infinsweeper/main.rb

require "sinatra"
require "json"

require_relative "players"
require_relative "session"

ALPHANUM = [*"0".."9", *"A".."Z", *"a".."z", "-", "_"].freeze

db_file = File.expand_path("infinsweeper.db")
DB = Sequel.connect("sqlite:///#{db_file}", single_threaded: false)
DB.run("PRAGMA foreign_keys = ON;")

signed_in_users = DB[:SignedInUsers].all.map { |x| [x[:code], x[:player]] }.to_h

Thread.new do
  loop do
    now = Time.now
    fifteen_days_ago = now - (60 * 60 * 24 * 15)
    six_days_ago = now - (60 * 60 * 24 * 6)
    old_sessions = (DB[:SignedInUsers].where { created_at < fifteen_days_ago }.all +
                    DB[:SignedInUsers].where { last_used_at < six_days_ago }.all).uniq { |s| s[:code] }
    old_sessions.each do |session|
      begin
        DB[:SignedInUsers].where(code: session[:code]).delete
      rescue StandardError => e
        File.write("log/main.log",
                   "[#{Time.now}] Thread DB error: #{e.message} on #{session[:code]} for #{session[:player]}\n",
                   mode: "a")
      end
      signed_in_users.delete(session[:code])
      puts "Auto-logged out: #{session[:player]} (expired session)"
    end
  rescue StandardError => e
    File.write("log/main.log", "[#{Time.now}] Thread error: #{e.message}\n", mode: "a")
  ensure
    sleep 60 * 60 * 24
  end
end

set :public_folder, "public"

get "/" do
  send_file "index.html"
end

get "/debug" do
  return get_session_all(request, response).inspect
end

post "/new_player" do
  data = JSON.parse(request.body.read)
  if data["email"].nil? || data["pass"].nil? || data["username"].nil?
    status 400
    return { "message" => "Bad request made!" }.to_json
  end
  player = Players.mk_player(data["username"], data["email"], data["pass"])
  case player
  when "Successfully registered!"
    code = Array.new(24) { ALPHANUM.sample }.join
    set_session(request, response, "user", code, code)
    signed_in_users[code] = data["email"]
    begin
      DB["insert into SignedInUsers (code, player) values (?, ?)", code, data["email"]].insert
    rescue Sequel::Error => e
      File.write("log/main.log", "DB Error: #{e.message}\n", mode: "a")
      status 500
      return { "message" => "Internal server error when signing you in!" }.to_json
    end
    status 200
  else
    status 400
  end
  return { "message" => player }.to_json
end

get "/verify/:code" do
  if Players.verify(params[:code])
    status 200
    return { "message" => "Verified successfully!" }.to_json
  else
    status 400
    return { "message" => "Couldn't verify!" }
  end
end

post "/login" do
  data = JSON.parse(request.body.read)
  player = Players.authorized?(data["email"], data["pass"])
  if player
    code = Array.new(24) { ALPHANUM.sample }.join
    set_session(request, response, "user", code, code)
    signed_in_users[code] = data["email"]
    begin
      DB["insert into SignedInUsers (code, player) values (?, ?)", code, data["email"]].insert
    rescue Sequel::Error => e
      File.write("log/main.log", "DB Error: #{e.message}\n", mode: "a")
      status 500
      return { "message" => "Internal server error when signing you in!" }.to_json
    end
    status 200
    return { "message" => "Remember to verify your email!" }.to_json unless Players.verified?(data["email"])
    return { "message" => "Signed in successfully!" }.to_json
  else
    status 400
    return { "message" => "Couldn't sign you in!" }.to_json
  end
end

post "/logout" do
  uid = get_session(request, response, "user")
  if signed_in_users[uid].nil?
    status 400
    return { "message" => "Not signed in!" }.to_json
  end
  signed_in_users.delete(uid)
  rm_session(request, response, "user")
  begin
    DB["delete from SignedInUsers where code = ?", uid].delete
  rescue Sequel::Error => e
    File.write("log/main.log", "DB Error: #{e.message}\n", mode: "a")
    status 500
    return { "message" => "Internal server error when signing you out!" }.to_json
  end
  status 200
  return { "message" => "Signed out successfully!" }.to_json
end

post "/forgot_password" do
  data = JSON.parse(request.body.read)
  if data["email"].nil?
    status 400
    return { "message" => "Bad request made (Email not provided)!" }.to_json
  end
  Players.pass_req(data["email"])
  status 200
  return { "message" => "Email sent successfully!" }.to_json
end

post "/reset_password/:code" do
  data = JSON.parse(request.body.read)
  if data["pass"].nil? || params[:code].nil?
    status 400
    return { "message" => "Bad request made!" }.to_json
  end
  if Players.pass_reset(data["pass"], params[:code])
    status 200
    return { "message" => "Password reset successfully!" }.to_json
  else
    status 400
    return { "message" => "Couldn't reset password!" }.to_json
  end
end

delete "/rm_player" do
  uid = get_session(request, response, "user")
  if uid.nil? || signed_in_users[uid].nil?
    status 400
    return { "message" => "Not signed in!" }.to_json
  end
  if Players.rm_player(signed_in_users[uid])
    signed_in_users.delete(uid)
    rm_session(request, response, "user")
    status 200
    return { "message" => "Sorry to see you go.." }.to_json
  else
    status 500
    return { "message" => "Couldn't delete!" }.to_json
  end
end