lila/app/controllers/Challenge.scala

package controllers

import play.api.data.Form
import play.api.i18n.Messages.Implicits._
import play.api.libs.json.Json
import play.api.mvc.{ Result, Results, Call, RequestHeader, Accepting }
import scala.concurrent.duration._

import lila.api.{ Context, BodyContext }
import lila.app._
import lila.common.{ HTTPRequest, LilaCookie }

object Challenge extends LilaController {

  private def env = Env.challenge

  private val PostRateLimit = new lila.memo.RateLimit(5, 1 minute)

  def all = Auth { implicit ctx =>
    me =>
      env.api.findByDestId(me.id) zip
        env.api.findByChallengerId(me.id) map {
          case (out, in) => Ok(env.jsonView.all(in, out)) as JSON
        }
  }

  def reach(id: String)(implicit ctx: Context) =
    env.api byId id map {
      case None                                 => notFound
      case Some(challenge) if isMine(challenge) => html.challenge.mine(challenge)
      case Some(challenge)                      => html.challenge.theirs(challenge)
    }

  private def isMine(challenge: Challenge)(implicit ctx: Context) = challenge.challenger match {
    case Left(anon)  => HTTPRequest sid req contains anon.secret
    case Right(user) => ctx.userId contains user.id
  }
}