import { Request, Response } from "express"; import { Logger } from "../utils/logger"; import { db } from "../databases/databases"; import { isUserVIP } from "../utils/isUserVIP"; import { getHashCache } from "../utils/getHashCache"; import { HashedUserID, UserID } from "../types/user.model"; import { config } from "../config"; type warningEntry = { userID: HashedUserID, issueTime: number, issuerUserID: HashedUserID, enabled: boolean, reason: string } function checkExpiredWarning(warning: warningEntry): boolean { const MILLISECONDS_IN_HOUR = 3600000; const now = Date.now(); const expiry = Math.floor(now - (config.hoursAfterWarningExpires * MILLISECONDS_IN_HOUR)); return warning.issueTime > expiry && !warning.enabled; } export async function postWarning(req: Request, res: Response): Promise { if (!req.body.userID) return res.status(400).json({ "message": "Missing parameters" }); const issuerUserID: HashedUserID = req.body.issuerUserID ? await getHashCache(req.body.issuerUserID as UserID) : null; const userID: HashedUserID = issuerUserID ? req.body.userID : await getHashCache(req.body.userID as UserID); const issueTime = new Date().getTime(); const enabled: boolean = req.body.enabled ?? true; const reason: string = req.body.reason ?? ""; if ((!issuerUserID && enabled) || (issuerUserID && !await isUserVIP(issuerUserID))) { Logger.warn(`Permission violation: User ${issuerUserID} attempted to warn user ${userID}.`); return res.status(403).json({ "message": "Not a VIP" }); } let resultStatus = ""; if (enabled) { const previousWarning = await db.prepare("get", 'SELECT * FROM "warnings" WHERE "userID" = ? AND "issuerUserID" = ?', [userID, issuerUserID]) as warningEntry; if (!previousWarning) { await db.prepare( "run", 'INSERT INTO "warnings" ("userID", "issueTime", "issuerUserID", "enabled", "reason") VALUES (?, ?, ?, 1, ?)', [userID, issueTime, issuerUserID, reason] ); resultStatus = "issued to"; // check if warning is still within issue time and warning is not enabled } else if (checkExpiredWarning(previousWarning) ) { await db.prepare( "run", 'UPDATE "warnings" SET "enabled" = 1, "reason" = ? WHERE "userID" = ? AND "issueTime" = ?', [reason, userID, previousWarning.issueTime] ); resultStatus = "re-enabled"; } else { return res.sendStatus(409); } } else { await db.prepare("run", 'UPDATE "warnings" SET "enabled" = 0 WHERE "userID" = ?', [userID]); resultStatus = "removed from"; } return res.status(200).json({ message: `Warning ${resultStatus} user '${userID}'.`, }); }