Release Healer Man 0.1.38

server/server.mjs

@@ -181,6 +181,7 @@ export function createGameServer(options = {}) {
   const onlineSessions = createOnlineSessionManager();
   const arenaService = createArenaService({ database: gameDatabase, autoPump: enableShelvedModes });
   const allowAuthRequest = createAuthLimiter();
+  const allowReportRequest = createAuthLimiter();
   gameDatabase.pruneExpiredSessions();
 
   const server = createServer(async (request, response) => {
@@ -239,6 +240,30 @@ export function createGameServer(options = {}) {
         json(response, 200, { account: gameDatabase.authenticate(bearerToken(request)) });
         return;
       }
+      if (url.pathname === "/api/dungeon-reports" && request.method === "GET") {
+        json(response, 200, gameDatabase.listDungeonReports({
+          status: url.searchParams.get("status"),
+          dungeonId: url.searchParams.get("dungeon"),
+        }));
+        return;
+      }
+      if (url.pathname === "/api/dungeon-reports" && request.method === "POST") {
+        const token = bearerToken(request);
+        const account = token ? gameDatabase.authenticate(token) : null;
+        if (!allowReportRequest(account?.id ?? request.socket.remoteAddress)) {
+          throw new GameDatabaseError("Too many reports. Please wait a minute and try again.", 429, "rate_limited");
+        }
+        const body = await readJson(request, 8 * 1024);
+        json(response, 201, { report: gameDatabase.submitDungeonReport(account, body) });
+        return;
+      }
+      const reportMatch = /^\/api\/dungeon-reports\/([^/]+)$/.exec(url.pathname);
+      if (reportMatch && request.method === "PATCH") {
+        const account = gameDatabase.authenticate(bearerToken(request));
+        const body = await readJson(request, 8 * 1024);
+        json(response, 200, { report: gameDatabase.updateDungeonReport(account, reportMatch[1], body) });
+        return;
+      }
       if (url.pathname === "/api/cloud-save" && request.method === "GET") {
         const account = gameDatabase.authenticate(bearerToken(request));
         json(response, 200, gameDatabase.getCloudSave(account.id));