From 344b5888f5de2707d9f78a27ce48f3731cecc034 Mon Sep 17 00:00:00 2001
From: Arda Serdar Pektezol <1669855+pektezol@users.noreply.github.com>
Date: Sun, 28 Jan 2024 17:25:03 +0300
Subject: feat: check steam ids when uploading demo (#148)

---
 backend/handlers/record.go | 44 +++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 43 insertions(+), 1 deletion(-)

(limited to 'backend/handlers')

diff --git a/backend/handlers/record.go b/backend/handlers/record.go
index 79e9d3b..c620430 100644
--- a/backend/handlers/record.go
+++ b/backend/handlers/record.go
@@ -3,12 +3,14 @@ package handlers
 import (
 	"context"
 	"encoding/base64"
+	"fmt"
 	"io"
 	"log"
 	"mime/multipart"
 	"net/http"
 	"os"
 	"strconv"
+	"strings"
 
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
@@ -90,6 +92,7 @@ func CreateRecordWithDemo(c *gin.Context) {
 	}
 	var hostDemoUUID, hostDemoFileID, partnerDemoUUID, partnerDemoFileID string
 	var hostDemoScoreCount, hostDemoScoreTime int
+	var hostSteamID, partnerSteamID string
 	client := serviceAccount()
 	srv, err := drive.New(client)
 	if err != nil {
@@ -127,7 +130,7 @@ func CreateRecordWithDemo(c *gin.Context) {
 			c.JSON(http.StatusOK, models.ErrorResponse(err.Error()))
 			return
 		}
-		hostDemoScoreCount, hostDemoScoreTime, err = parser.ProcessDemo("backend/parser/" + uuid + ".dem")
+		hostDemoScoreCount, hostDemoScoreTime, hostSteamID, partnerSteamID, err = parser.ProcessDemo("backend/parser/" + uuid + ".dem")
 		if err != nil {
 			deleteFile(srv, file.Id)
 			CreateLog(user.(models.User).SteamID, LogTypeRecord, LogDescriptionCreateRecordProcessDemoFail, err.Error())
@@ -140,6 +143,25 @@ func CreateRecordWithDemo(c *gin.Context) {
 			c.JSON(http.StatusOK, models.ErrorResponse("Processing demo went wrong. Please contact a web admin and provide the demo in question."))
 			return
 		}
+		if !isCoop {
+			hostSplit := strings.Split(hostSteamID, ":")
+			if hostSplit[len(hostSplit)-1] != user.(models.User).SteamID {
+				c.JSON(http.StatusOK, models.ErrorResponse(fmt.Sprintf("Host SteamID from demo and request does not match! Check your submission and try again.\nDemo Host SteamID: %s\nRequest Host SteamID: %s", hostSplit[len(hostSplit)-1], user.(models.User).SteamID)))
+				return
+			}
+		} else {
+			partnerSplit := strings.Split(partnerSteamID, ":")
+			if partnerSplit[len(partnerSplit)-1] != record.PartnerID {
+				c.JSON(http.StatusOK, models.ErrorResponse(fmt.Sprintf("Partner SteamID from demo and request does not match! Check your submission and try again.\nDemo Partner SteamID: %s\nRequest Partner SteamID: %s", partnerSplit[len(partnerSplit)-1], record.PartnerID)))
+				return
+			}
+			var verifyCoopSteamID string
+			database.DB.QueryRow("SELECT steam_id FROM users WHERE steam_id = $1", record.PartnerID).Scan(&verifyCoopSteamID)
+			if verifyCoopSteamID != record.PartnerID {
+				c.JSON(http.StatusOK, models.ErrorResponse("Given partner SteamID does not match an account on LPHUB."))
+				return
+			}
+		}
 		if i == 0 {
 			hostDemoFileID = file.Id
 			hostDemoUUID = uuid
@@ -384,3 +406,23 @@ func createFile(service *drive.Service, name string, mimeType string, content io
 func deleteFile(service *drive.Service, fileId string) {
 	service.Files.Delete(fileId)
 }
+
+// Convert from SteamID64 to Legacy SteamID bits
+func convertSteamID(steamID64 int64) int64 {
+	return (steamID64 >> 1) & 0x7FFFFFF
+}
+
+// Convert from Legacy SteamID bits to SteamID64
+func convertSteamID64(steamID string) int64 {
+	const baseSteam64ID = 76561197960265728 // Origin of this value remains unclear
+	parts := strings.Split(steamID, ":")
+	userId, err := strconv.Atoi(parts[2])
+	if err != nil {
+		return 0
+	}
+	steam64ID := baseSteam64ID + int64(userId*2) // Reason for multiplication by 2 is unknown
+	if parts[1] == "1" {
+		steam64ID++
+	}
+	return steam64ID
+}
-- 
cgit v1.2.3