Release Healer Man 0.1.39

server/server.mjs

@@ -182,6 +182,7 @@ export function createGameServer(options = {}) {
   const arenaService = createArenaService({ database: gameDatabase, autoPump: enableShelvedModes });
   const allowAuthRequest = createAuthLimiter();
   const allowReportRequest = createAuthLimiter();
+  const allowDungeonRunRequest = createAuthLimiter();
   gameDatabase.pruneExpiredSessions();
 
   const server = createServer(async (request, response) => {
@@ -240,6 +241,25 @@ export function createGameServer(options = {}) {
         json(response, 200, { account: gameDatabase.authenticate(bearerToken(request)) });
         return;
       }
+      if (url.pathname === "/api/dungeon-leaderboards" && request.method === "GET") {
+        json(response, 200, gameDatabase.listDungeonLeaderboard({ dungeonId: url.searchParams.get("dungeon"),
+          difficultyId: url.searchParams.get("difficulty"), clear: url.searchParams.get("clear"),
+          offset: url.searchParams.get("offset"), limit: url.searchParams.get("limit") }));
+        return;
+      }
+      if (url.pathname === "/api/dungeon-runs" && request.method === "POST") {
+        const token = bearerToken(request);
+        const account = token ? gameDatabase.authenticate(token) : null;
+        if (!allowDungeonRunRequest(account?.id ?? request.socket.remoteAddress))
+          throw new GameDatabaseError("Too many run submissions. Please try again shortly.", 429, "rate_limited");
+        json(response, 201, gameDatabase.submitDungeonRun(account, await readJson(request, 32 * 1024)));
+        return;
+      }
+      const dungeonRunMatch = /^\/api\/dungeon-runs\/([A-Za-z0-9_-]{8,100})$/.exec(url.pathname);
+      if (dungeonRunMatch && request.method === "GET") {
+        json(response, 200, gameDatabase.getDungeonRun(dungeonRunMatch[1]));
+        return;
+      }
       if (url.pathname === "/api/dungeon-reports" && request.method === "GET") {
         json(response, 200, gameDatabase.listDungeonReports({
           status: url.searchParams.get("status"),