create function public.clear_tournament_member_roles() returns trigger language plpgsql security invoker set search_path='' as $$
|
|
begin
|
|
delete from public.tournament_moderators where tournament_id=old.tournament_id and account_id=old.account_id;
|
|
delete from public.tournament_tags where tournament_id=old.tournament_id and account_id=old.account_id;
|
|
return old;
|
|
end; $$;
|
|
create trigger clear_tournament_member_roles after delete on public.tournament_members for each row execute function public.clear_tournament_member_roles();
|
|
|
|
create function public.tournament_community(p_tournament uuid,p_account uuid,p_action text,p_payload jsonb default '{}') returns jsonb
|
|
language plpgsql security invoker set search_path='' as $$
|
|
declare event public.tournaments; target uuid; moderator boolean; owner boolean; seconds integer; label text;
|
|
begin
|
|
select * into event from public.tournaments where id=p_tournament for update;
|
|
if not found then raise exception 'Tournament not found'; end if;
|
|
if not exists(select 1 from public.profiles where id=p_account and account_status='active') then raise exception 'Active account required'; end if;
|
|
if not exists(select 1 from public.tournament_members where tournament_id=p_tournament and account_id=p_account) then raise exception 'Tournament membership required'; end if;
|
|
owner := p_account=event.owner_id;
|
|
moderator := owner or exists(select 1 from public.tournament_moderators where tournament_id=p_tournament and account_id=p_account);
|
|
if p_action='view' then null;
|
|
elsif not moderator then raise exception 'Tournament moderator permission required';
|
|
elsif event.status in('finished','cancelled') then raise exception 'Tournament has ended';
|
|
elsif p_action='slow' then
|
|
seconds:=(p_payload->>'seconds')::integer;
|
|
if seconds is null or seconds not between 0 and 300 then raise exception 'Invalid slow mode'; end if;
|
|
update public.tournaments set chat_slow_seconds=seconds where id=p_tournament;
|
|
elsif p_action in('admin','unadmin','kick','ban','unban','tag') then
|
|
target:=(p_payload->>'accountId')::uuid;
|
|
if target is null or target=event.owner_id or target=p_account then raise exception 'Cannot moderate the owner or yourself'; end if;
|
|
if p_action in('admin','unadmin') and not owner then raise exception 'Only the owner can manage moderators'; end if;
|
|
if not owner and exists(select 1 from public.tournament_moderators where tournament_id=p_tournament and account_id=target) then raise exception 'Only the owner can moderate a moderator'; end if;
|
|
if p_action='admin' then
|
|
if not exists(select 1 from public.tournament_members where tournament_id=p_tournament and account_id=target) then raise exception 'Player must join first'; end if;
|
|
insert into public.tournament_moderators values(p_tournament,target) on conflict do nothing;
|
|
elsif p_action='unadmin' then delete from public.tournament_moderators where tournament_id=p_tournament and account_id=target;
|
|
elsif p_action='unban' then delete from public.tournament_bans where tournament_id=p_tournament and account_id=target;
|
|
elsif p_action='tag' then
|
|
if not exists(select 1 from public.tournament_members where tournament_id=p_tournament and account_id=target) then raise exception 'Player must join first'; end if;
|
|
label:=btrim(p_payload->>'tag');
|
|
if label is null or length(label)>32 or label ~ '[[:cntrl:]]' or label ~ U&'[\0080-\009F\202A-\202E\2066-\2069]' then raise exception 'Invalid tag'; end if;
|
|
if label='' then delete from public.tournament_tags where tournament_id=p_tournament and account_id=target;
|
|
else insert into public.tournament_tags values(p_tournament,target,label) on conflict(tournament_id,account_id) do update set tag=excluded.tag; end if;
|
|
else
|
|
if not exists(select 1 from public.tournament_members where tournament_id=p_tournament and account_id=target) then raise exception 'Player must join first'; end if;
|
|
if p_action='ban' then insert into public.tournament_bans values(p_tournament,target) on conflict do nothing; end if;
|
|
delete from public.tournament_moderators where tournament_id=p_tournament and account_id=target;
|
|
update public.multiplayer_players set has_left=true where account_id=target and room_id in(select room_id from public.tournament_rounds where tournament_id=p_tournament);
|
|
delete from public.tournament_members where tournament_id=p_tournament and account_id=target;
|
|
end if;
|
|
else raise exception 'Invalid tournament action'; end if;
|
|
return jsonb_build_object('owner',owner,'moderator',moderator,'slowSeconds',event.chat_slow_seconds,
|
|
'moderators',coalesce((select jsonb_agg(account_id) from public.tournament_moderators where tournament_id=p_tournament),'[]'::jsonb),
|
|
'tags',coalesce((select jsonb_object_agg(account_id::text,tag) from public.tournament_tags where tournament_id=p_tournament),'{}'::jsonb),
|
|
'bans',case when moderator then coalesce((select jsonb_agg(jsonb_build_object('accountId',b.account_id,'name',p.display_name)) from public.tournament_bans b join public.profiles p on p.id=b.account_id where b.tournament_id=p_tournament),'[]'::jsonb) else '[]'::jsonb end);
|
|
end; $$;
|
|
|
|
create function public.tournament_chat(p_tournament uuid,p_account uuid,p_text text default null,p_client_id uuid default null) returns jsonb
|
|
language plpgsql security invoker set search_path='' as $$
|
|
declare event public.tournaments; player public.profiles; delay_seconds integer;
|
|
begin
|
|
select * into event from public.tournaments where id=p_tournament for update;
|
|
if not found then raise exception 'Tournament not found'; end if;
|
|
select * into player from public.profiles where id=p_account and account_status='active';
|
|
if not found or not exists(select 1 from public.tournament_members where tournament_id=p_tournament and account_id=p_account) then raise exception 'Tournament membership required'; end if;
|
|
if event.status='cancelled' then raise exception 'Chat is unavailable'; end if;
|
|
if p_text is not null or p_client_id is not null then
|
|
if event.status='finished' then raise exception 'Tournament has ended'; end if;
|
|
if p_text is null or p_client_id is null or length(btrim(p_text)) not between 1 and 500 or p_text ~ '[[:cntrl:]]' or p_text ~ U&'[\0080-\009F\202A-\202E\2066-\2069]' then raise exception 'Invalid chat message'; end if;
|
|
if not exists(select 1 from public.tournament_messages where tournament_id=p_tournament and account_id=p_account and client_id=p_client_id) then
|
|
delay_seconds:=case when p_account=event.owner_id or exists(select 1 from public.tournament_moderators where tournament_id=p_tournament and account_id=p_account) then 1 else greatest(1,event.chat_slow_seconds) end;
|
|
if exists(select 1 from public.tournament_messages where tournament_id=p_tournament and account_id=p_account and created_at>clock_timestamp()-make_interval(secs=>delay_seconds)) or
|
|
(select count(*) from public.tournament_messages where tournament_id=p_tournament and account_id=p_account and created_at>clock_timestamp()-interval '1 minute')>=30 then raise exception 'Chat slow mode: wait before sending another message'; end if;
|
|
insert into public.tournament_messages(tournament_id,account_id,client_id,body) values(p_tournament,p_account,p_client_id,btrim(p_text));
|
|
end if;
|
|
end if;
|
|
return jsonb_build_object('messages',coalesce((select jsonb_agg(jsonb_build_object('id',m.id::text,'playerId',m.account_id,'name',p.display_name,'text',m.body,'createdAt',m.created_at,'tag',tag.tag) order by m.id)
|
|
from (select * from public.tournament_messages where tournament_id=p_tournament order by id desc limit 100) m join public.profiles p on p.id=m.account_id left join public.tournament_tags tag on tag.tournament_id=m.tournament_id and tag.account_id=m.account_id),'[]'::jsonb));
|
|
end; $$;
|
|
revoke all on function public.guard_tournament_ban(),public.clear_tournament_member_roles(),public.tournament_community(uuid,uuid,text,jsonb),public.tournament_chat(uuid,uuid,text,uuid) from public,anon,authenticated;
|
|
grant execute on function public.guard_tournament_ban(),public.clear_tournament_member_roles(),public.tournament_community(uuid,uuid,text,jsonb),public.tournament_chat(uuid,uuid,text,uuid) to service_role;
|
|
notify pgrst,'reload schema';
|