From 936f186b6b767273fdc3c01f17311981c46e102c Mon Sep 17 00:00:00 2001
From: Nathanael Sensfelder <SpamShield0@MultiAgentSystems.org>
Date: Sat, 8 Sep 2018 05:28:28 +0200
Subject: Send "disconnected" cmd if user failed cred check.

This (currently) does not apply to the actual login page, but just to
any other action that requires being logged in.
---
 src/character/query/chr_update.erl | 27 ++++++++++++++++-----------
 1 file changed, 16 insertions(+), 11 deletions(-)

(limited to 'src/character/query/chr_update.erl')

diff --git a/src/character/query/chr_update.erl b/src/character/query/chr_update.erl
index 90d87c5..568a749 100644
--- a/src/character/query/chr_update.erl
+++ b/src/character/query/chr_update.erl
@@ -55,16 +55,17 @@ parse_input (Req) ->
       character = Character
    }.
 
--spec authenticate_user (input()) -> {'ok', shr_player:type()}.
+-spec authenticate_user (input()) -> ({'ok', shr_player:type()} | 'error').
 authenticate_user (Input) ->
    PlayerID = Input#input.player_id,
    SessionToken = Input#input.session_token,
 
    Player = shr_timed_cache:fetch(player_db, any, PlayerID),
 
-   shr_security:assert_identity(SessionToken, Player),
-
-   {ok, Player}.
+   case shr_security:credentials_match(SessionToken, Player) of
+      true -> {ok, Player};
+      _ -> error
+   end.
 
 -spec fetch_data (shr_player:type(), input()) -> query_state().
 fetch_data (Player, Input) ->
@@ -131,13 +132,17 @@ generate_reply () ->
 -spec handle (binary()) -> binary().
 handle (Req) ->
    Input = parse_input(Req),
-   {ok, Player} = authenticate_user(Input),
-   shr_security:lock_queries(Input#input.player_id),
-   QueryState = fetch_data(Player, Input),
-   Update = update_data(QueryState, Input),
-   commit_update(Update, Input),
-   shr_security:unlock_queries(Input#input.player_id),
-   generate_reply().
+   case authenticate_user(Input) of
+      {ok, Player} ->
+         shr_security:lock_queries(Input#input.player_id),
+         QueryState = fetch_data(Player, Input),
+         Update = update_data(QueryState, Input),
+         commit_update(Update, Input),
+         shr_security:unlock_queries(Input#input.player_id),
+         generate_reply();
+
+      error -> jiffy:encode([shr_disconnected:generate()])
+   end.
 
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 %% EXPORTED FUNCTIONS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-- 
cgit v1.2.3-70-g09d2