Quintine
e7d4efc3db
Create an explicitly owned new host seat with supported rules/modules and ordered AI seats through one live-authorized transaction. Save exact account-bound retries across refresh, record durable audit metadata, and never restore a revoked or transferred host credential. Connect invitation joining and ordinary voluntary host handover. Preserve normal readiness and Advanced preview gates. Verified types, lint, 5240 offline tests, 52 HTTP tests and build. Eight authenticated HTTP groups and independent privacy/persistence review passed. Browser QA confirmed one room after a lost response and refresh/retry, working host controls and saved continuation. Mobile layout passed; requested desktop viewport override did not take effect. Existing games preserved. Authenticated deployed administrator acceptance remains pending explicit QA access.
30 lines
1.8 KiB
TypeScript
30 lines
1.8 KiB
TypeScript
import { env } from 'cloudflare:workers';
|
|
import { AdminError, requireAdmin } from '@/db/admin-access';
|
|
import { readAdminDirectory } from '@/db/admin-directory';
|
|
import { createAdminRoom } from '@/db/admin-room-creation';
|
|
import { RuleError } from '@/game/engine';
|
|
import { adminBody, adminFailure, adminResponse, adminToken } from '@/lib/admin-http';
|
|
import { validAdminRoomCreationInput } from '@/lib/admin-room-creation';
|
|
import { requestOrigin } from '@/lib/request-origin';
|
|
|
|
export async function GET(request: Request) {
|
|
try {
|
|
const identity = await requireAdmin(env.DB, adminToken(request), ['owner', 'operator', 'viewer']);
|
|
return adminResponse(await readAdminDirectory(env.DB, identity, new URL(request.url).searchParams));
|
|
} catch (error) { return adminFailure(error); }
|
|
}
|
|
|
|
export async function POST(request: Request) {
|
|
try {
|
|
const body = await adminBody(request, env.DUNE_PUBLIC_ORIGIN);
|
|
const identity = await requireAdmin(env.DB, adminToken(request), ['owner', 'operator']);
|
|
if (request.headers.get('X-Dune-Admin-Id') !== identity.id)
|
|
throw new AdminError('The signed-in administrator changed. Reload administration before continuing.', 401);
|
|
if (!validAdminRoomCreationInput(body)) throw new AdminError('Check the host, rules, AI seats and operational reason.', 400);
|
|
const result = await createAdminRoom(env.DB, identity, body);
|
|
const headers: Record<string, string> = {};
|
|
if (result.hostAccess) headers['Set-Cookie'] = `dune_${result.code}=${body.sessionToken}; HttpOnly; SameSite=Strict; Path=/api/rooms/${result.code}; Max-Age=2592000${requestOrigin(request, env.DUNE_PUBLIC_ORIGIN).startsWith('https:') ? '; Secure' : ''}`;
|
|
return adminResponse(result, headers);
|
|
} catch (error) { return adminFailure(error instanceof RuleError ? new AdminError(error.message, 400) : error); }
|
|
}
|