rhythia-api 208.0.0 → 209.0.0

package/api/editProfile.ts

@@ -34,22 +34,33 @@ export async function POST(request: Request): Promise<NextResponse> {
 export async function handler(
   data: (typeof Schema)["input"]["_type"]
 ): Promise<NextResponse<(typeof Schema)["output"]["_type"]>> {
-  if (data.data.username !== undefined && data.data.username.length === 0) {
-    return NextResponse.json(
-      {
-        error: "Username can't be empty",
-      },
-      { status: 404 }
-    );
-  }
+  if (data.data.username !== undefined) {
+    if (data.data.username.length < 3) {
+      return NextResponse.json(
+        {
+          error: "Username must be at least 3 characters long",
+        },
+        { status: 404 }
+      );
+    }
 
-  if (data.data.username && data.data.username.length > 20) {
-    return NextResponse.json(
-      {
-        error: "Username too long.",
-      },
-      { status: 404 }
-    );
+    if (data.data.username.length > 20) {
+      return NextResponse.json(
+        {
+          error: "Username too long.",
+        },
+        { status: 404 }
+      );
+    }
+
+    if (!/^[a-z0-9]+$/i.test(data.data.username)) {
+      return NextResponse.json(
+        {
+          error: "Username can only contain letters (a-z) and numbers (0-9)",
+        },
+        { status: 404 }
+      );
+    }
   }
 
   if (validator.trim(data.data.username || "") !== (data.data.username || "")) {

package/api/executeAdminOperation.ts

@@ -11,6 +11,8 @@ const adminOperations = {
   deleteUser: z.object({ userId: z.number() }),
   changeFlag: z.object({ userId: z.number(), flag: z.string() }),
   changeBadges: z.object({ userId: z.number(), badges: z.string() }),
+  addBadge: z.object({ userId: z.number(), badge: z.string() }),
+  removeBadge: z.object({ userId: z.number(), badge: z.string() }),
   excludeUser: z.object({ userId: z.number() }),
   restrictUser: z.object({ userId: z.number() }),
   silenceUser: z.object({ userId: z.number() }),
@@ -73,6 +75,14 @@ const OperationParam = z.discriminatedUnion("operation", [
     operation: z.literal("changeBadges"),
     params: adminOperations.changeBadges,
   }),
+  z.object({
+    operation: z.literal("addBadge"),
+    params: adminOperations.addBadge,
+  }),
+  z.object({
+    operation: z.literal("removeBadge"),
+    params: adminOperations.removeBadge,
+  }),
   z.object({
     operation: z.literal("getScoresPaginated"),
     params: adminOperations.getScoresPaginated,
@@ -217,7 +227,55 @@ export async function handler(
             })
             .select();
         }
+        break;
+
+      case "addBadge":
+        // Allow only developers to modify badges.
+        if ((queryUserData.badges as string[]).includes("Developer")) {
+          // Get current badges
+          const { data: targetUser } = await supabase
+            .from("profiles")
+            .select("badges")
+            .eq("id", params.userId)
+            .single();
+          
+          const currentBadges = (targetUser?.badges || []) as string[];
+          if (!currentBadges.includes(params.badge)) {
+            currentBadges.push(params.badge);
+            result = await supabase
+              .from("profiles")
+              .upsert({
+                id: params.userId,
+                badges: currentBadges,
+              })
+              .select();
+          } else {
+            result = { data: targetUser, error: null };
+          }
+        }
+        break;
 
+      case "removeBadge":
+        // Allow only developers to modify badges.
+        if ((queryUserData.badges as string[]).includes("Developer")) {
+          // Get current badges
+          const { data: targetUser } = await supabase
+            .from("profiles")
+            .select("badges")
+            .eq("id", params.userId)
+            .single();
+          
+          const currentBadges = (targetUser?.badges || []) as string[];
+          const updatedBadges = currentBadges.filter(b => b !== params.badge);
+          
+          result = await supabase
+            .from("profiles")
+            .upsert({
+              id: params.userId,
+              badges: updatedBadges,
+            })
+            .select();
+        }
         break;
 
       case "getScoresPaginated":

package/api/getProfile.ts

@@ -98,13 +98,8 @@ export async function handler(
           avatar_url:
             "https://rhthia-avatars.s3.eu-central-003.backblazeb2.com/user-avatar-1725309193296-72002e6b-321c-4f60-a692-568e0e75147d",
           badges: [],
-          username: `${user.user_metadata.full_name.slice(0, 20)}${Math.round(
-            Math.random() * 900000 + 100000
-          )}`,
-          computedUsername: `${user.user_metadata.full_name.slice(
-            0,
-            20
-          )}${Math.round(Math.random() * 900000 + 100000)}`.toLowerCase(),
+          username: `user${Math.round(Math.random() * 900000 + 100000)}`,
+          computedUsername: `user${Math.round(Math.random() * 900000 + 100000)}`.toLowerCase(),
           flag: (geo.country || "US").toUpperCase(),
           created_at: Date.now(),
         }).select(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rhythia-api",
-  "version": "208.0.0",
+  "version": "209.0.0",
   "main": "index.ts",
   "author": "online-contributors-cunev",
   "scripts": {