Require authentication and privacy for problems during contests

[plack-app-gruntmaster.git] / lib / Plack / App / Gruntmaster.pm

diff --git a/lib/Plack/App/Gruntmaster.pm b/lib/Plack/App/Gruntmaster.pm
index b011ffa048e766bdfc6ac80a87f654953ae58eb5..136f657028192cd05399dd61c3118ef92109928d 100644 (file)
--- a/lib/Plack/App/Gruntmaster.pm
+++ b/lib/Plack/App/Gruntmaster.pm
@@ -148,6 +148,13 @@ sub dispatch_request{
                        }, 10
                },
 
+               sub (/login) {
+                       forbid !remote_user;
+
+                       my $return = $env->{HTTP_REFERER} // '/';
+                       [303, ['Set-Cookie' => "username=".remote_user->id, Location => $return], []]
+               },
+
                sub (/ct/:contest/log/st) { redirect "/st/$_{contest}" },
 
                sub (/us/)                                        { response us => 'Users', {us => db->user_list} },
@@ -156,7 +163,7 @@ sub dispatch_request{
                        forbid $_{private};
                        response log => 'Job list', {%{db->job_list(%_)}, maybe contest => $_{contest}}
                },
-               sub (/pb/  + ?:owner~&:contest~&private~)                   {
+               sub (/pb/  + ?:owner~&:contest~&:private~)                  {
                        forbid $_{private};
                        response pb => 'Problems', {%{db->problem_list(%_)}, maybe contest => $_{contest}}
                },
@@ -172,6 +179,10 @@ sub dispatch_request{
                        $_{contest} = $contest;
                        return NOT_FOUND if !contest && !problem->is_in_archive || contest && !db->contest_problems->find($_{contest}, $_{problem});
                        forbid problem->is_private;
+                       if (contest && contest->is_running) {
+                               forbid !remote_user;
+                               $privacy = 'private';
+                       }
                        response pb_entry => problem->name, db->problem_entry($_{problem}, $_{contest}, remote_user && remote_user->id);
                },
                sub (/sol/:problem) {
@@ -216,7 +227,7 @@ sub dispatch_request{
 
                        my $source = $prog ? read_file $prog->path : $_{source_code};
                        unlink $prog->path if $prog;
-                       db->jobs->create({
+                       my $newjob = db->jobs->create({
                                maybe contest => $_{contest},
                                maybe private => problem->private,
                                date => time,
@@ -228,7 +239,7 @@ sub dispatch_request{
                        });
 
                        purge '/log/';
-                       redirect $_{contest} ? "/log/?contest=$_{contest}" : '/log/';
+                       [303, [Location => '/log/' . $newjob->id], []]
                }
        }
 }