lila/app/controllers/Challenge.scala

package controllers

import play.api.mvc.Result

import lila.api.Context
import lila.app._
import lila.challenge.{ Challenge => ChallengeModel }
import lila.common.HTTPRequest
import lila.game.{ Pov, AnonCookie }
import lila.socket.Socket.SocketVersion
import views.html

final class Challenge(
    env: Env,
    setupC: => Setup
) extends LilaController(env) {

  def api = env.challenge.api

  def all = Auth { implicit ctx => me =>
    XhrOrRedirectHome {
      api allFor me.id map { all =>
        Ok(env.challenge.jsonView(all, ctx.lang)) as JSON
      }
    }
  }

  def show(id: String) = Open { implicit ctx =>
    showId(id)
  }

  protected[controllers] def showId(id: String)(implicit ctx: Context): Fu[Result] =
    OptionFuResult(api byId id)(showChallenge(_))

  protected[controllers] def showChallenge(c: ChallengeModel, error: Option[String] = None)(implicit ctx: Context): Fu[Result] =
    env.challenge version c.id flatMap { version =>
      val mine = isMine(c)
      import lila.challenge.Direction
      val direction: Option[Direction] =
        if (mine) Direction.Out.some
        else if (isForMe(c)) Direction.In.some
        else none
      val json = env.challenge.jsonView.show(c, version, direction)
      negotiate(
        html =
          if (mine) fuccess {
            error match {
              case Some(e) => BadRequest(html.challenge.mine(c, json, e.some))
              case None => Ok(html.challenge.mine(c, json, none))
            }
          }
          else (c.challengerUserId ?? env.user.repo.named) map { user =>
            Ok(html.challenge.theirs(c, json, user))
          },
        api = _ => Ok(json).fuccess
      ) flatMap withChallengeAnonCookie(mine && c.challengerIsAnon, c, true)
    }

  private def isMine(challenge: ChallengeModel)(implicit ctx: Context) = challenge.challenger match {
    case Left(anon) => HTTPRequest sid ctx.req contains anon.secret
    case Right(user) => ctx.userId contains user.id
  }

  private def isForMe(challenge: ChallengeModel)(implicit ctx: Context) =
    challenge.destUserId.fold(true)(ctx.userId.contains)

  def accept(id: String) = Open { implicit ctx =>
    OptionFuResult(api byId id) { c =>
      isForMe(c) ?? api.accept(c, ctx.me).flatMap {
        case Some(pov) => negotiate(
          html = Redirect(routes.Round.watcher(pov.gameId, "white")).fuccess,
          api = apiVersion => env.api.roundApi.player(pov, apiVersion) map { Ok(_) }
        ) flatMap withChallengeAnonCookie(ctx.isAnon, c, false)
        case None => negotiate(
          html = Redirect(routes.Round.watcher(c.id, "white")).fuccess,
          api = _ => notFoundJson("Someone else accepted the challenge")
        )
      }
    }
  }
  def apiAccept(id: String) = Scoped(_.Challenge.Write, _.Bot.Play) { _ => me =>
    api.onlineByIdFor(id, me) flatMap {
      _ ?? { api.accept(_, me.some) }
    } flatMap { res =>
      if (res.isDefined) jsonOkResult.fuccess
      else env.bot.player.rematchAccept(id, me) flatMap {
        case true => jsonOkResult.fuccess
        case _ => notFoundJson()
      }
    }
  }

  private def withChallengeAnonCookie(cond: Boolean, c: ChallengeModel, owner: Boolean)(res: Result)(implicit ctx: Context): Fu[Result] =
    cond ?? {
      env.game.gameRepo.game(c.id).map {
        _ map { game =>
          env.lilaCookie.cookie(
            AnonCookie.name,
            game.player(if (owner) c.finalColor else !c.finalColor).id,
            maxAge = AnonCookie.maxAge.some,
            httpOnly = false.some
          )
        }
      }
    } map { cookieOption =>
      cookieOption.fold(res) { res.withCookies(_) }
    }

  def decline(id: String) = Auth { implicit ctx => me =>
    OptionFuResult(api byId id) { c =>
      if (isForMe(c)) api decline c
      else notFound
    }
  }
  def apiDecline(id: String) = Scoped(_.Challenge.Write, _.Bot.Play) { _ => me =>
    api.activeByIdFor(id, me) flatMap {
      case None => env.bot.player.rematchDecline(id, me) flatMap {
        case true => jsonOkResult.fuccess
        case _ => notFoundJson()
      }
      case Some(c) => api.decline(c) inject jsonOkResult
    }
  }

  def cancel(id: String) = Open { implicit ctx =>
    OptionFuResult(api byId id) { c =>
      if (isMine(c)) api cancel c
      else notFound
    }
  }

  def toFriend(id: String) = AuthBody { implicit ctx => me =>
    import play.api.data._
    import play.api.data.Forms._
    implicit def req = ctx.body
    OptionFuResult(api byId id) { c =>
      if (isMine(c)) Form(single(
        "username" -> lila.user.DataForm.historicalUsernameField
      )).bindFromRequest.fold(
        err => funit,
        username => env.user.repo named username flatMap {
          case None => Redirect(routes.Challenge.show(c.id)).fuccess
          case Some(dest) => env.challenge.granter(ctx.me, dest, c.perfType.some) flatMap {
            case Some(denied) => showChallenge(c, lila.challenge.ChallengeDenied.translated(denied).some)
            case None => api.setDestUser(c, dest) inject Redirect(routes.Challenge.show(c.id))
          }
        }
      )
      else notFound
    }
  }

  def apiCreate(userId: String) = ScopedBody(_.Challenge.Write, _.Bot.Play) { implicit req => me =>
    implicit val lang = lila.i18n.I18nLangPicker(req, me.some)
    setupC.PostRateLimit(HTTPRequest lastRemoteAddress req) {
      env.setup.forms.api.bindFromRequest.fold(
        jsonFormErrorDefaultLang,
        config => env.user.repo enabledById userId.toLowerCase flatMap { destUser =>
          destUser ?? { env.challenge.granter(me.some, _, config.perfType) } flatMap {
            case Some(denied) =>
              BadRequest(jsonError(lila.challenge.ChallengeDenied.translated(denied))).fuccess
            case _ =>
              import lila.challenge.Challenge._
              val challenge = lila.challenge.Challenge.make(
                variant = config.variant,
                initialFen = config.position,
                timeControl = config.clock map { c =>
                  TimeControl.Clock(c)
                } orElse config.days.map {
                  TimeControl.Correspondence.apply
                } getOrElse TimeControl.Unlimited,
                mode = config.mode,
                color = config.color.name,
                challenger = Right(me),
                destUser = destUser,
                rematchOf = none
              )
              (env.challenge.api create challenge) map {
                case true =>
                  JsonOk(env.challenge.jsonView.show(challenge, SocketVersion(0), lila.challenge.Direction.Out.some))
                case false =>
                  BadRequest(jsonError("Challenge not created"))
              }
          } map (_ as JSON)
        }
      )
    }
  }

  def rematchOf(gameId: String) = Auth { implicit ctx => me =>
    OptionFuResult(env.game.gameRepo game gameId) { g =>
      Pov.opponentOfUserId(g, me.id).flatMap(_.userId) ?? env.user.repo.byId flatMap {
        _ ?? { opponent =>
          env.challenge.granter(me.some, opponent, g.perfType) flatMap {
            case Some(d) => BadRequest(jsonError {
              lila.challenge.ChallengeDenied translated d
            }).fuccess
            case _ => api.sendRematchOf(g, me) map {
              case true => Ok
              case _ => BadRequest(jsonError("Sorry, couldn't create the rematch."))
            }
          }
        }
      }
    }
  }
}