Require authentication and privacy for problems during contests

[plack-app-gruntmaster.git] / lib / Plack / App / Gruntmaster.pm

diff --git a/lib/Plack/App/Gruntmaster.pm b/lib/Plack/App/Gruntmaster.pm
index da00862dfa48a6579aa092687c2785769f877757..136f657028192cd05399dd61c3118ef92109928d 100644 (file)
--- a/lib/Plack/App/Gruntmaster.pm
+++ b/lib/Plack/App/Gruntmaster.pm
@@ -148,12 +148,25 @@ sub dispatch_request{
                        }, 10
                },
 
+               sub (/login) {
+                       forbid !remote_user;
+
+                       my $return = $env->{HTTP_REFERER} // '/';
+                       [303, ['Set-Cookie' => "username=".remote_user->id, Location => $return], []]
+               },
+
                sub (/ct/:contest/log/st) { redirect "/st/$_{contest}" },
 
                sub (/us/)                                        { response us => 'Users', {us => db->user_list} },
                sub (/ct/  + ?:owner~)                            { response ct => 'Contests', db->contest_list(%_) },
-               sub (/log/ + ?:contest~&:owner~&:page~&:problem~) { response log => 'Job list', {%{db->job_list(%_)}, maybe contest => $_{contest}} },
-               sub (/pb/  + ?:owner~&:contest~)                  { response pb => 'Problems', {%{db->problem_list(%_)}, maybe contest => $_{contest}} },
+               sub (/log/ + ?:contest~&:owner~&:page~&:problem~&:private~) {
+                       forbid $_{private};
+                       response log => 'Job list', {%{db->job_list(%_)}, maybe contest => $_{contest}}
+               },
+               sub (/pb/  + ?:owner~&:contest~&:private~)                  {
+                       forbid $_{private};
+                       response pb => 'Problems', {%{db->problem_list(%_)}, maybe contest => $_{contest}}
+               },
 
                sub (/us/:user)    { response us_entry => user->name, db->user_entry($_{user}) },
                sub (/ct/:contest) { response ct_entry => contest->name, db->contest_entry($_{contest}) },
@@ -166,6 +179,10 @@ sub dispatch_request{
                        $_{contest} = $contest;
                        return NOT_FOUND if !contest && !problem->is_in_archive || contest && !db->contest_problems->find($_{contest}, $_{problem});
                        forbid problem->is_private;
+                       if (contest && contest->is_running) {
+                               forbid !remote_user;
+                               $privacy = 'private';
+                       }
                        response pb_entry => problem->name, db->problem_entry($_{problem}, $_{contest}, remote_user && remote_user->id);
                },
                sub (/sol/:problem) {
@@ -210,7 +227,7 @@ sub dispatch_request{
 
                        my $source = $prog ? read_file $prog->path : $_{source_code};
                        unlink $prog->path if $prog;
-                       db->jobs->create({
+                       my $newjob = db->jobs->create({
                                maybe contest => $_{contest},
                                maybe private => problem->private,
                                date => time,
@@ -222,7 +239,7 @@ sub dispatch_request{
                        });
 
                        purge '/log/';
-                       redirect $_{contest} ? "/log/?contest=$_{contest}" : '/log/';
+                       [303, [Location => '/log/' . $newjob->id], []]
                }
        }
 }